$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa File: 8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa (raw, json) Hash identifier: BVC2AMpv9qNVlCBfVxu11/wHWgIygdFgUsnLS4sCwTA= Subject key identifier: AA:40:D1:FF:0D:59:DD:24:16:CF:F6:1A:72:97:F7:69:45:4A:81:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6570989B4D221AB6CBD3BD86779F43F96E830795 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa Signing time: Fri 15 May 2026 02:21:26 +0000 ROA not before: Fri 15 May 2026 02:21:26 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.184.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:70:98:9b:4d:22:1a:b6:cb:d3:bd:86:77:9f:43:f9:6e:83:07:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:21:26 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=501c61bed35eba89f523718581c804f528ef9c132b8e5c1c1f7c4b9a9690d435, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:63:34:8b:d5:21:fd:01:ed:21:54:71:9e: d2:30:52:e5:26:2c:ab:e7:1e:e3:e0:a6:ec:48:5b: 0e:c0:03:35:f1:d0:94:6b:1f:42:c9:8f:18:41:f3: c2:f9:36:8f:89:31:e1:e0:e7:79:ca:4a:e1:da:b2: 3d:db:62:a0:ac:cd:1e:9f:5f:85:6b:06:0e:a5:bf: 92:e2:1f:74:79:cc:ec:6f:f8:2b:4a:ad:b6:a9:34: b4:4c:16:e0:82:78:46:ec:1e:bc:94:75:6a:ae:47: 21:80:9c:df:be:21:5a:a8:63:3a:0f:69:6a:46:9b: 92:60:9b:d6:79:77:a5:8e:ec:aa:ad:22:51:7c:45: e6:40:9e:e9:92:66:ad:48:7e:e4:80:28:46:f1:47: 3e:ed:40:7f:f7:6d:14:02:d2:2a:9a:1f:72:11:ff: ae:2a:6c:5c:a7:3d:f5:ab:7b:29:04:f1:eb:70:26: 35:6f:3a:69:25:d7:d4:ed:05:1f:37:c5:7e:40:25: 45:1c:e6:fc:ca:02:1b:95:bf:f3:c2:04:ba:c8:07: 21:96:52:49:d3:11:55:d1:c8:6a:24:58:e5:16:65: 92:8f:82:ca:61:c9:98:9f:88:43:a9:5f:c0:aa:79: bf:18:dd:bd:41:8a:00:74:38:44:6a:57:28:ca:df: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:40:D1:FF:0D:59:DD:24:16:CF:F6:1A:72:97:F7:69:45:4A:81:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.184.0.0/16 Signature Algorithm: sha256WithRSAEncryption bb:c2:71:27:56:5f:97:c4:f9:89:0e:b1:58:9b:8b:a7:c9:61: 99:51:a4:c3:80:99:78:c4:12:cc:4b:37:ec:ae:b9:39:73:87: ee:6a:87:ba:0c:25:5d:05:6b:c5:31:37:c5:09:60:cc:1b:c1: d4:26:1d:d4:67:b2:92:03:4b:d7:5f:64:08:28:6a:20:5b:0b: 59:a8:fc:32:0a:e1:c3:cc:9d:1a:94:83:f7:d2:3d:86:39:00: 0e:dd:7f:4a:35:e3:b5:0d:a8:2c:f6:20:7a:cf:02:97:9d:cb: 56:6f:48:d1:59:fc:a4:7d:9d:bc:ca:6f:4a:06:9f:aa:53:fb: 16:cd:6a:0e:0f:c1:1a:12:53:bd:d4:46:75:57:d6:51:3a:86: 8d:c2:f0:2e:c3:0b:29:4c:f0:a8:1b:a4:8e:1b:d5:17:07:64: ee:ae:6b:5f:71:94:33:70:b2:b7:6c:3b:95:e0:78:f0:e7:89: be:22:b8:73:76:f6:82:21:a4:26:b4:9d:47:21:d7:aa:e5:19: e5:7a:ce:ae:4e:fa:a0:14:01:29:e9:fe:ca:d1:bf:21:6a:f0: 4f:a2:60:8d:35:26:c1:58:2c:28:a0:da:15:d8:57:72:98:9a: 71:2d:ce:38:9e:c3:1f:7c:cd:d7:c0:14:11:2c:26:b7:54:bf: 37:7d:c0:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZXCYm00iGrbL072Gd59D+W6DB5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIyMTI2WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDFjNjFiZWQzNWViYTg5ZjUyMzcxODU4MWM4MDRmNTI4 ZWY5YzEzMmI4ZTVjMWMxZjdjNGI5YTk2OTBkNDM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoi2M0i9Uh/QHtIVRxntIwUuUmLKvnHuPgpuxIWw7AAzXx 0JRrH0LJjxhB88L5No+JMeHg53nKSuHasj3bYqCszR6fX4VrBg6lv5LiH3R5zOxv +CtKrbapNLRMFuCCeEbsHryUdWquRyGAnN++IVqoYzoPaWpGm5Jgm9Z5d6WO7Kqt IlF8ReZAnumSZq1IfuSAKEbxRz7tQH/3bRQC0iqaH3IR/64qbFynPfWreykE8etw JjVvOmkl19TtBR83xX5AJUUc5vzKAhuVv/PCBLrIByGWUknTEVXRyGokWOUWZZKP gsphyZifiEOpX8Cqeb8Y3b1BigB0OERqVyjK3297AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqkDR/w1Z3SQWz/Yacpf3aUVKgSowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlYWE0NzQ5LWEwNDUtNDg4MC1hYjhjLTkwZDdjMTQwNmEyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQuDANBgkqhkiG9w0BAQsFAAOCAQEAu8JxJ1Zfl8T5iQ6xWJuLp8lhmVGk w4CZeMQSzEs37K65OXOH7mqHugwlXQVrxTE3xQlgzBvB1CYd1GeykgNL119kCChq IFsLWaj8Mgrhw8ydGpSD99I9hjkADt1/SjXjtQ2oLPYges8Cl53LVm9I0Vn8pH2d vMpvSgafqlP7Fs1qDg/BGhJTvdRGdVfWUTqGjcLwLsMLKUzwqBukjhvVFwdk7q5r X3GUM3Cyt2w7leB48OeJviK4c3b2giGkJrSdRyHXquUZ5XrOrk76oBQBKen+ytG/ IWrwT6JgjTUmwVgsKKDaFdhXcpiacS3OOJ7DH3zN18AUESwmt1S/N33ACg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:08:21 2026 by rpki-client