$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa File: 171a8b54-dde7-4dd4-8e61-d987c2870176.roa (raw, json) Hash identifier: WEEBgB/Kr19K10xWltb9OUgDXIFtsF1W7qns9kKFaZA= Subject key identifier: 73:83:F9:41:6C:C0:49:B2:2D:72:A2:8D:E5:4C:DF:50:E2:80:E9:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1160E97BDD9B243B4DAB8A3B7566E6980C9D608D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa Signing time: Sat 09 May 2026 00:20:56 +0000 ROA not before: Sat 09 May 2026 00:20:56 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:60:e9:7b:dd:9b:24:3b:4d:ab:8a:3b:75:66:e6:98:0c:9d:60:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:20:56 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=81a59229b79a7585f404aedade55ca02b3a748ff5c8ec8874d8b74f18998064a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:35:18:27:a3:30:b4:3a:25:bf:61:bd:01: 10:d9:62:3e:41:d2:8e:7c:57:59:df:1e:63:2f:53: a7:8c:5a:c6:b4:78:d2:56:58:9e:62:87:e2:2c:be: ed:31:ae:2f:77:3a:48:cb:d4:61:ff:5c:10:65:e7: b3:44:c5:6b:25:a8:21:e4:03:43:1d:24:31:ce:53: 74:da:9e:89:81:42:98:9e:41:5b:a9:c8:80:0f:fd: 52:4d:64:22:97:4f:66:f3:86:2d:9c:22:af:6e:d4: 48:5d:12:68:db:52:23:7e:e5:fc:d0:bc:3a:8a:ff: c8:96:0d:99:79:c7:a2:99:d1:5a:20:72:60:72:0e: 54:e6:b9:31:18:09:31:47:1a:a6:5d:6f:1b:f3:bd: 3a:f3:91:f9:09:a1:2e:e0:bb:d4:bc:f1:86:d4:75: 6d:16:a1:2d:1b:60:6b:8e:dc:82:f4:ee:c5:39:c3: 00:90:48:4f:66:1d:29:98:39:0b:da:28:ee:c3:f5: 2b:0d:2a:ae:7b:3e:4f:eb:55:bc:de:d1:50:f6:2b: 97:75:6b:af:2c:ef:f3:d6:e4:30:1b:aa:8b:c8:3a: 57:9b:0c:79:7e:34:a3:86:00:94:c8:5d:8d:dc:46: ee:77:f0:ae:de:af:ab:31:e8:f7:40:a6:9a:05:d1: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:83:F9:41:6C:C0:49:B2:2D:72:A2:8D:E5:4C:DF:50:E2:80:E9:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.224.0/20 Signature Algorithm: sha256WithRSAEncryption 95:a2:4c:0b:a1:03:6d:21:4f:1e:64:3f:fa:78:68:e2:ba:12: 16:56:e8:f8:17:06:2b:c2:1c:15:72:dc:f0:fc:8e:fc:ba:e2: 3e:4b:cb:f1:11:b8:d9:de:e1:6b:c9:ad:f5:05:a6:da:8a:5d: ae:23:6d:f9:9c:45:77:5f:eb:d2:05:ad:7b:2b:f7:92:45:cf: e7:67:82:e6:e1:5b:e2:2c:f2:01:89:e7:dc:0e:95:0f:cd:91: ad:68:ad:12:b6:d4:50:2b:51:79:65:35:53:8a:33:77:e7:78: 6b:8e:eb:06:a6:73:2c:7c:e1:4c:f5:fe:b0:59:96:0e:26:ed: 0e:16:69:4e:9c:24:c5:4c:7b:f3:65:de:4d:45:fc:f5:ae:c6: 69:9c:3c:e2:8c:43:a2:4f:77:86:cb:b9:64:8f:80:e5:09:dc: 0a:84:d3:43:36:72:42:e5:b3:dd:a7:ad:10:cd:2a:98:13:bc: 32:8d:fe:a2:c3:9d:c4:e1:3b:ee:62:2d:b4:85:7c:3b:55:c2: 3f:66:cf:8c:a5:c7:ae:01:a7:09:99:46:7f:61:dc:41:34:7a: 38:d0:b9:21:a9:e2:f0:b0:f4:5e:48:a0:74:96:9e:5e:c2:63: 31:9f:7d:63:ba:60:81:f3:ad:cd:ca:20:1b:57:98:2d:30:48: cc:c1:bd:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEWDpe92bJDtNq4o7dWbmmAydYI0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAyMDU2WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWE1OTIyOWI3OWE3NTg1ZjQwNGFlZGFkZTU1Y2EwMmIz YTc0OGZmNWM4ZWM4ODc0ZDhiNzRmMTg5OTgwNjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC41zUYJ6MwtDolv2G9ARDZYj5B0o58V1nfHmMvU6eMWsa0 eNJWWJ5ih+Isvu0xri93OkjL1GH/XBBl57NExWslqCHkA0MdJDHOU3TanomBQpie QVupyIAP/VJNZCKXT2bzhi2cIq9u1EhdEmjbUiN+5fzQvDqK/8iWDZl5x6KZ0Vog cmByDlTmuTEYCTFHGqZdbxvzvTrzkfkJoS7gu9S88YbUdW0WoS0bYGuO3IL07sU5 wwCQSE9mHSmYOQvaKO7D9SsNKq57Pk/rVbze0VD2K5d1a68s7/PW5DAbqovIOleb DHl+NKOGAJTIXY3cRu538K7er6sx6PdAppoF0fXVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc4P5QWzASbItcqKN5UzfUOKA6dUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3MWE4YjU0LWRkZTctNGRkNC04ZTYxLWQ5ODdjMjg3MDE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFAOAwDQYJKoZIhvcNAQELBQADggEBAJWiTAuhA20hTx5kP/p4aOK6EhZW 6PgXBivCHBVy3PD8jvy64j5Ly/ERuNne4WvJrfUFptqKXa4jbfmcRXdf69IFrXsr 95JFz+dngubhW+Is8gGJ59wOlQ/Nka1orRK21FArUXllNVOKM3fneGuO6wamcyx8 4Uz1/rBZlg4m7Q4WaU6cJMVMe/Nl3k1F/PWuxmmcPOKMQ6JPd4bLuWSPgOUJ3AqE 00M2ckLls92nrRDNKpgTvDKN/qLDncThO+5iLbSFfDtVwj9mz4ylx64BpwmZRn9h 3EE0ejjQuSGp4vCw9F5IoHSWnl7CYzGffWO6YIHzrc3KIBtXmC0wSMzBvaM= -----END CERTIFICATE-----Generated at Tue May 12 21:51:23 2026 by rpki-client