$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa File: f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa (raw, json) Hash identifier: maXEMWmwJryvVpUSHduwSoPcsxYHCHa72TONUeWhGTw= Subject key identifier: 8A:D2:E4:44:74:8B:C5:6D:F5:92:3E:75:F0:50:6C:40:74:18:67:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09E391F206B727C0E2BBEBBD73E76A7533FE9AB7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa Signing time: Mon 11 May 2026 00:30:54 +0000 ROA not before: Mon 11 May 2026 00:30:54 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e3:91:f2:06:b7:27:c0:e2:bb:eb:bd:73:e7:6a:75:33:fe:9a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 11 00:30:54 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=e66d3016726ea915d2b8f020372b6e62c97165c4c336be993fe03336308ade50, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:d0:f0:8a:26:82:31:08:1e:7d:d5:46:56: 65:25:2e:74:59:05:d4:ff:4d:19:87:5f:01:5e:74: ef:6b:9e:aa:67:ff:63:73:38:72:4b:8d:1a:0d:56: 66:03:d1:58:3c:d2:60:c4:f5:f2:9e:28:de:e5:14: 18:16:b9:e7:c5:7a:52:a5:aa:10:50:4b:5d:d9:d6: 10:ab:16:b7:ec:d1:e6:1c:e1:f6:79:5d:bb:e1:0d: 49:6f:b5:9d:b2:96:71:4e:42:27:79:e5:18:95:19: 45:30:bd:c0:2e:44:c1:ee:3d:af:e5:3d:43:09:30: 59:4f:de:61:dc:f0:21:ae:4a:82:46:f6:7d:80:11: 43:07:43:3e:e0:62:39:e5:55:21:7d:0d:95:58:f6: f1:9f:9b:dc:67:a9:55:8c:54:59:a8:d2:0d:1b:1c: af:64:07:a6:95:84:d5:e4:7e:dd:01:b2:9d:58:23: 33:11:d2:7a:04:00:9a:94:ae:d3:cb:7e:90:55:c0: 6b:af:1a:fb:6f:49:6a:37:95:2f:15:ff:90:a2:5d: a0:e9:e5:e3:62:96:b3:85:d4:ee:10:ef:0b:17:46: 59:81:3f:66:8d:22:b7:a7:68:b9:4f:b8:7b:d9:f1: 54:79:a3:a4:13:5c:52:dd:cf:b9:c1:4a:d7:08:46: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D2:E4:44:74:8B:C5:6D:F5:92:3E:75:F0:50:6C:40:74:18:67:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.29.0/24 Signature Algorithm: sha256WithRSAEncryption cc:10:cd:9e:90:5c:65:52:07:f9:a2:05:16:ea:b9:b6:25:90: 1b:67:f7:0f:b9:19:78:a7:ba:24:da:01:19:be:e3:8d:8f:46: 05:24:dd:83:c3:e7:c3:1e:d4:f5:7b:e0:a3:84:1d:ec:d5:f2: 0b:0e:11:ef:5a:c8:b2:b7:68:2a:2d:d4:1d:10:74:d3:e1:6e: 5a:5b:8e:5a:fc:22:86:1d:28:a3:78:d8:3f:a4:65:0f:57:16: 9a:5a:1a:94:bc:96:72:cd:a5:28:aa:de:25:1d:17:62:c4:df: 3b:99:9e:03:4f:df:90:fb:1e:5a:f5:39:7a:b8:f6:da:f6:00: 0c:7c:15:6f:f7:11:bb:62:f9:71:76:76:ce:3a:ad:d3:bb:cf: 4b:aa:c6:5e:0b:5e:71:34:f9:be:cb:78:bb:76:c3:5a:d2:15: d8:b6:8b:5d:3a:0b:b3:5f:4f:71:ef:f4:07:a5:0f:71:1c:33: 0a:47:2d:ba:df:2d:83:d1:2f:bc:66:8c:8b:80:81:73:9d:70: c8:cc:7d:36:53:62:14:dc:9b:c3:38:89:27:fa:6b:02:e2:15: a3:82:9b:73:22:68:6f:ac:54:f7:0f:71:16:d9:56:ba:dc:2a: 54:f4:5e:c8:0d:a0:b9:55:4b:f3:27:f5:32:87:f9:74:97:d9: df:da:7c:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCeOR8ga3J8Diu+u9c+dqdTP+mrcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTExMDAzMDU0WhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjZkMzAxNjcyNmVhOTE1ZDJiOGYwMjAzNzJiNmU2MmM5 NzE2NWM0YzMzNmJlOTkzZmUwMzMzNjMwOGFkZTUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCStDwiiaCMQgefdVGVmUlLnRZBdT/TRmHXwFedO9rnqpn /2NzOHJLjRoNVmYD0Vg80mDE9fKeKN7lFBgWuefFelKlqhBQS13Z1hCrFrfs0eYc 4fZ5XbvhDUlvtZ2ylnFOQid55RiVGUUwvcAuRMHuPa/lPUMJMFlP3mHc8CGuSoJG 9n2AEUMHQz7gYjnlVSF9DZVY9vGfm9xnqVWMVFmo0g0bHK9kB6aVhNXkft0Bsp1Y IzMR0noEAJqUrtPLfpBVwGuvGvtvSWo3lS8V/5CiXaDp5eNilrOF1O4Q7wsXRlmB P2aNIrenaLlPuHvZ8VR5o6QTXFLdz7nBStcIRqfjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUitLkRHSLxW31kj518FBsQHQYZ8AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYmMwZGFiLTY2ZGMtNDc0My05Njc1LTVkODVkYWZjODlmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWx0wDQYJKoZIhvcNAQELBQADggEBAMwQzZ6QXGVSB/miBRbqubYlkBtn 9w+5GXinuiTaARm+442PRgUk3YPD58Me1PV74KOEHezV8gsOEe9ayLK3aCot1B0Q dNPhblpbjlr8IoYdKKN42D+kZQ9XFppaGpS8lnLNpSiq3iUdF2LE3zuZngNP35D7 Hlr1OXq49tr2AAx8FW/3Ebti+XF2ds46rdO7z0uqxl4LXnE0+b7LeLt2w1rSFdi2 i106C7NfT3Hv9AelD3EcMwpHLbrfLYPRL7xmjIuAgXOdcMjMfTZTYhTcm8M4iSf6 awLiFaOCm3MiaG+sVPcPcRbZVrrcKlT0XsgNoLlVS/Mn9TKH+XSX2d/afE8= -----END CERTIFICATE-----Generated at Sat Jun 13 05:47:39 2026 by rpki-client