$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a36a2e-59dd-4da4-b254-eeb6c0091f3b.roa File: d9a36a2e-59dd-4da4-b254-eeb6c0091f3b.roa (raw, json) Hash identifier: 0wdZ0b5JQvpSy5f2tqEwQr9KutS0UHCoBpvtdl8kw6Q= Subject key identifier: 7A:B3:86:80:A0:AF:2B:52:83:4E:EC:06:D4:B0:8D:F3:D0:10:91:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F267655DE3C6F192079FF11B3256840DA8A530E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a36a2e-59dd-4da4-b254-eeb6c0091f3b.roa Signing time: Thu 07 May 2026 00:00:05 +0000 ROA not before: Thu 07 May 2026 00:00:05 +0000 ROA not after: Wed 05 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.94.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:26:76:55:de:3c:6f:19:20:79:ff:11:b3:25:68:40:da:8a:53:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:05 2026 GMT Not After : Aug 5 23:59:59 2026 GMT Subject: serialNumber=4b2a4967515b866c60cfe6cb2914dde0b6763b47d94cbb28373341770d338690, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:41:8e:48:58:ba:d7:59:c6:71:f4:60:68: 59:4f:6c:e1:fa:35:9b:fd:5e:8d:1f:e7:21:39:96: 09:80:f5:31:01:36:a6:d7:00:b8:fb:aa:7a:c9:8b: 41:28:f5:bc:13:c2:66:ec:10:34:ef:66:d0:ed:de: 36:5d:e6:04:75:ab:bf:42:33:90:49:a6:8d:be:26: 31:63:81:fc:28:78:66:17:fa:a1:3b:96:81:32:bf: cb:ca:c1:68:10:16:f8:90:79:4b:56:f3:dd:30:6e: 12:ed:17:97:11:4e:c9:91:f3:4d:c8:0f:5b:e1:7e: 3a:30:2e:05:1c:30:ef:d2:33:ed:3c:1b:0e:71:24: 6d:b4:b3:a2:99:10:bc:14:69:53:cd:44:34:35:f8: 56:f0:fd:6b:a7:fe:f2:9f:5f:7e:6a:72:61:71:ba: ec:08:ac:a2:3d:77:9b:9a:c0:bb:4c:84:03:d4:aa: 62:38:77:eb:8a:1c:cc:4e:b1:46:f1:e1:d0:40:81: a7:b9:03:72:6f:81:48:84:40:52:cb:7e:c6:87:a8: da:48:b5:7b:ad:ec:9c:94:7a:7a:b5:71:9d:bf:69: 0b:77:6d:04:e5:4e:47:38:78:02:f0:7e:8e:e4:0f: cc:59:c5:37:88:7d:74:9a:0d:1e:6a:91:21:a4:b3: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B3:86:80:A0:AF:2B:52:83:4E:EC:06:D4:B0:8D:F3:D0:10:91:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a36a2e-59dd-4da4-b254-eeb6c0091f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.94.192.0/22 Signature Algorithm: sha256WithRSAEncryption ba:80:75:59:db:f1:b6:08:c7:78:4a:62:ae:8f:48:2a:9b:65: 41:75:c6:5d:5c:d1:bf:8c:82:25:c7:1f:8d:ce:66:5e:e4:d2: 8e:4b:d8:f6:8e:21:3a:27:5f:00:05:49:32:f7:eb:02:f5:78: 82:e2:5b:24:11:f1:92:7e:70:ad:35:19:b3:32:37:80:46:61: b8:3f:5e:70:e7:5a:e7:c3:91:cf:1d:92:27:1d:8e:cd:5b:d0: 66:9f:f5:b2:66:3f:60:c4:e9:f3:fb:13:5e:5a:a3:a0:0e:07: 62:d3:e6:9c:31:2a:5e:80:4f:3f:1b:ed:3f:63:36:99:d5:26: 9d:3f:dc:1b:95:31:58:30:92:49:7f:c7:f4:25:67:56:ee:f7: 94:76:90:49:ec:6e:69:a5:59:85:e0:94:c3:87:c5:12:23:8c: 0b:0d:ea:e7:3b:7d:d7:6a:fe:06:69:64:e3:f9:75:b6:d3:73: 95:b0:eb:50:e9:8e:a9:bc:58:83:f6:87:0a:5e:0a:57:3b:15: 77:92:e8:e9:61:02:13:96:2f:c6:af:38:14:ee:b9:8d:f0:21: 1d:2b:19:21:05:3d:e7:fa:95:30:81:67:f7:20:14:c8:23:e3: 56:4c:58:ee:be:b8:77:e4:a4:78:16:c6:04:6c:c1:85:fb:00: 1d:31:45:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXyZ2Vd48bxkgef8RsyVoQNqKUw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA3MDAwMDA1WhcNMjYwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjJhNDk2NzUxNWI4NjZjNjBjZmU2Y2IyOTE0ZGRlMGI2 NzYzYjQ3ZDk0Y2JiMjgzNzMzNDE3NzBkMzM4NjkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBnkGOSFi611nGcfRgaFlPbOH6NZv9Xo0f5yE5lgmA9TEB NqbXALj7qnrJi0Eo9bwTwmbsEDTvZtDt3jZd5gR1q79CM5BJpo2+JjFjgfwoeGYX +qE7loEyv8vKwWgQFviQeUtW890wbhLtF5cRTsmR803ID1vhfjowLgUcMO/SM+08 Gw5xJG20s6KZELwUaVPNRDQ1+Fbw/Wun/vKfX35qcmFxuuwIrKI9d5uawLtMhAPU qmI4d+uKHMxOsUbx4dBAgae5A3JvgUiEQFLLfsaHqNpItXut7JyUenq1cZ2/aQt3 bQTlTkc4eALwfo7kD8xZxTeIfXSaDR5qkSGks1+9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUerOGgKCvK1KDTuwG1LCN89AQkTAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5YTM2YTJlLTU5ZGQtNGRhNC1iMjU0LWVlYjZjMDA5MWYzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAXsAwDQYJKoZIhvcNAQELBQADggEBALqAdVnb8bYIx3hKYq6PSCqbZUF1 xl1c0b+MgiXHH43OZl7k0o5L2PaOITonXwAFSTL36wL1eILiWyQR8ZJ+cK01GbMy N4BGYbg/XnDnWufDkc8dkicdjs1b0Gaf9bJmP2DE6fP7E15ao6AOB2LT5pwxKl6A Tz8b7T9jNpnVJp0/3BuVMVgwkkl/x/QlZ1bu95R2kEnsbmmlWYXglMOHxRIjjAsN 6uc7fddq/gZpZOP5dbbTc5Ww61Dpjqm8WIP2hwpeClc7FXeS6OlhAhOWL8avOBTu uY3wIR0rGSEFPef6lTCBZ/cgFMgj41ZMWO6+uHfkpHgWxgRswYX7AB0xRWU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:30:06 2026 by rpki-client