$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa File: bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa (raw, json) Hash identifier: AprIE721gaPjQZUUM5eRQkqX1AaGN5QR4XpkvW/GeFM= Subject key identifier: A3:F5:DA:93:25:97:AF:5C:6E:1D:8D:AA:37:91:5F:C0:78:93:4C:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 703DF9337DBB73186D120FA531DB2EC474D8A2B3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa Signing time: Sun 17 May 2026 00:20:07 +0000 ROA not before: Sun 17 May 2026 00:20:07 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3d:f9:33:7d:bb:73:18:6d:12:0f:a5:31:db:2e:c4:74:d8:a2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:20:07 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=bbba9e14a0d898559550ee7c388f706c8054b5936153311107096dbee5ce7229, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:2d:12:ff:ed:99:e7:c7:4f:03:d8:8b:9f: cb:1b:c6:b8:85:40:dc:a6:cf:70:ce:d7:b1:ca:14: dd:77:28:d7:1f:de:65:5b:91:d1:ce:90:f0:29:f9: 95:d0:96:fa:77:16:75:8a:2c:bc:0e:1b:e1:1a:31: a6:de:c1:1e:93:d4:fb:f0:c6:cf:a7:95:5f:13:b1: f4:a7:a8:91:3a:ac:ae:8b:dc:31:9d:3f:ed:23:04: e8:ae:83:54:d4:d4:71:3b:40:94:a3:51:41:d0:0d: 42:7a:0a:5e:46:41:bf:ac:a8:b5:cb:7d:19:d0:5a: 6b:7d:71:f0:63:a9:e6:2d:d9:75:45:fc:53:af:29: b9:c9:bd:68:48:0f:50:56:2c:14:6d:d7:fa:77:f5: 8f:8c:fd:08:56:e9:48:26:a7:46:b4:3c:1f:ef:1b: f0:cc:69:66:b7:9b:d2:01:11:bc:bf:22:a3:00:d5: 9a:a3:e6:1c:cf:0d:60:31:61:4f:87:a4:b7:0d:f6: c9:cb:a0:9a:c9:e1:f2:f5:01:a4:f9:d5:a4:d5:79: 1e:0f:65:22:9c:18:53:48:ca:22:ed:12:7d:bc:89: da:a0:dd:62:bd:0f:c6:8d:69:72:af:c6:93:b3:95: 63:4e:cf:2d:1f:62:6a:cf:42:e6:f4:b0:3c:93:0d: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F5:DA:93:25:97:AF:5C:6E:1D:8D:AA:37:91:5F:C0:78:93:4C:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.12.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ca:a4:23:a3:43:82:41:bf:f6:b6:1f:bc:93:79:d9:cb:51: a7:f5:ee:2f:a3:5f:8b:ed:83:73:b0:ef:04:91:7a:60:5f:91: cc:4e:bc:b4:a0:ba:64:b0:45:4a:5c:00:88:19:15:67:e6:a4: 4c:73:0b:bc:ca:0c:dd:56:7b:8e:75:47:e8:fa:1b:6f:75:74: dc:86:a6:99:62:c1:8f:3b:a8:92:ab:3e:83:d7:ad:01:8a:83: 22:80:17:64:a8:fb:51:bc:c1:33:0c:4c:aa:ec:dc:1f:a9:26: 36:44:5c:ee:4f:9f:4e:3a:0a:cb:17:47:49:49:28:95:38:20: aa:36:a1:a1:a7:07:6d:94:3f:60:7d:f8:79:7f:42:1c:0e:5d: 6f:22:2a:dc:f8:4a:34:25:c2:0f:a4:ee:e5:f4:02:1f:e2:fb: 05:75:05:8e:c0:60:2c:9d:70:71:9f:89:f8:db:61:a0:f0:ac: 9f:8a:4f:b1:a9:16:a0:1a:f2:76:16:49:95:5a:8a:5d:0b:bb: 4b:5e:f3:36:a3:39:dc:6c:98:9b:48:63:61:9d:06:33:4a:98: d9:5c:44:c7:e6:34:6a:a2:2b:1a:56:1c:88:b6:d2:14:dd:fe: 3c:c1:43:e7:e3:e6:8b:e1:cd:60:b8:2d:39:5a:b5:64:18:85: cb:99:6d:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcD35M327cxhtEg+lMdsuxHTYorMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAyMDA3WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmJhOWUxNGEwZDg5ODU1OTU1MGVlN2MzODhmNzA2Yzgw NTRiNTkzNjE1MzMxMTEwNzA5NmRiZWU1Y2U3MjI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCL6S0S/+2Z58dPA9iLn8sbxriFQNymz3DO17HKFN13KNcf 3mVbkdHOkPAp+ZXQlvp3FnWKLLwOG+EaMabewR6T1Pvwxs+nlV8TsfSnqJE6rK6L 3DGdP+0jBOiug1TU1HE7QJSjUUHQDUJ6Cl5GQb+sqLXLfRnQWmt9cfBjqeYt2XVF /FOvKbnJvWhID1BWLBRt1/p39Y+M/QhW6Ugmp0a0PB/vG/DMaWa3m9IBEby/IqMA 1Zqj5hzPDWAxYU+HpLcN9snLoJrJ4fL1AaT51aTVeR4PZSKcGFNIyiLtEn28idqg 3WK9D8aNaXKvxpOzlWNOzy0fYmrPQub0sDyTDRs1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo/XakyWXr1xuHY2qN5FfwHiTTBEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTQ3MDkxLWYxMDAtNGFmZi05NDk0LWM3YjdhNGJiOWNiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX/gwwDQYJKoZIhvcNAQELBQADggEBAKnKpCOjQ4JBv/a2H7yTednLUaf1 7i+jX4vtg3Ow7wSRemBfkcxOvLSgumSwRUpcAIgZFWfmpExzC7zKDN1We451R+j6 G291dNyGppliwY87qJKrPoPXrQGKgyKAF2So+1G8wTMMTKrs3B+pJjZEXO5Pn046 CssXR0lJKJU4IKo2oaGnB22UP2B9+Hl/QhwOXW8iKtz4SjQlwg+k7uX0Ah/i+wV1 BY7AYCydcHGfifjbYaDwrJ+KT7GpFqAa8nYWSZVail0Lu0te8zajOdxsmJtIY2Gd BjNKmNlcRMfmNGqiKxpWHIi20hTd/jzBQ+fj5ovhzWC4LTlatWQYhcuZbc8= -----END CERTIFICATE-----Generated at Sat Jun 13 13:20:36 2026 by rpki-client