$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d853a07-4fae-45bc-b076-258cf8e48280.roa File: 5d853a07-4fae-45bc-b076-258cf8e48280.roa (raw, json) Hash identifier: fCOfP5/ruRIgIjnzfJ6/dQFEQNI63GcVxrrHDc58VWA= Subject key identifier: 12:52:3F:A9:B9:84:6A:FC:79:D4:F3:3D:F8:57:C8:EC:DA:0B:57:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EF8BF8C0EEB8C834CF5B13F16E449257FA6F9C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d853a07-4fae-45bc-b076-258cf8e48280.roa Signing time: Fri 08 May 2026 00:21:16 +0000 ROA not before: Fri 08 May 2026 00:21:16 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.25.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:bf:8c:0e:eb:8c:83:4c:f5:b1:3f:16:e4:49:25:7f:a6:f9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:21:16 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=5760e4796265ee9c0868893b474f96e6c409822055408f06c42262ead166267b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:9b:a6:6f:45:29:8b:da:86:56:1d:5f:34: b3:e8:fc:b7:a2:95:8c:2d:1d:37:92:45:db:f2:53: 6e:ea:24:80:55:4b:5e:5b:fd:2e:4d:92:22:56:22: cf:6a:95:14:07:50:97:26:cb:11:ae:6f:13:49:96: f9:ce:48:90:7e:95:cf:92:e1:47:7a:4a:9d:c1:c1: 6a:0e:47:61:0f:51:73:bd:b2:7d:e8:3a:6d:8c:5e: 47:32:45:37:f1:01:ae:8e:be:4c:4e:39:54:10:90: 1d:4d:bd:a2:94:27:0a:b4:6f:36:73:7a:25:5f:7b: 13:3b:2e:8e:8c:94:a3:fe:7f:05:75:0e:29:38:06: 41:11:3f:c1:1f:5a:83:10:35:e7:c5:81:b1:e6:88: 32:e3:31:bb:0a:d5:0a:a2:32:fb:73:4f:c4:c7:08: 09:61:20:a7:87:39:0d:16:dc:10:72:c6:09:a7:10: d2:a5:46:24:9e:eb:62:24:98:66:bb:96:d6:12:26: b3:bb:b4:87:18:32:1e:fb:8f:8d:e0:3b:ee:46:91: 9f:1c:0c:f2:cb:01:ff:cb:3b:30:9f:34:b7:e3:82: fb:56:f0:2f:09:97:96:70:70:51:f7:42:2d:5a:ed: e2:31:d6:0c:25:24:81:ac:5a:6b:9f:a9:59:72:5d: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:3F:A9:B9:84:6A:FC:79:D4:F3:3D:F8:57:C8:EC:DA:0B:57:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d853a07-4fae-45bc-b076-258cf8e48280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.25.112.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:b2:55:0b:d9:98:47:4b:5a:93:39:79:b0:43:ab:1d:12:d1: ed:66:70:96:77:9e:95:76:47:81:ed:da:22:0a:05:25:58:dc: 39:fb:79:b9:94:88:eb:7c:c6:4c:13:7d:16:19:27:ee:ba:ea: d2:02:5d:b5:9c:7e:26:2d:76:a7:df:18:68:72:89:28:f9:14: 37:5a:cd:60:5b:42:d2:78:2a:34:dd:33:56:a2:b8:ee:5b:a9: c3:62:bd:ca:3b:60:d6:1c:a4:99:83:c9:8d:a6:a1:9f:75:0e: 18:a9:a1:e4:e2:54:bd:96:75:91:57:75:52:a0:b6:a5:16:ca: 2e:e8:86:57:db:07:33:06:ce:a8:74:5d:36:d2:96:34:ff:1b: 7d:20:45:82:78:f2:94:75:47:4b:c5:2a:22:e3:53:8a:80:a5: 0e:f4:d3:ad:9a:47:5f:6e:8e:a6:96:1f:1c:7c:c1:77:4c:18: 29:54:40:1d:a3:9b:b5:f5:18:26:2a:eb:f5:36:5f:2f:85:29: d4:38:91:d8:64:9a:15:a7:fb:0c:75:65:f8:49:3f:4d:5b:ed: f0:44:f4:2c:ca:47:20:92:14:a7:4e:f7:9c:85:8a:0e:62:fb: b8:83:2c:b9:35:6e:ce:45:e7:a8:bd:56:8e:6f:91:53:27:5f: d7:d5:e5:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTvi/jA7rjINM9bE/FuRJJX+m+cgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAyMTE2WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzYwZTQ3OTYyNjVlZTljMDg2ODg5M2I0NzRmOTZlNmM0 MDk4MjIwNTU0MDhmMDZjNDIyNjJlYWQxNjYyNjdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuaJumb0Upi9qGVh1fNLPo/LeilYwtHTeSRdvyU27qJIBV S15b/S5NkiJWIs9qlRQHUJcmyxGubxNJlvnOSJB+lc+S4Ud6Sp3BwWoOR2EPUXO9 sn3oOm2MXkcyRTfxAa6OvkxOOVQQkB1NvaKUJwq0bzZzeiVfexM7Lo6MlKP+fwV1 Dik4BkERP8EfWoMQNefFgbHmiDLjMbsK1QqiMvtzT8THCAlhIKeHOQ0W3BByxgmn ENKlRiSe62IkmGa7ltYSJrO7tIcYMh77j43gO+5GkZ8cDPLLAf/LOzCfNLfjgvtW 8C8Jl5ZwcFH3Qi1a7eIx1gwlJIGsWmufqVlyXZ/bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUElI/qbmEavx51PM9+FfI7NoLVy4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkODUzYTA3LTRmYWUtNDViYy1iMDc2LTI1OGNmOGU0ODI4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFGXAwDQYJKoZIhvcNAQELBQADggEBAFuyVQvZmEdLWpM5ebBDqx0S0e1m cJZ3npV2R4Ht2iIKBSVY3Dn7ebmUiOt8xkwTfRYZJ+666tICXbWcfiYtdqffGGhy iSj5FDdazWBbQtJ4KjTdM1aiuO5bqcNivco7YNYcpJmDyY2moZ91DhipoeTiVL2W dZFXdVKgtqUWyi7ohlfbBzMGzqh0XTbSljT/G30gRYJ48pR1R0vFKiLjU4qApQ70 062aR19ujqaWHxx8wXdMGClUQB2jm7X1GCYq6/U2Xy+FKdQ4kdhkmhWn+wx1ZfhJ P01b7fBE9CzKRyCSFKdO95yFig5i+7iDLLk1bs5F56i9Vo5vkVMnX9fV5bs= -----END CERTIFICATE-----Generated at Tue May 12 21:58:54 2026 by rpki-client