$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa File: 5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa (raw, json) Hash identifier: qeGiE49WvTZ+msSqaYo4U73yq9UD9C2+7oR59dXXL1U= Subject key identifier: AB:BE:73:47:0C:18:21:F9:2E:19:B3:A3:54:26:03:37:60:AF:D5:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DE5055E4052FE11813B181D5AE9868A7FEFE53F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa Signing time: Mon 04 May 2026 00:31:09 +0000 ROA not before: Mon 04 May 2026 00:31:09 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 166.117.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e5:05:5e:40:52:fe:11:81:3b:18:1d:5a:e9:86:8a:7f:ef:e5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:31:09 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=301cfd981159d1bf73c705f4e5a469c1e9a2d99f2f2bd7c841ef874ac4ae95ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:bf:f9:eb:cb:b8:1a:75:cb:51:f2:85:2b: f8:d7:d0:5f:85:e2:68:40:75:01:2b:4e:a6:df:69: c2:41:a3:45:8c:07:da:74:51:98:18:84:4b:76:f5: 74:22:0f:70:e3:9e:fe:e5:36:9e:49:2d:dd:59:0e: 40:64:6c:06:33:86:bf:ed:b0:e9:b4:c1:ce:e6:5f: 84:e7:05:b6:d1:ed:c4:1e:64:f9:df:c7:e3:12:f9: 23:6b:74:72:20:a3:97:25:ed:0a:46:61:78:54:7a: a2:19:aa:ce:04:76:49:79:f0:9f:97:49:69:4b:c4: a8:84:30:e2:ff:46:92:de:97:bd:90:00:3a:ab:1a: cd:8d:3f:41:7e:7f:dc:19:75:85:4c:fd:db:c0:36: 08:c4:16:2b:e9:96:a5:27:4c:d8:62:05:78:5d:e5: 9a:bc:e3:e6:ef:dc:4d:77:77:6b:9e:68:a2:a0:1b: ef:df:ae:fb:98:9a:14:9c:d0:cc:26:21:63:37:21: a5:2f:14:8c:06:4e:69:1a:91:09:a8:16:16:fd:44: 32:28:6e:e5:dd:7b:d8:4d:60:e9:b5:e0:36:39:34: d5:73:28:68:fa:5c:f5:a6:2f:21:3a:07:8f:05:b3: 87:d3:e9:41:a9:91:e9:a2:37:74:60:6e:57:04:0c: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BE:73:47:0C:18:21:F9:2E:19:B3:A3:54:26:03:37:60:AF:D5:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.117.160.0/20 Signature Algorithm: sha256WithRSAEncryption c4:84:02:49:43:79:3e:be:24:bf:b2:e0:de:ac:d5:6f:ee:b2: b9:1c:c9:0c:1e:7a:65:a9:dd:ca:0b:f2:aa:86:5c:8c:ed:35: a1:63:2d:c3:c5:bd:a3:3f:5b:be:01:5f:55:5b:38:7b:f8:b9: 05:3d:26:cd:b5:76:c8:c6:1f:30:c2:30:a9:e9:87:a9:4b:50: 3c:00:92:b2:02:3a:6c:cb:49:aa:34:dd:67:ef:1a:2a:a9:68: cd:47:d7:f3:03:a0:95:ef:81:c1:95:b5:5d:ec:c6:fd:93:4a: c2:e9:f6:15:47:91:21:f9:f8:2e:41:e7:e3:a8:e3:5e:64:d3: 08:e3:75:02:3a:e3:b5:bd:dc:f9:9f:9a:04:37:ae:38:57:7f: 90:bb:25:ec:92:c5:a4:8f:6d:d6:c2:93:07:75:a5:14:4f:97: d6:a6:81:74:d1:9b:a5:91:34:06:6f:f0:0e:20:cb:12:7a:e8: c4:e2:ea:d7:4b:68:9c:f8:e5:fe:50:b6:e8:42:80:dd:84:d3: a3:bf:bf:80:ec:69:27:59:42:3b:7e:78:b2:d7:fe:6b:43:bc: d3:36:81:3e:63:80:74:a2:53:9f:c8:a1:2e:f3:14:7b:26:cf: d3:91:fe:84:8d:12:61:1f:af:c6:81:98:2e:36:ea:15:81:29: d1:2e:fd:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTeUFXkBS/hGBOxgdWumGin/v5T8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAzMTA5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDFjZmQ5ODExNTlkMWJmNzNjNzA1ZjRlNWE0NjljMWU5 YTJkOTlmMmYyYmQ3Yzg0MWVmODc0YWM0YWU5NWFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf67/568u4GnXLUfKFK/jX0F+F4mhAdQErTqbfacJBo0WM B9p0UZgYhEt29XQiD3Djnv7lNp5JLd1ZDkBkbAYzhr/tsOm0wc7mX4TnBbbR7cQe ZPnfx+MS+SNrdHIgo5cl7QpGYXhUeqIZqs4Edkl58J+XSWlLxKiEMOL/RpLel72Q ADqrGs2NP0F+f9wZdYVM/dvANgjEFivplqUnTNhiBXhd5Zq84+bv3E13d2ueaKKg G+/frvuYmhSc0MwmIWM3IaUvFIwGTmkakQmoFhb9RDIobuXde9hNYOm14DY5NNVz KGj6XPWmLyE6B48Fs4fT6UGpkemiN3RgblcEDHy3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq75zRwwYIfkuGbOjVCYDN2Cv1XowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0MjNmM2E4LTk4YzYtNDRlMi05ZGY4LThjOTRjZjA5YTk1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASmdaAwDQYJKoZIhvcNAQELBQADggEBAMSEAklDeT6+JL+y4N6s1W/usrkc yQweemWp3coL8qqGXIztNaFjLcPFvaM/W74BX1VbOHv4uQU9Js21dsjGHzDCMKnp h6lLUDwAkrICOmzLSao03WfvGiqpaM1H1/MDoJXvgcGVtV3sxv2TSsLp9hVHkSH5 +C5B5+Oo415k0wjjdQI647W93PmfmgQ3rjhXf5C7JeySxaSPbdbCkwd1pRRPl9am gXTRm6WRNAZv8A4gyxJ66MTi6tdLaJz45f5QtuhCgN2E06O/v4DsaSdZQjt+eLLX /mtDvNM2gT5jgHSiU5/IoS7zFHsmz9OR/oSNEmEfr8aBmC426hWBKdEu/fw= -----END CERTIFICATE-----Generated at Tue May 12 21:54:25 2026 by rpki-client