$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8076b6e-6d50-40d1-8fc3-4fa7570c6a0f.roa File: c8076b6e-6d50-40d1-8fc3-4fa7570c6a0f.roa (raw, json) Hash identifier: hgHJ3T2kV90pkEelKNcjJzjxqN99iA7YjCgkLnxMeiA= Subject key identifier: C1:ED:F3:A2:90:57:4D:E0:13:F7:9D:03:84:3F:E7:14:1A:57:4B:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C2BE0B9577E32EF90D9E6D7C8E8EA794F7BC24F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8076b6e-6d50-40d1-8fc3-4fa7570c6a0f.roa Signing time: Thu 16 Apr 2026 00:00:09 +0000 ROA not before: Thu 16 Apr 2026 00:00:09 +0000 ROA not after: Wed 15 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.16.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2b:e0:b9:57:7e:32:ef:90:d9:e6:d7:c8:e8:ea:79:4f:7b:c2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:09 2026 GMT Not After : Jul 15 23:59:59 2026 GMT Subject: serialNumber=81afe50b453ac1054ba53b8665434140245fb981be44398ccf10a1defaef9525, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:5f:e5:0f:a6:dc:37:54:63:de:6c:a7:9d: 8e:af:2b:77:a4:ca:bc:99:1c:fc:17:85:29:73:9e: a1:c7:71:eb:be:28:75:b4:56:2e:e8:fb:96:12:4b: 5a:4a:24:7b:f7:5c:70:d0:38:42:d0:aa:31:35:d0: 2f:bb:21:8a:b0:d6:22:0f:f9:e6:3d:16:d8:5a:b0: ef:e2:ce:77:6c:8b:9e:d5:cc:fa:56:8c:37:12:e0: d1:34:b8:bd:9b:d5:a5:b6:c6:d1:a6:cb:e8:af:1c: 8f:5e:a8:22:5f:52:c9:69:0a:22:d5:d0:e8:0e:29: ec:42:29:7f:3a:7f:f7:da:28:10:04:73:e4:12:2e: 54:6a:e2:23:2f:01:c4:2b:28:d7:5c:2f:4d:a3:52: 67:51:1e:a3:2c:f0:d1:3e:71:8a:23:41:34:59:50: c9:e0:bb:1c:d7:88:85:00:b4:7c:fd:dc:c8:fa:63: 69:35:96:4e:82:39:2d:5f:af:36:0e:32:f1:22:9c: 9d:aa:51:ea:1a:10:f6:67:b3:f2:bf:2d:1c:9a:ac: e1:e8:44:9e:07:a3:62:be:b1:fa:1b:ae:f6:43:dc: 14:4f:e1:48:23:a6:8a:80:86:94:53:e5:ff:9d:3e: 1d:11:28:4e:97:39:d0:d8:c8:29:93:fe:85:ec:d5: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:ED:F3:A2:90:57:4D:E0:13:F7:9D:03:84:3F:E7:14:1A:57:4B:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8076b6e-6d50-40d1-8fc3-4fa7570c6a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.16.168.0/22 Signature Algorithm: sha256WithRSAEncryption 90:a8:9d:7d:ac:ec:26:5c:60:c2:86:31:23:34:55:b9:c6:dc: 6e:b2:c5:35:31:86:d0:ae:10:da:d2:3c:f9:9c:3f:39:ab:47: b9:98:a9:c7:91:c8:d7:7b:a2:d5:05:db:ee:aa:55:07:bb:58: fd:3a:64:5e:f4:a9:dd:62:e1:cb:46:28:32:08:be:e8:b6:b5: 6d:ef:72:01:d8:b0:aa:dc:5c:64:0b:94:4f:7e:d7:64:59:37: 65:1e:2d:35:b4:a9:89:f6:ce:70:e8:9f:73:12:b7:54:02:fb: fa:ff:23:4f:52:b9:ed:5b:0a:25:b0:98:55:bf:0c:03:56:3f: 7c:d3:e5:3b:68:ea:ea:d7:88:9b:5e:6c:3a:16:a9:92:48:5e: 84:95:0c:9e:d5:c8:ed:1a:0c:c5:a7:06:6e:f3:de:c2:84:95: 76:fc:f8:f9:a2:06:6d:d5:13:dc:cb:51:a8:50:6e:37:09:b6: 10:ad:7a:79:70:32:35:b8:c1:83:2b:91:10:ad:7e:85:31:77: ea:46:d4:70:af:a0:07:30:86:e1:4c:f9:e1:81:57:52:b9:55: 9e:ce:43:54:ac:42:53:d6:b2:52:43:ab:d3:ae:e7:8e:6d:aa: a8:3a:1f:26:e1:f9:54:1e:9f:c1:39:d0:8c:12:7e:2b:3a:a7: 55:6f:f1:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXCvguVd+Mu+Q2ebXyOjqeU97wk8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE2MDAwMDA5WhcNMjYwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWFmZTUwYjQ1M2FjMTA1NGJhNTNiODY2NTQzNDE0MDI0 NWZiOTgxYmU0NDM5OGNjZjEwYTFkZWZhZWY5NTI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJAl/lD6bcN1Rj3mynnY6vK3ekyryZHPwXhSlznqHHceu+ KHW0Vi7o+5YSS1pKJHv3XHDQOELQqjE10C+7IYqw1iIP+eY9FthasO/izndsi57V zPpWjDcS4NE0uL2b1aW2xtGmy+ivHI9eqCJfUslpCiLV0OgOKexCKX86f/faKBAE c+QSLlRq4iMvAcQrKNdcL02jUmdRHqMs8NE+cYojQTRZUMnguxzXiIUAtHz93Mj6 Y2k1lk6COS1frzYOMvEinJ2qUeoaEPZns/K/LRyarOHoRJ4Ho2K+sfobrvZD3BRP 4UgjpoqAhpRT5f+dPh0RKE6XOdDYyCmT/oXs1Yb3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwe3zopBXTeAT950DhD/nFBpXS2MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4MDc2YjZlLTZkNTAtNDBkMS04ZmMzLTRmYTc1NzBjNmEwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFEKgwDQYJKoZIhvcNAQELBQADggEBAJConX2s7CZcYMKGMSM0VbnG3G6y xTUxhtCuENrSPPmcPzmrR7mYqceRyNd7otUF2+6qVQe7WP06ZF70qd1i4ctGKDII vui2tW3vcgHYsKrcXGQLlE9+12RZN2UeLTW0qYn2znDon3MSt1QC+/r/I09Sue1b CiWwmFW/DANWP3zT5Tto6urXiJtebDoWqZJIXoSVDJ7VyO0aDMWnBm7z3sKElXb8 +PmiBm3VE9zLUahQbjcJthCtenlwMjW4wYMrkRCtfoUxd+pG1HCvoAcwhuFM+eGB V1K5VZ7OQ1SsQlPWslJDq9Ou545tqqg6Hybh+VQen8E50IwSfis6p1Vv8YQ= -----END CERTIFICATE-----Generated at Fri Apr 17 03:40:41 2026 by rpki-client