$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa File: e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa (raw, json) Hash identifier: LN2pfZ7Y8km84qCDS54ZLgtePIdblnVOC2ComaXp0tY= Subject key identifier: 6C:CC:BA:72:0D:DE:83:8E:65:06:03:15:AF:AB:92:86:D1:3A:66:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 8355EAD01ADF8342D39FFB300F3A8B82A2641C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa Signing time: Tue 12 May 2026 01:30:46 +0000 ROA not before: Tue 12 May 2026 01:30:46 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83:55:ea:d0:1a:df:83:42:d3:9f:fb:30:0f:3a:8b:82:a2:64:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:30:46 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=c2d0c40c4ee54ceb0b52a76774f2b95ce97668adeb3cf20842447ca2e48da579, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:5c:84:5f:8d:96:cb:de:8b:aa:c7:1d:d1: 8e:0d:ec:5e:45:ca:ba:3d:bd:70:c2:0d:df:44:63: 1f:1a:0c:82:03:0d:67:c7:54:53:8b:26:d4:94:76: 63:62:e9:6b:52:f1:91:5f:ee:c6:56:9d:5e:23:a6: 38:fe:80:20:1c:28:21:28:02:32:13:c2:95:f1:19: 0c:66:03:15:7a:d0:36:3e:66:de:bb:f0:f8:37:91: 10:69:15:da:bc:8b:0a:82:83:14:b1:11:85:4b:c8: 75:84:97:1b:8d:ec:7a:ff:5c:33:be:f0:dd:9c:ee: af:c5:0c:db:c7:3c:74:80:03:0c:03:52:e5:86:38: de:12:f4:52:98:68:b7:89:11:6d:68:24:5f:f3:2b: 12:4d:e4:ce:83:8a:62:35:fb:39:2e:86:71:78:2d: f4:a1:26:37:37:29:47:d6:9c:91:d2:be:c8:2a:bb: db:12:43:9c:ef:f1:cd:e1:5d:77:d8:de:1e:c2:ac: 40:76:1a:5e:7d:1e:dd:84:a6:36:dc:f6:ee:a3:ba: bc:3b:c3:f0:d6:6c:20:58:5d:69:6a:9f:10:3a:99: 87:55:be:80:50:ab:67:61:65:3e:88:6c:20:af:9b: 1b:f2:3b:b6:0a:62:11:48:90:b3:42:79:92:de:71: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CC:BA:72:0D:DE:83:8E:65:06:03:15:AF:AB:92:86:D1:3A:66:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e5:94:89:91:96:16:e1:dd:43:52:68:f7:75:d2:48:89:cf: fe:fc:fc:23:d3:3b:76:54:5b:0e:90:73:ae:40:42:fc:6b:24: 4e:f5:4f:c9:13:4a:bc:a5:61:8a:f9:2b:d0:0a:0a:1b:6c:25: e6:75:43:20:33:38:ee:6e:8c:d2:e3:48:82:0d:68:93:24:7e: 3e:99:be:06:96:c8:d2:41:db:6d:bc:8c:3a:59:da:5e:84:7d: ef:6f:9d:07:1d:05:7a:86:c0:02:e5:d0:a3:de:36:f2:8a:da: 89:3e:fe:dd:dd:7f:67:91:95:1e:a4:72:99:ad:c1:30:c2:3a: 8c:5f:eb:43:9c:fc:50:9a:33:55:a0:8f:ee:c2:d9:7a:04:12: 9f:68:93:92:56:10:32:66:8a:71:62:c4:22:a6:c0:be:50:68: f1:d6:00:3b:1e:e4:14:6c:99:79:43:98:b0:21:16:ef:98:f2: d9:5e:07:31:72:33:3c:5c:38:e2:be:ba:65:81:49:e9:22:33: e1:dc:b3:38:ed:4f:4e:b5:c4:f3:99:6d:28:39:bd:65:2a:ae: 0c:8d:93:6c:8d:d5:3c:b5:5f:d3:99:51:a7:4b:7c:32:f2:99: d9:3e:95:eb:bd:2e:a7:fa:0b:81:78:2d:2f:89:a9:bf:53:5f: 2d:e0:4e:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAINV6tAa34NC05/7MA86i4KiZBwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMDQ2WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmQwYzQwYzRlZTU0Y2ViMGI1MmE3Njc3NGYyYjk1Y2U5 NzY2OGFkZWIzY2YyMDg0MjQ0N2NhMmU0OGRhNTc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyjFyEX42Wy96Lqscd0Y4N7F5Fyro9vXDCDd9EYx8aDIID DWfHVFOLJtSUdmNi6WtS8ZFf7sZWnV4jpjj+gCAcKCEoAjITwpXxGQxmAxV60DY+ Zt678Pg3kRBpFdq8iwqCgxSxEYVLyHWElxuN7Hr/XDO+8N2c7q/FDNvHPHSAAwwD UuWGON4S9FKYaLeJEW1oJF/zKxJN5M6DimI1+zkuhnF4LfShJjc3KUfWnJHSvsgq u9sSQ5zv8c3hXXfY3h7CrEB2Gl59Ht2Epjbc9u6jurw7w/DWbCBYXWlqnxA6mYdV voBQq2dhZT6IbCCvmxvyO7YKYhFIkLNCeZLecUGvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbMy6cg3eg45lBgMVr6uShtE6ZiswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NTg1NmNlLWYyOGUtNGIxNC1hN2Q4LWNjNWYwODcyMTliMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEgwDQYJKoZIhvcNAQELBQADggEBAC/llImRlhbh3UNSaPd10kiJz/78 /CPTO3ZUWw6Qc65AQvxrJE71T8kTSrylYYr5K9AKChtsJeZ1QyAzOO5ujNLjSIIN aJMkfj6ZvgaWyNJB2228jDpZ2l6Efe9vnQcdBXqGwALl0KPeNvKK2ok+/t3df2eR lR6kcpmtwTDCOoxf60Oc/FCaM1Wgj+7C2XoEEp9ok5JWEDJminFixCKmwL5QaPHW ADse5BRsmXlDmLAhFu+Y8tleBzFyMzxcOOK+umWBSekiM+HcszjtT061xPOZbSg5 vWUqrgyNk2yN1Ty1X9OZUadLfDLymdk+leu9Lqf6C4F4LS+Jqb9TXy3gTn8= -----END CERTIFICATE-----Generated at Sat Jun 13 08:30:58 2026 by rpki-client