$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/971b4b94-b3ff-4b97-b75c-82fc03505333.roa File: 971b4b94-b3ff-4b97-b75c-82fc03505333.roa (raw, json) Hash identifier: CIkqs8DtwrD5qhaFYpg2FwqZq9lh6uYe0HrP7s3KXnU= Subject key identifier: 37:DE:5E:1C:24:3C:2A:4B:7D:54:35:CD:4B:68:3A:C6:F0:05:B8:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 177F6ED62541EAB1D4C15AB490EDD3E5EAF478B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/971b4b94-b3ff-4b97-b75c-82fc03505333.roa Signing time: Tue 31 Mar 2026 00:00:11 +0000 ROA not before: Tue 31 Mar 2026 00:00:11 +0000 ROA not after: Mon 29 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7f:6e:d6:25:41:ea:b1:d4:c1:5a:b4:90:ed:d3:e5:ea:f4:78:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 00:00:11 2026 GMT Not After : Jun 29 23:59:59 2026 GMT Subject: serialNumber=94b8d8147cc781a95a523522000fc3a44895c599ce73905c6d40d594d51833e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:c8:5c:4c:90:5e:53:b7:3a:bf:5a:28:c4: 40:f5:5d:9f:81:38:e2:ac:db:80:35:4f:58:10:d7: d8:1b:4a:79:f2:89:f1:b6:d6:6c:e1:9a:4c:5b:3a: e7:61:42:f7:bf:b0:5a:6f:bb:41:8c:d1:ca:4f:3d: de:d9:14:aa:b4:cc:b1:ec:ec:1a:76:96:07:91:5e: 20:29:44:30:7c:7c:1d:b7:3f:2f:13:5f:47:67:1e: 37:64:60:6a:3e:65:fd:a3:2c:54:0e:28:4b:fd:fb: 07:c1:c4:72:46:89:8f:78:e3:96:b3:09:ee:f7:7e: 4b:3d:de:88:7b:87:1f:fa:1d:5e:13:92:85:55:df: f3:5a:71:92:49:89:a7:c3:10:fb:ba:c5:06:74:a4: 94:f9:af:93:a7:ac:55:3d:13:5d:8f:44:b2:e8:94: 93:dd:b4:c4:5d:fd:60:df:06:6b:50:4f:f7:6a:fe: d0:69:2d:4c:03:37:0d:80:7f:7a:56:dd:15:46:e9: 11:9d:bc:c5:b9:ac:e4:9a:55:37:6b:e4:4f:59:0b: 4b:9e:3f:8b:3a:57:c5:d5:2b:22:bd:48:36:55:6b: 1f:e8:d0:d3:14:76:8c:45:69:0e:4f:b4:47:e9:5c: 56:90:cd:f6:3f:cf:0b:95:d2:13:ad:77:88:8c:d0: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DE:5E:1C:24:3C:2A:4B:7D:54:35:CD:4B:68:3A:C6:F0:05:B8:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/971b4b94-b3ff-4b97-b75c-82fc03505333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:cc:1f:99:93:42:6e:39:da:4d:c0:df:c9:30:73:84:8c:66: 26:b0:e7:6c:37:81:47:88:ef:aa:bd:92:de:dd:9d:4c:9d:bc: da:63:12:80:77:f0:fb:4b:67:8a:b9:73:79:17:49:15:b7:2d: aa:6c:18:9d:38:98:4c:b5:10:6d:b5:28:0b:23:00:24:45:80: 54:ee:92:01:53:d1:26:ce:56:7d:f4:dd:12:10:c4:1c:74:ee: f2:fe:ed:c0:c3:0b:49:2c:e0:8f:f9:48:28:02:30:29:7c:11: 4e:40:e8:ff:e3:45:74:b0:db:ff:f9:de:02:09:67:86:e9:b4: b7:eb:29:b7:4d:84:9c:df:be:2c:ae:3c:50:6b:eb:ad:39:a6: b5:b8:d8:f7:55:d1:64:d7:f3:f9:4c:5c:03:28:8f:03:53:2b: 84:57:35:09:10:c8:1b:d3:8f:4b:7c:71:a1:ec:5c:61:d5:83: e6:2e:62:62:e5:ce:e9:0f:21:d5:54:c6:dc:1d:95:17:78:48: 84:f4:12:12:cd:e5:75:76:b2:1c:55:cd:95:70:2b:56:c1:9e: d6:27:79:85:20:2f:de:4f:71:3b:4a:3e:f3:65:6a:e1:e4:17: 8d:da:91:17:26:21:be:06:ea:5a:a4:c8:8d:86:00:cd:5f:26: 3b:68:19:5b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF39u1iVB6rHUwVq0kO3T5er0eLcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzMxMDAwMDExWhcNMjYwNjI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGI4ZDgxNDdjYzc4MWE5NWE1MjM1MjIwMDBmYzNhNDQ4 OTVjNTk5Y2U3MzkwNWM2ZDQwZDU5NGQ1MTgzM2UxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2WshcTJBeU7c6v1ooxED1XZ+BOOKs24A1T1gQ19gbSnny ifG21mzhmkxbOudhQve/sFpvu0GM0cpPPd7ZFKq0zLHs7Bp2lgeRXiApRDB8fB23 Py8TX0dnHjdkYGo+Zf2jLFQOKEv9+wfBxHJGiY9445azCe73fks93oh7hx/6HV4T koVV3/NacZJJiafDEPu6xQZ0pJT5r5OnrFU9E12PRLLolJPdtMRd/WDfBmtQT/dq /tBpLUwDNw2Af3pW3RVG6RGdvMW5rOSaVTdr5E9ZC0ueP4s6V8XVKyK9SDZVax/o 0NMUdoxFaQ5PtEfpXFaQzfY/zwuV0hOtd4iM0IC9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUN95eHCQ8Kkt9VDXNS2g6xvAFuIkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3MWI0Yjk0LWIzZmYtNGI5Ny1iNzVjLTgyZmMwMzUwNTMzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2FDANBgkqhkiG9w0BAQsFAAOCAQEAGMwfmZNCbjnaTcDfyTBzhIxmJrDn bDeBR4jvqr2S3t2dTJ282mMSgHfw+0tnirlzeRdJFbctqmwYnTiYTLUQbbUoCyMA JEWAVO6SAVPRJs5WffTdEhDEHHTu8v7twMMLSSzgj/lIKAIwKXwRTkDo/+NFdLDb //neAglnhum0t+spt02EnN++LK48UGvrrTmmtbjY91XRZNfz+UxcAyiPA1MrhFc1 CRDIG9OPS3xxoexcYdWD5i5iYuXO6Q8h1VTG3B2VF3hIhPQSEs3ldXayHFXNlXAr VsGe1id5hSAv3k9xO0o+82Vq4eQXjdqRFyYhvgbqWqTIjYYAzV8mO2gZWw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:36:09 2026 by rpki-client