$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa File: df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa (raw, json) Hash identifier: iJ1sw83deiJ/bG+SMHoF9aJrZ4hzh1RG/feEo1hUTAs= Subject key identifier: 06:63:C6:6A:6B:63:88:C5:97:A6:49:CA:9A:2C:96:6E:C9:D2:72:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32C205255BA67AB897520BBC4817D2BA02AD9F3E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa Signing time: Sun 17 May 2026 00:00:44 +0000 ROA not before: Sun 17 May 2026 00:00:44 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c2:05:25:5b:a6:7a:b8:97:52:0b:bc:48:17:d2:ba:02:ad:9f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:00:44 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=b0be3d03a3a19eaa6837fff93925c15a3bde91bbec7dee62eb16a35642f44ccf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:38:76:5c:be:45:c0:4c:a0:52:19:cc:28: af:20:29:9d:c7:ce:9c:cc:1e:38:6b:bd:9d:b2:96: ee:07:04:4c:20:99:e8:06:1b:c9:dd:86:b5:63:53: f4:f5:37:61:88:42:3e:c8:64:f2:83:38:16:10:5e: b1:2a:02:90:00:37:68:95:e6:98:cf:74:7b:d9:b2: 36:4f:26:df:f0:35:18:2f:87:86:33:eb:09:c4:1a: 12:05:eb:04:ba:b1:44:94:08:c9:84:dd:15:6b:6c: 59:d0:7e:ef:8f:24:20:3c:55:62:40:c9:b2:56:0b: 33:85:9f:56:d8:05:9d:c8:01:e3:52:64:21:fd:c4: c6:b0:19:91:8b:41:7c:6b:9e:66:22:31:1c:23:5c: 2b:b9:2e:7a:44:e8:81:c1:2c:3e:57:32:e2:c5:57: d8:85:e5:8c:c8:e1:97:da:10:f4:c0:ff:d5:82:13: a5:45:b2:0a:00:bf:1a:5a:c9:c4:54:7b:9f:18:68: b9:4a:d2:f2:c3:21:7e:0d:08:a2:58:2e:bf:ef:cb: 2a:ff:8c:03:78:ff:8e:6a:90:87:92:7c:35:47:ff: 6b:8b:8e:f5:85:aa:f0:6e:61:0a:3a:f4:aa:1a:f2: 51:4f:bf:16:77:eb:be:be:62:df:1e:84:0d:75:38: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:63:C6:6A:6B:63:88:C5:97:A6:49:CA:9A:2C:96:6E:C9:D2:72:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption b6:97:4f:ba:94:cc:8e:fb:da:a0:ba:ac:af:e3:87:fc:45:db: 9f:2c:6f:d9:2b:06:f1:f4:82:9b:60:b6:af:b5:8a:95:fb:b8: 1b:41:fe:1e:4d:bd:09:75:7e:97:f8:d8:a2:d1:e3:bc:12:55: 53:4d:12:88:07:b4:6e:af:36:15:55:f9:9c:c4:91:70:54:8c: 56:a2:5c:91:dc:d8:be:e1:2d:d4:a8:a7:c7:50:18:6b:ba:be: 18:e9:79:ab:64:31:0d:a9:fd:b3:b6:22:71:d0:34:42:42:06: 75:d2:12:ab:12:95:d3:7e:df:19:81:53:4d:5c:9a:ab:4c:e6: ad:17:5b:27:d6:63:b4:a9:19:37:e7:1b:ba:e9:ac:cd:a8:f5: 71:bf:88:84:dc:00:b1:0c:77:0d:ae:9f:28:8c:27:ee:da:2c: 0b:9e:c3:e9:55:77:a5:ee:5b:c8:fe:9a:e3:95:7b:67:f4:e5: f2:e4:c7:c3:0d:55:05:f1:06:7b:02:2e:0a:13:d1:fa:86:4a: 73:e2:4e:81:81:97:f2:40:ee:32:98:eb:12:4f:77:5a:be:e0: 98:5b:be:0c:af:6f:a1:d6:3c:76:7e:51:80:74:de:5e:8f:e6: 0d:d9:f9:cc:d5:1d:95:b5:7c:95:d4:b0:39:82:89:46:ed:83: e5:9b:a0:09 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMsIFJVumeriXUgu8SBfSugKtnz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAwMDQ0WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGJlM2QwM2EzYTE5ZWFhNjgzN2ZmZjkzOTI1YzE1YTNi ZGU5MWJiZWM3ZGVlNjJlYjE2YTM1NjQyZjQ0Y2NmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnnzh2XL5FwEygUhnMKK8gKZ3HzpzMHjhrvZ2ylu4HBEwg megGG8ndhrVjU/T1N2GIQj7IZPKDOBYQXrEqApAAN2iV5pjPdHvZsjZPJt/wNRgv h4Yz6wnEGhIF6wS6sUSUCMmE3RVrbFnQfu+PJCA8VWJAybJWCzOFn1bYBZ3IAeNS ZCH9xMawGZGLQXxrnmYiMRwjXCu5LnpE6IHBLD5XMuLFV9iF5YzI4ZfaEPTA/9WC E6VFsgoAvxpaycRUe58YaLlK0vLDIX4NCKJYLr/vyyr/jAN4/45qkIeSfDVH/2uL jvWFqvBuYQo69Koa8lFPvxZ3676+Yt8ehA11OPEVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBmPGamtjiMWXpknKmiyWbsnScmcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmMmJiZWM1LTJhMGEtNGZjZS1iOTJhLWMxMTU4NWYyZjZkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4/DANBgkqhkiG9w0BAQsFAAOCAQEAtpdPupTMjvvaoLqsr+OH/EXbnyxv 2SsG8fSCm2C2r7WKlfu4G0H+Hk29CXV+l/jYotHjvBJVU00SiAe0bq82FVX5nMSR cFSMVqJckdzYvuEt1Kinx1AYa7q+GOl5q2QxDan9s7YicdA0QkIGddISqxKV037f GYFTTVyaq0zmrRdbJ9ZjtKkZN+cbuumszaj1cb+IhNwAsQx3Da6fKIwn7tosC57D 6VV3pe5byP6a45V7Z/Tl8uTHww1VBfEGewIuChPR+oZKc+JOgYGX8kDuMpjrEk93 Wr7gmFu+DK9vodY8dn5RgHTeXo/mDdn5zNUdlbV8ldSwOYKJRu2D5ZugCQ== -----END CERTIFICATE-----Generated at Sat Jun 13 08:15:06 2026 by rpki-client