$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1f399e-043b-4ce9-b054-a37f869d1190.roa File: 2e1f399e-043b-4ce9-b054-a37f869d1190.roa (raw, json) Hash identifier: PEYbspy0rxERcfc0SvlI6BEeJAsDpONbjDxd1XCZnZU= Subject key identifier: B5:5D:38:1A:F5:0A:11:99:A8:F6:64:96:9C:97:1D:91:72:FE:D8:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53CFAF2B8559A2F9C62F4DA35CFD67F5A248B5F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1f399e-043b-4ce9-b054-a37f869d1190.roa Signing time: Tue 12 May 2026 01:11:45 +0000 ROA not before: Tue 12 May 2026 01:11:45 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cf:af:2b:85:59:a2:f9:c6:2f:4d:a3:5c:fd:67:f5:a2:48:b5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:11:45 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=2b2f10e95f2f60dbd8c25a8257bb10854e932243e20af524a17650666170a524, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:24:bb:ce:b8:fa:c9:d5:45:3c:af:90:5a: db:5d:86:d0:47:97:a8:16:8c:60:57:18:3b:59:7b: 1c:d7:74:08:a2:7c:44:67:dc:73:b2:d8:a4:1f:8f: 19:9c:ce:ef:47:73:c4:5b:e4:12:5f:cd:6a:c0:75: fd:78:bf:46:07:6c:ac:87:d7:48:06:35:08:05:e4: 53:d9:41:40:8b:94:b8:35:10:de:bc:45:42:bf:bf: 76:0e:8a:a7:83:8b:55:04:66:c9:1f:3c:cf:51:e5: d3:0a:27:32:ae:72:e8:e0:12:61:e5:b3:c8:81:48: c6:0d:eb:f6:97:ab:b2:11:e2:3e:37:d2:6f:87:39: 46:d8:43:28:f8:ec:7b:4f:57:3a:82:43:5e:28:1f: fe:82:5a:4e:0d:5b:bf:e5:7b:9d:6c:30:b5:d7:9d: 87:e6:20:9e:5e:9e:26:eb:48:0f:c2:d6:e1:af:22: bc:4e:f9:4b:ec:d3:57:74:14:ba:48:3b:b9:a6:ba: ab:e3:1c:00:55:df:45:81:c3:2d:16:8c:2c:16:b4: 28:bb:3b:65:aa:21:7c:76:f1:b3:b6:b1:dd:9e:55: b4:4d:fb:42:9d:35:00:79:c5:58:de:58:c2:9e:0a: 29:14:22:e5:7e:6d:e4:e9:23:a3:84:33:17:46:38: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5D:38:1A:F5:0A:11:99:A8:F6:64:96:9C:97:1D:91:72:FE:D8:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1f399e-043b-4ce9-b054-a37f869d1190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.82.0/24 Signature Algorithm: sha256WithRSAEncryption 84:a2:98:a6:99:5e:2e:b8:aa:ab:19:3d:db:0f:7d:73:8e:77: e0:22:72:37:82:9e:70:16:a4:3f:ec:55:8b:13:07:e2:ce:8e: 5b:02:8c:2d:4d:87:94:5e:51:23:6f:2f:40:85:a2:ec:52:37: 3b:73:a2:86:bd:4a:89:6e:d7:29:b4:ca:8e:a7:dc:cd:8d:c0: 2a:df:b2:66:1b:c1:a2:24:c6:8f:4d:7a:d7:57:29:bb:6d:61: 6a:bb:7a:69:fe:f1:a6:08:7b:4f:be:82:6c:55:7f:2d:b4:34: 1b:e9:e1:23:fd:3b:99:fc:c2:4a:06:c8:31:ff:de:46:ce:a2: e9:bc:ee:7e:8e:88:18:e5:40:00:0e:26:9c:a0:a4:b4:90:6c: 36:b3:73:67:d7:de:97:f4:01:3c:87:0d:65:89:1b:9f:31:50: 41:cd:bb:e6:35:93:e7:c8:37:5a:0d:e5:03:99:b9:d6:53:d6: 40:88:83:3f:42:18:63:56:99:92:7d:02:e0:12:1f:6b:6e:4a: 52:af:db:fc:06:2b:43:ea:3b:eb:eb:c8:aa:65:2b:64:81:dc: 87:2a:66:f1:67:35:b9:1c:f0:a8:c9:37:1b:b3:b2:fc:29:af: 28:e2:a7:a1:5f:7a:bf:13:25:b9:65:23:74:de:e1:e5:80:fe: f8:08:28:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU8+vK4VZovnGL02jXP1n9aJItfkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDExMTQ1WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjJmMTBlOTVmMmY2MGRiZDhjMjVhODI1N2JiMTA4NTRl OTMyMjQzZTIwYWY1MjRhMTc2NTA2NjYxNzBhNTI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ5yS7zrj6ydVFPK+QWttdhtBHl6gWjGBXGDtZexzXdAii fERn3HOy2KQfjxmczu9Hc8Rb5BJfzWrAdf14v0YHbKyH10gGNQgF5FPZQUCLlLg1 EN68RUK/v3YOiqeDi1UEZskfPM9R5dMKJzKucujgEmHls8iBSMYN6/aXq7IR4j43 0m+HOUbYQyj47HtPVzqCQ14oH/6CWk4NW7/le51sMLXXnYfmIJ5enibrSA/C1uGv IrxO+Uvs01d0FLpIO7mmuqvjHABV30WBwy0WjCwWtCi7O2WqIXx28bO2sd2eVbRN +0KdNQB5xVjeWMKeCikUIuV+beTpI6OEMxdGODp3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtV04GvUKEZmo9mSWnJcdkXL+2KIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlMWYzOTllLTA0M2ItNGNlOS1iMDU0LWEzN2Y4NjlkMTE5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmFIwDQYJKoZIhvcNAQELBQADggEBAISimKaZXi64qqsZPdsPfXOOd+Ai cjeCnnAWpD/sVYsTB+LOjlsCjC1Nh5ReUSNvL0CFouxSNztzooa9Solu1ym0yo6n 3M2NwCrfsmYbwaIkxo9NetdXKbttYWq7emn+8aYIe0++gmxVfy20NBvp4SP9O5n8 wkoGyDH/3kbOoum87n6OiBjlQAAOJpygpLSQbDazc2fX3pf0ATyHDWWJG58xUEHN u+Y1k+fIN1oN5QOZudZT1kCIgz9CGGNWmZJ9AuASH2tuSlKv2/wGK0PqO+vryKpl K2SB3IcqZvFnNbkc8KjJNxuzsvwpryjip6Ffer8TJbllI3Te4eWA/vgIKO8= -----END CERTIFICATE-----Generated at Tue May 12 21:51:29 2026 by rpki-client