$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38c16dc0-cdc3-418f-8b78-2160ea959f93.roa File: 38c16dc0-cdc3-418f-8b78-2160ea959f93.roa (raw, json) Hash identifier: Uf1UYyQ7jKpH8e/PdJHHTGSzQXWJUxPUEhmGHYC73Ek= Subject key identifier: E9:75:6B:B1:CF:75:27:31:A9:0D:EF:E1:FF:75:B5:AA:B2:D9:A9:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EDEA10ADE449D8E7F9442A2D1130374D100D8DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38c16dc0-cdc3-418f-8b78-2160ea959f93.roa Signing time: Fri 29 May 2026 14:02:22 +0000 ROA not before: Fri 29 May 2026 14:02:22 +0000 ROA not after: Thu 27 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.175.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:de:a1:0a:de:44:9d:8e:7f:94:42:a2:d1:13:03:74:d1:00:d8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 29 14:02:22 2026 GMT Not After : Aug 27 23:59:59 2026 GMT Subject: serialNumber=8d85cd7d8bfc5835fab76d45670410949395f6fdd0604291615c0ec8efb8e5c7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:c9:2c:d4:02:ee:a5:66:a9:33:02:cd:9e: 54:6d:84:ab:71:9c:82:42:06:aa:91:97:9f:7c:2f: 85:05:e7:d6:c7:ee:28:ce:a7:1c:6b:a7:82:b2:68: 6f:df:9a:64:d9:97:42:5b:a5:ed:3e:2a:4f:52:19: 3a:8b:3f:72:53:f7:0b:ec:ab:e6:89:db:d6:3b:bb: e2:83:22:3d:a6:58:2e:a0:f1:e9:3c:db:d8:4b:ab: 82:3a:ad:64:cb:7b:3f:81:94:46:f6:6e:4f:d4:96: 29:58:e6:5f:c6:0d:cf:b7:58:49:fd:e6:89:db:9d: 8c:a0:8c:ce:74:5f:0d:8b:45:e6:03:18:67:81:37: a6:5d:a5:d5:99:af:dd:55:a8:71:ba:5c:fe:ac:03: 37:11:e5:bb:cf:9d:d4:5e:29:48:b5:8c:55:82:a8: 33:12:bb:98:07:60:b0:52:25:69:c4:27:00:bc:72: b8:c2:47:cb:a3:55:d7:91:21:89:bf:0e:7d:d9:d6: 7a:11:13:72:52:22:7f:d0:e7:db:90:b7:03:9b:45: ee:d3:df:08:dd:7b:12:49:02:0b:6f:67:ec:9f:51: 6c:50:bf:3b:30:15:61:61:7f:c3:7e:92:cf:98:c6: ae:92:2e:57:0c:c7:c7:0d:6c:c8:8a:78:4b:86:13: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:6B:B1:CF:75:27:31:A9:0D:EF:E1:FF:75:B5:AA:B2:D9:A9:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38c16dc0-cdc3-418f-8b78-2160ea959f93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:dd:1e:2f:d0:ed:84:b6:21:ae:31:ae:55:9b:0e:78:10:c6: a3:0c:b5:77:6d:0c:7f:38:26:2a:bc:90:76:97:e1:a0:92:d9: fa:49:4a:e5:54:6a:4f:fa:04:96:c1:bf:a9:72:90:05:bb:0a: 01:40:51:fd:06:03:28:d2:e0:c5:61:3a:44:9e:00:d0:d2:e9: 05:ce:65:1f:9e:2a:35:c5:cd:f8:77:d1:dc:6d:5c:6f:59:89: 3b:eb:23:bc:97:e1:5d:6c:98:47:93:fd:f2:a6:59:ae:e6:1f: de:9d:5d:ee:74:db:b2:fa:06:22:b6:c9:22:c9:93:17:6d:a9: e4:59:27:fb:4b:f5:e0:3a:a6:45:20:69:e7:1c:53:e9:a3:3f: bc:36:f9:ce:4a:f7:87:98:06:08:6a:fb:b0:6f:3a:8b:ff:37: e8:76:d8:d6:1a:e8:48:b7:0f:76:ed:7d:34:e3:e2:9f:11:b7: 81:72:b3:93:cf:10:97:59:8f:f8:fb:7e:4a:8c:4d:1a:89:5b: 7b:59:1a:ab:92:ed:bb:00:02:15:4d:b4:6b:2c:66:c9:80:30: 2d:36:0e:3e:bd:a5:f3:c8:bd:e5:4b:91:60:ea:da:61:20:67: 7f:fc:c5:03:e6:e4:30:24:99:2c:b9:91:94:85:31:6d:a6:fd: f3:4b:d6:5c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHt6hCt5EnY5/lEKi0RMDdNEA2N0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTI5MTQwMjIyWhcNMjYwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDg1Y2Q3ZDhiZmM1ODM1ZmFiNzZkNDU2NzA0MTA5NDkz OTVmNmZkZDA2MDQyOTE2MTVjMGVjOGVmYjhlNWM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtB8ks1ALupWapMwLNnlRthKtxnIJCBqqRl598L4UF59bH 7ijOpxxrp4KyaG/fmmTZl0Jbpe0+Kk9SGTqLP3JT9wvsq+aJ29Y7u+KDIj2mWC6g 8ek829hLq4I6rWTLez+BlEb2bk/UlilY5l/GDc+3WEn95onbnYygjM50Xw2LReYD GGeBN6ZdpdWZr91VqHG6XP6sAzcR5bvPndReKUi1jFWCqDMSu5gHYLBSJWnEJwC8 crjCR8ujVdeRIYm/Dn3Z1noRE3JSIn/Q59uQtwObRe7T3wjdexJJAgtvZ+yfUWxQ vzswFWFhf8N+ks+Yxq6SLlcMx8cNbMiKeEuGE6q/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6XVrsc91JzGpDe/h/3W1qrLZqaswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4YzE2ZGMwLWNkYzMtNDE4Zi04Yjc4LTIxNjBlYTk1OWY5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPrzANBgkqhkiG9w0BAQsFAAOCAQEAVt0eL9DthLYhrjGuVZsOeBDGowy1 d20MfzgmKryQdpfhoJLZ+klK5VRqT/oElsG/qXKQBbsKAUBR/QYDKNLgxWE6RJ4A 0NLpBc5lH54qNcXN+HfR3G1cb1mJO+sjvJfhXWyYR5P98qZZruYf3p1d7nTbsvoG IrbJIsmTF22p5Fkn+0v14DqmRSBp5xxT6aM/vDb5zkr3h5gGCGr7sG86i/836HbY 1hroSLcPdu19NOPinxG3gXKzk88Ql1mP+Pt+SoxNGolbe1kaq5LtuwACFU20ayxm yYAwLTYOPr2l88i95UuRYOraYSBnf/zFA+bkMCSZLLmRlIUxbab980vWXA== -----END CERTIFICATE-----Generated at Sat Jun 13 07:54:16 2026 by rpki-client