$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa File: b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa (raw, json) Hash identifier: JEp+sZ+2qu17MWPonqV3rg7MhLf09aLOmFxCLYVJ+tk= Subject key identifier: AF:E0:54:8A:9D:8D:E1:EB:0B:3A:25:5E:6C:81:E8:69:19:2B:81:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BC95DA395678AFD6BFF5375925F00D97686FFF9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa Signing time: Fri 15 May 2026 01:50:46 +0000 ROA not before: Fri 15 May 2026 01:50:46 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c9:5d:a3:95:67:8a:fd:6b:ff:53:75:92:5f:00:d9:76:86:ff:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:50:46 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=d9ca1b356b3ed47b539142533f660c5fce865f7bc689973cdc25b4d03c2baa8b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:cf:1a:cf:97:93:a8:0a:65:62:de:50:34: 38:b5:01:3f:11:1f:0d:b4:b8:da:94:59:aa:2e:c8: 5b:06:54:c4:9d:76:67:0b:8c:61:ce:1a:5b:fc:a1: 56:02:11:12:ab:49:dd:89:7a:39:9d:6e:0b:b9:a9: ac:81:af:d1:de:d2:9f:26:25:c8:80:73:ac:c1:68: 73:1b:f3:d7:79:f8:3b:77:31:cb:b1:eb:dc:2e:0c: ba:b7:c8:cf:79:ab:b8:44:25:c7:fa:e4:f7:63:f1: 17:e6:57:30:54:bd:70:ef:0c:a7:3a:6a:b1:a1:43: 9b:87:38:e1:68:c9:79:df:c2:7b:dc:b3:de:e2:ff: 3e:f3:f8:b1:6d:8d:cb:46:81:5a:40:39:ee:c4:fc: 59:e3:25:b5:a9:d6:0b:64:14:93:61:94:6e:d4:ae: 5c:ca:1e:0f:46:19:d4:57:89:1f:4c:c6:65:20:f7: 7a:0d:a0:81:ec:5f:2c:13:96:c1:54:d5:7e:85:2a: 36:62:ad:94:9d:55:a9:59:8a:fc:79:17:0e:0c:16: 9b:7f:07:85:d6:45:92:5f:16:6f:16:44:c9:9d:eb: 81:36:12:22:4a:78:4f:b5:0f:ea:06:56:47:f2:59: 70:e7:6a:96:b4:20:2b:97:a3:ac:ff:21:d5:18:dc: e5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:54:8A:9D:8D:E1:EB:0B:3A:25:5E:6C:81:E8:69:19:2B:81:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.192.0/18 Signature Algorithm: sha256WithRSAEncryption 7f:4f:fe:3f:0f:4e:64:19:ed:1f:84:60:74:a2:a3:ec:6b:93: 3b:05:e2:8c:96:c9:0e:ee:b0:d0:4d:12:b9:46:69:80:50:2d: 66:14:a8:67:38:94:53:32:1e:89:46:75:f7:63:c3:fe:ba:c6: 75:17:e8:34:11:69:c7:50:3d:ec:b4:ec:ca:12:ce:79:7d:03: 5d:10:8c:40:d7:76:bc:5f:ad:5c:51:65:34:71:74:68:07:c8: 50:3e:28:7d:20:69:61:07:37:c1:4f:bc:d9:a2:93:0f:12:11: a7:0c:f9:ce:10:60:45:41:b9:fc:c3:5d:1a:56:81:bb:8b:d6: f2:22:02:a4:e3:ef:cc:5f:99:a2:7a:5a:93:ca:0a:d9:80:10: 43:2c:45:8c:83:e9:f2:85:ed:b5:c0:76:27:ff:56:a1:a4:5f: 70:7e:92:78:cd:ea:4a:84:f6:02:01:0e:59:c8:58:4c:2d:61: 61:68:6b:24:95:a0:9f:13:b9:05:23:79:ad:ec:c7:9f:4e:4b: 46:1e:68:b2:13:3d:4b:12:8b:38:db:99:a9:2b:cc:74:73:94: 94:ed:72:c9:b0:73:1d:f1:9a:bb:25:93:5a:bd:70:cd:3f:fa: 48:40:ae:5d:36:12:97:4a:00:2b:bc:91:b7:78:40:5b:ec:ff: b1:35:0b:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW8ldo5Vniv1r/1N1kl8A2XaG//kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDE1MDQ2WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWNhMWIzNTZiM2VkNDdiNTM5MTQyNTMzZjY2MGM1ZmNl ODY1ZjdiYzY4OTk3M2NkYzI1YjRkMDNjMmJhYThiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZwc8az5eTqAplYt5QNDi1AT8RHw20uNqUWaouyFsGVMSd dmcLjGHOGlv8oVYCERKrSd2Jejmdbgu5qayBr9He0p8mJciAc6zBaHMb89d5+Dt3 Mcux69wuDLq3yM95q7hEJcf65Pdj8RfmVzBUvXDvDKc6arGhQ5uHOOFoyXnfwnvc s97i/z7z+LFtjctGgVpAOe7E/FnjJbWp1gtkFJNhlG7UrlzKHg9GGdRXiR9MxmUg 93oNoIHsXywTlsFU1X6FKjZirZSdValZivx5Fw4MFpt/B4XWRZJfFm8WRMmd64E2 EiJKeE+1D+oGVkfyWXDnapa0ICuXo6z/IdUY3OXlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr+BUip2N4esLOiVebIHoaRkrgUswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzOWI1ZTcyLTJkNGUtNDk2Ni05Y2Y5LWExMDFlNzhjYTg5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFMAwDQYJKoZIhvcNAQELBQADggEBAH9P/j8PTmQZ7R+EYHSio+xrkzsF 4oyWyQ7usNBNErlGaYBQLWYUqGc4lFMyHolGdfdjw/66xnUX6DQRacdQPey07MoS znl9A10QjEDXdrxfrVxRZTRxdGgHyFA+KH0gaWEHN8FPvNmikw8SEacM+c4QYEVB ufzDXRpWgbuL1vIiAqTj78xfmaJ6WpPKCtmAEEMsRYyD6fKF7bXAdif/VqGkX3B+ knjN6kqE9gIBDlnIWEwtYWFoaySVoJ8TuQUjea3sx59OS0YeaLITPUsSizjbmakr zHRzlJTtcsmwcx3xmrslk1q9cM0/+khArl02EpdKACu8kbd4QFvs/7E1CzQ= -----END CERTIFICATE-----Generated at Sat Jun 13 08:15:00 2026 by rpki-client