$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b27f40d4-b361-4d36-bb2e-918c526e35ac.roa File: b27f40d4-b361-4d36-bb2e-918c526e35ac.roa (raw, json) Hash identifier: A0WBrSvQEdl04ldtzSVFD3HD6Ow7KeYhBWY0oWmM+PU= Subject key identifier: 46:73:5C:8A:04:D2:A7:99:4F:45:91:E8:25:07:2F:32:5C:D2:B6:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BA4A83C73DEDFA119CB9D9245F85EA774801C62 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b27f40d4-b361-4d36-bb2e-918c526e35ac.roa Signing time: Wed 13 May 2026 00:40:56 +0000 ROA not before: Wed 13 May 2026 00:40:56 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a4:a8:3c:73:de:df:a1:19:cb:9d:92:45:f8:5e:a7:74:80:1c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:40:56 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=88efd3db9f780198e35ea3961d45b2fa42045724f732d5e4ef833f79093c4b6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cf:f3:82:69:e7:d6:ae:e0:f8:65:98:8c:d9: 59:99:d0:84:23:0d:71:bb:b0:ad:23:e7:dc:3a:d7: 7e:29:30:e6:df:b5:7c:20:b6:3c:51:47:f7:ca:6c: f7:b1:f2:71:01:46:b9:14:02:50:4b:79:62:ec:30: ca:3b:0b:ad:ce:75:f8:9f:dc:bc:59:c2:a0:74:4e: a3:3f:01:76:0c:88:9b:fe:f1:3b:4e:6a:d5:0c:e0: d1:97:97:f2:2f:c1:0a:6c:e9:2f:c2:16:bb:72:38: c9:d5:68:de:90:03:61:42:b9:c2:e9:60:d1:c8:b3: 51:c2:65:08:3f:07:8a:b4:f3:f2:2b:38:98:ee:7f: a2:90:e2:8f:ef:76:3b:0f:6d:eb:ed:03:bd:b1:e2: ae:ea:dd:94:47:65:a9:94:f2:f8:be:69:af:c4:25: fb:6a:16:f6:77:f9:9e:6b:96:17:80:c9:b5:a8:5a: 76:97:07:17:93:51:f1:8a:37:f4:e2:36:40:20:21: e3:19:58:0b:0e:53:58:25:ab:60:99:88:84:4c:e3: 3d:e1:2e:98:30:ba:fe:8a:3a:bb:f3:dc:31:3c:62: 3e:6f:47:fb:00:fa:d7:43:ca:4c:7d:23:1c:31:cd: 04:16:c6:3b:70:ca:37:4d:11:05:b3:42:86:8c:42: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:73:5C:8A:04:D2:A7:99:4F:45:91:E8:25:07:2F:32:5C:D2:B6:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b27f40d4-b361-4d36-bb2e-918c526e35ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.14.0/24 Signature Algorithm: sha256WithRSAEncryption 49:7d:5c:9c:f4:d4:fd:c5:f8:59:53:7a:29:6b:71:a5:a3:e6: 52:93:e3:b9:f5:60:60:e1:4d:13:ff:16:ce:0e:25:36:fd:36: 1d:4f:61:da:16:4e:29:e2:c2:bd:fe:a2:f5:53:0e:ac:2f:f2: ba:ff:54:2d:7d:a2:b5:0a:f7:5b:d7:26:3a:d4:83:33:e9:63: 8f:ea:e0:fc:53:44:b2:37:8b:88:b8:22:2c:71:87:43:50:61: ec:0b:3f:20:44:92:a7:47:d1:d5:ec:7f:28:86:cc:6a:64:90: 00:ad:66:72:47:c6:fc:4b:03:65:5b:01:a3:47:87:5e:27:5c: cc:e2:a3:1e:f0:b7:42:9c:c8:fc:4f:6a:b2:3e:a6:79:5c:04: 56:77:47:c2:3a:02:b4:02:03:f9:f9:ed:34:14:a1:95:80:51: 22:cf:f8:06:97:59:04:0c:df:46:ed:75:00:58:41:2b:86:34: b7:ab:b9:42:fc:bb:ee:73:a2:06:e2:a4:6c:10:07:e4:82:6e: cf:d9:67:4c:32:bd:5b:3b:8f:eb:43:86:f1:eb:70:a9:80:60: 37:b1:b1:c6:f5:09:a7:fc:ea:b3:ee:d1:52:7f:90:aa:4e:56: 92:53:a9:37:6a:9a:b3:a5:45:0c:32:6d:e3:fd:e4:b9:1a:3c: 55:c2:1a:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS6SoPHPe36EZy52SRfhep3SAHGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMDA0MDU2WhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGVmZDNkYjlmNzgwMTk4ZTM1ZWEzOTYxZDQ1YjJmYTQy MDQ1NzI0ZjczMmQ1ZTRlZjgzM2Y3OTA5M2M0YjZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgz/OCaefWruD4ZZiM2VmZ0IQjDXG7sK0j59w6134pMObf tXwgtjxRR/fKbPex8nEBRrkUAlBLeWLsMMo7C63Odfif3LxZwqB0TqM/AXYMiJv+ 8TtOatUM4NGXl/IvwQps6S/CFrtyOMnVaN6QA2FCucLpYNHIs1HCZQg/B4q08/Ir OJjuf6KQ4o/vdjsPbevtA72x4q7q3ZRHZamU8vi+aa/EJftqFvZ3+Z5rlheAybWo WnaXBxeTUfGKN/TiNkAgIeMZWAsOU1glq2CZiIRM4z3hLpgwuv6KOrvz3DE8Yj5v R/sA+tdDykx9IxwxzQQWxjtwyjdNEQWzQoaMQmhjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURnNcigTSp5lPRZHoJQcvMlzStuIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyN2Y0MGQ0LWIzNjEtNGQzNi1iYjJlLTkxOGM1MjZlMzVhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmA4wDQYJKoZIhvcNAQELBQADggEBAEl9XJz01P3F+FlTeilrcaWj5lKT 47n1YGDhTRP/Fs4OJTb9Nh1PYdoWTiniwr3+ovVTDqwv8rr/VC19orUK91vXJjrU gzPpY4/q4PxTRLI3i4i4Iixxh0NQYewLPyBEkqdH0dXsfyiGzGpkkACtZnJHxvxL A2VbAaNHh14nXMziox7wt0KcyPxParI+pnlcBFZ3R8I6ArQCA/n57TQUoZWAUSLP +AaXWQQM30btdQBYQSuGNLeruUL8u+5zogbipGwQB+SCbs/ZZ0wyvVs7j+tDhvHr cKmAYDexscb1Caf86rPu0VJ/kKpOVpJTqTdqmrOlRQwybeP95LkaPFXCGpI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:11:32 2026 by rpki-client