$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58cf7fd7-598f-421e-a454-8af33c6862e0.roa File: 58cf7fd7-598f-421e-a454-8af33c6862e0.roa (raw, json) Hash identifier: rJb3c1BUi6TnCKxSFHGG0kijBRS0wtyF7ETFugdmpN8= Subject key identifier: 2C:87:D3:5D:64:5A:90:FE:38:FE:ED:AC:67:34:94:32:7B:53:62:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23226B0978366D35815AB49F71C9B093CAB9C28E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58cf7fd7-598f-421e-a454-8af33c6862e0.roa Signing time: Fri 17 Apr 2026 00:00:16 +0000 ROA not before: Fri 17 Apr 2026 00:00:16 +0000 ROA not after: Thu 16 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.185.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:22:6b:09:78:36:6d:35:81:5a:b4:9f:71:c9:b0:93:ca:b9:c2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 17 00:00:16 2026 GMT Not After : Jul 16 23:59:59 2026 GMT Subject: serialNumber=f99f3610fca750d134a4222e7832ee70487976cc497336067f5a9d5ee14c58c5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:4b:d3:59:36:12:02:4f:2b:68:e4:f4:43: 8b:9e:c8:0c:d1:da:4e:d9:7c:15:9b:e0:98:73:d9: f3:70:82:38:86:a5:6e:31:8f:69:fa:83:7d:7c:f2: 97:08:d6:7b:a4:0f:8f:7f:24:0d:14:d7:df:7c:bd: 51:ed:a2:96:dc:2c:a2:46:0f:9e:6a:53:b1:46:da: 22:88:02:7d:7b:a0:64:c5:34:48:d4:57:b2:ff:92: 31:4d:4b:4f:a2:84:51:ab:47:e2:f9:34:9e:95:d2: 50:30:6d:d5:94:0f:5d:a4:59:f5:43:83:5c:09:cb: de:60:56:58:ae:3a:86:28:98:ae:30:93:14:2e:14: 8c:fe:e8:8d:49:0a:f8:fb:e8:5a:ee:1e:57:c8:b8: ad:b2:06:c1:69:ed:0d:ac:c7:1f:d1:74:0a:19:8a: 54:c5:eb:e9:98:85:b5:e0:a7:01:b3:c7:8c:12:f1: b0:b1:3d:09:ae:a8:46:d9:f3:26:37:b9:79:ee:c7: e0:5d:cd:71:65:12:e3:7e:36:f7:e6:a5:fd:ed:c8: e1:9c:95:34:94:46:6b:5c:ef:98:0b:1b:17:87:f2: e1:16:c0:4d:25:66:02:24:b1:e8:44:be:ae:8d:ee: b8:a1:17:be:bb:ee:91:4e:f8:73:96:76:63:95:c5: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:D3:5D:64:5A:90:FE:38:FE:ED:AC:67:34:94:32:7B:53:62:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58cf7fd7-598f-421e-a454-8af33c6862e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.185.215.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:8a:da:d5:43:43:0b:9f:2e:05:08:26:e2:ec:bb:e7:f6:44: 50:ec:8b:34:18:4f:bf:53:a8:8d:b1:83:50:45:9b:8a:b6:20: a8:e6:9a:78:0a:61:b1:68:f8:06:f6:8f:45:7c:72:73:2a:ae: 72:13:bd:65:98:92:1f:23:d2:cd:3b:f7:71:7f:ba:82:26:8a: 5f:a9:f5:5b:e9:cb:f3:02:8c:1c:50:7b:6d:9f:72:2f:03:f2: 53:ff:65:8b:58:09:b4:54:dc:7f:27:b1:ae:98:b1:8e:ad:73: 75:73:45:0f:09:49:10:e1:ac:8d:a7:b4:6c:2f:66:df:43:61: b3:45:88:21:9e:c1:f4:03:d2:41:af:49:a4:b7:23:7d:96:1c: 34:3f:54:4e:30:de:6c:55:ea:86:93:a1:3f:ac:3c:00:f8:fb: ac:0e:e0:51:a9:c7:3f:e1:ca:2d:78:24:47:c9:3d:60:be:c9: 77:3d:ce:d7:25:e4:d0:72:9c:7f:09:44:d4:a7:ca:8d:b9:9a: 99:3b:e7:65:b5:34:1c:26:10:f8:d1:b8:8c:9c:7a:a7:4c:fa: 58:88:8a:a6:81:d0:5d:48:3e:8b:14:9e:e1:5a:b3:ac:e3:11: 40:88:fc:5c:c2:c8:0d:87:eb:b3:b9:0b:03:95:19:26:49:91: dc:ce:ab:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIyJrCXg2bTWBWrSfccmwk8q5wo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE3MDAwMDE2WhcNMjYwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTlmMzYxMGZjYTc1MGQxMzRhNDIyMmU3ODMyZWU3MDQ4 Nzk3NmNjNDk3MzM2MDY3ZjVhOWQ1ZWUxNGM1OGM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeqkvTWTYSAk8raOT0Q4ueyAzR2k7ZfBWb4Jhz2fNwgjiG pW4xj2n6g3188pcI1nukD49/JA0U1998vVHtopbcLKJGD55qU7FG2iKIAn17oGTF NEjUV7L/kjFNS0+ihFGrR+L5NJ6V0lAwbdWUD12kWfVDg1wJy95gVliuOoYomK4w kxQuFIz+6I1JCvj76FruHlfIuK2yBsFp7Q2sxx/RdAoZilTF6+mYhbXgpwGzx4wS 8bCxPQmuqEbZ8yY3uXnux+BdzXFlEuN+Nvfmpf3tyOGclTSURmtc75gLGxeH8uEW wE0lZgIksehEvq6N7rihF7677pFO+HOWdmOVxZvxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULIfTXWRakP44/u2sZzSUMntTYkYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Y2Y3ZmQ3LTU5OGYtNDIxZS1hNDU0LThhZjMzYzY4NjJlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADNudcwDQYJKoZIhvcNAQELBQADggEBAEyK2tVDQwufLgUIJuLsu+f2RFDs izQYT79TqI2xg1BFm4q2IKjmmngKYbFo+Ab2j0V8cnMqrnITvWWYkh8j0s0793F/ uoImil+p9Vvpy/MCjBxQe22fci8D8lP/ZYtYCbRU3H8nsa6YsY6tc3VzRQ8JSRDh rI2ntGwvZt9DYbNFiCGewfQD0kGvSaS3I32WHDQ/VE4w3mxV6oaToT+sPAD4+6wO 4FGpxz/hyi14JEfJPWC+yXc9ztcl5NBynH8JRNSnyo25mpk752W1NBwmEPjRuIyc eqdM+liIiqaB0F1IPosUnuFas6zjEUCI/FzCyA2H67O5CwOVGSZJkdzOqxI= -----END CERTIFICATE-----Generated at Fri Apr 17 09:23:35 2026 by rpki-client