$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78d987c2-6fca-4811-b8af-393858444a4d.roa File: 78d987c2-6fca-4811-b8af-393858444a4d.roa (raw, json) Hash identifier: UmWy8FyoYksmnj2cBfV7Qt9cqM21Fv+mFk2MeBpruP4= Subject key identifier: 86:89:AC:BB:D9:80:0A:21:4E:8B:26:D4:D2:59:20:2E:00:CF:2B:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 780BE389F7F842A6A2BA6CC8FB8931C164A0F2C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78d987c2-6fca-4811-b8af-393858444a4d.roa Signing time: Wed 13 May 2026 00:41:21 +0000 ROA not before: Wed 13 May 2026 00:41:21 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 206.214.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0b:e3:89:f7:f8:42:a6:a2:ba:6c:c8:fb:89:31:c1:64:a0:f2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:41:21 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=65dc20a317c1153298835440f6d7adb7a08336358e2757d9e3a5864142ef252c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:94:72:89:22:1f:98:b4:98:73:6f:4b:f3: 7c:ce:57:3c:03:7b:90:59:b0:43:6f:49:5c:43:20: ba:cf:eb:18:14:f7:ce:85:22:0a:8e:22:f1:0c:9e: 14:03:c7:50:2d:44:bb:36:d4:4f:8d:14:f9:38:8f: ce:f0:e6:6f:0b:e7:f0:9c:3e:cb:f9:2c:4b:a7:df: 90:7c:55:23:03:3c:fb:99:e6:58:15:ce:02:ad:25: 13:45:2b:97:fe:4a:29:c2:82:ee:40:ef:dc:af:52: 7c:a1:09:00:76:cf:b9:74:93:51:52:78:25:a6:83: 88:fb:47:92:e0:cb:7f:de:47:2d:ae:1b:2e:45:f3: 5e:38:79:04:c9:0a:2b:b2:ec:c0:c2:30:d3:f5:b7: 76:3a:83:9f:d4:f5:6f:b8:cd:0b:9d:e7:00:31:55: 9b:36:06:c9:56:f9:0a:a3:9e:3f:7b:01:2f:eb:44: df:03:49:bd:81:9b:3f:29:49:f5:2e:c7:cf:5c:1a: 74:1c:a0:60:3d:ab:5b:02:ff:27:c9:12:f7:25:c0: e6:9e:dc:6d:be:01:c7:85:c5:31:a6:c7:dd:69:29: d1:00:95:59:2c:50:74:f1:74:2d:3e:68:a0:70:41: 49:f4:80:71:af:71:58:ab:25:f9:70:7a:c0:12:3a: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:AC:BB:D9:80:0A:21:4E:8B:26:D4:D2:59:20:2E:00:CF:2B:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78d987c2-6fca-4811-b8af-393858444a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.214.96.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:07:3f:5f:f7:38:f7:5e:33:40:17:e1:56:09:59:42:2f:7f: 48:ff:f2:bf:10:1b:02:bd:a6:59:18:d5:45:f8:f5:54:31:f0: 46:c5:4d:43:8f:56:3e:a0:42:4b:a6:42:5f:a3:45:64:b0:21: 9d:ce:d5:22:23:c3:f5:56:81:19:14:a3:8f:ab:b0:66:e9:86: 78:c6:2f:66:4a:22:72:e4:a8:49:92:c7:67:fd:11:cd:b7:ad: 8a:17:61:ec:d3:45:5c:72:8c:55:3a:42:d8:e2:63:87:d1:36: 59:c1:59:a0:42:4a:aa:93:04:47:02:8c:1e:4d:33:fc:ed:65: 5c:23:82:26:8b:4b:f2:96:bc:59:f9:a0:cd:cb:1b:6a:d6:4a: b7:6a:c4:85:f2:49:2d:a5:18:b2:f4:b1:f5:be:7b:da:35:49: 6d:de:b2:af:61:8a:30:d2:41:d0:79:7c:2c:2b:42:1b:c8:0e: 8a:ed:78:86:9c:d2:9d:54:3d:a1:4f:5a:73:ac:62:88:dc:a5: 03:a1:cd:f1:bc:c4:e0:d7:f1:56:69:69:9b:0c:b3:80:b0:c2: 59:92:1f:80:cf:de:69:07:0b:a5:bd:58:da:ae:2a:07:a7:c9: 3a:c6:b1:eb:85:87:22:4a:ff:23:71:75:78:c6:7e:1a:23:fc: e1:4a:81:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeAvjiff4QqaiumzI+4kxwWSg8skwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMDA0MTIxWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWRjMjBhMzE3YzExNTMyOTg4MzU0NDBmNmQ3YWRiN2Ew ODMzNjM1OGUyNzU3ZDllM2E1ODY0MTQyZWYyNTJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWy5RyiSIfmLSYc29L83zOVzwDe5BZsENvSVxDILrP6xgU 986FIgqOIvEMnhQDx1AtRLs21E+NFPk4j87w5m8L5/CcPsv5LEun35B8VSMDPPuZ 5lgVzgKtJRNFK5f+SinCgu5A79yvUnyhCQB2z7l0k1FSeCWmg4j7R5Lgy3/eRy2u Gy5F8144eQTJCiuy7MDCMNP1t3Y6g5/U9W+4zQud5wAxVZs2BslW+Qqjnj97AS/r RN8DSb2Bmz8pSfUux89cGnQcoGA9q1sC/yfJEvclwOae3G2+AceFxTGmx91pKdEA lVksUHTxdC0+aKBwQUn0gHGvcVirJflwesASOtBvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhomsu9mACiFOiybU0lkgLgDPKwEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ZDk4N2MyLTZmY2EtNDgxMS1iOGFmLTM5Mzg1ODQ0NGE0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATO1mAwDQYJKoZIhvcNAQELBQADggEBAF8HP1/3OPdeM0AX4VYJWUIvf0j/ 8r8QGwK9plkY1UX49VQx8EbFTUOPVj6gQkumQl+jRWSwIZ3O1SIjw/VWgRkUo4+r sGbphnjGL2ZKInLkqEmSx2f9Ec23rYoXYezTRVxyjFU6QtjiY4fRNlnBWaBCSqqT BEcCjB5NM/ztZVwjgiaLS/KWvFn5oM3LG2rWSrdqxIXySS2lGLL0sfW+e9o1SW3e sq9hijDSQdB5fCwrQhvIDorteIac0p1UPaFPWnOsYojcpQOhzfG8xODX8VZpaZsM s4CwwlmSH4DP3mkHC6W9WNquKgenyTrGseuFhyJK/yNxdXjGfhoj/OFKgTY= -----END CERTIFICATE-----Generated at Sat Jun 13 09:36:17 2026 by rpki-client