$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa File: af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa (raw, json) Hash identifier: SMcbUJaT7H6Ehjy94oR0lVeBNrksbCdvL+YIi92eoQU= Subject key identifier: 0D:AE:31:16:D1:80:0E:4F:D7:B7:59:1C:5A:2F:E0:92:A3:74:C8:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E995230613CFDF28B9D1A69975BFD3793A77200 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa Signing time: Tue 19 May 2026 00:10:59 +0000 ROA not before: Tue 19 May 2026 00:10:59 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.175.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:99:52:30:61:3c:fd:f2:8b:9d:1a:69:97:5b:fd:37:93:a7:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 00:10:59 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=a68d7479b8bc1c6c83f34b8aaeb9b9aa7ed902ef8bd8f00cd13fa144bf8514a9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:cd:7c:4b:07:a9:f2:dc:28:7d:eb:e5:63: 6a:f6:d2:1b:40:2f:8e:e7:b4:15:bc:55:04:e8:bb: 9b:9f:c7:c4:e0:c8:90:3b:a6:46:86:4b:5c:5e:4c: d6:33:ee:9c:b6:05:d7:6e:5e:0e:f1:10:c8:b6:0b: b7:4e:7c:db:96:90:a1:9e:b8:98:08:cf:c2:52:13: 82:77:be:03:b4:de:a9:7b:91:0e:e6:e7:ff:7a:d9: 71:ed:ac:1c:a1:23:f1:e2:ba:39:f9:ca:48:a7:2d: f7:ea:97:b2:75:11:47:0b:07:ca:d8:91:c8:dc:8c: 80:a6:67:65:d0:20:52:5a:a4:c3:d1:aa:57:82:cc: 1a:4b:37:47:ae:a5:22:2c:0b:58:17:a3:93:b5:d0: 5a:d8:31:60:ab:63:2b:fd:da:3c:e9:95:8d:83:d9: 41:1c:90:79:71:6e:db:78:9c:7a:e2:3d:d9:f6:08: 7a:ad:e1:14:61:02:0c:13:b2:c2:c8:05:0d:2f:4d: 5c:cd:96:1a:be:a0:d5:2b:6d:67:ef:b2:35:d9:1a: a1:2f:67:97:a2:0b:cb:a1:79:fc:b2:e3:d7:0f:26: 5f:9b:fa:23:73:cc:d2:23:cf:a6:12:7d:bd:1f:11: 14:22:11:b7:f5:db:99:33:02:e9:5d:d3:50:81:ca: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:31:16:D1:80:0E:4F:D7:B7:59:1C:5A:2F:E0:92:A3:74:C8:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.48.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:74:86:ca:cf:9a:5f:1e:34:13:08:88:bc:e3:7f:31:78:02: 78:14:02:40:dc:60:0c:33:4e:93:1b:2d:fc:24:ee:f6:b2:c6: 25:13:d1:04:19:2d:44:ab:b6:63:d5:ba:db:26:c9:bd:85:ff: 10:1a:13:02:16:93:84:38:ee:04:92:1b:10:37:fa:8b:52:3d: e4:3a:11:4d:49:10:57:b9:d8:df:24:ce:5f:6c:72:4f:0d:21: 54:6f:c2:4b:5a:ee:32:50:5a:ca:5b:cf:8a:92:88:65:1c:ce: 46:ba:e6:63:56:27:0c:6b:44:99:68:6b:e1:ec:3c:c8:83:45: 54:b3:b1:b7:3e:89:17:2b:79:77:52:f2:d7:f9:f1:f9:c6:97: ce:66:f8:ce:48:53:bc:ea:b4:0a:76:06:e8:c1:6b:74:fc:6b: d2:95:1d:b4:db:22:06:0d:c1:57:ca:be:0e:c6:4d:e7:72:36: 64:0f:7a:78:1f:bd:2a:8d:fa:46:99:f6:e9:f7:b2:2c:7d:b6: 68:68:43:24:d6:86:45:32:72:01:9a:19:40:d3:77:5d:0b:ac: 1d:84:5f:5b:8c:cd:7e:d6:4d:48:fe:1c:89:bf:08:e1:1d:f7: bc:94:70:97:63:bb:91:89:15:37:e0:38:27:65:a3:e2:37:81: 2c:6a:2e:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXplSMGE8/fKLnRppl1v9N5OncgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAxMDU5WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjhkNzQ3OWI4YmMxYzZjODNmMzRiOGFhZWI5YjlhYTdl ZDkwMmVmOGJkOGYwMGNkMTNmYTE0NGJmODUxNGE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbNM18Swep8twofevlY2r20htAL47ntBW8VQTou5ufx8Tg yJA7pkaGS1xeTNYz7py2BdduXg7xEMi2C7dOfNuWkKGeuJgIz8JSE4J3vgO03ql7 kQ7m5/962XHtrByhI/Hiujn5ykinLffql7J1EUcLB8rYkcjcjICmZ2XQIFJapMPR qleCzBpLN0eupSIsC1gXo5O10FrYMWCrYyv92jzplY2D2UEckHlxbtt4nHriPdn2 CHqt4RRhAgwTssLIBQ0vTVzNlhq+oNUrbWfvsjXZGqEvZ5eiC8uhefyy49cPJl+b +iNzzNIjz6YSfb0fERQiEbf125kzAuld01CByvkVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDa4xFtGADk/Xt1kcWi/gkqN0yKcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmMmVjOTA3LWZmYjYtNGMyMi1hODg0LTRjNjRiOWYwOWExMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJsrzAwDQYJKoZIhvcNAQELBQADggEBAIx0hsrPml8eNBMIiLzjfzF4AngU AkDcYAwzTpMbLfwk7vayxiUT0QQZLUSrtmPVutsmyb2F/xAaEwIWk4Q47gSSGxA3 +otSPeQ6EU1JEFe52N8kzl9sck8NIVRvwkta7jJQWspbz4qSiGUczka65mNWJwxr RJloa+HsPMiDRVSzsbc+iRcreXdS8tf58fnGl85m+M5IU7zqtAp2BujBa3T8a9KV HbTbIgYNwVfKvg7GTedyNmQPengfvSqN+kaZ9un3six9tmhoQyTWhkUycgGaGUDT d10LrB2EX1uMzX7WTUj+HIm/COEd97yUcJdju5GJFTfgOCdlo+I3gSxqLn8= -----END CERTIFICATE-----Generated at Sat Jun 13 07:09:13 2026 by rpki-client