$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa File: c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa (raw, json) Hash identifier: j5xw3rxcs5yFZPi2mFjbLunNy6SS7LdhSJzpmH1qn4U= Subject key identifier: 0D:18:F1:90:A7:FD:37:B1:05:F8:30:61:3C:07:1A:E2:1F:6B:8C:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33966190965F4D3F5CDD2648C965EF18117691E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa Signing time: Sun 17 May 2026 00:40:04 +0000 ROA not before: Sun 17 May 2026 00:40:04 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:96:61:90:96:5f:4d:3f:5c:dd:26:48:c9:65:ef:18:11:76:91:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:40:04 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=60d1d88d1cdc1a817633925716a13a184046379d50564d4c6e03cd7d7bec430d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:75:d4:25:6c:70:8a:5c:85:4f:43:46:84: 77:61:17:c8:43:ab:6f:bc:57:af:87:ba:6a:8b:63: cb:1b:05:ed:9e:ee:5c:a9:c2:9a:af:07:08:9d:6b: 7e:d6:5b:ef:92:df:4e:c6:d8:c7:65:19:62:7e:d6: df:2e:48:e0:c6:e9:10:d2:9c:fb:83:fa:14:66:37: 24:b9:c6:6f:d0:a2:06:f5:2c:ed:72:0e:47:30:aa: 3a:a8:2a:41:4a:58:18:26:9d:79:4b:2a:d9:79:02: 8c:e9:3c:a6:23:39:1f:2f:bf:9a:29:90:8c:63:e4: 14:6f:b2:4d:2a:af:31:29:1e:b8:29:94:9e:af:37: 62:53:60:4a:c7:e6:e1:ac:ef:a3:87:19:8c:c0:b0: f5:55:1e:fb:d6:58:bd:ec:a7:af:df:59:1b:ee:d4: 69:1b:de:22:ee:50:8f:0b:2a:80:22:e9:46:87:2f: eb:20:71:7d:b2:59:1a:47:6d:f9:8e:18:b7:1a:25: bd:0b:59:fb:6e:23:59:be:d4:8f:be:91:b8:63:09: 9b:6d:1a:d2:ce:96:b3:40:31:f8:55:9d:95:be:c2: 4b:46:95:39:8e:f0:c8:8c:48:35:1a:05:3b:46:5f: b9:fa:90:71:0d:ef:b8:c6:66:30:29:d6:8d:9f:e3: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:18:F1:90:A7:FD:37:B1:05:F8:30:61:3C:07:1A:E2:1F:6B:8C:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.208.0/20 Signature Algorithm: sha256WithRSAEncryption 88:6a:15:e8:98:6d:06:86:28:41:fe:fa:e3:0b:64:06:82:57: 07:1a:e9:b0:5f:e0:73:c6:f1:ed:d4:82:ff:e0:4d:10:b5:66: de:19:fc:a1:97:04:9f:2a:ff:d7:fa:30:0a:1c:1f:88:60:4a: 4f:66:1a:7b:57:8d:46:30:aa:6c:1a:34:71:54:a1:15:c9:33: 1c:c2:15:8a:ef:c8:0c:69:dd:2c:b3:ff:fb:f0:36:6f:e0:7b: cd:54:0f:a6:70:c7:8c:f4:6c:4b:1c:ab:06:e1:71:90:21:83: a4:05:e7:0b:d4:67:7c:9a:e4:d3:2f:40:6a:59:de:8f:9e:fa: 1c:df:9b:6c:27:4f:e4:81:6c:4b:19:87:91:5b:06:96:7a:ab: 6b:e8:c3:eb:41:85:2d:38:0b:ef:58:f3:1b:58:c6:bd:81:e7: a5:1d:a1:91:8b:f9:b5:78:08:cd:8a:8a:78:84:ff:b9:e4:cd: dd:b6:fe:5a:cc:e1:07:30:af:30:eb:3f:aa:e2:fc:73:2d:4c: 8c:47:4e:36:f1:e6:af:2b:5f:fb:56:5b:2e:b4:00:47:c0:29: 56:d5:12:9d:b0:f0:2f:2a:98:82:f8:48:be:d2:84:74:f9:d9: a7:a2:dc:19:54:af:ef:e6:2b:c7:c6:6b:20:11:a1:1a:81:80: c7:6a:07:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM5ZhkJZfTT9c3SZIyWXvGBF2keQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDA0MDA0WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGQxZDg4ZDFjZGMxYTgxNzYzMzkyNTcxNmExM2ExODQw NDYzNzlkNTA1NjRkNGM2ZTAzY2Q3ZDdiZWM0MzBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuDXXUJWxwilyFT0NGhHdhF8hDq2+8V6+HumqLY8sbBe2e 7lypwpqvBwida37WW++S307G2MdlGWJ+1t8uSODG6RDSnPuD+hRmNyS5xm/Qogb1 LO1yDkcwqjqoKkFKWBgmnXlLKtl5AozpPKYjOR8vv5opkIxj5BRvsk0qrzEpHrgp lJ6vN2JTYErH5uGs76OHGYzAsPVVHvvWWL3sp6/fWRvu1Gkb3iLuUI8LKoAi6UaH L+sgcX2yWRpHbfmOGLcaJb0LWftuI1m+1I++kbhjCZttGtLOlrNAMfhVnZW+wktG lTmO8MiMSDUaBTtGX7n6kHEN77jGZjAp1o2f46FJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDRjxkKf9N7EF+DBhPAca4h9rjPMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0MDZiN2ZkLTlmMzEtNGJiNS1hMDI1LWIyMmE3YmJlZDRiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARG4NAwDQYJKoZIhvcNAQELBQADggEBAIhqFeiYbQaGKEH++uMLZAaCVwca 6bBf4HPG8e3Ugv/gTRC1Zt4Z/KGXBJ8q/9f6MAocH4hgSk9mGntXjUYwqmwaNHFU oRXJMxzCFYrvyAxp3Syz//vwNm/ge81UD6Zwx4z0bEscqwbhcZAhg6QF5wvUZ3ya 5NMvQGpZ3o+e+hzfm2wnT+SBbEsZh5FbBpZ6q2vow+tBhS04C+9Y8xtYxr2B56Ud oZGL+bV4CM2KiniE/7nkzd22/lrM4QcwrzDrP6ri/HMtTIxHTjbx5q8rX/tWWy60 AEfAKVbVEp2w8C8qmIL4SL7ShHT52aei3BlUr+/mK8fGayARoRqBgMdqBxA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:11:19 2026 by rpki-client