$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbbc230a-073f-46d2-b717-af445fa0a856.roa File: fbbc230a-073f-46d2-b717-af445fa0a856.roa (raw, json) Hash identifier: 0TBRqzQcTcf/YbKDthkASMm/8ZPsaubRrua3PHwanuY= Subject key identifier: 03:37:E3:A3:26:5F:B4:7C:28:32:43:EB:83:A0:E1:E3:43:31:FC:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12B842EED29FC8C40B3DA7BFB68A64AB8E1A0050 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbbc230a-073f-46d2-b717-af445fa0a856.roa Signing time: Tue 12 May 2026 01:31:11 +0000 ROA not before: Tue 12 May 2026 01:31:11 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b8:42:ee:d2:9f:c8:c4:0b:3d:a7:bf:b6:8a:64:ab:8e:1a:00:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:31:11 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=6b969e682d7c0a9a3b9a51f423a6b1dda52c7d734ad42a78c8514b6e5da82108, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:73:b6:61:ea:c3:cb:10:ed:6c:92:e9:22: 22:04:cc:1f:c1:aa:09:dd:8c:1f:73:99:77:ba:e9: 01:a5:84:8a:68:b6:2a:c5:2b:a1:d7:50:c4:03:08: 23:7a:e1:a1:45:8b:64:24:9b:e5:5b:e9:27:98:2f: 5e:71:17:0e:0e:d2:be:50:07:d4:62:36:86:aa:b0: 45:ab:2d:cb:58:a6:cf:04:c7:7d:b4:65:ff:72:de: 93:5a:c3:f8:60:21:c8:0e:fe:1f:6f:dc:10:e0:38: 08:c8:81:5a:73:69:bb:be:28:8e:2b:d6:df:b5:d2: f3:8f:f7:2f:6e:22:58:43:d0:db:ab:9f:40:e8:b5: bd:bb:11:f8:70:3a:04:05:23:33:ff:75:96:b9:f6: 7b:bf:f8:63:ad:81:72:b2:e3:e3:e8:13:34:f9:70: 42:14:d5:d4:a3:8c:23:ce:29:c5:bf:15:18:73:fc: ac:76:ed:14:f1:c8:14:9f:3b:79:6f:91:04:ab:15: 84:3e:8b:8c:f3:3f:3c:57:92:d6:b4:f5:cb:97:24: 88:3a:72:5a:13:8c:27:ca:e8:1f:55:f7:5b:50:cb: 7d:ab:6a:a4:ed:2e:6e:33:e2:81:d6:c1:81:d6:66: 21:4d:9f:c1:a3:bd:ff:ee:13:cc:5e:af:93:95:ce: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:37:E3:A3:26:5F:B4:7C:28:32:43:EB:83:A0:E1:E3:43:31:FC:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbbc230a-073f-46d2-b717-af445fa0a856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.121.0/24 Signature Algorithm: sha256WithRSAEncryption 78:0f:a9:5f:d7:5a:51:2c:84:5f:d8:fb:a1:57:ce:48:a8:39: ee:c6:2d:f0:7c:93:b4:d7:a5:9e:8e:67:e1:94:22:38:81:0c: 1c:dd:77:5c:f7:f1:32:f4:25:1f:c1:e8:fe:37:74:b0:23:76: 5c:95:e0:a4:82:3d:af:24:22:b0:13:df:e7:a3:2c:8f:17:a1: 8c:83:95:63:1c:6a:cf:5c:d4:a6:cc:7c:3d:24:46:ad:37:94: a6:94:a3:41:3c:c7:c2:cb:02:a1:1b:14:2d:c3:6a:1a:16:eb: e1:5b:99:13:d8:19:33:ec:86:e4:e9:b7:9c:b6:e0:5e:cd:31: bf:4a:6f:b4:e7:f6:a1:05:6f:cd:17:ba:f8:53:77:e2:d9:ae: 96:6b:51:c9:04:d3:1e:da:a6:35:cd:9b:b4:8f:28:ca:2a:79: 4b:e0:de:40:f0:cf:88:c9:d7:dd:22:3a:17:ff:b7:41:8e:3c: 32:4d:93:3b:10:aa:43:80:0a:90:99:82:c1:33:74:09:34:4d: c0:b7:3e:35:12:60:1a:ef:07:62:a6:4e:4a:cd:ad:6f:16:ef: 7e:e8:4f:86:b6:09:ec:ec:52:16:01:8b:59:4f:9c:7d:20:ba: e5:eb:ae:14:ec:b2:73:ac:97:c5:36:3b:f0:85:88:a6:05:e9: 47:a5:48:43 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUErhC7tKfyMQLPae/topkq44aAFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMTExWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Yjk2OWU2ODJkN2MwYTlhM2I5YTUxZjQyM2E2YjFkZGE1 MmM3ZDczNGFkNDJhNzhjODUxNGI2ZTVkYTgyMTA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwPXO2YerDyxDtbJLpIiIEzB/BqgndjB9zmXe66QGlhIpo tirFK6HXUMQDCCN64aFFi2Qkm+Vb6SeYL15xFw4O0r5QB9RiNoaqsEWrLctYps8E x320Zf9y3pNaw/hgIcgO/h9v3BDgOAjIgVpzabu+KI4r1t+10vOP9y9uIlhD0Nur n0Dotb27EfhwOgQFIzP/dZa59nu/+GOtgXKy4+PoEzT5cEIU1dSjjCPOKcW/FRhz /Kx27RTxyBSfO3lvkQSrFYQ+i4zzPzxXkta09cuXJIg6cloTjCfK6B9V91tQy32r aqTtLm4z4oHWwYHWZiFNn8Gjvf/uE8xer5OVzhxPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAzfjoyZftHwoMkPrg6Dh40Mx/FswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiYmMyMzBhLTA3M2YtNDZkMi1iNzE3LWFmNDQ1ZmEwYTg1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmHkwDQYJKoZIhvcNAQELBQADggEBAHgPqV/XWlEshF/Y+6FXzkioOe7G LfB8k7TXpZ6OZ+GUIjiBDBzdd1z38TL0JR/B6P43dLAjdlyV4KSCPa8kIrAT3+ej LI8XoYyDlWMcas9c1KbMfD0kRq03lKaUo0E8x8LLAqEbFC3DahoW6+FbmRPYGTPs huTpt5y24F7NMb9Kb7Tn9qEFb80XuvhTd+LZrpZrUckE0x7apjXNm7SPKMoqeUvg 3kDwz4jJ190iOhf/t0GOPDJNkzsQqkOACpCZgsEzdAk0TcC3PjUSYBrvB2KmTkrN rW8W737oT4a2CezsUhYBi1lPnH0guuXrrhTssnOsl8U2O/CFiKYF6UelSEM= -----END CERTIFICATE-----Generated at Sat Jun 13 05:46:08 2026 by rpki-client