$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa File: 33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa (raw, json) Hash identifier: wkDoAp9m9IvERCPVv2AQzoXyD3HCAZbt6QVydkR6ry8= Subject key identifier: E1:42:68:3C:D6:5C:6E:50:81:C5:9B:AE:AE:C4:BD:D0:A7:48:F8:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BA9D88DE9952BB7E531BA6AA3526C879EF09060 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa Signing time: Tue 05 May 2026 00:31:19 +0000 ROA not before: Tue 05 May 2026 00:31:19 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 149.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a9:d8:8d:e9:95:2b:b7:e5:31:ba:6a:a3:52:6c:87:9e:f0:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:31:19 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=49dbccb22be1fd3874259229ce75503e2026d1e4967977b2dc0b38431fbaa220, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:04:d2:41:80:57:ee:52:12:39:a0:60:97: b6:58:92:a4:e5:c3:45:06:18:22:ea:96:11:eb:4a: 27:b0:e2:52:e4:07:cf:5e:b8:2a:9b:c9:e7:52:13: eb:79:56:24:08:bb:26:b0:24:a0:39:97:58:9c:92: 94:96:4a:f1:4e:7b:c8:fb:c4:4f:92:06:03:48:36: f5:ce:f2:86:6d:4d:ae:e5:1d:1e:35:6e:e3:03:dc: 65:c2:47:54:b5:6b:30:cd:33:8d:28:6c:c0:3e:13: 3f:ef:64:96:98:02:3f:4b:0c:61:17:db:c9:50:34: 23:31:07:42:00:43:9b:54:08:46:b3:6b:ed:e6:86: c9:cf:c9:15:6f:1b:34:a4:8c:b9:29:94:9d:f3:ad: 62:4c:f3:5b:a1:7e:d4:65:6c:bc:d1:98:11:e3:35: 6f:7a:3d:a2:fc:a2:a4:97:33:b3:2a:28:de:12:16: 1b:21:db:3c:ba:cc:35:12:58:eb:0a:80:7c:34:eb: 38:a1:1e:a5:ac:45:96:82:12:e8:b3:c3:b9:1f:d3: 6a:5d:98:f9:49:06:16:ae:74:56:80:5b:a4:eb:2f: 12:5d:e8:5d:9f:35:b1:27:03:72:50:18:0b:a4:5d: c2:1a:42:2a:c5:6a:fc:73:e4:8e:8b:bd:c6:94:d1: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:42:68:3C:D6:5C:6E:50:81:C5:9B:AE:AE:C4:BD:D0:A7:48:F8:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:8e:6b:d6:26:b2:d5:14:7a:75:8d:f5:75:03:f8:3f:4f:a5: bd:57:85:d8:05:c4:a1:81:02:ca:4e:9c:c1:5e:fa:f9:1c:3c: a5:b2:00:62:dd:4f:e5:84:c4:d5:f0:14:25:ff:2f:cf:80:08: a9:de:eb:47:69:47:2b:ea:ff:bb:fc:7b:47:fd:12:6c:a7:cf: a6:16:2a:84:c3:44:02:63:f2:19:da:de:64:56:e1:72:03:06: 0a:fa:f8:52:bb:76:da:b8:ac:5f:88:9f:4f:46:83:da:a8:3b: 94:91:b6:e5:3c:fe:ea:e7:23:a4:b8:bb:9a:8b:66:c3:5a:e8: 74:95:23:1f:51:37:42:d6:e6:ba:ce:78:44:61:0f:2a:05:43: f4:ae:f5:01:92:24:da:95:9c:c4:f2:b1:f7:b7:2a:16:d4:c5: 97:49:2b:63:9e:4d:5d:66:8c:2d:2a:32:c1:2d:3e:fc:b4:8a: d6:ba:bb:4d:8d:77:e3:c7:1b:f3:d4:ce:f3:c9:40:7e:60:c5: 1f:3c:1c:14:80:1e:14:5a:03:73:43:eb:f6:cf:53:22:bb:58: 5d:1b:a2:58:55:66:69:bd:b3:0f:bf:48:c7:b2:07:7b:59:74: 8c:24:a8:0e:ca:ea:36:8f:b8:f1:2d:80:ca:cc:2b:0d:5a:3e: c1:7f:5a:5c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUe6nYjemVK7flMbpqo1Jsh57wkGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAzMTE5WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWRiY2NiMjJiZTFmZDM4NzQyNTkyMjljZTc1NTAzZTIw MjZkMWU0OTY3OTc3YjJkYzBiMzg0MzFmYmFhMjIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTEgTSQYBX7lISOaBgl7ZYkqTlw0UGGCLqlhHrSiew4lLk B89euCqbyedSE+t5ViQIuyawJKA5l1ickpSWSvFOe8j7xE+SBgNINvXO8oZtTa7l HR41buMD3GXCR1S1azDNM40obMA+Ez/vZJaYAj9LDGEX28lQNCMxB0IAQ5tUCEaz a+3mhsnPyRVvGzSkjLkplJ3zrWJM81uhftRlbLzRmBHjNW96PaL8oqSXM7MqKN4S Fhsh2zy6zDUSWOsKgHw06zihHqWsRZaCEuizw7kf02pdmPlJBhaudFaAW6TrLxJd 6F2fNbEnA3JQGAukXcIaQirFavxz5I6LvcaU0WWPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4UJoPNZcblCBxZuursS90KdI+B0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNzUyZWRjLWJhNTYtNGE3Ni1iYjRiLTZjOWI1OWYzY2IyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVcjANBgkqhkiG9w0BAQsFAAOCAQEAC45r1iay1RR6dY31dQP4P0+lvVeF 2AXEoYECyk6cwV76+Rw8pbIAYt1P5YTE1fAUJf8vz4AIqd7rR2lHK+r/u/x7R/0S bKfPphYqhMNEAmPyGdreZFbhcgMGCvr4Urt22risX4ifT0aD2qg7lJG25Tz+6ucj pLi7motmw1rodJUjH1E3Qtbmus54RGEPKgVD9K71AZIk2pWcxPKx97cqFtTFl0kr Y55NXWaMLSoywS0+/LSK1rq7TY1348cb89TO88lAfmDFHzwcFIAeFFoDc0Pr9s9T IrtYXRuiWFVmab2zD79Ix7IHe1l0jCSoDsrqNo+48S2AyswrDVo+wX9aXA== -----END CERTIFICATE-----Generated at Tue May 12 21:58:37 2026 by rpki-client