$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa File: 11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa (raw, json) Hash identifier: YQPKHhVii9yaOQ6slfANu+Kay4pIfR0V5U9f/DvsEzs= Subject key identifier: 1E:5A:8E:45:3E:85:C9:EA:02:A5:B0:23:C4:FE:30:B7:81:00:3F:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0805341103961F4CFF9D32FEE7E8BEF665156EA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa Signing time: Tue 12 May 2026 01:31:47 +0000 ROA not before: Tue 12 May 2026 01:31:47 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:05:34:11:03:96:1f:4c:ff:9d:32:fe:e7:e8:be:f6:65:15:6e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:31:47 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=441fe0fa5fa52e35035e627a511ba16f1047f078f1fc0d9779fd937621bc9d1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:f1:83:81:6a:34:90:61:b3:cb:6a:da:fd: 58:d5:28:a7:c6:e8:50:b3:c4:19:8d:7e:3f:0d:01: c8:7c:c5:bf:58:9c:04:aa:41:fd:47:76:1f:10:76: e8:ad:a0:28:5e:71:34:c1:ab:7f:97:99:52:00:56: a0:d2:ac:e0:47:5e:90:a9:fc:dd:08:42:45:f6:7a: 82:5f:ee:cf:75:98:1a:0b:7b:70:e2:70:ba:cd:fc: 56:fc:8b:d5:1c:54:0b:54:8b:0e:af:56:1c:e9:5e: ec:c3:7a:ec:70:90:68:f6:01:60:f0:31:18:ed:9a: 3e:f0:02:98:b7:0d:53:ff:04:67:0f:07:8e:7c:ef: 28:63:16:38:9f:1d:b4:56:04:62:74:68:a9:ae:7b: 3a:a9:62:4f:43:19:af:24:25:2e:63:89:33:9d:33: a3:33:3e:d8:1c:d4:c7:ef:48:30:a1:08:2d:3f:99: 78:0c:66:43:96:1a:8d:5b:c6:1a:7c:01:d2:a8:01: da:00:21:e2:df:e5:ce:a5:be:93:c8:df:e0:91:da: 7e:d1:44:b4:4d:bb:ff:56:91:0d:e1:42:98:37:ed: 03:93:8c:9b:fc:7e:c3:f1:b4:ff:3c:1b:77:8e:1e: d2:da:07:ba:e9:57:ea:9d:f6:b9:f4:e0:79:90:dd: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5A:8E:45:3E:85:C9:EA:02:A5:B0:23:C4:FE:30:B7:81:00:3F:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.96.0/24 Signature Algorithm: sha256WithRSAEncryption 83:de:7c:59:6b:b3:3f:27:14:79:52:6c:0f:8a:d7:48:1c:5b: 60:8e:bb:a1:de:47:94:ea:0c:8c:b2:b3:51:71:f4:b6:e2:34: 9d:2b:4f:ba:99:ef:e3:a1:26:b1:8b:b3:76:53:59:b7:f3:24: 72:4c:1b:0b:f7:2e:80:74:43:0c:97:f4:44:c3:00:42:ac:cb: 58:ca:0c:1d:ba:57:83:24:c2:c8:47:46:e4:a5:6f:86:e2:7d: c3:a7:aa:e1:78:68:00:27:6c:46:f2:44:5e:7d:79:ca:a9:76: 22:ac:ea:20:a8:51:dc:6c:c2:d3:2a:b8:4d:94:10:4e:04:ac: c5:c3:93:85:51:23:09:f3:8f:ec:8f:5f:cd:4c:7b:f3:63:3b: c7:89:72:0b:23:5e:79:3d:8a:39:af:95:4f:5f:07:6e:36:6a: 84:90:e6:7f:95:e4:5c:66:ce:15:79:5c:16:10:cc:6f:5b:eb: 8b:3e:0c:82:c8:c4:41:2d:24:3e:24:67:70:0e:7c:5d:51:b5: 7a:25:d0:76:b6:02:67:36:90:9d:aa:e6:74:3d:9a:6e:6e:49: 2e:f0:d6:e7:73:09:b4:a2:9d:bd:e9:55:e3:c9:d3:7f:66:0c: 50:f0:b0:c0:b1:a5:90:bf:b8:2e:98:fc:22:fb:14:1b:97:ed: fd:8e:9e:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCAU0EQOWH0z/nTL+5+i+9mUVbqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMTQ3WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDFmZTBmYTVmYTUyZTM1MDM1ZTYyN2E1MTFiYTE2ZjEw NDdmMDc4ZjFmYzBkOTc3OWZkOTM3NjIxYmM5ZDFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMXfGDgWo0kGGzy2ra/VjVKKfG6FCzxBmNfj8NAch8xb9Y nASqQf1Hdh8QduitoChecTTBq3+XmVIAVqDSrOBHXpCp/N0IQkX2eoJf7s91mBoL e3DicLrN/Fb8i9UcVAtUiw6vVhzpXuzDeuxwkGj2AWDwMRjtmj7wApi3DVP/BGcP B4587yhjFjifHbRWBGJ0aKmuezqpYk9DGa8kJS5jiTOdM6MzPtgc1MfvSDChCC0/ mXgMZkOWGo1bxhp8AdKoAdoAIeLf5c6lvpPI3+CR2n7RRLRNu/9WkQ3hQpg37QOT jJv8fsPxtP88G3eOHtLaB7rpV+qd9rn04HmQ3b+rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHlqORT6FyeoCpbAjxP4wt4EAPzQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzExZGZlY2E5LTUwODAtNGEzNy1iNDU5LWU3YTMwZjkwZDhmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmGAwDQYJKoZIhvcNAQELBQADggEBAIPefFlrsz8nFHlSbA+K10gcW2CO u6HeR5TqDIyys1Fx9LbiNJ0rT7qZ7+OhJrGLs3ZTWbfzJHJMGwv3LoB0QwyX9ETD AEKsy1jKDB26V4MkwshHRuSlb4bifcOnquF4aAAnbEbyRF59ecqpdiKs6iCoUdxs wtMquE2UEE4ErMXDk4VRIwnzj+yPX81Me/NjO8eJcgsjXnk9ijmvlU9fB242aoSQ 5n+V5FxmzhV5XBYQzG9b64s+DILIxEEtJD4kZ3AOfF1RtXol0Ha2Amc2kJ2q5nQ9 mm5uSS7w1udzCbSinb3pVePJ039mDFDwsMCxpZC/uC6Y/CL7FBuX7f2Onr4= -----END CERTIFICATE-----Generated at Tue May 12 21:49:21 2026 by rpki-client