$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa File: 334bc486-65fe-46fa-a302-04508210ecdb.roa (raw, json) Hash identifier: K+gCujjrmfN7l1PemZ5oFzW8LGc1b8vMl5CD1buF8yM= Subject key identifier: 83:3C:CE:FC:7F:AD:6A:05:B0:47:27:5F:A9:EC:C5:E9:83:FD:EF:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69EB263733514AF96B70C33540C25F3B160480A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa Signing time: Fri 15 May 2026 02:00:52 +0000 ROA not before: Fri 15 May 2026 02:00:52 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:eb:26:37:33:51:4a:f9:6b:70:c3:35:40:c2:5f:3b:16:04:80:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:00:52 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=dbaaa2222669b9b7b120e73a4eab1ab8a916cb514f329b9624aad222980a279b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:52:5a:a4:e4:b9:8c:7a:4a:d7:d0:9e:78: 3e:be:05:90:fd:08:dc:81:84:90:ec:3a:ab:78:17: c3:64:3e:61:44:08:e2:fc:cb:4e:73:cc:23:3d:a0: 04:d4:52:4b:74:a2:4f:a2:b5:5c:d1:d8:ec:bc:53: ee:fb:40:a5:17:f0:58:a0:50:78:2a:ca:6a:e8:be: f5:0e:3e:a6:c1:77:a5:53:88:3d:d1:1e:66:81:4d: 67:f5:06:6f:11:6b:36:d1:9a:1a:ee:0c:0e:67:41: 25:04:7a:06:66:de:b9:71:0e:2e:6b:1e:ed:48:fc: 0b:b3:a1:6a:19:d5:b9:93:51:e0:16:32:76:6a:c4: 33:74:24:c2:45:5f:c6:ab:aa:f6:79:ab:7d:ed:39: 3e:84:d3:0e:de:21:6b:c7:3b:9d:2b:bd:ec:b8:bb: 7b:6f:d2:c2:39:dd:c6:82:43:2f:24:d4:1f:34:a1: e0:d8:1d:8b:10:3f:9d:d4:f5:37:8b:5a:fd:ce:21: 51:11:76:e2:73:55:d8:1a:2a:93:c2:e7:fc:0b:12: d3:ea:40:b3:2c:07:65:ff:49:92:3b:60:d4:a6:92: ed:a4:5b:6d:43:0f:20:2c:4e:20:45:f6:74:32:50: ba:29:62:45:7d:63:68:12:0d:1f:e6:65:f9:f3:4c: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3C:CE:FC:7F:AD:6A:05:B0:47:27:5F:A9:EC:C5:E9:83:FD:EF:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8c:a5:cb:23:68:b0:eb:e0:3e:33:8e:76:09:16:ff:7b:25:6d: 7f:5d:97:cb:5d:2f:53:b5:ae:59:83:fb:e2:0e:8b:df:a7:d1: 58:b0:ea:20:5d:5a:6a:bd:ba:34:ab:17:97:83:54:fe:c1:8e: 02:db:84:7c:b7:21:81:7d:36:60:5b:47:bb:23:48:d0:f5:fd: 77:05:23:6f:f2:55:a1:d7:50:17:a2:66:d5:e2:bc:f8:13:f3: 61:66:6a:ee:b0:32:fc:4a:5b:a7:4e:74:6e:d6:70:14:79:73: 1b:62:b2:2e:c8:ab:a6:b7:5e:94:49:a2:f2:b0:97:1e:ed:f6: a8:0b:4f:f1:7f:59:4c:d5:2d:0b:83:2e:7e:2e:92:3c:87:6b: 16:23:03:93:b8:76:ae:83:41:77:24:54:6e:a9:e9:d4:d5:f4: cc:60:17:91:4d:d9:ec:a1:03:ef:d3:f8:15:ba:bf:14:82:a1: ea:39:a9:24:b4:26:69:5f:c9:27:d4:47:d5:70:2b:cc:6f:9e: 52:bc:b4:bc:76:44:5b:bd:b5:18:ac:51:e2:cf:8d:55:60:e4: 3d:47:99:9f:56:44:3e:39:82:41:bc:3a:3b:77:63:9c:59:6c: ac:1c:86:b5:bb:1c:42:1a:2a:b6:28:5b:13:03:cc:1d:d6:0f: 8e:75:a5:fb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaesmNzNRSvlrcMM1QMJfOxYEgKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIwMDUyWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmFhYTIyMjI2NjliOWI3YjEyMGU3M2E0ZWFiMWFiOGE5 MTZjYjUxNGYzMjliOTYyNGFhZDIyMjk4MGEyNzliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDnFJapOS5jHpK19CeeD6+BZD9CNyBhJDsOqt4F8NkPmFE COL8y05zzCM9oATUUkt0ok+itVzR2Oy8U+77QKUX8FigUHgqymrovvUOPqbBd6VT iD3RHmaBTWf1Bm8RazbRmhruDA5nQSUEegZm3rlxDi5rHu1I/AuzoWoZ1bmTUeAW MnZqxDN0JMJFX8arqvZ5q33tOT6E0w7eIWvHO50rvey4u3tv0sI53caCQy8k1B80 oeDYHYsQP53U9TeLWv3OIVERduJzVdgaKpPC5/wLEtPqQLMsB2X/SZI7YNSmku2k W21DDyAsTiBF9nQyULopYkV9Y2gSDR/mZfnzTNj3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgzzO/H+tagWwRydfqezF6YP97ykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNGJjNDg2LTY1ZmUtNDZmYS1hMzAyLTA0NTA4MjEwZWNkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCfnTANBgkqhkiG9w0BAQsFAAOCAQEAjKXLI2iw6+A+M452CRb/eyVtf12X y10vU7WuWYP74g6L36fRWLDqIF1aar26NKsXl4NU/sGOAtuEfLchgX02YFtHuyNI 0PX9dwUjb/JVoddQF6Jm1eK8+BPzYWZq7rAy/Epbp050btZwFHlzG2KyLsirprde lEmi8rCXHu32qAtP8X9ZTNUtC4Mufi6SPIdrFiMDk7h2roNBdyRUbqnp1NX0zGAX kU3Z7KED79P4Fbq/FIKh6jmpJLQmaV/JJ9RH1XArzG+eUry0vHZEW721GKxR4s+N VWDkPUeZn1ZEPjmCQbw6O3djnFlsrByGtbscQhoqtihbEwPMHdYPjnWl+w== -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:32 2026 by rpki-client