$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d4d0803-cc74-4be4-8a57-4cc82f451169.roa File: 3d4d0803-cc74-4be4-8a57-4cc82f451169.roa (raw, json) Hash identifier: 5sh+07180Zc0fFrg3Kwd8d7ntFNWuzzSLS612HUxM3E= Subject key identifier: AB:7A:29:0A:97:D7:51:0F:C1:9B:1D:7D:9C:0C:54:3A:50:80:F6:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AED5536B1C42BDEB184E6F56C0DE6EDB180E3CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d4d0803-cc74-4be4-8a57-4cc82f451169.roa Signing time: Tue 12 May 2026 01:20:06 +0000 ROA not before: Tue 12 May 2026 01:20:06 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ed:55:36:b1:c4:2b:de:b1:84:e6:f5:6c:0d:e6:ed:b1:80:e3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:20:06 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=40dd1f68ab85c59d103e878a9d3412eafc96858d8c977f7e9f1b814cec7f5e12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:d3:fc:0a:f6:f3:a9:d5:1d:96:97:d9:4f: 0c:4f:87:b4:d8:ab:69:c5:5c:ca:3b:38:5e:cf:7d: 5e:72:c9:c0:ea:e9:f3:30:e0:ae:b5:73:63:dc:14: 32:b5:d4:7b:38:19:2d:aa:c4:de:e0:8c:23:fa:42: 44:52:e2:9a:b8:be:af:f7:46:56:ca:bf:29:57:27: d3:93:59:c9:54:4a:81:15:5a:0d:05:82:c4:95:09: 14:6f:4b:49:16:b4:2b:ba:b7:dc:3c:3f:e0:79:70: 8e:8d:05:98:f6:38:9b:83:67:9d:50:c5:cc:54:38: c2:ac:3f:f1:6c:5b:ed:c2:7f:63:b3:8b:56:64:51: 57:10:18:8f:02:3e:cb:71:2b:75:ec:d4:8f:84:c1: 22:29:41:3d:48:16:3b:8a:57:c9:4d:8b:1d:71:55: d4:b6:8a:1b:86:31:23:4b:a3:90:ac:01:90:3a:79: 0e:88:98:ad:7b:bf:71:f4:c5:24:9e:65:f0:5a:83: 7b:40:aa:18:0b:fd:6f:ce:0b:cf:3d:7b:87:10:06: 40:48:79:55:a8:c4:40:66:b9:8d:9a:a1:af:46:d5: 97:5a:b4:2b:65:52:47:61:b6:7b:a3:bc:c7:5c:d2: b8:57:41:cc:a7:1a:18:33:75:95:d6:2c:1f:2a:46: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7A:29:0A:97:D7:51:0F:C1:9B:1D:7D:9C:0C:54:3A:50:80:F6:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d4d0803-cc74-4be4-8a57-4cc82f451169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.8.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:b0:9d:06:95:40:63:9a:1f:25:76:e1:5b:c5:8f:1c:6a:e6: 1d:7e:02:0d:31:2e:56:7f:15:36:b3:6e:a7:48:d1:18:46:4e: 33:72:bc:72:10:3b:24:d6:bd:1f:28:d0:41:44:82:f8:5f:06: d2:f2:83:71:18:dd:3e:77:ca:01:21:23:b9:9c:b8:98:56:50: a0:f8:8a:13:a2:5f:6e:4d:fd:a6:4c:88:a7:cd:1a:27:17:23: 44:b5:0c:eb:dc:20:19:0c:81:8d:3d:8b:52:06:7b:9b:14:67: f7:fd:dd:7a:7e:30:8d:b6:b3:fe:ac:ce:b3:10:ad:7b:ae:22: 0a:41:e2:d0:4a:4c:32:25:bf:7a:b3:5b:96:71:49:ab:6d:52: 72:e5:e0:e3:ee:76:2f:84:c6:91:d5:cb:e7:7d:57:be:5e:a2: 35:8c:bd:a0:e6:85:2f:84:ac:6a:22:23:b7:95:14:7c:70:ff: b2:b1:f7:88:35:b2:77:9e:ad:3b:25:0d:54:ec:07:96:b7:17: b9:c9:a6:7e:98:ef:3e:94:17:79:3a:cc:b7:ce:05:35:2d:c6: ce:da:2c:cb:87:59:67:53:3a:d1:0b:d7:bf:08:f0:e8:eb:98: d9:ae:f1:49:ef:f7:19:66:07:7c:cc:da:85:79:42:27:1f:46: 64:07:57:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWu1VNrHEK96xhOb1bA3m7bGA48owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDA2WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGRkMWY2OGFiODVjNTlkMTAzZTg3OGE5ZDM0MTJlYWZj OTY4NThkOGM5NzdmN2U5ZjFiODE0Y2VjN2Y1ZTEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBMdP8CvbzqdUdlpfZTwxPh7TYq2nFXMo7OF7PfV5yycDq 6fMw4K61c2PcFDK11Hs4GS2qxN7gjCP6QkRS4pq4vq/3RlbKvylXJ9OTWclUSoEV Wg0FgsSVCRRvS0kWtCu6t9w8P+B5cI6NBZj2OJuDZ51QxcxUOMKsP/FsW+3Cf2Oz i1ZkUVcQGI8CPstxK3Xs1I+EwSIpQT1IFjuKV8lNix1xVdS2ihuGMSNLo5CsAZA6 eQ6ImK17v3H0xSSeZfBag3tAqhgL/W/OC889e4cQBkBIeVWoxEBmuY2aoa9G1Zda tCtlUkdhtnujvMdc0rhXQcynGhgzdZXWLB8qRvpBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq3opCpfXUQ/Bmx19nAxUOlCA9oYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkNGQwODAzLWNjNzQtNGJlNC04YTU3LTRjYzgyZjQ1MTE2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmAgwDQYJKoZIhvcNAQELBQADggEBAF6wnQaVQGOaHyV24VvFjxxq5h1+ Ag0xLlZ/FTazbqdI0RhGTjNyvHIQOyTWvR8o0EFEgvhfBtLyg3EY3T53ygEhI7mc uJhWUKD4ihOiX25N/aZMiKfNGicXI0S1DOvcIBkMgY09i1IGe5sUZ/f93Xp+MI22 s/6szrMQrXuuIgpB4tBKTDIlv3qzW5ZxSattUnLl4OPudi+ExpHVy+d9V75eojWM vaDmhS+ErGoiI7eVFHxw/7Kx94g1sneerTslDVTsB5a3F7nJpn6Y7z6UF3k6zLfO BTUtxs7aLMuHWWdTOtEL178I8OjrmNmu8Unv9xlmB3zM2oV5QicfRmQHV/g= -----END CERTIFICATE-----Generated at Tue May 12 21:58:51 2026 by rpki-client