$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c16b3689-dc01-4d40-8941-43806551eed6.roa File: c16b3689-dc01-4d40-8941-43806551eed6.roa (raw, json) Hash identifier: f/ejZCsgCx2jDKNvrflkUdKFLYtjC4dZO0oB+frwBX0= Subject key identifier: 97:03:FE:B0:DA:BC:24:0A:37:A2:B3:E4:51:1D:A9:03:31:6B:37:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 191FA6E57202EAC2A80D368338042608465FC983 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c16b3689-dc01-4d40-8941-43806551eed6.roa Signing time: Thu 21 May 2026 00:00:31 +0000 ROA not before: Thu 21 May 2026 00:00:31 +0000 ROA not after: Wed 19 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 70.132.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1f:a6:e5:72:02:ea:c2:a8:0d:36:83:38:04:26:08:46:5f:c9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:00:31 2026 GMT Not After : Aug 19 23:59:59 2026 GMT Subject: serialNumber=1117b57017298f4b37794927dad7bd2728bbe0b400f29715fafab232548cf2c5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:b8:01:2e:5f:d4:cd:fd:f5:8f:3e:07:f5: 56:a6:e3:0b:34:74:27:28:ba:a6:bf:da:44:37:8f: 78:bf:ab:13:ea:5f:ef:ea:92:62:a3:30:c8:0a:68: 49:c7:36:a3:7f:ee:fd:c9:ce:02:41:b6:14:97:96: ab:a9:2a:4d:15:bf:ba:f3:53:13:51:57:bb:71:02: 59:bd:4b:00:06:5d:06:7a:1f:17:5f:cd:22:7c:50: 24:6d:b8:cb:3a:a3:f4:18:be:72:93:5f:fe:50:32: 74:d5:2f:77:50:27:75:0c:6a:22:0b:72:df:a2:63: 3a:e7:db:f5:d1:72:be:89:0c:6c:e6:14:1e:5d:a4: 3e:fa:04:ac:c8:aa:b7:07:39:24:09:f5:5d:ff:2f: 81:a6:0a:0b:81:82:fe:87:2d:86:74:2d:f3:ef:8c: 2c:2b:e1:e2:b8:7e:f1:6d:fc:bd:99:d5:a3:35:3f: 44:97:c1:f9:8a:b1:61:97:33:7f:c9:fd:fe:de:ef: 17:ad:59:1f:cc:c4:45:18:92:62:0b:ed:9a:e7:a2: 50:05:e4:ba:fa:86:5e:c0:20:fb:94:b7:25:ee:77: 32:8a:41:af:45:7f:c8:04:90:7e:4d:52:b6:a6:0e: 30:b1:e8:80:f9:68:b9:af:9d:56:13:6f:8b:29:58: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:03:FE:B0:DA:BC:24:0A:37:A2:B3:E4:51:1D:A9:03:31:6B:37:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c16b3689-dc01-4d40-8941-43806551eed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.132.0.0/18 Signature Algorithm: sha256WithRSAEncryption 66:e6:6f:0c:6c:38:10:3a:a0:16:37:6c:39:40:e9:25:e3:df: e2:4b:0f:0f:d8:be:12:0c:52:bc:7c:6f:55:f3:57:32:3e:1b: 24:c6:a7:67:45:01:c7:f9:d8:20:e6:9d:17:ab:b0:e0:a1:ca: 17:1d:4f:d6:cd:40:75:53:58:1a:a3:81:fd:13:c5:7a:06:c5: 64:26:54:0f:06:2c:2e:13:0b:bd:c2:80:a3:37:a7:3f:96:f3: d8:29:33:56:40:aa:c4:49:d8:0f:56:dc:8f:3b:0f:be:ad:cf: b6:66:1e:1a:3d:db:4f:64:d9:01:eb:04:ab:c6:1a:15:19:3d: 24:14:63:ea:49:f9:23:35:fd:cc:32:b7:e0:8e:9c:3e:86:79: 47:36:a9:c1:bc:78:9f:24:4a:3b:8c:9b:65:ef:a5:0f:26:59: d7:d8:9e:be:8a:b4:13:d0:b6:39:cf:c2:d7:fd:ba:5c:15:c2: db:51:6b:0c:f8:b6:43:f3:3d:70:20:af:cc:88:1c:10:e6:65: e4:04:dd:bf:d1:f4:9b:bf:76:e8:78:84:a8:5e:cc:7d:15:18: 66:c5:bf:5b:df:3a:33:35:d6:f7:3b:79:d4:93:86:35:33:c9: 5d:71:a6:3a:24:14:3b:61:aa:18:89:75:7e:a9:81:b7:d7:75: 6c:b2:0e:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGR+m5XIC6sKoDTaDOAQmCEZfyYMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIxMDAwMDMxWhcNMjYwODE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTE3YjU3MDE3Mjk4ZjRiMzc3OTQ5MjdkYWQ3YmQyNzI4 YmJlMGI0MDBmMjk3MTVmYWZhYjIzMjU0OGNmMmM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChB7gBLl/Uzf31jz4H9Vam4ws0dCcouqa/2kQ3j3i/qxPq X+/qkmKjMMgKaEnHNqN/7v3JzgJBthSXlqupKk0Vv7rzUxNRV7txAlm9SwAGXQZ6 HxdfzSJ8UCRtuMs6o/QYvnKTX/5QMnTVL3dQJ3UMaiILct+iYzrn2/XRcr6JDGzm FB5dpD76BKzIqrcHOSQJ9V3/L4GmCguBgv6HLYZ0LfPvjCwr4eK4fvFt/L2Z1aM1 P0SXwfmKsWGXM3/J/f7e7xetWR/MxEUYkmIL7ZrnolAF5Lr6hl7AIPuUtyXudzKK Qa9Ff8gEkH5NUramDjCx6ID5aLmvnVYTb4spWNVFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlwP+sNq8JAo3orPkUR2pAzFrNyYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxNmIzNjg5LWRjMDEtNGQ0MC04OTQxLTQzODA2NTUxZWVkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZGhAAwDQYJKoZIhvcNAQELBQADggEBAGbmbwxsOBA6oBY3bDlA6SXj3+JL Dw/YvhIMUrx8b1XzVzI+GyTGp2dFAcf52CDmnRersOChyhcdT9bNQHVTWBqjgf0T xXoGxWQmVA8GLC4TC73CgKM3pz+W89gpM1ZAqsRJ2A9W3I87D76tz7ZmHho9209k 2QHrBKvGGhUZPSQUY+pJ+SM1/cwyt+COnD6GeUc2qcG8eJ8kSjuMm2XvpQ8mWdfY nr6KtBPQtjnPwtf9ulwVwttRawz4tkPzPXAgr8yIHBDmZeQE3b/R9Ju/duh4hKhe zH0VGGbFv1vfOjM11vc7edSThjUzyV1xpjokFDthqhiJdX6pgbfXdWyyDnc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:13:18 2026 by rpki-client