$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a30d54c-6d03-4cf0-89c3-19927d6ba6de.roa File: 4a30d54c-6d03-4cf0-89c3-19927d6ba6de.roa (raw, json) Hash identifier: LIJF7c26sydoDJaJZzTzvuR9sbgrYnD7nBSQ45N0uVo= Subject key identifier: 4D:59:9B:89:54:96:52:FB:67:A0:94:30:A3:50:21:67:BD:FD:F6:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0814DD6CBFE1E4F46981F4178CE3F38489C5AA36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a30d54c-6d03-4cf0-89c3-19927d6ba6de.roa Signing time: Thu 07 May 2026 00:00:51 +0000 ROA not before: Thu 07 May 2026 00:00:51 +0000 ROA not after: Wed 05 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.74.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:14:dd:6c:bf:e1:e4:f4:69:81:f4:17:8c:e3:f3:84:89:c5:aa:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:51 2026 GMT Not After : Aug 5 23:59:59 2026 GMT Subject: serialNumber=d9340a87778427471f2408eb10d6629c3134552e508732f201b81230c48f0944, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:7b:52:bb:97:00:33:52:6a:44:54:26:3f: 92:8e:2f:88:14:31:95:8c:88:fc:ce:be:34:e4:75: a6:16:5e:8a:c6:4f:04:bf:67:47:2a:8c:5a:e3:79: f6:00:57:b7:6c:a4:ed:04:64:bb:c6:01:ec:7e:fd: 52:90:2c:85:5d:af:07:11:9f:49:4c:06:2b:83:3c: 0d:1b:6c:0c:cc:63:d7:3f:9f:cb:dd:4f:2a:a5:9f: f0:78:88:aa:4c:f9:e2:ce:4a:24:f7:db:7a:75:4f: 96:20:ed:26:4a:74:3e:ec:f9:f5:f2:3c:68:e3:97: 8f:09:04:de:3d:b9:79:73:1e:15:ea:67:7d:bf:37: a1:1a:4f:98:3d:22:1d:69:8a:40:35:01:a6:a0:47: ba:8b:89:47:e5:52:76:0e:1e:b0:d4:c9:ce:72:5b: 91:99:ac:82:05:2c:d8:67:ae:54:0c:5a:32:6d:75: 61:0e:0c:19:16:e7:3b:c3:5d:f7:05:2a:17:b5:e6: 13:38:fc:1a:29:f8:ac:0c:53:e3:28:d4:16:a0:96: 48:98:ed:2d:b3:16:5a:bd:f8:1f:4f:c5:00:98:04: bd:21:87:1c:70:ad:85:fd:1e:45:3e:83:20:b1:56: ab:3f:e8:f4:8b:1a:34:c5:c3:bd:f8:09:ca:70:5e: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:59:9B:89:54:96:52:FB:67:A0:94:30:A3:50:21:67:BD:FD:F6:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a30d54c-6d03-4cf0-89c3-19927d6ba6de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.74.88.0/21 Signature Algorithm: sha256WithRSAEncryption 39:c9:ea:54:97:61:a8:c8:a1:87:33:27:91:49:2c:6b:4e:6f: 19:1d:ef:39:7f:06:e0:cf:87:30:84:0b:1a:71:37:45:24:11: e4:dd:d3:78:bc:a5:41:cd:8a:d4:d8:98:49:ad:da:8e:be:08: fe:80:2c:53:2e:5f:b3:34:f3:bd:b3:a3:e4:6a:af:2d:8f:b3: 8d:e9:89:4c:cb:2d:69:dc:fc:5e:1d:57:67:27:49:81:a7:f2: ef:96:5d:38:89:26:a0:b1:95:fa:28:f8:b1:1f:a3:b9:34:c5: 48:4e:5e:67:b7:7f:c7:43:e5:59:c2:02:c0:e6:44:80:a0:22: c2:46:5f:56:db:84:4f:cc:60:bc:9b:03:72:9d:4e:95:b9:09: 3b:c4:60:2c:55:ef:ca:b6:cd:12:29:47:20:f5:0e:b1:f3:63: 0a:39:d0:95:a5:b1:ec:50:e9:8e:92:6a:76:f7:1f:35:69:e1: 65:8d:99:46:e3:88:a2:31:69:de:62:95:f9:68:92:d1:bd:45: 12:67:60:5f:80:a7:a6:63:81:45:03:17:1a:74:44:38:8c:27: 56:ff:ca:b7:aa:3b:a0:a3:4e:8f:aa:f0:0a:e1:57:a9:69:f2: 0e:cf:cb:31:40:5f:55:4b:db:b6:ed:25:5a:07:d3:09:10:3a: 2e:07:64:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCBTdbL/h5PRpgfQXjOPzhInFqjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA3MDAwMDUxWhcNMjYwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTM0MGE4Nzc3ODQyNzQ3MWYyNDA4ZWIxMGQ2NjI5YzMx MzQ1NTJlNTA4NzMyZjIwMWI4MTIzMGM0OGYwOTQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXBHtSu5cAM1JqRFQmP5KOL4gUMZWMiPzOvjTkdaYWXorG TwS/Z0cqjFrjefYAV7dspO0EZLvGAex+/VKQLIVdrwcRn0lMBiuDPA0bbAzMY9c/ n8vdTyqln/B4iKpM+eLOSiT323p1T5Yg7SZKdD7s+fXyPGjjl48JBN49uXlzHhXq Z32/N6EaT5g9Ih1pikA1AaagR7qLiUflUnYOHrDUyc5yW5GZrIIFLNhnrlQMWjJt dWEODBkW5zvDXfcFKhe15hM4/Bop+KwMU+Mo1BaglkiY7S2zFlq9+B9PxQCYBL0h hxxwrYX9HkU+gyCxVqs/6PSLGjTFw734CcpwXpLJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTVmbiVSWUvtnoJQwo1AhZ7399mEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMzBkNTRjLTZkMDMtNGNmMC04OWMzLTE5OTI3ZDZiYTZkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANASlgwDQYJKoZIhvcNAQELBQADggEBADnJ6lSXYajIoYczJ5FJLGtObxkd 7zl/BuDPhzCECxpxN0UkEeTd03i8pUHNitTYmEmt2o6+CP6ALFMuX7M0872zo+Rq ry2Ps43piUzLLWnc/F4dV2cnSYGn8u+WXTiJJqCxlfoo+LEfo7k0xUhOXme3f8dD 5VnCAsDmRICgIsJGX1bbhE/MYLybA3KdTpW5CTvEYCxV78q2zRIpRyD1DrHzYwo5 0JWlsexQ6Y6Sanb3HzVp4WWNmUbjiKIxad5ilfloktG9RRJnYF+Ap6ZjgUUDFxp0 RDiMJ1b/yreqO6CjTo+q8ArhV6lp8g7PyzFAX1VL27btJVoH0wkQOi4HZEA= -----END CERTIFICATE-----Generated at Tue May 12 21:55:10 2026 by rpki-client