$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d0db83-f7cb-4ba4-8999-90629aaf96d6.roa File: 91d0db83-f7cb-4ba4-8999-90629aaf96d6.roa (raw, json) Hash identifier: YJiOHMYPjD0vrq59kpGgzbznTQvVSBvwvH9sgvTPYf4= Subject key identifier: 90:25:B5:BF:5B:79:CE:D7:74:7F:51:BE:CF:E6:08:E8:D8:93:C4:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0912BB84A822FEB5EC7413E08E6BADC501EE9559 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d0db83-f7cb-4ba4-8999-90629aaf96d6.roa Signing time: Fri 15 May 2026 02:10:07 +0000 ROA not before: Fri 15 May 2026 02:10:07 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 156.153.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:12:bb:84:a8:22:fe:b5:ec:74:13:e0:8e:6b:ad:c5:01:ee:95:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:10:07 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=e53c3630d52fa297d12d2cd1f5476fa49e81a965850dfe86e8126849ae3cc40d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:85:8d:73:fa:05:56:2b:5d:bc:7c:14:50: 1e:3d:bd:f2:da:f9:92:d9:19:04:4d:75:7a:64:f5: 5a:7b:8a:71:76:11:46:2d:63:80:f6:03:ef:16:57: ac:e6:51:f4:a1:b8:d4:a9:7a:f1:9c:16:82:e7:5e: 70:45:0f:36:ba:d7:83:12:5e:7b:94:98:77:ec:b0: ef:41:9d:4a:8b:9c:09:b8:05:33:3f:ae:6f:34:95: 41:c0:4c:74:ec:5b:16:a9:27:97:fc:fa:e6:62:91: 9f:71:a6:0f:50:d9:39:4a:40:17:8c:b9:4a:9f:aa: eb:5e:2d:12:51:4d:df:59:83:4c:3a:d6:16:e9:b5: d6:27:db:48:c0:24:1c:f4:fb:b8:57:b2:8b:85:d5: 87:4b:43:04:24:54:04:1f:27:7e:f9:2c:bb:2f:01: b3:98:16:62:ec:0d:60:72:27:0f:1c:a5:21:5a:19: 44:6b:96:e6:78:05:83:e3:90:ef:e8:68:a0:ec:0c: 52:47:f9:c3:b3:15:97:52:80:bd:ab:19:55:a0:86: 12:2b:21:da:92:d7:a7:8f:84:22:e0:37:96:15:ba: 1c:a2:5c:d5:06:5d:6d:d8:8a:92:86:83:a0:60:6a: 7a:ca:dc:03:75:42:dd:67:0d:bb:83:4f:55:0c:ba: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:25:B5:BF:5B:79:CE:D7:74:7F:51:BE:CF:E6:08:E8:D8:93:C4:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d0db83-f7cb-4ba4-8999-90629aaf96d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4d:50:9f:b6:1f:6f:d5:95:b4:bc:10:b2:67:1c:fe:07:a3:b3: eb:fd:0a:db:08:39:00:04:7b:15:68:76:1b:b0:a7:50:ab:49: 67:80:67:f6:3b:0f:9d:94:7e:11:59:5e:a1:61:34:d6:45:3e: fd:f3:4f:37:25:2c:e3:fe:48:d5:95:f1:4c:9a:bd:e5:1c:83: 49:5f:d8:ea:49:49:56:dd:26:8f:31:aa:89:34:e4:79:38:67: 07:49:ce:83:20:7d:e4:2c:5d:f3:71:2f:66:59:9d:c3:9d:75: d5:2a:3d:4e:45:17:9b:05:20:b9:b2:87:1c:c6:fb:54:68:6d: 0e:6a:11:19:82:61:47:08:69:ab:68:33:41:7a:38:3c:a8:cf: 78:49:b5:73:0c:f5:d7:e2:b9:45:c1:2a:93:ed:e7:6f:53:e9: 71:b8:e7:42:0c:7a:ab:a3:89:14:eb:1b:f2:d1:b4:c8:62:48: b7:d7:a6:25:66:2c:f7:32:38:59:80:65:d4:40:4e:1b:46:c4: 54:f2:85:d3:86:34:1c:a6:ce:23:3d:22:c8:2a:7b:4f:9d:36: 3c:a1:5c:a8:a0:81:a7:73:94:21:69:ae:7c:23:83:0c:db:c8: 8c:9c:bc:71:fe:f2:13:f7:19:6e:99:2e:1b:a5:b0:d1:79:36: ba:17:82:c9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCRK7hKgi/rXsdBPgjmutxQHulVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIxMDA3WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTNjMzYzMGQ1MmZhMjk3ZDEyZDJjZDFmNTQ3NmZhNDll ODFhOTY1ODUwZGZlODZlODEyNjg0OWFlM2NjNDBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNnYWNc/oFVitdvHwUUB49vfLa+ZLZGQRNdXpk9Vp7inF2 EUYtY4D2A+8WV6zmUfShuNSpevGcFoLnXnBFDza614MSXnuUmHfssO9BnUqLnAm4 BTM/rm80lUHATHTsWxapJ5f8+uZikZ9xpg9Q2TlKQBeMuUqfquteLRJRTd9Zg0w6 1hbptdYn20jAJBz0+7hXsouF1YdLQwQkVAQfJ375LLsvAbOYFmLsDWByJw8cpSFa GURrluZ4BYPjkO/oaKDsDFJH+cOzFZdSgL2rGVWghhIrIdqS16ePhCLgN5YVuhyi XNUGXW3YipKGg6BganrK3AN1Qt1nDbuDT1UMutXxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkCW1v1t5ztd0f1G+z+YI6NiTxAwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxZDBkYjgzLWY3Y2ItNGJhNC04OTk5LTkwNjI5YWFmOTZkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCcmTANBgkqhkiG9w0BAQsFAAOCAQEATVCfth9v1ZW0vBCyZxz+B6Oz6/0K 2wg5AAR7FWh2G7CnUKtJZ4Bn9jsPnZR+EVleoWE01kU+/fNPNyUs4/5I1ZXxTJq9 5RyDSV/Y6klJVt0mjzGqiTTkeThnB0nOgyB95Cxd83EvZlmdw5111So9TkUXmwUg ubKHHMb7VGhtDmoRGYJhRwhpq2gzQXo4PKjPeEm1cwz11+K5RcEqk+3nb1Ppcbjn Qgx6q6OJFOsb8tG0yGJIt9emJWYs9zI4WYBl1EBOG0bEVPKF04Y0HKbOIz0iyCp7 T502PKFcqKCBp3OUIWmufCODDNvIjJy8cf7yE/cZbpkuG6Ww0Xk2uheCyQ== -----END CERTIFICATE-----Generated at Sat Jun 13 16:55:52 2026 by rpki-client