$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa File: 9489bef2-0a21-4c24-8378-03322c296a7b.roa (raw, json) Hash identifier: HjskvSF/sqCN2dv2oAHobmQjo8ZA/gXJRJ60e/hyAa0= Subject key identifier: 22:7D:51:1C:8D:5C:4B:8D:93:99:F4:FF:CF:EA:5A:0F:86:C9:32:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 475E85D2A1E72CF789B9C8278C175974E773707C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa Signing time: Sun 17 May 2026 00:10:05 +0000 ROA not before: Sun 17 May 2026 00:10:05 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5e:85:d2:a1:e7:2c:f7:89:b9:c8:27:8c:17:59:74:e7:73:70:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:10:05 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=02877f65ef3617817825e6cad8a99d2bc9c9bfb9d2d11d2aa7f22b0f3cdee626, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:28:f1:44:8f:3b:0b:df:1d:35:df:15:79: 5c:b6:0d:b5:e2:f2:ec:89:f5:4a:f7:fe:0f:09:e1: 97:67:5d:fd:3b:f0:c7:e0:29:de:b9:e6:55:2d:6d: 32:f2:0a:92:1b:07:91:12:3b:7a:dd:5d:e3:77:04: ea:64:ce:21:a9:31:0b:51:9d:95:b3:d5:5d:15:b6: 96:85:31:96:08:0d:9b:61:f0:5c:5d:14:36:32:dd: 25:65:10:29:e9:b3:f8:e0:a7:35:a7:38:09:22:22: 60:a0:e0:ab:c4:86:1d:98:69:7a:57:14:d4:51:3a: 10:d1:a8:bc:85:e0:14:ed:3a:b3:47:9f:6a:79:99: ca:c3:fd:1b:57:e0:8d:18:bc:a7:b9:cd:76:54:b3: 5a:c8:95:37:90:65:8f:73:68:f2:b1:6b:cf:fc:8d: b5:61:20:d6:ff:c4:e3:8b:4f:d9:db:f2:94:70:a7: ef:ac:3c:ae:5b:20:cf:c9:0b:4d:12:be:a7:b2:e1: 7b:a8:54:9f:9f:4c:56:0d:8a:d5:6f:cd:10:d7:fc: 56:59:b0:72:be:98:cd:50:3a:24:a7:07:74:a7:d9: c6:aa:87:f7:19:03:55:f5:e1:f4:89:1c:27:04:35: 58:55:3f:8c:59:b1:55:63:ae:f9:88:27:50:66:98: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7D:51:1C:8D:5C:4B:8D:93:99:F4:FF:CF:EA:5A:0F:86:C9:32:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.211.0/24 Signature Algorithm: sha256WithRSAEncryption 69:31:c3:4d:1d:4a:05:21:dc:c8:1c:a1:3b:83:ec:80:fd:23: e7:85:e6:2c:0d:16:7a:06:3a:38:e2:4d:69:22:2d:c9:9c:94: 61:dd:2e:0d:9f:05:a7:f9:4b:6f:b7:7a:41:dd:a1:56:35:b0: 1b:75:92:3b:f8:50:5b:17:a6:4b:9e:84:4a:ba:a3:89:f7:6e: e8:17:47:6c:27:e5:fa:31:90:82:5b:80:35:54:a8:d8:a0:d8: a1:bb:56:3c:51:f3:89:4b:99:88:de:2c:32:0c:14:60:ec:3d: 2b:dd:51:5d:a9:a9:39:92:6d:b6:90:36:49:1e:12:47:b5:3b: 4c:38:ea:88:4f:da:8f:20:a5:1e:e5:13:49:82:26:c6:0c:92: 76:4b:d0:29:d8:26:6a:6a:39:6c:bd:27:85:1b:bb:aa:c4:45: bf:ca:58:eb:72:19:f8:f2:a0:bc:0a:3f:36:07:93:3a:b3:3e: fe:bd:b5:45:66:35:44:65:a9:86:6d:0b:f1:66:e8:d2:7c:66: 37:74:b8:55:39:bc:4a:fb:55:e3:6a:e9:d0:9b:02:cc:04:ea: 7a:38:93:bd:35:c1:7e:df:5b:f7:0e:0b:74:aa:72:18:ce:2d: 5d:e3:54:33:8d:1d:d5:75:8d:6a:8e:45:90:54:7b:1b:d4:8b: 18:91:50:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR16F0qHnLPeJucgnjBdZdOdzcHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAxMDA1WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjg3N2Y2NWVmMzYxNzgxNzgyNWU2Y2FkOGE5OWQyYmM5 YzliZmI5ZDJkMTFkMmFhN2YyMmIwZjNjZGVlNjI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0SijxRI87C98dNd8VeVy2DbXi8uyJ9Ur3/g8J4ZdnXf07 8MfgKd655lUtbTLyCpIbB5ESO3rdXeN3BOpkziGpMQtRnZWz1V0VtpaFMZYIDZth 8FxdFDYy3SVlECnps/jgpzWnOAkiImCg4KvEhh2YaXpXFNRROhDRqLyF4BTtOrNH n2p5mcrD/RtX4I0YvKe5zXZUs1rIlTeQZY9zaPKxa8/8jbVhINb/xOOLT9nb8pRw p++sPK5bIM/JC00Svqey4XuoVJ+fTFYNitVvzRDX/FZZsHK+mM1QOiSnB3Sn2caq h/cZA1X14fSJHCcENVhVP4xZsVVjrvmIJ1BmmDAdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIn1RHI1cS42TmfT/z+paD4bJMvEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0ODliZWYyLTBhMjEtNGMyNC04Mzc4LTAzMzIyYzI5NmE3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFdMwDQYJKoZIhvcNAQELBQADggEBAGkxw00dSgUh3MgcoTuD7ID9I+eF 5iwNFnoGOjjiTWkiLcmclGHdLg2fBaf5S2+3ekHdoVY1sBt1kjv4UFsXpkuehEq6 o4n3bugXR2wn5foxkIJbgDVUqNig2KG7VjxR84lLmYjeLDIMFGDsPSvdUV2pqTmS bbaQNkkeEke1O0w46ohP2o8gpR7lE0mCJsYMknZL0CnYJmpqOWy9J4Ubu6rERb/K WOtyGfjyoLwKPzYHkzqzPv69tUVmNURlqYZtC/Fm6NJ8Zjd0uFU5vEr7VeNq6dCb AswE6no4k701wX7fW/cOC3SqchjOLV3jVDONHdV1jWqORZBUexvUixiRUBQ= -----END CERTIFICATE-----Generated at Sat Jun 13 08:32:01 2026 by rpki-client