$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa File: 911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa (raw, json) Hash identifier: swar9GQK1XoIFJaeS0U9EUA859bZDb5PZQy48uC3Xyo= Subject key identifier: 29:DB:3A:7D:47:53:2E:C2:03:1B:68:F2:58:00:40:EF:D5:A7:0B:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C1610FB739BF6FA178C6B23987348155CC004F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa Signing time: Thu 02 Apr 2026 00:00:11 +0000 ROA not before: Thu 02 Apr 2026 00:00:11 +0000 ROA not after: Wed 01 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.15.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:16:10:fb:73:9b:f6:fa:17:8c:6b:23:98:73:48:15:5c:c0:04:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 2 00:00:11 2026 GMT Not After : Jul 1 23:59:59 2026 GMT Subject: serialNumber=732046b5a19040cd5876024ed2ca6def1c2c4480cf1f5b42971536a2bfbe42eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:ae:20:05:a7:82:3c:4a:16:75:c2:c7:c5: 3d:b4:e6:70:d9:0f:9a:95:bb:16:ae:ff:fd:44:c4: 2f:5f:3d:2b:3a:3b:9c:b4:02:fa:57:4b:da:d2:a2: eb:d8:f8:7a:3e:76:fe:80:99:dc:57:ac:3c:5e:50: bb:01:76:30:2c:31:28:47:f2:cd:f8:b9:44:f7:99: 3d:2a:fd:c1:7b:9f:dc:15:0d:ec:62:c1:3b:a1:e9: a3:c4:d3:42:c3:82:0f:25:a5:28:47:62:73:a7:2e: 39:eb:07:bc:6e:c8:17:d7:2e:e2:f8:6f:7e:e6:e8: 1f:90:76:38:92:2b:05:91:3d:ba:5b:1c:3c:40:59: 17:74:cc:a8:84:5b:35:0d:35:fa:b7:77:5c:ef:ac: 59:e3:90:93:b3:a1:9c:a8:3a:55:18:9a:2c:b8:7c: 13:71:87:04:c9:bc:bc:2d:7b:f4:3f:dd:ae:b5:21: b8:a0:0b:c4:6b:0d:ee:02:3b:1b:38:80:82:de:74: 0e:32:7c:b7:f1:a1:bc:49:f3:8b:69:61:fc:87:a5: 38:9a:56:38:f0:f0:a2:3c:00:f8:31:a3:1e:31:aa: c5:2f:5a:e7:9b:7a:2f:3a:f8:5e:db:f6:f0:ee:24: ae:e5:7b:8b:3e:63:b3:86:ed:39:ec:47:a9:ff:86: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:3A:7D:47:53:2E:C2:03:1B:68:F2:58:00:40:EF:D5:A7:0B:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.15.44.0/22 Signature Algorithm: sha256WithRSAEncryption 69:fa:e0:85:4c:ae:d9:48:8a:02:14:5e:75:66:1f:71:d8:6b: f0:ec:59:ab:b1:a5:27:bb:41:39:05:25:3a:aa:18:51:03:22: 9f:94:bd:ed:53:ba:c8:df:ea:d1:2c:ab:4c:27:0a:27:aa:b2: fc:c9:34:59:a9:df:cd:f2:ac:92:9b:83:4c:b8:e8:29:1b:b7: db:4d:8a:1b:da:68:91:34:7c:3e:6e:ff:48:ea:10:53:d1:4b: d5:c3:a5:0c:22:fa:fb:80:e2:8c:0a:56:1e:58:10:b7:03:72: 7f:cb:cc:36:0f:c7:88:a6:ac:c5:5e:a1:36:a9:37:65:cc:5f: 3c:b9:0e:50:9e:31:f1:60:65:c8:45:5b:72:74:09:0f:a4:d0: 32:ec:91:81:f3:7f:b5:01:51:1a:73:46:47:d0:ce:c6:6f:23: 2f:0a:77:2e:22:70:f2:28:06:0d:82:50:8d:9b:e5:32:e0:0c: 07:14:0f:f0:01:60:5d:21:1f:24:57:ae:f2:07:ae:a0:22:5f: f6:c8:cd:75:57:aa:5c:95:18:d1:07:91:f0:db:c4:09:bd:ca: f7:33:d7:6a:60:a0:f5:9e:8c:de:68:6c:d1:37:87:2e:57:83: 6e:a5:3e:10:c9:81:e2:75:8c:4a:86:60:e4:22:60:89:92:49: 26:aa:4f:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDBYQ+3Ob9voXjGsjmHNIFVzABPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAyMDAwMDExWhcNMjYwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzIwNDZiNWExOTA0MGNkNTg3NjAyNGVkMmNhNmRlZjFj MmM0NDgwY2YxZjViNDI5NzE1MzZhMmJmYmU0MmViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMHq4gBaeCPEoWdcLHxT205nDZD5qVuxau//1ExC9fPSs6 O5y0AvpXS9rSouvY+Ho+dv6AmdxXrDxeULsBdjAsMShH8s34uUT3mT0q/cF7n9wV DexiwTuh6aPE00LDgg8lpShHYnOnLjnrB7xuyBfXLuL4b37m6B+QdjiSKwWRPbpb HDxAWRd0zKiEWzUNNfq3d1zvrFnjkJOzoZyoOlUYmiy4fBNxhwTJvLwte/Q/3a61 IbigC8RrDe4COxs4gILedA4yfLfxobxJ84tpYfyHpTiaVjjw8KI8APgxox4xqsUv Wuebei86+F7b9vDuJK7le4s+Y7OG7TnsR6n/hgFPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKds6fUdTLsIDG2jyWABA79WnC5YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxMWQzYmExLTI5MTQtNGMxZC1iYmU3LTJiYTc2NGE4YmYyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIQDywwDQYJKoZIhvcNAQELBQADggEBAGn64IVMrtlIigIUXnVmH3HYa/Ds WauxpSe7QTkFJTqqGFEDIp+Uve1Tusjf6tEsq0wnCieqsvzJNFmp383yrJKbg0y4 6Ckbt9tNihvaaJE0fD5u/0jqEFPRS9XDpQwi+vuA4owKVh5YELcDcn/LzDYPx4im rMVeoTapN2XMXzy5DlCeMfFgZchFW3J0CQ+k0DLskYHzf7UBURpzRkfQzsZvIy8K dy4icPIoBg2CUI2b5TLgDAcUD/ABYF0hHyRXrvIHrqAiX/bIzXVXqlyVGNEHkfDb xAm9yvcz12pgoPWejN5obNE3hy5Xg26lPhDJgeJ1jEqGYOQiYImSSSaqT2s= -----END CERTIFICATE-----Generated at Fri Apr 17 07:47:45 2026 by rpki-client