$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c5552e-f911-4049-840d-5f76ab2a6dd0.roa File: 61c5552e-f911-4049-840d-5f76ab2a6dd0.roa (raw, json) Hash identifier: QTatxA+4zgmAxhCFYyo3G4YRKDfD+L8P8FcAsE7ZJSk= Subject key identifier: 9F:35:1A:FE:B1:E1:D7:D4:0B:E9:FF:46:36:BE:F5:79:B2:81:17:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44AA4D1E8107802D0A8627E62DA710F4D2423419 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c5552e-f911-4049-840d-5f76ab2a6dd0.roa Signing time: Mon 27 Apr 2026 00:10:45 +0000 ROA not before: Mon 27 Apr 2026 00:10:45 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 149.187.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:aa:4d:1e:81:07:80:2d:0a:86:27:e6:2d:a7:10:f4:d2:42:34:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 27 00:10:45 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=845c678fc0e29d35f6e9ef679913355f764eee2ff2ce744da9c7323bbce1ae96, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:cc:1c:16:53:5a:be:18:ed:ce:83:e8:71: 50:ff:99:cb:88:e7:9a:92:97:4d:97:a9:23:c3:6a: 1b:73:5a:d0:3e:f2:c8:3c:0c:85:03:ef:60:6e:76: b8:d6:57:73:46:1f:ad:a0:26:40:27:89:24:d2:4d: 7f:ed:f4:55:43:04:d2:92:0d:98:53:16:30:c0:da: 80:a8:84:70:f8:cf:77:35:92:58:41:c2:78:d6:ee: dc:b8:b5:99:e2:c5:fd:b1:42:c1:48:47:6d:f8:8b: 46:a2:fc:96:b4:71:ae:38:c8:bb:5b:eb:d3:ae:f9: fd:97:65:f5:d7:46:66:a2:6d:65:26:1f:43:7b:5a: 43:05:57:5e:1b:6d:1a:04:5d:72:9d:f7:17:1b:96: 19:25:a9:bb:4f:a1:c3:79:f1:f9:0f:f0:fd:bd:a4: f8:c5:52:66:06:75:a2:33:dd:7b:17:15:f9:95:4c: 25:41:32:ea:88:41:78:c3:f2:c5:c3:4c:ca:22:c8: 4c:ff:90:4f:a4:4c:bd:85:74:81:27:3f:47:6c:59: 88:81:54:8a:c8:b4:24:53:b4:1d:64:69:39:6f:93: 3e:41:73:5b:e1:28:bf:4e:ca:e6:eb:3e:e3:9e:33: 46:69:53:6c:b8:26:d3:6b:82:58:4e:57:6b:6e:49: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:35:1A:FE:B1:E1:D7:D4:0B:E9:FF:46:36:BE:F5:79:B2:81:17:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c5552e-f911-4049-840d-5f76ab2a6dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.187.128.0/17 Signature Algorithm: sha256WithRSAEncryption b7:0f:76:13:54:7c:3c:b5:72:c8:1e:66:5f:1c:da:1b:7b:38: da:47:50:90:96:1b:d4:1a:43:6a:b1:86:d8:8d:cd:c4:d3:9f: ce:96:62:26:6c:d2:55:f6:62:a0:14:39:4c:c6:d5:c0:5c:9b: cb:53:6b:4a:ac:c9:04:08:ce:e2:54:0b:93:3e:fc:88:23:75: cf:43:e3:b2:f3:1a:df:25:8c:f0:3e:55:ff:26:fb:c3:c0:e9: 48:e1:e3:20:13:68:ed:4e:45:d9:31:05:f2:bb:5f:bc:50:4c: 1d:6c:8a:ee:7a:01:4e:10:1f:5c:5d:37:d2:bb:68:c5:ea:d6: 88:45:bd:e9:28:af:2f:25:3d:96:60:ca:32:3b:76:9b:6d:cc: aa:48:4b:2b:eb:78:3c:9e:01:3b:30:4c:60:c3:e2:5d:3e:10: 14:5b:ca:cc:c5:08:5d:de:26:65:ec:a6:a2:94:e9:0e:6c:bd: f5:d4:d1:52:51:d5:6d:ad:c8:4c:16:53:14:8d:8b:5a:bd:7e: 8e:55:0b:87:50:ef:75:13:53:1f:1d:db:c8:0f:17:b4:9e:92: 16:20:3a:e2:55:a8:5e:3d:ad:fc:12:25:d6:d1:62:63:1a:84: 8c:3c:c6:47:49:f1:ea:02:63:df:76:aa:ae:90:03:0f:57:71: 97:af:f8:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURKpNHoEHgC0KhifmLacQ9NJCNBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI3MDAxMDQ1WhcNMjYwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDVjNjc4ZmMwZTI5ZDM1ZjZlOWVmNjc5OTEzMzU1Zjc2 NGVlZTJmZjJjZTc0NGRhOWM3MzIzYmJjZTFhZTk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6CcwcFlNavhjtzoPocVD/mcuI55qSl02XqSPDahtzWtA+ 8sg8DIUD72BudrjWV3NGH62gJkAniSTSTX/t9FVDBNKSDZhTFjDA2oCohHD4z3c1 klhBwnjW7ty4tZnixf2xQsFIR234i0ai/Ja0ca44yLtb69Ou+f2XZfXXRmaibWUm H0N7WkMFV14bbRoEXXKd9xcblhklqbtPocN58fkP8P29pPjFUmYGdaIz3XsXFfmV TCVBMuqIQXjD8sXDTMoiyEz/kE+kTL2FdIEnP0dsWYiBVIrItCRTtB1kaTlvkz5B c1vhKL9OyubrPuOeM0ZpU2y4JtNrglhOV2tuSeePAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnzUa/rHh19QL6f9GNr71ebKBF9owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxYzU1NTJlLWY5MTEtNDA0OS04NDBkLTVmNzZhYjJhNmRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeVu4AwDQYJKoZIhvcNAQELBQADggEBALcPdhNUfDy1csgeZl8c2ht7ONpH UJCWG9QaQ2qxhtiNzcTTn86WYiZs0lX2YqAUOUzG1cBcm8tTa0qsyQQIzuJUC5M+ /Igjdc9D47LzGt8ljPA+Vf8m+8PA6Ujh4yATaO1ORdkxBfK7X7xQTB1siu56AU4Q H1xdN9K7aMXq1ohFvekory8lPZZgyjI7dpttzKpISyvreDyeATswTGDD4l0+EBRb yszFCF3eJmXspqKU6Q5svfXU0VJR1W2tyEwWUxSNi1q9fo5VC4dQ73UTUx8d28gP F7SekhYgOuJVqF49rfwSJdbRYmMahIw8xkdJ8eoCY992qq6QAw9XcZev+Ow= -----END CERTIFICATE-----Generated at Wed May 13 04:40:18 2026 by rpki-client