$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cccd8a5-b505-4393-bc92-f09899fb313e.roa File: 2cccd8a5-b505-4393-bc92-f09899fb313e.roa (raw, json) Hash identifier: 2MM/vp6zwRlU8Nd5Lt6n8F6b9QL17UN8+zwIIC9kiVQ= Subject key identifier: 2B:69:E4:F2:46:AC:0A:1C:A6:B1:44:B5:E4:9F:56:C6:07:C1:AE:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D23D872BB28336B442135BB5903DAAEBB02CDF7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cccd8a5-b505-4393-bc92-f09899fb313e.roa Signing time: Fri 17 Apr 2026 00:00:15 +0000 ROA not before: Fri 17 Apr 2026 00:00:15 +0000 ROA not after: Thu 16 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 217.22.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:23:d8:72:bb:28:33:6b:44:21:35:bb:59:03:da:ae:bb:02:cd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 17 00:00:15 2026 GMT Not After : Jul 16 23:59:59 2026 GMT Subject: serialNumber=719474fdd1b5abace5c4446c499aa62d2a09adbf13fc19f8c72dde6ace5e6b18, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:fc:2f:19:59:d7:ca:af:46:5b:00:2f:0c: 44:31:d7:f5:27:7e:ee:2e:0f:46:d5:7d:21:70:6b: 14:dc:08:ca:01:1b:5d:2d:02:1b:a5:fa:43:86:33: a5:30:49:8b:dd:59:0f:b3:19:5c:f0:7d:78:26:04: 98:6c:45:4d:1d:8d:6d:31:76:cd:1e:3b:ff:63:c9: 7e:3f:c7:f1:d3:5b:bc:1d:26:b8:ae:f1:d2:44:9c: 36:b1:b7:22:7a:e7:14:03:40:ae:f3:ed:db:be:b6: 5b:99:0e:af:65:2b:95:7b:20:c7:d4:cb:3b:2b:4e: f9:95:70:6e:59:72:2d:45:e3:03:61:e3:fd:bf:11: 9a:b7:3c:80:fb:7e:9c:de:cb:18:27:cf:f5:cb:0b: 58:c1:fa:48:b3:fe:1a:e3:60:32:c2:6a:8a:26:f6: b6:e7:3c:f3:59:14:84:27:a6:ff:47:0d:1b:1d:ab: 05:8f:09:d6:2d:e1:37:11:d9:02:7e:98:db:ca:4f: d9:4a:71:63:61:68:f8:fa:65:60:e9:a2:47:2c:98: 84:c8:16:c7:b7:12:cf:8c:89:d9:91:be:40:80:ee: 8e:40:52:d3:b8:1e:8e:ff:c0:5d:95:37:b0:0d:5b: e7:25:70:d4:2e:48:8e:b2:89:95:f5:02:08:a9:af: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:E4:F2:46:AC:0A:1C:A6:B1:44:B5:E4:9F:56:C6:07:C1:AE:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cccd8a5-b505-4393-bc92-f09899fb313e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.28.0/22 Signature Algorithm: sha256WithRSAEncryption b0:ac:90:89:c9:72:59:72:b8:ec:f1:b9:df:3b:80:a7:79:8d: b8:fd:84:04:06:58:17:23:ec:41:b1:48:4a:c1:e4:c9:09:03: e1:a9:55:98:8b:86:e4:36:14:1b:65:06:2d:fb:7a:3e:b5:51: ca:cf:5e:a0:e6:0d:8d:89:aa:47:d2:86:08:41:07:d8:a5:e5: 9e:12:fa:25:a7:f7:06:8c:9a:0b:4f:e3:b9:ac:32:2e:91:97: b2:ad:50:48:ab:83:76:63:06:c0:8d:04:06:4c:9d:5e:52:1a: ba:eb:2d:a8:90:3b:ef:24:1e:10:19:b6:09:78:80:2d:d1:fd: 91:57:57:18:ea:8b:be:8b:57:02:e2:4e:24:41:f6:0b:b1:db: e8:7d:25:7b:66:2f:70:59:51:12:f6:f0:18:33:11:90:67:cb: ae:0d:30:1f:24:0b:a0:cb:7a:b2:88:7c:e3:3a:ce:7f:b1:a0: 0b:77:98:da:a6:24:aa:96:38:09:54:14:ee:6a:6a:e2:44:f7: 90:4d:2a:a0:ff:8f:9e:27:82:11:9c:89:ae:4d:64:a5:bc:1f: 49:87:04:98:39:6d:9b:f4:d2:99:99:47:20:3d:92:eb:e1:0f: a0:55:3c:4e:2e:69:93:93:59:ee:50:1b:b5:36:89:3b:69:eb: 1b:0e:0a:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDSPYcrsoM2tEITW7WQParrsCzfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE3MDAwMDE1WhcNMjYwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTk0NzRmZGQxYjVhYmFjZTVjNDQ0NmM0OTlhYTYyZDJh MDlhZGJmMTNmYzE5ZjhjNzJkZGU2YWNlNWU2YjE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8FvwvGVnXyq9GWwAvDEQx1/Unfu4uD0bVfSFwaxTcCMoB G10tAhul+kOGM6UwSYvdWQ+zGVzwfXgmBJhsRU0djW0xds0eO/9jyX4/x/HTW7wd Jriu8dJEnDaxtyJ65xQDQK7z7du+tluZDq9lK5V7IMfUyzsrTvmVcG5Zci1F4wNh 4/2/EZq3PID7fpzeyxgnz/XLC1jB+kiz/hrjYDLCaoom9rbnPPNZFIQnpv9HDRsd qwWPCdYt4TcR2QJ+mNvKT9lKcWNhaPj6ZWDpokcsmITIFse3Es+MidmRvkCA7o5A UtO4Ho7/wF2VN7ANW+clcNQuSI6yiZX1Agipr8yNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK2nk8kasChymsUS15J9WxgfBrp4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjY2NkOGE1LWI1MDUtNDM5My1iYzkyLWYwOTg5OWZiMzEzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALZFhwwDQYJKoZIhvcNAQELBQADggEBALCskInJcllyuOzxud87gKd5jbj9 hAQGWBcj7EGxSErB5MkJA+GpVZiLhuQ2FBtlBi37ej61UcrPXqDmDY2JqkfShghB B9il5Z4S+iWn9waMmgtP47msMi6Rl7KtUEirg3ZjBsCNBAZMnV5SGrrrLaiQO+8k HhAZtgl4gC3R/ZFXVxjqi76LVwLiTiRB9gux2+h9JXtmL3BZURL28BgzEZBny64N MB8kC6DLerKIfOM6zn+xoAt3mNqmJKqWOAlUFO5qauJE95BNKqD/j54nghGcia5N ZKW8H0mHBJg5bZv00pmZRyA9kuvhD6BVPE4uaZOTWe5QG7U2iTtp6xsOCqY= -----END CERTIFICATE-----Generated at Fri Apr 17 09:36:42 2026 by rpki-client