$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb8f9d48-8e9e-4ff3-8546-84c92921d955.roa File: eb8f9d48-8e9e-4ff3-8546-84c92921d955.roa (raw, json) Hash identifier: C3wmqWTsfA2h38YLqTfmri6feZOkAO29FOf7tNxel0c= Subject key identifier: 8B:3A:9E:B7:A1:69:B9:5A:05:43:5E:30:2E:B1:B5:CC:FA:9A:CD:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B3D388AC508768C957FC8D69FB9E6ED674A0DE9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb8f9d48-8e9e-4ff3-8546-84c92921d955.roa Signing time: Fri 17 Apr 2026 00:00:15 +0000 ROA not before: Fri 17 Apr 2026 00:00:15 +0000 ROA not after: Thu 16 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.234.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3d:38:8a:c5:08:76:8c:95:7f:c8:d6:9f:b9:e6:ed:67:4a:0d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 17 00:00:15 2026 GMT Not After : Jul 16 23:59:59 2026 GMT Subject: serialNumber=c1793803aa00bfd44c2dec628457b3f23eef5be3dc9fac840609dab46774444a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:1f:99:e6:1d:99:5c:bb:ef:35:e1:47:04: 1d:a6:f0:18:8c:27:10:fd:d2:0a:80:ae:9b:2a:0f: e9:1b:9d:29:ec:e2:d3:90:ca:ed:a4:7d:b3:4d:52: 71:2d:db:44:5d:c5:9e:45:d5:af:8d:5f:ce:c4:39: 23:fc:8f:9c:d1:51:ee:da:c5:cc:0a:d9:a2:89:f4: 3c:3e:f8:b7:e5:67:41:34:a3:4b:2a:66:27:1d:34: a3:b3:48:92:c9:c7:9f:e5:5e:f9:75:2f:23:52:9f: 0a:f2:7d:ab:36:83:ec:d2:58:b7:b4:e4:ec:68:00: 4b:c3:fb:85:32:b8:52:6b:a0:ce:5a:2d:83:71:41: 27:41:b4:dd:ee:e1:89:f1:08:99:8c:f9:1f:b2:f2: 67:33:72:98:f2:0f:13:80:5d:e2:e4:ed:5b:45:49: 30:62:02:a0:73:f6:81:01:64:4d:e8:26:b3:7d:64: 61:29:86:71:37:45:23:49:43:3c:94:1c:4e:d1:7a: 6b:67:c1:e9:f2:c1:6d:03:89:38:73:de:2e:2d:a2: 3c:40:15:66:a8:b5:3e:d0:92:3c:d7:ea:92:c0:56: ec:e3:4d:ca:03:63:19:65:5f:cd:69:31:39:66:1a: 33:6b:91:35:69:b6:7b:a4:d4:d4:16:24:1f:35:e9: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:9E:B7:A1:69:B9:5A:05:43:5E:30:2E:B1:B5:CC:FA:9A:CD:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb8f9d48-8e9e-4ff3-8546-84c92921d955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.234.240.0/21 Signature Algorithm: sha256WithRSAEncryption 56:42:eb:8d:ad:a6:76:bf:b0:aa:4a:d2:27:01:b4:55:47:fe: 35:25:51:eb:56:35:9d:37:e8:99:3b:5f:b2:da:b9:99:c2:67: e8:0a:25:66:62:97:cb:e1:2f:58:de:c3:ad:e0:ad:b9:aa:dc: fe:33:57:be:8a:1c:1e:aa:3b:bb:a0:a6:01:75:0f:e3:0d:c1: ae:be:c9:4b:7a:23:0d:5a:ad:65:46:6d:c7:01:ad:6b:b8:75: 71:ba:6e:c5:d9:70:87:b6:d0:1f:21:4d:88:8e:9e:4c:73:8c: 6a:dd:4a:c8:0e:c3:55:7e:8e:7f:8d:4b:70:7d:39:44:81:16: 97:52:e3:2d:20:f8:49:e8:88:74:55:c0:09:d9:44:9f:8c:5f: 3f:4d:27:c6:f0:51:d4:b4:5e:23:cc:f9:9f:ba:a8:93:79:7f: d1:dc:63:7a:a7:25:54:e5:7e:2e:18:ca:90:6e:68:0a:2f:8c: 59:ff:48:b7:ef:53:52:a6:b7:08:05:a1:f4:da:e1:4c:12:0c: bb:fe:e2:22:b3:34:74:90:04:0e:22:06:a8:d8:a7:28:5c:54: a4:b8:68:61:df:7c:47:e0:d9:f3:a2:58:eb:bc:a9:49:c0:2d: d9:59:f1:2f:92:94:79:7f:a5:e8:ec:2b:14:8d:20:a0:1d:ad: 8f:3b:4d:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGz04isUIdoyVf8jWn7nm7WdKDekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE3MDAwMDE1WhcNMjYwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTc5MzgwM2FhMDBiZmQ0NGMyZGVjNjI4NDU3YjNmMjNl ZWY1YmUzZGM5ZmFjODQwNjA5ZGFiNDY3NzQ0NDRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrph+Z5h2ZXLvvNeFHBB2m8BiMJxD90gqArpsqD+kbnSns 4tOQyu2kfbNNUnEt20RdxZ5F1a+NX87EOSP8j5zRUe7axcwK2aKJ9Dw++LflZ0E0 o0sqZicdNKOzSJLJx5/lXvl1LyNSnwryfas2g+zSWLe05OxoAEvD+4UyuFJroM5a LYNxQSdBtN3u4YnxCJmM+R+y8mczcpjyDxOAXeLk7VtFSTBiAqBz9oEBZE3oJrN9 ZGEphnE3RSNJQzyUHE7RemtnwenywW0DiThz3i4tojxAFWaotT7QkjzX6pLAVuzj TcoDYxllX81pMTlmGjNrkTVptnuk1NQWJB816auvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUizqet6FpuVoFQ14wLrG1zPqazRcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViOGY5ZDQ4LThlOWUtNGZmMy04NTQ2LTg0YzkyOTIxZDk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPR6vAwDQYJKoZIhvcNAQELBQADggEBAFZC642tpna/sKpK0icBtFVH/jUl UetWNZ036Jk7X7LauZnCZ+gKJWZil8vhL1jew63grbmq3P4zV76KHB6qO7ugpgF1 D+MNwa6+yUt6Iw1arWVGbccBrWu4dXG6bsXZcIe20B8hTYiOnkxzjGrdSsgOw1V+ jn+NS3B9OUSBFpdS4y0g+EnoiHRVwAnZRJ+MXz9NJ8bwUdS0XiPM+Z+6qJN5f9Hc Y3qnJVTlfi4YypBuaAovjFn/SLfvU1KmtwgFofTa4UwSDLv+4iKzNHSQBA4iBqjY pyhcVKS4aGHffEfg2fOiWOu8qUnALdlZ8S+SlHl/pejsKxSNIKAdrY87TeU= -----END CERTIFICATE-----Generated at Fri Apr 17 04:47:07 2026 by rpki-client