$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa2e65c1-b5ac-47c9-ac48-e3605ff597c5.roa File: aa2e65c1-b5ac-47c9-ac48-e3605ff597c5.roa (raw, json) Hash identifier: nzhPc2ddjB68T1eezAAwqVj4ghnRBs2Yvb5oqXeuO6M= Subject key identifier: E2:8B:AD:5A:FE:9C:EE:3B:0A:17:33:FD:A2:0B:98:C8:1A:C9:DF:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B5722CEE2625F1FC67069981A59284B0A988D17 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa2e65c1-b5ac-47c9-ac48-e3605ff597c5.roa Signing time: Mon 06 Apr 2026 00:00:09 +0000 ROA not before: Mon 06 Apr 2026 00:00:09 +0000 ROA not after: Sun 05 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 45.33.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:57:22:ce:e2:62:5f:1f:c6:70:69:98:1a:59:28:4b:0a:98:8d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 6 00:00:09 2026 GMT Not After : Jul 5 23:59:59 2026 GMT Subject: serialNumber=c466e29f00cfed12f22d00b233ec90cd44d2cbcf71ce0dc3c8af7a4b0dfc80d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:d8:a9:97:c8:1f:f0:9b:88:13:53:e9:a2: fd:2c:b6:3f:ca:90:8a:ff:d3:ff:5e:66:96:18:bc: 8e:ee:1f:85:a6:ce:1d:09:c0:c4:de:25:cd:a6:a2: 7b:68:c5:4e:a0:f7:d7:ce:a4:f8:90:a0:30:61:8d: 42:b8:52:76:2c:ed:58:ff:29:d5:32:38:8c:84:b0: 84:d2:fb:29:07:03:61:d3:08:26:e1:0f:39:ce:01: 5e:02:3e:b5:93:70:54:44:17:20:e8:18:ea:c7:bb: ea:b8:51:2d:41:d4:95:95:b4:91:68:7d:54:2d:bd: 24:3f:7e:89:82:9c:c1:03:08:ca:fa:6f:2b:e3:1a: f3:bb:63:83:12:30:04:f1:99:72:31:4d:82:fa:b8: 75:f4:b8:f2:3c:6f:3f:a0:e6:c2:6c:2b:7b:84:9a: d5:1f:3a:00:a4:42:55:b6:4f:93:aa:46:6d:29:ce: f8:dc:7f:4b:c8:ff:85:f0:6c:03:51:80:3d:17:ea: cb:5d:a6:e3:f4:2b:15:44:84:0c:1b:d6:40:eb:89: f4:2b:52:39:2c:0c:b3:89:48:aa:96:12:11:a9:9e: dd:c7:01:1b:22:03:f9:79:47:4f:a0:ff:94:9e:85: cb:07:50:ad:f1:58:90:f5:96:df:0c:1d:d1:0b:15: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8B:AD:5A:FE:9C:EE:3B:0A:17:33:FD:A2:0B:98:C8:1A:C9:DF:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa2e65c1-b5ac-47c9-ac48-e3605ff597c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.33.163.0/24 Signature Algorithm: sha256WithRSAEncryption 15:be:fe:a2:c9:98:42:0d:87:e9:be:9b:a4:7e:2f:cb:f5:b1: 65:8d:11:70:70:e5:6f:ad:70:66:cc:60:a3:23:89:44:d9:ea: c2:19:8b:15:b5:42:dc:44:c6:ed:bd:c7:24:45:df:06:d6:5c: 94:43:c4:d9:d4:46:cd:ab:77:91:4e:47:62:57:85:1d:57:5a: a5:11:6d:88:2c:79:8e:46:91:f5:7c:fb:44:32:f7:07:cb:75: 7b:39:08:61:70:ff:52:48:2b:31:77:65:11:37:34:66:1c:81: 5c:8f:1e:9c:d0:5b:d0:4b:09:8b:cb:e6:51:ec:8e:28:d2:5a: db:5b:c1:fd:f7:57:7d:49:ee:76:c0:5a:c0:66:8e:1a:bd:2a: 3b:89:4e:c9:5d:d8:8f:a2:75:92:7e:e1:8a:77:8f:5f:cd:3a: 60:26:6f:c6:e5:37:83:43:bc:a5:71:4b:aa:e9:cb:bb:e2:7d: 35:83:e3:d2:38:55:d2:86:66:15:4a:22:5c:de:0d:dd:e1:76: 35:88:51:50:48:30:f2:49:a8:93:41:5f:b9:8e:b6:03:4d:59: ac:12:c0:98:60:aa:a4:15:af:51:6b:7d:6c:9e:85:b1:5f:2f: da:9c:ea:93:76:6e:31:ed:06:9c:b3:46:bb:38:86:7f:d8:1e: 22:23:b5:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG1cizuJiXx/GcGmYGlkoSwqYjRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDA2MDAwMDA5WhcNMjYwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDY2ZTI5ZjAwY2ZlZDEyZjIyZDAwYjIzM2VjOTBjZDQ0 ZDJjYmNmNzFjZTBkYzNjOGFmN2E0YjBkZmM4MGQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQItipl8gf8JuIE1Ppov0stj/KkIr/0/9eZpYYvI7uH4Wm zh0JwMTeJc2montoxU6g99fOpPiQoDBhjUK4UnYs7Vj/KdUyOIyEsITS+ykHA2HT CCbhDznOAV4CPrWTcFREFyDoGOrHu+q4US1B1JWVtJFofVQtvSQ/fomCnMEDCMr6 byvjGvO7Y4MSMATxmXIxTYL6uHX0uPI8bz+g5sJsK3uEmtUfOgCkQlW2T5OqRm0p zvjcf0vI/4XwbANRgD0X6stdpuP0KxVEhAwb1kDrifQrUjksDLOJSKqWEhGpnt3H ARsiA/l5R0+g/5SehcsHUK3xWJD1lt8MHdELFQYnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4outWv6c7jsKFzP9oguYyBrJ37QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhMmU2NWMxLWI1YWMtNDdjOS1hYzQ4LWUzNjA1ZmY1OTdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtIaMwDQYJKoZIhvcNAQELBQADggEBABW+/qLJmEINh+m+m6R+L8v1sWWN EXBw5W+tcGbMYKMjiUTZ6sIZixW1QtxExu29xyRF3wbWXJRDxNnURs2rd5FOR2JX hR1XWqURbYgseY5GkfV8+0Qy9wfLdXs5CGFw/1JIKzF3ZRE3NGYcgVyPHpzQW9BL CYvL5lHsjijSWttbwf33V31J7nbAWsBmjhq9KjuJTsld2I+idZJ+4Yp3j1/NOmAm b8blN4NDvKVxS6rpy7vifTWD49I4VdKGZhVKIlzeDd3hdjWIUVBIMPJJqJNBX7mO tgNNWawSwJhgqqQVr1FrfWyehbFfL9qc6pN2bjHtBpyzRrs4hn/YHiIjtQA= -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:20 2026 by rpki-client