$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/796ada7a-4901-4965-8956-9a15ee4e096a.roa File: 796ada7a-4901-4965-8956-9a15ee4e096a.roa (raw, json) Hash identifier: R/vpf1cAXdOthQTLRPjLPNB+X4FLslbCUudOMBqFj/o= Subject key identifier: 22:60:B7:4B:86:D8:C7:D3:18:2D:77:67:49:06:B4:C2:6C:B5:38:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44D51B8985E04FDAA25C81FF1748AC894422FC89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/796ada7a-4901-4965-8956-9a15ee4e096a.roa Signing time: Thu 16 Apr 2026 00:00:10 +0000 ROA not before: Thu 16 Apr 2026 00:00:10 +0000 ROA not after: Wed 15 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 173.245.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d5:1b:89:85:e0:4f:da:a2:5c:81:ff:17:48:ac:89:44:22:fc:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:10 2026 GMT Not After : Jul 15 23:59:59 2026 GMT Subject: serialNumber=7406a79b58b4e7406a40c27b9aa523bb4a20ed6afea61fd8c02729ca46d641c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:79:f3:9e:08:54:ff:40:29:c8:59:0e:bd: 32:41:91:38:47:d8:e7:3d:19:b4:e5:8e:3a:f4:91: 0c:5a:6e:92:93:b6:ff:06:6d:6c:b2:84:4e:83:d3: ce:25:5e:30:ed:6c:bb:c0:a4:51:c3:9e:70:e9:2d: 52:7c:7a:50:80:ec:8c:6e:ee:a9:34:35:b1:2f:9d: 7d:0e:68:7a:5a:8d:16:fb:bd:2b:5c:6f:2d:d0:e7: 3d:d0:2c:1d:e9:06:52:f2:9d:2a:ee:4a:d0:7e:5c: 65:b6:e0:bc:0d:cc:da:8a:19:a1:f5:7e:d2:dd:d9: 48:82:1c:72:e7:ad:a2:fa:7d:4d:f1:07:57:16:ed: fb:12:f4:65:72:dc:b8:d1:5f:1d:37:5b:ba:22:ef: 96:69:c2:ee:76:ec:ce:16:f0:7f:56:17:0e:4a:73: e4:9d:14:62:46:d8:8c:e8:ad:eb:ec:89:3d:2a:9c: a2:86:de:85:4e:c0:7b:e1:a2:09:d8:36:26:4a:d1: 63:60:03:23:76:ff:b2:48:76:78:95:88:2e:5c:0c: 9a:48:bc:99:ea:45:0c:b6:e6:f9:f0:a8:91:b1:a7: 8d:89:d7:c7:2e:19:fa:77:cc:ba:5a:c6:ba:5e:df: fc:18:4e:0f:f8:72:3d:20:ec:0a:68:dd:0d:ea:59: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:60:B7:4B:86:D8:C7:D3:18:2D:77:67:49:06:B4:C2:6C:B5:38:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/796ada7a-4901-4965-8956-9a15ee4e096a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.245.208.0/24 Signature Algorithm: sha256WithRSAEncryption a8:5f:3e:50:b2:ef:53:c5:6a:41:f8:8c:ba:e2:86:ff:6b:f3: 87:8e:29:8a:2d:74:47:ae:6e:32:cc:45:59:96:27:22:74:d8: e3:2b:f8:d9:65:d1:5a:89:b4:d4:37:69:e1:ec:18:e3:05:11: f1:39:88:67:47:18:40:d8:aa:f4:60:b2:e5:c0:7a:ca:f6:b5: d6:ad:e6:ac:aa:21:9a:9d:58:b4:82:10:5d:8f:34:45:91:07: 4e:55:33:71:e0:e9:26:56:73:e7:7a:5b:11:bc:34:b4:ae:c2: 21:05:77:56:c2:80:d7:97:b4:3b:76:2b:95:7d:e8:a8:88:25: 6f:64:02:be:81:3a:fa:53:7c:c7:52:45:db:d2:1a:52:13:4b: 31:e8:cb:d4:5d:90:be:eb:35:08:a6:7e:4a:07:14:96:f6:42: 62:97:ce:b9:1c:a2:34:fc:d3:dd:7b:ae:0c:a2:91:b3:6d:11: 6f:2b:c9:1a:a1:40:fd:53:1b:62:c7:38:4b:f8:3e:4b:e6:01: 98:ee:0a:9a:c4:66:12:f4:90:e9:8d:59:6a:7a:6b:1a:cb:24: ed:6c:7f:4d:5a:5c:38:51:19:d7:fc:83:fc:aa:44:e2:2d:df: fd:8f:be:e8:bd:6b:0a:70:3c:14:34:cc:4b:2a:23:8b:27:76: 27:f1:02:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURNUbiYXgT9qiXIH/F0isiUQi/IkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE2MDAwMDEwWhcNMjYwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDA2YTc5YjU4YjRlNzQwNmE0MGMyN2I5YWE1MjNiYjRh MjBlZDZhZmVhNjFmZDhjMDI3MjljYTQ2ZDY0MWM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYZHnznghU/0ApyFkOvTJBkThH2Oc9GbTljjr0kQxabpKT tv8GbWyyhE6D084lXjDtbLvApFHDnnDpLVJ8elCA7Ixu7qk0NbEvnX0OaHpajRb7 vStcby3Q5z3QLB3pBlLynSruStB+XGW24LwNzNqKGaH1ftLd2UiCHHLnraL6fU3x B1cW7fsS9GVy3LjRXx03W7oi75Zpwu527M4W8H9WFw5Kc+SdFGJG2IzorevsiT0q nKKG3oVOwHvhognYNiZK0WNgAyN2/7JIdniViC5cDJpIvJnqRQy25vnwqJGxp42J 18cuGfp3zLpaxrpe3/wYTg/4cj0g7Apo3Q3qWbCDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUImC3S4bYx9MYLXdnSQa0wmy1OJ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5NmFkYTdhLTQ5MDEtNDk2NS04OTU2LTlhMTVlZTRlMDk2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACt9dAwDQYJKoZIhvcNAQELBQADggEBAKhfPlCy71PFakH4jLrihv9r84eO KYotdEeubjLMRVmWJyJ02OMr+Nll0VqJtNQ3aeHsGOMFEfE5iGdHGEDYqvRgsuXA esr2tdat5qyqIZqdWLSCEF2PNEWRB05VM3Hg6SZWc+d6WxG8NLSuwiEFd1bCgNeX tDt2K5V96KiIJW9kAr6BOvpTfMdSRdvSGlITSzHoy9RdkL7rNQimfkoHFJb2QmKX zrkcojT80917rgyikbNtEW8ryRqhQP1TG2LHOEv4PkvmAZjuCprEZhL0kOmNWWp6 axrLJO1sf01aXDhRGdf8g/yqROIt3/2Pvui9awpwPBQ0zEsqI4sndifxAp8= -----END CERTIFICATE-----Generated at Fri Apr 17 06:47:08 2026 by rpki-client