$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66b70f8b-357b-4543-a188-44c8e4d19e9e.roa File: 66b70f8b-357b-4543-a188-44c8e4d19e9e.roa (raw, json) Hash identifier: 7xYM7bZ+BKEEQI7idvoXo2sf8DTpqIS/U3gI2RgSk/M= Subject key identifier: 3C:60:BE:A2:4A:61:09:F2:06:0A:66:0F:89:29:85:73:FC:7D:67:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24FEC388BB20488478CD0BCC1EC6DA22FA4FB21A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66b70f8b-357b-4543-a188-44c8e4d19e9e.roa Signing time: Fri 08 May 2026 00:21:19 +0000 ROA not before: Fri 08 May 2026 00:21:19 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.25.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fe:c3:88:bb:20:48:84:78:cd:0b:cc:1e:c6:da:22:fa:4f:b2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:21:19 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=88bab8af2313ca74dd9e48e3c6cda1ce765a9d881c5f01b2824990d437e42e04, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:76:c2:39:5e:fd:0e:57:1b:72:0f:2b:c5: b5:50:fc:7e:b2:5e:a8:2e:59:69:37:a1:88:db:4a: 4e:37:3b:f8:ab:d4:05:0d:5d:9a:a7:4a:5c:4f:00: 82:f8:0b:05:73:4f:8d:cc:cf:22:f5:b3:1e:8e:df: 0d:f5:03:e6:e7:31:ba:cc:c8:73:e9:76:a8:87:be: de:69:e7:b9:32:38:bf:c7:e9:76:32:5a:15:a1:5b: 34:b7:9f:ef:28:ce:ba:f1:31:7f:01:a9:86:bb:cb: 30:d1:f9:4b:54:f6:55:c4:dc:58:41:ff:81:23:54: ed:8c:55:d8:7d:a5:2e:f7:17:d3:e1:f0:2b:a8:c6: 8f:50:06:d4:bf:ea:d1:1e:40:48:d9:cc:60:ce:92: e4:7f:a0:ad:a3:63:58:a0:13:fb:b1:74:6c:88:70: 6e:c7:c4:2e:2b:1c:98:ef:08:9c:3e:13:5c:a3:76: a7:88:a0:42:31:3a:2b:13:a2:a1:17:88:6a:24:c8: e4:d4:59:19:c9:db:85:9e:71:4e:31:8a:25:02:b4: 23:17:9e:e3:b8:4a:05:b1:04:bd:8e:5d:de:d7:b5: 89:ed:51:66:ec:f7:dd:54:7d:da:19:5e:52:b3:9b: 14:97:1c:4e:7e:e6:77:28:f1:02:5c:df:ab:5e:e5: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:60:BE:A2:4A:61:09:F2:06:0A:66:0F:89:29:85:73:FC:7D:67:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66b70f8b-357b-4543-a188-44c8e4d19e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.25.52.0/22 Signature Algorithm: sha256WithRSAEncryption 75:ba:32:31:c0:08:be:d5:38:99:45:05:cb:8e:47:9b:70:01: 29:1a:a6:75:c6:5c:33:3d:a7:45:0a:3d:4b:bc:cf:50:8d:80: 0e:99:71:4f:94:66:d8:72:bf:a9:c7:3d:b2:7e:e6:9d:97:95: db:9f:b2:f6:e3:c9:a5:86:3f:f9:17:01:59:b4:6d:55:89:cd: 81:dc:10:35:1a:ef:31:8b:6b:45:44:9a:f2:b0:e0:ea:41:e8: 6b:0e:f4:5a:34:d8:07:19:36:09:89:20:14:92:89:54:c1:fe: 19:fb:42:8d:7b:0d:06:47:98:07:e1:d0:86:0d:37:2e:64:dc: 02:ff:03:38:5e:f4:ec:ec:82:88:b0:93:c3:f9:0d:02:9d:2d: 87:c7:0a:ec:25:ca:2c:88:6e:ce:7a:3f:b3:40:61:40:8c:d5: bd:c6:dc:aa:e0:cf:42:06:8b:f0:b2:d8:cd:f8:ff:6a:c0:23: fb:ac:f0:70:47:43:76:26:cb:dd:4b:e1:36:6e:ee:0b:8a:fe: 86:cd:ff:57:aa:97:7f:98:61:53:97:95:75:34:54:3f:db:83: 15:3a:57:40:f2:22:23:ad:6f:f5:46:77:ec:bc:6d:c8:c1:f3: 9e:d1:36:e7:05:47:f2:f9:99:19:4d:e8:57:cb:e7:37:23:69: cd:b0:98:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJP7DiLsgSIR4zQvMHsbaIvpPshowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAyMTE5WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGJhYjhhZjIzMTNjYTc0ZGQ5ZTQ4ZTNjNmNkYTFjZTc2 NWE5ZDg4MWM1ZjAxYjI4MjQ5OTBkNDM3ZTQyZTA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS4HbCOV79Dlcbcg8rxbVQ/H6yXqguWWk3oYjbSk43O/ir 1AUNXZqnSlxPAIL4CwVzT43MzyL1sx6O3w31A+bnMbrMyHPpdqiHvt5p57kyOL/H 6XYyWhWhWzS3n+8ozrrxMX8BqYa7yzDR+UtU9lXE3FhB/4EjVO2MVdh9pS73F9Ph 8Cuoxo9QBtS/6tEeQEjZzGDOkuR/oK2jY1igE/uxdGyIcG7HxC4rHJjvCJw+E1yj dqeIoEIxOisToqEXiGokyOTUWRnJ24WecU4xiiUCtCMXnuO4SgWxBL2OXd7XtYnt UWbs991UfdoZXlKzmxSXHE5+5nco8QJc36te5b+fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPGC+okphCfIGCmYPiSmFc/x9Zw8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2YjcwZjhiLTM1N2ItNDU0My1hMTg4LTQ0YzhlNGQxOWU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFGTQwDQYJKoZIhvcNAQELBQADggEBAHW6MjHACL7VOJlFBcuOR5twASka pnXGXDM9p0UKPUu8z1CNgA6ZcU+UZthyv6nHPbJ+5p2XldufsvbjyaWGP/kXAVm0 bVWJzYHcEDUa7zGLa0VEmvKw4OpB6GsO9Fo02AcZNgmJIBSSiVTB/hn7Qo17DQZH mAfh0IYNNy5k3AL/Azhe9Ozsgoiwk8P5DQKdLYfHCuwlyiyIbs56P7NAYUCM1b3G 3Krgz0IGi/Cy2M34/2rAI/us8HBHQ3Ymy91L4TZu7guK/obN/1eql3+YYVOXlXU0 VD/bgxU6V0DyIiOtb/VGd+y8bcjB857RNucFR/L5mRlN6FfL5zcjac2wmKU= -----END CERTIFICATE-----Generated at Wed May 13 00:46:22 2026 by rpki-client