$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa File: ff1a08ba-07d4-454f-bb58-b0503ad24592.roa (raw, json) Hash identifier: rC2zvCaoi/zA+9YYNYLEoJub63iCVUPcYSQX5OWLJ6c= Subject key identifier: 57:21:02:51:52:F3:DD:2D:80:6A:CB:A0:1B:64:48:15:66:5B:7A:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AC28EA4CAEB1AAFCCE615C72030B7B5853FDC96 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa Signing time: Fri 15 May 2026 02:30:16 +0000 ROA not before: Fri 15 May 2026 02:30:16 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 138.34.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c2:8e:a4:ca:eb:1a:af:cc:e6:15:c7:20:30:b7:b5:85:3f:dc:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:30:16 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=eed5fc7a4e457301c303f02a71b80f19d43d3d62b9bc85ac28eab0bf2e7334ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:21:c7:be:92:64:5a:b8:7a:12:85:0a:b2: ef:c0:21:e0:34:91:26:9a:ee:ac:0e:0d:58:1f:b2: a6:33:7d:d4:95:f5:01:7e:a0:43:8c:ea:21:e2:ef: 39:b1:93:1e:3c:30:76:2f:d1:61:63:95:cb:f8:e9: ab:b1:2f:dd:17:8f:58:b9:40:98:48:cb:af:35:3d: aa:84:c9:9e:cd:14:7f:7e:e5:9d:fa:2a:bb:44:73: d3:7e:e8:78:68:35:df:0f:f2:fa:6b:ca:37:52:0b: ee:86:bc:cc:5b:fa:23:8e:2e:9b:51:cc:2f:c2:09: c6:4d:a8:e4:60:63:c7:80:29:2a:00:09:01:e8:5a: 6b:e7:cc:1e:bd:a7:da:98:07:15:ce:0b:73:1f:5e: bb:ce:98:f0:4d:15:3c:c1:a9:72:ea:50:70:12:15: 6f:4d:75:85:8b:b4:1d:70:e0:89:ec:a0:93:d2:10: 0e:46:86:d1:f5:e6:d6:23:8e:99:22:a0:e7:0f:bd: 99:9e:44:b4:bb:21:06:5d:59:41:6f:c5:70:37:30: ea:60:4a:d9:90:2d:1c:73:2f:8e:0c:43:7d:17:ef: fc:aa:08:bc:6a:c7:61:be:3a:ec:21:13:51:bd:09: 9b:3c:1e:1c:bd:36:eb:15:e2:73:3f:06:44:1e:4e: a4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:21:02:51:52:F3:DD:2D:80:6A:CB:A0:1B:64:48:15:66:5B:7A:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:4a:89:31:5f:68:4a:85:79:da:aa:f6:0d:ac:6d:38:06:3c: 58:37:77:0d:7b:23:a9:9b:40:36:cb:e4:0c:cb:48:af:b3:00: 31:45:36:0c:c7:90:c1:89:68:59:e0:eb:a4:37:1e:f2:df:3e: 53:cc:98:dc:1b:a0:13:d1:0d:55:5c:fd:1f:99:e3:75:8f:d4: d0:ff:1b:75:17:b2:8e:b2:8d:b5:e2:51:65:27:b2:dc:cf:c7: 6d:cf:ea:c7:4a:8c:4e:fe:f4:1a:e1:c2:ef:4b:8b:56:ce:51: b3:d9:96:c9:b0:04:d4:1e:ed:c6:b7:6f:76:cf:49:b5:0c:06: ef:c5:d1:80:db:14:78:29:94:47:d0:d8:4d:50:af:52:5d:e4: 23:58:a0:4e:8f:7c:c6:fe:0e:ec:00:8a:8c:18:f0:0e:02:c9: 63:a9:14:65:af:35:13:dc:53:cd:6a:8b:83:7b:9c:26:b2:13: 02:64:ec:6b:84:65:fe:9e:5a:2f:1e:3e:d8:bc:5c:c7:a7:36: d0:c2:f7:cf:0c:d2:68:15:21:bc:a0:fa:9c:78:df:5d:55:2d: 02:f4:8f:13:a9:61:aa:e4:63:0d:30:a2:3b:e3:a2:29:e1:0b: 65:ba:19:a3:bf:d9:12:22:5c:90:49:9e:43:54:81:40:01:e2: 67:64:8d:0e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWsKOpMrrGq/M5hXHIDC3tYU/3JYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIzMDE2WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWQ1ZmM3YTRlNDU3MzAxYzMwM2YwMmE3MWI4MGYxOWQ0 M2QzZDYyYjliYzg1YWMyOGVhYjBiZjJlNzMzNGFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDazCHHvpJkWrh6EoUKsu/AIeA0kSaa7qwODVgfsqYzfdSV 9QF+oEOM6iHi7zmxkx48MHYv0WFjlcv46auxL90Xj1i5QJhIy681PaqEyZ7NFH9+ 5Z36KrtEc9N+6HhoNd8P8vpryjdSC+6GvMxb+iOOLptRzC/CCcZNqORgY8eAKSoA CQHoWmvnzB69p9qYBxXOC3MfXrvOmPBNFTzBqXLqUHASFW9NdYWLtB1w4InsoJPS EA5GhtH15tYjjpkioOcPvZmeRLS7IQZdWUFvxXA3MOpgStmQLRxzL44MQ30X7/yq CLxqx2G+OuwhE1G9CZs8Hhy9NusV4nM/BkQeTqQ7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVyECUVLz3S2AasugG2RIFWZbelYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmMWEwOGJhLTA3ZDQtNDU0Zi1iYjU4LWIwNTAzYWQyNDU5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCKIjANBgkqhkiG9w0BAQsFAAOCAQEAEUqJMV9oSoV52qr2DaxtOAY8WDd3 DXsjqZtANsvkDMtIr7MAMUU2DMeQwYloWeDrpDce8t8+U8yY3BugE9ENVVz9H5nj dY/U0P8bdReyjrKNteJRZSey3M/Hbc/qx0qMTv70GuHC70uLVs5Rs9mWybAE1B7t xrdvds9JtQwG78XRgNsUeCmUR9DYTVCvUl3kI1igTo98xv4O7ACKjBjwDgLJY6kU Za81E9xTzWqLg3ucJrITAmTsa4Rl/p5aLx4+2Lxcx6c20ML3zwzSaBUhvKD6nHjf XVUtAvSPE6lhquRjDTCiO+OiKeELZboZo7/ZEiJckEmeQ1SBQAHiZ2SNDg== -----END CERTIFICATE-----Generated at Sat Jun 13 13:13:17 2026 by rpki-client