$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20e3f877-bd11-4e04-9cdc-669e44f2b650.roa File: 20e3f877-bd11-4e04-9cdc-669e44f2b650.roa (raw, json) Hash identifier: 3WMEE8HhJTzf2UH60U5AodQKn14S2gDRq2BRgm+Wnjk= Subject key identifier: 19:91:20:91:24:76:F7:36:94:B5:C9:78:53:9C:56:25:4E:6D:26:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FCAA4F9867743EE3C350F47BA749731D6287AB9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20e3f877-bd11-4e04-9cdc-669e44f2b650.roa Signing time: Thu 07 May 2026 15:17:13 +0000 ROA not before: Thu 07 May 2026 15:17:13 +0000 ROA not after: Wed 05 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 32.197.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ca:a4:f9:86:77:43:ee:3c:35:0f:47:ba:74:97:31:d6:28:7a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 15:17:13 2026 GMT Not After : Aug 5 23:59:59 2026 GMT Subject: serialNumber=f5c4b073ea067f5c16a2de30bb1c183561e8086dd51a167169d4ec98cddc32ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:18:1b:08:1c:18:11:c7:43:e2:05:45:0a: 6d:fe:5a:c2:1f:cd:5f:96:19:3a:fd:9b:fe:e2:9e: 25:7d:cc:bf:b7:6b:bf:6f:79:6b:a1:49:71:c3:e6: fc:f7:f8:76:3f:ab:50:b8:a9:e7:90:1d:41:b6:97: a8:71:68:43:ab:84:31:f0:a7:b2:28:a3:1a:48:38: b9:d2:0f:96:9c:61:73:8e:76:2f:1e:ac:15:63:24: 0f:8d:34:56:83:0b:0e:50:01:63:93:ef:4e:0e:8f: 21:d7:47:dd:14:af:20:6b:1a:ed:23:7e:43:aa:fd: 40:fe:a2:35:75:a2:a7:1d:d2:e2:f7:91:46:4a:14: 29:cc:db:b3:0d:fa:2b:3b:b7:d1:dc:8a:f8:f2:d9: 84:00:23:40:69:c3:6b:dd:40:b0:fe:aa:32:c7:8f: 18:fd:4d:2d:28:4c:f6:aa:42:ed:cb:9a:4b:5b:bf: 84:1a:32:ca:b1:07:f7:66:3d:c1:ae:cd:b3:ed:b2: a3:dc:26:98:34:00:9b:be:6c:ac:24:05:8c:d3:b6: 62:b4:77:4b:48:0d:4b:03:18:f8:a9:b6:11:b0:05: 5b:2f:0f:5f:ea:d1:94:f5:49:2e:88:c5:fa:d2:58: 7a:23:bc:59:27:f1:93:b5:7b:4e:ae:3b:d5:d9:61: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:91:20:91:24:76:F7:36:94:B5:C9:78:53:9C:56:25:4E:6D:26:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20e3f877-bd11-4e04-9cdc-669e44f2b650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.197.114.0/23 Signature Algorithm: sha256WithRSAEncryption 67:e7:fa:57:1b:04:c3:0c:7b:98:68:e7:bf:ae:89:b0:40:8f: 44:e4:93:91:1e:5c:92:2d:6f:5c:39:99:bf:72:e4:f2:01:f7: 63:a4:ee:45:55:52:6c:b6:a0:b8:56:0c:33:42:09:3a:ad:af: d1:1d:c9:f5:c4:41:68:b1:96:b4:0e:46:d2:51:58:80:83:78: ba:c5:70:e1:37:fd:62:55:84:53:c2:04:2b:84:0f:0b:eb:1c: ff:3c:f2:97:15:e6:47:d0:ba:02:ae:69:76:7e:18:45:02:2e: 95:c8:bf:cd:40:7b:ac:f3:8e:7c:b0:23:2b:d2:94:1c:7f:c3: ae:0c:7f:8b:91:b9:f6:04:2d:01:64:91:c0:67:27:95:86:dc: c2:ea:24:ea:02:8c:9e:cb:b5:4a:8c:a5:58:31:d3:5c:1a:6a: 60:e9:cc:61:8d:20:7f:80:1a:62:70:0d:69:15:32:27:b1:03: ee:b8:e0:b3:10:42:79:01:e5:4d:23:8b:4c:8a:69:5b:9b:c5: a2:fe:a5:09:5b:18:67:01:e7:e6:3d:f3:21:cf:32:bf:d6:be: 44:67:69:db:ab:b6:cd:81:cb:10:65:4b:4a:77:c2:a2:96:cc: 23:dc:b8:8d:bd:14:c0:e4:a2:b0:6f:41:7a:23:35:1d:4c:1a: 4a:5d:5a:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP8qk+YZ3Q+48NQ9HunSXMdYoerkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA3MTUxNzEzWhcNMjYwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWM0YjA3M2VhMDY3ZjVjMTZhMmRlMzBiYjFjMTgzNTYx ZTgwODZkZDUxYTE2NzE2OWQ0ZWM5OGNkZGMzMmVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVqBgbCBwYEcdD4gVFCm3+WsIfzV+WGTr9m/7iniV9zL+3 a79veWuhSXHD5vz3+HY/q1C4qeeQHUG2l6hxaEOrhDHwp7IooxpIOLnSD5acYXOO di8erBVjJA+NNFaDCw5QAWOT704OjyHXR90UryBrGu0jfkOq/UD+ojV1oqcd0uL3 kUZKFCnM27MN+is7t9Hcivjy2YQAI0Bpw2vdQLD+qjLHjxj9TS0oTPaqQu3Lmktb v4QaMsqxB/dmPcGuzbPtsqPcJpg0AJu+bKwkBYzTtmK0d0tIDUsDGPipthGwBVsv D1/q0ZT1SS6IxfrSWHojvFkn8ZO1e06uO9XZYaXFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGZEgkSR29zaUtcl4U5xWJU5tJr8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwZTNmODc3LWJkMTEtNGUwNC05Y2RjLTY2OWU0NGYyYjY1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEgxXIwDQYJKoZIhvcNAQELBQADggEBAGfn+lcbBMMMe5ho57+uibBAj0Tk k5EeXJItb1w5mb9y5PIB92Ok7kVVUmy2oLhWDDNCCTqtr9EdyfXEQWixlrQORtJR WICDeLrFcOE3/WJVhFPCBCuEDwvrHP888pcV5kfQugKuaXZ+GEUCLpXIv81Ae6zz jnywIyvSlBx/w64Mf4uRufYELQFkkcBnJ5WG3MLqJOoCjJ7LtUqMpVgx01waamDp zGGNIH+AGmJwDWkVMiexA+644LMQQnkB5U0ji0yKaVubxaL+pQlbGGcB5+Y98yHP Mr/WvkRnadurts2ByxBlS0p3wqKWzCPcuI29FMDkorBvQXojNR1MGkpdWlo= -----END CERTIFICATE-----Generated at Tue May 12 22:17:08 2026 by rpki-client