$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3494ddd-eeb2-4092-b219-ee8658342ffc.roa File: f3494ddd-eeb2-4092-b219-ee8658342ffc.roa (raw, json) Hash identifier: NCmNUj9RCE+7FPmfUWL2WDEUXQyZuyHkCIilKxXMEis= Subject key identifier: AD:E6:33:63:5A:D4:1D:3A:59:BC:8E:AA:8F:AE:9B:C3:8E:33:93:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09387068A96E12D1F0C8DEC6018068234E35D998 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3494ddd-eeb2-4092-b219-ee8658342ffc.roa Signing time: Wed 13 May 2026 00:40:05 +0000 ROA not before: Wed 13 May 2026 00:40:05 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.186.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:70:68:a9:6e:12:d1:f0:c8:de:c6:01:80:68:23:4e:35:d9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:40:05 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=9e5c2d5cecc42b71adf30f89b0b149256fae5a7dfda4d1ce371ab9628dce26f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:b9:1a:c3:5a:bd:c9:a9:b0:a7:25:8d:67: b7:aa:02:65:40:39:ce:0b:18:33:36:a3:5f:b1:8f: f2:93:24:77:f5:a7:5b:77:50:c9:a8:65:67:96:d9: 26:7e:24:94:b4:00:ed:c8:a6:97:9c:68:69:ae:ae: 75:43:81:71:04:60:0c:17:84:1d:a2:08:d0:70:97: 91:e3:0f:18:04:c2:3e:a6:bf:01:90:0c:6b:4c:01: aa:c7:3b:7b:6a:46:97:90:a0:ef:39:fc:da:e0:b4: cd:e2:89:e3:b1:4e:cc:4c:d8:27:20:5e:09:44:40: 9d:62:ed:a0:3f:90:5b:1b:ec:4e:a1:22:c2:69:34: 45:b0:f1:f0:ad:57:b6:8d:65:44:78:a1:a0:9b:b2: b7:b0:c7:49:9b:27:e3:35:9f:bc:20:ae:8a:c5:f2: d1:fd:ee:47:30:a9:03:55:71:4e:a0:d1:89:6d:21: a5:ff:a3:ae:39:88:21:d4:4d:4a:ed:94:d8:ef:65: d3:ac:d0:64:f7:b4:0c:b2:8d:ec:0a:da:4c:88:5e: 92:f6:e9:3f:11:3d:5d:e9:d1:7d:83:f5:79:2c:eb: ae:94:c1:b0:de:2b:93:97:f7:43:47:a7:67:6e:5e: b7:34:a8:1b:f8:04:50:e9:7e:42:bb:fb:00:db:e3: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E6:33:63:5A:D4:1D:3A:59:BC:8E:AA:8F:AE:9B:C3:8E:33:93:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3494ddd-eeb2-4092-b219-ee8658342ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.186.192.0/20 Signature Algorithm: sha256WithRSAEncryption 66:4f:d5:5b:61:37:1d:d0:ee:40:d1:5a:74:11:9d:04:a5:24: 83:d8:75:7c:62:ec:c6:8c:fa:44:2d:02:e5:8b:69:7c:f5:50: a7:df:3f:52:cd:47:c2:14:b8:9b:fe:e5:2b:24:6c:dc:88:f3: e5:f9:d2:be:31:ee:d1:01:3d:a4:b4:a3:8b:fb:0d:e7:2f:25: e6:47:d1:d5:48:8d:09:ce:5c:a8:96:2d:f9:c9:79:b6:26:8d: ac:ec:29:4c:0d:aa:2f:6e:d2:93:03:1e:90:40:fe:67:1e:46: c8:f4:ff:b7:f9:34:4b:75:31:68:f6:93:c6:f4:16:d2:2b:ae: 5e:24:0f:d4:a9:d0:9e:75:09:60:15:be:de:b7:00:c5:b0:95: 89:74:d2:96:46:77:a8:7b:12:92:f1:ce:aa:76:c6:dd:30:55: d4:f7:7d:9f:27:34:c9:fe:6f:46:e1:96:b0:ac:c0:e6:f9:22: 5e:ae:ed:73:c7:0c:2f:68:ee:77:57:f6:6d:29:47:78:14:d6: 0a:dc:ca:2d:59:18:d6:eb:e9:75:9b:fb:c2:bc:8c:20:66:54: 51:1e:f7:43:1e:47:74:c7:72:fd:b7:28:82:53:1d:d1:ef:cf: 0f:2d:5c:fd:ef:b9:1c:d1:bd:27:cb:39:eb:3d:bc:5d:de:d3: 15:44:88:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCThwaKluEtHwyN7GAYBoI0412ZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMDA0MDA1WhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTVjMmQ1Y2VjYzQyYjcxYWRmMzBmODliMGIxNDkyNTZm YWU1YTdkZmRhNGQxY2UzNzFhYjk2MjhkY2UyNmY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNZ7kaw1q9yamwpyWNZ7eqAmVAOc4LGDM2o1+xj/KTJHf1 p1t3UMmoZWeW2SZ+JJS0AO3IppecaGmurnVDgXEEYAwXhB2iCNBwl5HjDxgEwj6m vwGQDGtMAarHO3tqRpeQoO85/NrgtM3iieOxTsxM2CcgXglEQJ1i7aA/kFsb7E6h IsJpNEWw8fCtV7aNZUR4oaCbsrewx0mbJ+M1n7wgrorF8tH97kcwqQNVcU6g0Ylt IaX/o645iCHUTUrtlNjvZdOs0GT3tAyyjewK2kyIXpL26T8RPV3p0X2D9Xks666U wbDeK5OX90NHp2duXrc0qBv4BFDpfkK7+wDb49WvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUreYzY1rUHTpZvI6qj66bw44zk6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzNDk0ZGRkLWVlYjItNDA5Mi1iMjE5LWVlODY1ODM0MmZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATNusAwDQYJKoZIhvcNAQELBQADggEBAGZP1VthNx3Q7kDRWnQRnQSlJIPY dXxi7MaM+kQtAuWLaXz1UKffP1LNR8IUuJv+5SskbNyI8+X50r4x7tEBPaS0o4v7 DecvJeZH0dVIjQnOXKiWLfnJebYmjazsKUwNqi9u0pMDHpBA/mceRsj0/7f5NEt1 MWj2k8b0FtIrrl4kD9Sp0J51CWAVvt63AMWwlYl00pZGd6h7EpLxzqp2xt0wVdT3 fZ8nNMn+b0bhlrCswOb5Il6u7XPHDC9o7ndX9m0pR3gU1grcyi1ZGNbr6XWb+8K8 jCBmVFEe90MeR3THcv23KIJTHdHvzw8tXP3vuRzRvSfLOes9vF3e0xVEiLQ= -----END CERTIFICATE-----Generated at Sat Jun 13 11:01:14 2026 by rpki-client