$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e45e7479-9592-4dad-9a35-55a682176ac2.roa File: e45e7479-9592-4dad-9a35-55a682176ac2.roa (raw, json) Hash identifier: hYLWP3ZZ74Kq2KfwZjhPGXKJcZAZezws45Vmym0tfm8= Subject key identifier: 68:D7:E6:08:B7:71:BB:CA:BB:A0:C6:EC:FB:CE:88:A2:A3:1E:A7:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1DF61C8F94439235C84C8976D944FAFC2D0B35D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e45e7479-9592-4dad-9a35-55a682176ac2.roa Signing time: Sat 16 May 2026 02:01:12 +0000 ROA not before: Sat 16 May 2026 02:01:12 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.21.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f6:1c:8f:94:43:92:35:c8:4c:89:76:d9:44:fa:fc:2d:0b:35:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 02:01:12 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=367c926b2f3f80e63cc1835eb4e203b58c530dc0778106f2abd8851221d1958e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:e9:5a:b8:53:e0:6d:a9:9a:ab:30:e3:bf: af:07:f5:22:f9:48:f5:59:ed:39:e6:ac:1a:05:66: 16:10:f8:e2:38:d7:e7:2d:2d:ba:80:48:eb:73:f9: 31:4c:c8:06:bd:b4:62:6c:af:37:c7:aa:42:ca:19: f5:dd:3d:fb:3c:b4:ec:30:b8:7a:47:ee:c4:26:fe: 60:a6:de:ed:ea:7d:09:78:7e:d7:04:c0:c6:7a:84: 83:72:17:8c:1a:72:bb:ac:75:27:0b:14:47:fe:03: 5d:2f:6f:92:8f:45:07:69:16:1f:4d:61:94:97:cb: 50:eb:11:16:21:5a:fe:49:6f:aa:46:f9:54:34:32: 67:45:d7:52:07:68:3d:71:a0:7a:1a:b1:d3:15:5d: b7:c7:a4:c4:aa:e7:45:b9:8b:2c:c7:54:39:a7:80: 73:b9:39:53:2a:d6:65:6e:5b:b1:5d:2f:65:c0:20: d1:c8:16:c5:7c:29:0d:82:f6:9f:65:59:13:00:e8: 4e:c4:c0:b2:ae:fc:81:ef:c2:df:98:3c:29:78:9b: c4:cb:f9:77:97:a7:3d:83:3f:40:31:5f:d4:4f:66: 69:9a:d0:99:f6:8b:2e:19:a7:d2:1d:06:26:7f:90: e1:12:48:20:ca:a1:62:cd:5e:8a:56:b3:bb:1f:76: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:E6:08:B7:71:BB:CA:BB:A0:C6:EC:FB:CE:88:A2:A3:1E:A7:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e45e7479-9592-4dad-9a35-55a682176ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.32.0/21 Signature Algorithm: sha256WithRSAEncryption c5:4f:e1:63:3c:af:48:67:fc:a0:47:e0:cd:70:5b:60:75:ad: e4:a6:cd:76:1f:6f:0b:9f:32:89:71:10:25:84:53:2c:e1:8e: ce:c7:c7:21:37:36:d0:bf:37:39:48:85:6a:20:87:b9:55:92: 2d:46:c7:52:fb:14:9f:78:7a:8c:3e:bb:24:69:57:da:4d:5e: 38:20:ad:e5:28:16:ce:ab:43:95:8f:5b:be:b4:55:26:e8:29: 2e:a5:05:88:47:6b:19:6a:0e:9f:ff:1c:1e:d8:d6:d2:06:6f: 1c:eb:ee:48:5e:fe:56:4d:6d:7d:bb:6b:a3:7d:9d:9d:d8:3b: f6:7e:e2:15:58:8a:c1:fc:ca:ee:cb:d1:70:18:93:2f:7b:58: 48:ec:2f:49:c8:60:c9:3f:6b:ec:08:4e:7b:9a:e4:64:22:7b: 70:b0:ac:e5:aa:a4:4c:02:f3:88:9f:7a:01:e7:5f:10:50:cc: 16:88:b4:ef:47:b9:ca:ab:a2:0f:07:1f:19:d1:bd:55:62:a6: 9f:cb:33:54:4e:f7:49:97:1c:b1:2a:43:12:55:f1:d9:fc:11: f2:1c:13:63:1b:2a:24:00:37:36:ff:04:b7:62:b0:dc:b4:5e: 92:47:42:f2:d8:d9:2f:66:9c:25:11:4d:f2:38:3a:3a:39:52: b0:18:46:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHfYcj5RDkjXITIl22UT6/C0LNdgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDIwMTEyWhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjdjOTI2YjJmM2Y4MGU2M2NjMTgzNWViNGUyMDNiNThj NTMwZGMwNzc4MTA2ZjJhYmQ4ODUxMjIxZDE5NThlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClKelauFPgbamaqzDjv68H9SL5SPVZ7TnmrBoFZhYQ+OI4 1+ctLbqASOtz+TFMyAa9tGJsrzfHqkLKGfXdPfs8tOwwuHpH7sQm/mCm3u3qfQl4 ftcEwMZ6hINyF4wacrusdScLFEf+A10vb5KPRQdpFh9NYZSXy1DrERYhWv5Jb6pG +VQ0MmdF11IHaD1xoHoasdMVXbfHpMSq50W5iyzHVDmngHO5OVMq1mVuW7FdL2XA INHIFsV8KQ2C9p9lWRMA6E7EwLKu/IHvwt+YPCl4m8TL+XeXpz2DP0AxX9RPZmma 0Jn2iy4Zp9IdBiZ/kOESSCDKoWLNXopWs7sfdhAnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaNfmCLdxu8q7oMbs+86IoqMep4owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0NWU3NDc5LTk1OTItNGRhZC05YTM1LTU1YTY4MjE3NmFjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMXFSAwDQYJKoZIhvcNAQELBQADggEBAMVP4WM8r0hn/KBH4M1wW2B1reSm zXYfbwufMolxECWEUyzhjs7HxyE3NtC/NzlIhWogh7lVki1Gx1L7FJ94eow+uyRp V9pNXjggreUoFs6rQ5WPW760VSboKS6lBYhHaxlqDp//HB7Y1tIGbxzr7khe/lZN bX27a6N9nZ3YO/Z+4hVYisH8yu7L0XAYky97WEjsL0nIYMk/a+wITnua5GQie3Cw rOWqpEwC84ifegHnXxBQzBaItO9Hucqrog8HHxnRvVVipp/LM1RO90mXHLEqQxJV 8dn8EfIcE2MbKiQANzb/BLdisNy0XpJHQvLY2S9mnCURTfI4Ojo5UrAYRi8= -----END CERTIFICATE-----Generated at Sat Jun 13 13:08:37 2026 by rpki-client