$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa File: dba7885d-04f4-44b6-8fa7-310271019cc6.roa (raw, json) Hash identifier: Sy/3aknF+EmMln03S3BgHw8sewOrfpWRIs3It8twdAw= Subject key identifier: 93:5B:E8:BB:0B:BD:93:91:FD:59:3A:AF:41:85:E0:E7:F3:3C:01:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D01F105031046A8E5EABD6FA2EF98BD98D85AED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa Signing time: Sat 16 May 2026 02:20:38 +0000 ROA not before: Sat 16 May 2026 02:20:38 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 158.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:01:f1:05:03:10:46:a8:e5:ea:bd:6f:a2:ef:98:bd:98:d8:5a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 02:20:38 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=3bd43ee4e243685c0d58ed1159bb9a70e70b871a073a67bab8aab3d3eeb16ee9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:8a:d7:9d:13:d4:e9:7e:b9:09:8d:39:38: d7:45:82:ef:b3:9e:f6:a1:57:16:25:e4:5f:d8:dd: 66:5a:d1:46:35:9c:04:1e:c0:18:6c:2b:0d:f7:b3: a6:43:99:71:75:21:e5:c6:45:d7:5a:47:d2:f8:94: 80:7e:7a:72:00:ac:54:a1:9e:49:92:76:59:b0:0a: 73:90:d5:ad:57:f9:bd:45:9b:99:56:b6:1e:88:f4: fc:c3:75:43:d0:0f:7f:b2:da:97:b8:16:c4:b8:c9: 90:f2:1e:d1:f2:88:93:2f:2d:25:20:d5:51:4a:85: 8a:27:d9:51:0b:03:70:99:38:92:bf:cc:8b:fc:d5: 56:28:96:b6:77:00:5c:c5:c1:80:65:6f:14:66:00: b5:56:ec:a1:96:94:f6:c3:f7:17:1c:6f:a9:14:c8: 66:a7:ed:45:b9:d2:40:7f:2f:30:2b:ba:f9:f3:14: 9c:75:da:34:a2:58:8f:22:c6:6d:b1:b4:ca:5c:7a: 78:bb:28:63:5e:fb:77:d9:9b:82:87:a4:fb:eb:b5: 1d:00:3e:5c:87:f4:14:e3:57:08:12:05:81:4e:e9: e7:d2:68:bb:82:0a:be:77:b7:69:62:8a:b9:b5:c1: b7:e9:11:7e:55:6e:c8:1f:86:14:7f:ef:4d:42:e1: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5B:E8:BB:0B:BD:93:91:FD:59:3A:AF:41:85:E0:E7:F3:3C:01:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.151.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3b:dd:16:b3:98:be:8a:19:94:c8:37:92:94:e5:c2:27:7b:43: 43:15:f6:29:7d:b4:d9:c4:3a:a8:b9:dc:6c:ba:ce:32:ac:28: 49:cf:53:d1:ae:23:40:f1:74:d3:a2:cc:df:ab:e5:8c:27:7d: 54:0f:d6:93:79:db:71:d1:df:63:a1:02:27:10:7c:00:35:02: 3e:92:3b:1b:5d:42:00:f1:f6:b2:24:59:c7:df:b3:bd:34:1c: 91:6a:e5:f1:9f:31:99:5f:d2:18:a2:94:67:00:39:f2:50:cb: 9d:a0:37:5b:2d:d7:5b:7c:30:1a:ae:9c:37:b6:ad:d9:c6:3b: e6:96:2f:82:5c:07:8a:1b:80:ab:ba:98:e7:f8:ae:41:6b:2e: eb:05:b0:f7:e9:3c:4b:4e:34:16:89:8f:91:b5:c6:24:76:df: f3:b7:17:24:f6:86:41:45:5d:e2:bc:45:74:d2:25:8b:92:54: 79:82:91:1f:4b:6e:c3:a0:14:eb:a0:38:b9:a0:0c:d1:23:b4: 45:8d:45:78:e6:4c:ec:da:5c:10:c3:c2:82:bf:92:53:30:77: 16:27:d4:9d:4d:99:67:76:9d:4e:f1:c8:a7:f1:99:13:3f:b1: 44:6f:57:47:74:9b:b3:01:8d:6d:b1:ad:c3:3c:80:28:2a:e7: 4d:77:6e:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTQHxBQMQRqjl6r1vou+YvZjYWu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDIyMDM4WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmQ0M2VlNGUyNDM2ODVjMGQ1OGVkMTE1OWJiOWE3MGU3 MGI4NzFhMDczYTY3YmFiOGFhYjNkM2VlYjE2ZWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKYIrXnRPU6X65CY05ONdFgu+znvahVxYl5F/Y3WZa0UY1 nAQewBhsKw33s6ZDmXF1IeXGRddaR9L4lIB+enIArFShnkmSdlmwCnOQ1a1X+b1F m5lWth6I9PzDdUPQD3+y2pe4FsS4yZDyHtHyiJMvLSUg1VFKhYon2VELA3CZOJK/ zIv81VYolrZ3AFzFwYBlbxRmALVW7KGWlPbD9xccb6kUyGan7UW50kB/LzAruvnz FJx12jSiWI8ixm2xtMpceni7KGNe+3fZm4KHpPvrtR0APlyH9BTjVwgSBYFO6efS aLuCCr53t2liirm1wbfpEX5VbsgfhhR/701C4XdnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUk1vouwu9k5H9WTqvQYXg5/M8Af4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiYTc4ODVkLTA0ZjQtNDRiNi04ZmE3LTMxMDI3MTAxOWNjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCelzANBgkqhkiG9w0BAQsFAAOCAQEAO90Ws5i+ihmUyDeSlOXCJ3tDQxX2 KX202cQ6qLncbLrOMqwoSc9T0a4jQPF006LM36vljCd9VA/Wk3nbcdHfY6ECJxB8 ADUCPpI7G11CAPH2siRZx9+zvTQckWrl8Z8xmV/SGKKUZwA58lDLnaA3Wy3XW3ww Gq6cN7at2cY75pYvglwHihuAq7qY5/iuQWsu6wWw9+k8S040FomPkbXGJHbf87cX JPaGQUVd4rxFdNIli5JUeYKRH0tuw6AU66A4uaAM0SO0RY1FeOZM7NpcEMPCgr+S UzB3FifUnU2ZZ3adTvHIp/GZEz+xRG9XR3SbswGNbbGtwzyAKCrnTXdutw== -----END CERTIFICATE-----Generated at Sat Jun 13 11:18:32 2026 by rpki-client