$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa File: 2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa (raw, json) Hash identifier: Q3f+LrWuYdpw0Dmo3uGl8Zb6FUKzcIdyq+fLeG6vXlA= Subject key identifier: 42:A1:CC:16:F6:AA:A5:BB:89:15:51:C0:7A:CD:6E:81:9E:24:4F:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F6C84461310E98EE83D381D511389E2F1B575E5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa Signing time: Tue 28 Apr 2026 00:01:06 +0000 ROA not before: Tue 28 Apr 2026 00:01:06 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 194.148.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6c:84:46:13:10:e9:8e:e8:3d:38:1d:51:13:89:e2:f1:b5:75:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:01:06 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=6d9df6dcd3ea4e13f28d4a1e18202853b0ca5b3bee16dae9525709fc8fd80e56, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:31:0e:ab:03:c7:d1:63:b9:9f:4a:93:d4: e8:6f:c4:5a:19:6e:15:d3:f0:5e:de:d8:93:a1:fa: 5b:b0:b6:59:5b:de:4f:4a:9f:13:3d:ae:96:b5:5a: 36:9f:ba:8e:ba:85:b1:ff:a0:b4:c4:91:e8:5f:d5: a9:9c:d7:9b:4d:3c:ae:d2:75:c4:1c:26:0f:de:57: ef:2a:5e:5e:34:03:7b:c7:8c:74:3d:cc:e1:aa:a9: a2:64:8d:35:fe:96:04:33:ce:b0:03:e3:a9:ca:1c: bd:54:77:ab:ee:a0:cf:01:da:ff:62:91:1e:f8:64: 35:61:72:d5:02:78:e8:39:dc:df:64:47:19:f0:11: 74:ee:d7:1a:51:f2:7e:8a:ef:c9:2b:ed:d2:70:d7: f3:d4:9b:63:df:f5:78:f2:cb:13:10:46:d4:9f:54: 1d:fc:22:3c:2b:ca:01:3a:71:56:95:c2:23:55:41: 48:00:dc:f4:50:f5:86:16:54:0b:f1:02:48:4e:52: 06:e6:76:91:28:99:d0:42:4a:2b:56:a4:ef:b5:bd: 24:98:a7:d9:6e:06:df:9f:dc:e5:3a:0c:20:5d:4a: b9:9b:54:d2:32:3c:37:81:0c:17:ac:74:d7:ce:b2: e7:cc:f3:cb:30:97:3a:11:55:fe:36:5b:b4:61:b3: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:CC:16:F6:AA:A5:BB:89:15:51:C0:7A:CD:6E:81:9E:24:4F:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.148.64.0/19 Signature Algorithm: sha256WithRSAEncryption d9:6b:12:53:f4:d0:a2:92:ea:61:71:5e:3a:15:41:3c:6a:ec: b0:ba:b2:ac:67:8c:7a:8d:bc:fe:89:40:24:a8:19:0e:3a:2c: ac:f6:3c:d0:64:de:4b:5d:8b:4c:02:f5:ca:5a:dc:07:bb:7f: 11:10:4e:85:66:00:69:e0:48:03:a2:6e:2b:d9:53:71:f7:eb: ae:84:0e:30:16:7b:6a:d0:eb:2d:6c:b3:e4:d3:66:00:87:90: 47:23:59:3a:48:2a:d1:47:1a:b7:22:17:5c:de:f3:2c:6a:65: 12:e1:5e:ae:29:33:d8:22:95:f6:a3:de:62:8b:ac:8f:8e:f6: 0f:7e:68:22:4a:68:21:34:89:78:53:86:a1:9c:23:60:96:6a: 11:2d:42:f5:d9:58:49:38:ed:46:17:aa:74:4c:57:71:f6:0d: eb:55:f8:01:21:5e:a8:e1:39:0b:c0:df:72:3e:30:6c:8b:78: 8c:1b:45:3d:db:c8:38:f6:3d:88:03:f8:a8:64:6b:a1:4f:22: ee:6e:44:30:ad:bf:45:68:c5:82:07:8c:c8:d8:b1:36:a5:3d: 6b:f3:1e:a8:11:84:13:c1:44:a5:49:af:42:10:aa:29:b0:b4: b8:33:d2:cb:3d:87:a9:dd:96:f6:43:65:f3:4c:b4:2d:3a:a9: 9f:b8:65:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb2yERhMQ6Y7oPTgdUROJ4vG1deUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAwMTA2WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDlkZjZkY2QzZWE0ZTEzZjI4ZDRhMWUxODIwMjg1M2Iw Y2E1YjNiZWUxNmRhZTk1MjU3MDlmYzhmZDgwZTU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWsjEOqwPH0WO5n0qT1OhvxFoZbhXT8F7e2JOh+luwtllb 3k9KnxM9rpa1Wjafuo66hbH/oLTEkehf1amc15tNPK7SdcQcJg/eV+8qXl40A3vH jHQ9zOGqqaJkjTX+lgQzzrAD46nKHL1Ud6vuoM8B2v9ikR74ZDVhctUCeOg53N9k RxnwEXTu1xpR8n6K78kr7dJw1/PUm2Pf9XjyyxMQRtSfVB38IjwrygE6cVaVwiNV QUgA3PRQ9YYWVAvxAkhOUgbmdpEomdBCSitWpO+1vSSYp9luBt+f3OU6DCBdSrmb VNIyPDeBDBesdNfOsufM88swlzoRVf42W7Rhs8XRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQqHMFvaqpbuJFVHAes1ugZ4kT7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMTcxM2ZhLWU1ZGUtNGNlYS05YTc2LWEwZTBkY2Y2YzgzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXClEAwDQYJKoZIhvcNAQELBQADggEBANlrElP00KKS6mFxXjoVQTxq7LC6 sqxnjHqNvP6JQCSoGQ46LKz2PNBk3ktdi0wC9cpa3Ae7fxEQToVmAGngSAOibivZ U3H3666EDjAWe2rQ6y1ss+TTZgCHkEcjWTpIKtFHGrciF1ze8yxqZRLhXq4pM9gi lfaj3mKLrI+O9g9+aCJKaCE0iXhThqGcI2CWahEtQvXZWEk47UYXqnRMV3H2DetV +AEhXqjhOQvA33I+MGyLeIwbRT3byDj2PYgD+Khka6FPIu5uRDCtv0VoxYIHjMjY sTalPWvzHqgRhBPBRKVJr0IQqimwtLgz0ss9h6ndlvZDZfNMtC06qZ+4Zcs= -----END CERTIFICATE-----Generated at Tue May 12 21:56:44 2026 by rpki-client