$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc0fed9f-7447-4029-9575-fb4e3bbfa08f.roa File: dc0fed9f-7447-4029-9575-fb4e3bbfa08f.roa (raw, json) Hash identifier: 7Y3QMgObrMSrcPhR5T2a1D315y1p6C5+CewKxiuwQcI= Subject key identifier: 97:8F:17:E5:DB:12:96:A3:8F:C2:E9:53:CA:79:D5:C3:3D:47:C4:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4673A6155C2E62D86AEBD607B7E88F7F4697C4CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc0fed9f-7447-4029-9575-fb4e3bbfa08f.roa Signing time: Sat 16 May 2026 00:21:14 +0000 ROA not before: Sat 16 May 2026 00:21:14 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.20.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:73:a6:15:5c:2e:62:d8:6a:eb:d6:07:b7:e8:8f:7f:46:97:c4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 00:21:14 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=11120852430b11c5bb3ef049f0c29ccf62736edaa67c48486911c8d9474f2558, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:70:97:2b:2a:bd:39:8d:d4:56:49:b1:25: fd:21:b3:f1:76:0e:74:e2:d0:16:d8:b5:fa:82:15: c0:0d:1c:a2:20:46:b7:fe:94:da:c8:fc:ad:0e:5c: 15:e8:3e:03:44:e7:8b:6e:c8:8a:65:89:19:8a:9b: 62:18:67:2f:43:90:a0:91:20:2d:f6:47:b8:f5:47: 15:da:d0:9d:63:59:8b:e1:bd:b1:50:e5:6b:79:3d: 20:c4:de:0b:02:8b:54:62:27:1e:f3:64:50:08:96: f1:1f:f6:ad:64:f4:3d:cb:37:ae:c5:73:9c:92:8a: 86:00:5d:23:fb:2b:e3:54:a7:09:49:b2:0d:3c:7c: 6b:70:0b:88:4e:15:b0:1c:e2:0d:8f:e5:77:08:83: 97:e0:94:2f:c1:82:6e:66:f5:dc:b9:1b:03:47:15: 45:61:f5:d6:5f:49:50:fd:ed:87:0e:99:7f:1d:eb: 98:c4:7c:1e:45:8d:f7:60:de:27:00:72:78:38:a4: 97:32:08:92:38:d7:5b:1c:c9:5b:65:d5:40:7a:e5: 40:92:99:6e:a9:1f:24:e8:03:23:6f:1f:db:f4:74: 7e:60:e8:c5:ba:11:96:d5:2a:b8:e9:31:bc:a9:69: 3b:d1:99:61:39:2d:81:3f:04:b8:96:64:5c:1d:4e: 08:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8F:17:E5:DB:12:96:A3:8F:C2:E9:53:CA:79:D5:C3:3D:47:C4:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc0fed9f-7447-4029-9575-fb4e3bbfa08f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.20.0.0/15 Signature Algorithm: sha256WithRSAEncryption a4:e1:e2:e5:74:ec:aa:4d:cc:fd:30:2e:88:e0:7b:45:24:6f: 87:99:98:76:82:82:f3:b2:f7:73:6c:bd:cc:82:f3:7f:6d:21: 3b:18:59:43:98:4c:96:94:c8:f3:ec:9f:09:e9:f6:07:fa:cc: 30:4e:65:50:f0:61:03:3c:3d:6d:67:bc:55:96:bb:4b:54:4b: 65:a7:3a:a1:bc:36:a0:5b:5f:fe:d9:85:81:74:36:52:50:97: ea:59:a1:10:27:98:09:71:03:50:db:1b:4b:db:1c:c6:7c:8a: 02:ec:82:a4:94:3e:f8:4e:85:91:36:a0:42:91:8b:0f:3f:16: 7e:92:78:02:ac:7c:c1:be:88:45:72:bd:83:1a:ed:a7:a4:ce: 52:4e:10:6d:b0:b3:8a:e9:f0:8b:c0:80:26:dd:42:a7:a3:cc: 8e:89:bc:81:86:4d:60:b3:83:ae:7c:b8:c7:ac:4e:de:2c:75: c1:f4:91:bd:d7:44:95:99:0c:15:86:d9:26:83:55:a0:35:c0: c5:0e:b9:2b:1e:31:3d:8d:1a:82:3a:52:55:7c:4b:03:e5:0e: 63:79:97:8c:27:52:03:d2:41:94:0d:23:ec:53:ac:a3:5b:56: 40:f8:9f:7e:af:ab:9d:60:4d:9e:ea:fc:e6:7e:79:e0:08:92: 7b:00:b3:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURnOmFVwuYthq69YHt+iPf0aXxMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDAyMTE0WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTEyMDg1MjQzMGIxMWM1YmIzZWYwNDlmMGMyOWNjZjYy NzM2ZWRhYTY3YzQ4NDg2OTExYzhkOTQ3NGYyNTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNr3CXKyq9OY3UVkmxJf0hs/F2DnTi0BbYtfqCFcANHKIg Rrf+lNrI/K0OXBXoPgNE54tuyIpliRmKm2IYZy9DkKCRIC32R7j1RxXa0J1jWYvh vbFQ5Wt5PSDE3gsCi1RiJx7zZFAIlvEf9q1k9D3LN67Fc5ySioYAXSP7K+NUpwlJ sg08fGtwC4hOFbAc4g2P5XcIg5fglC/Bgm5m9dy5GwNHFUVh9dZfSVD97YcOmX8d 65jEfB5Fjfdg3icAcng4pJcyCJI411scyVtl1UB65UCSmW6pHyToAyNvH9v0dH5g 6MW6EZbVKrjpMbypaTvRmWE5LYE/BLiWZFwdTggBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUl48X5dsSlqOPwulTynnVwz1HxG4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjMGZlZDlmLTc0NDctNDAyOS05NTc1LWZiNGUzYmJmYTA4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEXFDANBgkqhkiG9w0BAQsFAAOCAQEApOHi5XTsqk3M/TAuiOB7RSRvh5mY doKC87L3c2y9zILzf20hOxhZQ5hMlpTI8+yfCen2B/rMME5lUPBhAzw9bWe8VZa7 S1RLZac6obw2oFtf/tmFgXQ2UlCX6lmhECeYCXEDUNsbS9scxnyKAuyCpJQ++E6F kTagQpGLDz8WfpJ4Aqx8wb6IRXK9gxrtp6TOUk4QbbCziunwi8CAJt1Cp6PMjom8 gYZNYLODrny4x6xO3ix1wfSRvddElZkMFYbZJoNVoDXAxQ65Kx4xPY0agjpSVXxL A+UOY3mXjCdSA9JBlA0j7FOso1tWQPiffq+rnWBNnur85n554AiSewCzJw== -----END CERTIFICATE-----Generated at Sat Jun 13 08:15:17 2026 by rpki-client