$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa File: 611a9329-2af8-483e-ade2-291c7456d663.roa (raw, json) Hash identifier: WXg/jbeu/zHPmt8DJkw1DXDFJRbWG8wiBaoVeVci5Xw= Subject key identifier: A4:41:72:08:8C:5B:26:CA:24:F0:A7:9C:50:B7:27:FD:B9:90:95:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6170D73B1F2D27024F0C433EA9A28E315EAE3D5D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa Signing time: Fri 08 May 2026 00:30:16 +0000 ROA not before: Fri 08 May 2026 00:30:16 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.191.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:70:d7:3b:1f:2d:27:02:4f:0c:43:3e:a9:a2:8e:31:5e:ae:3d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:30:16 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=276246ae0dd2e68b88d080a057b9f4aefc27afacf6c34071c5d86a58b96da088, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:8b:0d:58:40:89:9a:18:cf:92:33:aa:dc: 83:bb:a6:4e:9a:10:3d:9e:8b:74:4d:e7:94:f1:b1: f7:1a:f5:15:b4:53:49:bb:2b:7b:6b:d6:d4:43:51: 8b:ec:f0:d5:f6:af:80:25:ca:30:44:69:86:9f:81: 53:2f:52:21:3a:f4:0a:18:a1:f3:c8:f5:7b:ff:2c: 41:1f:55:52:20:18:74:8c:6b:95:b5:af:a2:84:44: 26:e1:e1:31:8e:6d:4f:d0:67:49:c8:a8:ec:66:ad: 42:b0:12:03:a7:da:fd:40:50:8b:65:d4:04:db:4a: ba:2d:ab:25:61:c6:2c:42:9b:c5:0f:dd:e0:5b:e2: c1:f1:f9:6c:68:26:e6:c8:90:f7:26:e0:92:91:fa: eb:0e:f1:86:82:1a:e1:bb:42:c8:6a:3b:b1:20:a1: a3:2b:5a:df:20:63:f8:6c:01:87:d6:1c:fe:fb:11: 2e:d2:23:b7:f4:7a:78:9b:7f:52:7a:60:88:49:17: 41:0c:05:61:2e:ae:d3:ab:69:60:8c:c6:7a:fb:55: fd:29:78:ee:f5:47:82:41:ff:ff:3d:98:28:0c:2b: 4c:c9:c0:53:26:83:7c:ec:01:4d:cf:33:00:de:a8: 77:87:88:cb:59:3a:46:fc:60:68:66:0c:98:69:c6: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:41:72:08:8C:5B:26:CA:24:F0:A7:9C:50:B7:27:FD:B9:90:95:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.191.152.0/22 Signature Algorithm: sha256WithRSAEncryption 68:b3:a5:b6:b8:24:7d:34:b6:f9:c0:c0:97:85:85:15:94:f2: ac:ba:0b:4b:6c:e7:79:11:e8:77:41:6a:0f:2e:1f:f7:ad:57: 24:eb:bd:29:e6:5a:26:7d:cf:5b:fc:b8:b0:c6:e4:5f:25:ac: c6:22:7b:31:6c:9f:ce:2f:22:17:d9:1e:9a:d1:98:67:c0:5e: 0a:f7:2a:ff:dc:a8:43:c0:95:05:45:2c:e7:1a:00:b0:2b:a2: 3b:3f:7e:36:ae:55:12:43:7e:72:44:f8:ae:1d:ac:a8:13:a6: d8:73:1b:af:1b:18:2f:a7:dd:96:ea:b3:8d:1b:3f:0e:e7:82: 73:11:cf:69:34:1e:dd:bb:e5:07:92:85:bd:50:8c:ba:7c:56: f9:4b:86:4a:fb:95:bb:9e:9d:ea:72:bd:ff:e4:54:a3:65:db: 97:41:21:b0:26:3a:2e:ba:c1:f0:3d:c4:a9:39:5d:ac:95:2a: a6:5a:b8:9c:4b:18:53:8e:85:22:d6:0d:3e:17:a0:09:49:4e: c6:4e:d6:10:4e:5a:f1:1c:ce:0c:66:2d:cf:e4:9c:57:ea:67: a4:f4:c3:82:92:af:e5:3b:1d:e9:38:a7:ea:6f:31:e8:bb:a1: 66:aa:55:36:47:c6:b1:69:28:86:e5:16:e9:4b:e8:11:d8:16: ba:bf:1d:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYXDXOx8tJwJPDEM+qaKOMV6uPV0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAzMDE2WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzYyNDZhZTBkZDJlNjhiODhkMDgwYTA1N2I5ZjRhZWZj MjdhZmFjZjZjMzQwNzFjNWQ4NmE1OGI5NmRhMDg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnAIsNWECJmhjPkjOq3IO7pk6aED2ei3RN55Txsfca9RW0 U0m7K3tr1tRDUYvs8NX2r4AlyjBEaYafgVMvUiE69AoYofPI9Xv/LEEfVVIgGHSM a5W1r6KERCbh4TGObU/QZ0nIqOxmrUKwEgOn2v1AUItl1ATbSrotqyVhxixCm8UP 3eBb4sHx+WxoJubIkPcm4JKR+usO8YaCGuG7QshqO7EgoaMrWt8gY/hsAYfWHP77 ES7SI7f0enibf1J6YIhJF0EMBWEurtOraWCMxnr7Vf0peO71R4JB//89mCgMK0zJ wFMmg3zsAU3PMwDeqHeHiMtZOkb8YGhmDJhpxgjJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpEFyCIxbJsok8KecULcn/bmQlfswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxMWE5MzI5LTJhZjgtNDgzZS1hZGUyLTI5MWM3NDU2ZDY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRv5gwDQYJKoZIhvcNAQELBQADggEBAGizpba4JH00tvnAwJeFhRWU8qy6 C0ts53kR6HdBag8uH/etVyTrvSnmWiZ9z1v8uLDG5F8lrMYiezFsn84vIhfZHprR mGfAXgr3Kv/cqEPAlQVFLOcaALArojs/fjauVRJDfnJE+K4drKgTpthzG68bGC+n 3Zbqs40bPw7ngnMRz2k0Ht275QeShb1QjLp8VvlLhkr7lbuenepyvf/kVKNl25dB IbAmOi66wfA9xKk5XayVKqZauJxLGFOOhSLWDT4XoAlJTsZO1hBOWvEczgxmLc/k nFfqZ6T0w4KSr+U7Hek4p+pvMei7oWaqVTZHxrFpKIblFulL6BHYFrq/Hbs= -----END CERTIFICATE-----Generated at Wed May 13 01:23:47 2026 by rpki-client