$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d624a675-d68c-42f8-90ee-c0a2313d8e05.roa File: d624a675-d68c-42f8-90ee-c0a2313d8e05.roa (raw, json) Hash identifier: Nc+ZCG9o3xcnzS7T6/mUrxMrRwnjgyzqfyBmFQT1sY4= Subject key identifier: 33:FB:F5:4D:4C:43:2D:E7:EB:7E:75:47:87:69:11:2D:B8:C4:C9:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34A49CB60945E0E6C8B7F0E48404DDEE0829DC90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d624a675-d68c-42f8-90ee-c0a2313d8e05.roa Signing time: Sat 09 May 2026 00:22:17 +0000 ROA not before: Sat 09 May 2026 00:22:17 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.33.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a4:9c:b6:09:45:e0:e6:c8:b7:f0:e4:84:04:dd:ee:08:29:dc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:22:17 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=db391ee9293f8efe53c551f08670548a27b7faf970af7b936b83ebce113a78e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:df:c1:83:62:e0:90:38:46:37:f7:e9:d6: 1a:33:28:2a:90:56:fa:c2:f6:ee:e8:a9:35:50:09: 4c:00:a2:2a:aa:0b:cc:32:a6:01:d1:05:ea:17:fb: 34:cb:94:32:6b:02:1f:2c:bd:c2:a7:3f:43:2b:55: 79:21:84:aa:5d:3b:c9:b6:39:b4:6f:40:32:90:81: 90:aa:19:3b:53:50:99:b5:a5:39:ef:76:d9:af:9b: ca:90:e2:ba:c1:07:49:49:72:8a:12:cd:f9:6a:6a: fa:a6:29:ba:e5:25:15:d6:7b:5a:b4:12:25:6d:fc: c4:bc:d5:01:af:28:23:da:4d:7a:c4:2f:a7:04:6b: 9b:fc:04:fa:49:7d:ca:3d:fc:a2:22:52:f4:ef:55: bd:6b:4b:ba:ec:6f:04:a7:2c:97:8d:4c:44:84:67: d6:6a:69:d0:a4:4c:58:3b:29:4e:df:0b:87:81:03: 7f:20:5f:db:78:1d:9b:f9:dc:24:e9:a4:65:08:42: 6c:a8:b7:db:45:d3:8a:01:ae:10:ac:19:6e:2f:6a: d1:ca:b1:89:a0:da:aa:76:bb:61:bd:08:e2:dd:62: 4d:7e:0a:75:6c:1b:07:ed:51:ea:46:16:be:d8:d4: 02:91:b1:3f:8d:c0:23:44:78:dc:a4:ca:c7:a8:f6: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:F5:4D:4C:43:2D:E7:EB:7E:75:47:87:69:11:2D:B8:C4:C9:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d624a675-d68c-42f8-90ee-c0a2313d8e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.33.64.0/19 Signature Algorithm: sha256WithRSAEncryption 25:0f:1b:e7:09:81:1b:cc:76:e8:77:f9:a0:40:26:71:4c:5f: 9d:42:48:de:5e:18:79:69:09:54:f1:38:6b:2a:20:c9:c1:74: f9:e4:87:c8:b0:46:54:86:e6:41:1a:8d:78:a5:e3:8b:7d:19: 9c:d1:65:62:53:5e:e6:6e:48:cc:9b:dd:2d:c9:1f:46:8e:ee: dc:a4:92:5c:a7:6f:dd:47:e2:1f:17:a7:f4:30:a3:31:f3:c6: 20:92:ab:87:08:a5:e6:79:b2:d8:fc:65:cf:f7:28:26:ac:5e: e8:17:6a:91:1f:ef:49:f4:99:9b:1c:2e:8e:db:76:d2:c7:7e: c6:14:8a:70:32:34:cf:26:d7:aa:d9:b8:09:83:29:ed:70:80: e4:c9:90:52:b2:1d:b5:22:da:bc:0b:24:7c:96:42:99:a1:bd: a0:21:10:41:e3:07:5c:0d:1c:55:d0:f1:c1:36:dd:a2:a6:e4: 54:b4:6b:46:ce:41:e3:89:4a:14:19:5b:71:c6:2c:09:aa:3b: 22:6c:00:c3:52:3c:f6:e2:22:a6:6b:6f:8e:10:3a:e4:21:b9: af:08:bf:d1:01:ba:04:d0:da:aa:74:a0:03:40:12:25:7e:08: 11:29:49:30:e5:04:db:64:d9:03:8e:33:fe:59:75:44:7d:5b: d8:56:88:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNKSctglF4ObIt/DkhATd7ggp3JAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAyMjE3WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjM5MWVlOTI5M2Y4ZWZlNTNjNTUxZjA4NjcwNTQ4YTI3 YjdmYWY5NzBhZjdiOTM2YjgzZWJjZTExM2E3OGU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtXt/Bg2LgkDhGN/fp1hozKCqQVvrC9u7oqTVQCUwAoiqq C8wypgHRBeoX+zTLlDJrAh8svcKnP0MrVXkhhKpdO8m2ObRvQDKQgZCqGTtTUJm1 pTnvdtmvm8qQ4rrBB0lJcooSzflqavqmKbrlJRXWe1q0EiVt/MS81QGvKCPaTXrE L6cEa5v8BPpJfco9/KIiUvTvVb1rS7rsbwSnLJeNTESEZ9ZqadCkTFg7KU7fC4eB A38gX9t4HZv53CTppGUIQmyot9tF04oBrhCsGW4vatHKsYmg2qp2u2G9COLdYk1+ CnVsGwftUepGFr7Y1AKRsT+NwCNEeNykyseo9uZ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM/v1TUxDLefrfnVHh2kRLbjEyeAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2MjRhNjc1LWQ2OGMtNDJmOC05MGVlLWMwYTIzMTNkOGUwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMIUAwDQYJKoZIhvcNAQELBQADggEBACUPG+cJgRvMduh3+aBAJnFMX51C SN5eGHlpCVTxOGsqIMnBdPnkh8iwRlSG5kEajXil44t9GZzRZWJTXuZuSMyb3S3J H0aO7tykklynb91H4h8Xp/QwozHzxiCSq4cIpeZ5stj8Zc/3KCasXugXapEf70n0 mZscLo7bdtLHfsYUinAyNM8m16rZuAmDKe1wgOTJkFKyHbUi2rwLJHyWQpmhvaAh EEHjB1wNHFXQ8cE23aKm5FS0a0bOQeOJShQZW3HGLAmqOyJsAMNSPPbiIqZrb44Q OuQhua8Iv9EBugTQ2qp0oANAEiV+CBEpSTDlBNtk2QOOM/5ZdUR9W9hWiF4= -----END CERTIFICATE-----Generated at Sat Jun 13 07:10:31 2026 by rpki-client