$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa File: 5831f36f-50de-43df-b1e3-ee6e835954e3.roa (raw, json) Hash identifier: zyfyN8uKLG1BaXerjU5rrljAIIyI25qPlXTa26KTzAw= Subject key identifier: C3:42:ED:24:1E:88:64:7E:47:57:BB:B3:F7:1E:48:AD:6E:86:F1:84 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3966A40C3C0DE2FFF71D313E531264F5D3DA1862 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa Signing time: Wed 06 May 2026 00:40:45 +0000 ROA not before: Wed 06 May 2026 00:40:45 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:66:a4:0c:3c:0d:e2:ff:f7:1d:31:3e:53:12:64:f5:d3:da:18:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:40:45 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=a9a0114b8af91b12dcf4eeceb0814a429d55081d062e218f75187a0c96d6aca9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:f8:8c:09:e2:14:43:13:8b:bc:12:fd:8f: 11:c3:d0:f1:2e:72:46:89:e1:75:15:2e:f1:a6:eb: 13:9d:91:93:7d:d7:ee:f5:c3:df:74:4b:be:54:36: e7:0b:d5:ca:f1:04:e8:68:62:85:01:2b:24:2d:94: 91:70:31:55:9c:b6:fb:19:b6:b4:80:03:96:d1:f2: cb:a9:77:91:78:53:26:a7:88:df:32:b4:39:3f:bf: 09:a0:d7:df:c0:e1:da:7c:8b:f2:98:08:24:c9:1a: 57:fb:b3:f5:c3:3b:f5:1e:67:e7:fc:84:0e:bf:e2: be:ec:ca:f2:b4:27:5e:fb:b5:71:82:72:26:a7:e5: 90:4e:ae:04:e1:c1:5f:0b:fe:44:af:df:12:72:6f: 47:4d:c4:3d:42:2e:06:f7:39:14:c1:4c:0e:9c:ed: 64:d1:06:c5:b4:b1:1f:05:18:e7:40:44:6a:55:33: 0d:b2:ec:be:0e:47:b7:a4:83:6c:6f:51:c8:7b:56: b5:70:e5:f5:86:83:42:e7:a4:13:58:d9:5c:12:8d: 90:2c:d0:02:49:f9:46:9e:ba:6d:42:01:b5:f5:87: d3:91:b6:97:a4:6f:57:3e:09:29:11:6e:6c:98:d3: 0f:4e:04:2e:e4:d1:ce:2c:9c:70:82:dd:c4:c9:54: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:42:ED:24:1E:88:64:7E:47:57:BB:B3:F7:1E:48:AD:6E:86:F1:84 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:cc:c8:ab:cf:09:78:a8:c6:a4:8d:1b:45:96:c4:1a:cd:64: 42:86:73:46:e7:de:53:ae:63:9f:9a:37:b1:f2:63:fd:92:f7: 59:9c:6c:76:d0:fb:16:67:99:16:12:b3:fd:76:c6:f9:da:dc: b1:16:5c:96:55:9d:f7:56:19:eb:6b:69:c8:7d:73:f1:5a:0f: f8:9c:83:e6:e4:4e:2f:fe:80:47:3b:1c:a4:fc:4e:af:8d:a4: 0e:98:76:bb:46:cb:75:3b:3d:57:02:24:78:74:08:a1:a2:43: 4c:80:27:65:2f:d2:ec:88:9a:f7:36:4e:5d:c8:a7:3f:49:00: 52:0e:67:26:6d:30:1f:9d:80:5b:c2:ef:ef:ab:f4:0e:81:01: 9b:46:f7:58:3b:53:d2:5a:06:d0:c8:73:8b:ca:67:d1:ac:a9: cf:3b:b4:0c:07:09:4d:4c:97:c6:fa:c9:1b:31:2f:1d:02:fe: d0:b5:16:bc:c3:14:22:ed:72:27:11:aa:41:70:8d:75:39:c4: 6d:25:3b:92:9a:cd:fb:50:11:24:34:1b:4e:e8:10:14:ed:27: 58:ed:90:1b:7c:02:56:f9:5b:47:70:4b:c3:30:8b:6b:d6:8a: f3:78:e9:2e:06:e9:9a:84:ad:40:32:f8:c7:9c:4c:b1:a8:5c: 85:e2:94:93 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOWakDDwN4v/3HTE+UxJk9dPaGGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDA0MDQ1WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWEwMTE0YjhhZjkxYjEyZGNmNGVlY2ViMDgxNGE0Mjlk NTUwODFkMDYyZTIxOGY3NTE4N2EwYzk2ZDZhY2E5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSv/iMCeIUQxOLvBL9jxHD0PEuckaJ4XUVLvGm6xOdkZN9 1+71w990S75UNucL1crxBOhoYoUBKyQtlJFwMVWctvsZtrSAA5bR8supd5F4Uyan iN8ytDk/vwmg19/A4dp8i/KYCCTJGlf7s/XDO/UeZ+f8hA6/4r7syvK0J177tXGC cian5ZBOrgThwV8L/kSv3xJyb0dNxD1CLgb3ORTBTA6c7WTRBsW0sR8FGOdARGpV Mw2y7L4OR7ekg2xvUch7VrVw5fWGg0LnpBNY2VwSjZAs0AJJ+Uaeum1CAbX1h9OR tpekb1c+CSkRbmyY0w9OBC7k0c4snHCC3cTJVGV5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUw0LtJB6IZH5HV7uz9x5IrW6G8YQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4MzFmMzZmLTUwZGUtNDNkZi1iMWUzLWVlNmU4MzU5NTRlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQQjANBgkqhkiG9w0BAQsFAAOCAQEAhszIq88JeKjGpI0bRZbEGs1kQoZz RufeU65jn5o3sfJj/ZL3WZxsdtD7FmeZFhKz/XbG+drcsRZcllWd91YZ62tpyH1z 8VoP+JyD5uROL/6ARzscpPxOr42kDph2u0bLdTs9VwIkeHQIoaJDTIAnZS/S7Iia 9zZOXcinP0kAUg5nJm0wH52AW8Lv76v0DoEBm0b3WDtT0loG0Mhzi8pn0aypzzu0 DAcJTUyXxvrJGzEvHQL+0LUWvMMUIu1yJxGqQXCNdTnEbSU7kprN+1ARJDQbTugQ FO0nWO2QG3wCVvlbR3BLwzCLa9aK83jpLgbpmoStQDL4x5xMsahcheKUkw== -----END CERTIFICATE-----Generated at Tue May 12 21:54:59 2026 by rpki-client