$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa File: 721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa (raw, json) Hash identifier: ckkCzcs4P+hkR2OFk9H8vLX8W3CQGJBjuU2k+Z5oSP4= Subject key identifier: A2:14:EF:C9:38:00:CC:D1:7E:35:79:88:E0:89:CC:52:70:42:DB:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22B9964DDF3CBDE7A0B4CD26A055BCA685B02857 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa Signing time: Tue 28 Apr 2026 00:20:37 +0000 ROA not before: Tue 28 Apr 2026 00:20:37 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 107.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b9:96:4d:df:3c:bd:e7:a0:b4:cd:26:a0:55:bc:a6:85:b0:28:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:20:37 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=81c392fc97465e106662fd7d34b278f7b5e0d03049478685cfdfbd703522245d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:bb:48:1f:99:2f:8d:a2:0f:49:86:7c:36: 65:c4:e2:fe:b7:c1:89:fd:2c:db:73:11:c6:68:43: 07:19:39:4f:19:00:19:f8:34:60:58:c3:39:8e:5f: b6:72:64:3f:44:59:8e:ff:db:82:57:d1:d9:c3:7b: c1:dc:b1:81:7e:a8:cc:f4:2a:1a:c2:af:80:24:82: e7:e9:12:af:4a:02:d7:ee:2f:81:31:44:8b:f6:b5: e0:ce:26:d5:f2:99:69:0e:26:ee:d9:2f:e9:41:8b: 29:7f:d0:2d:bf:98:bc:ce:b5:9d:d9:6a:08:2c:6f: c9:5b:c9:5e:9f:03:68:73:e2:1c:3e:9a:7b:1f:6f: a9:85:09:db:29:e6:71:20:31:00:67:94:4a:a1:92: c1:63:82:97:7d:09:2d:62:25:4c:6f:3a:34:60:45: f5:d8:20:52:ee:75:e2:ff:83:5a:cf:b5:43:60:70: be:f0:78:c4:9f:e0:48:ab:65:62:95:34:e1:66:aa: 7c:3e:1a:1d:4e:88:04:23:12:ab:0b:95:af:e7:56: ee:6c:8c:b1:2e:d7:19:1a:8b:6c:23:86:81:f4:2a: e1:f8:41:30:c8:b4:5b:e9:66:47:42:1e:0d:cc:a2: 71:5b:51:03:58:95:25:d5:de:ac:da:f5:5e:f1:9f: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:14:EF:C9:38:00:CC:D1:7E:35:79:88:E0:89:CC:52:70:42:DB:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption ca:39:7f:7c:21:a2:a0:73:40:0e:00:aa:9d:e1:52:2f:b1:6a: 45:fc:92:9f:22:e5:50:f6:95:ca:0b:b5:8c:8b:75:4c:92:0f: fb:ee:81:81:08:c4:4e:1a:9c:e0:9b:5d:d3:1d:92:95:fe:14: 1b:a1:51:1c:08:9c:48:c3:fd:b3:ac:c8:1c:0d:55:74:32:88: d8:0b:d8:20:b5:3b:98:ee:ee:51:94:aa:e5:c3:73:c6:f5:7f: fd:d6:7c:aa:2a:57:1a:d1:61:04:33:65:06:b7:99:7c:25:94: f4:8c:0b:86:bd:3f:88:0f:dd:a2:73:bf:0e:ef:11:0f:bb:8e: 75:5a:74:61:f7:b9:81:dc:48:ab:76:85:92:c8:3f:e3:32:2b: 9e:f6:72:5b:e3:b0:77:06:83:ec:14:f3:ac:f0:f7:ad:00:fa: 0f:54:46:e1:1d:49:05:0d:7c:89:10:01:cd:a7:81:a2:8a:fe: 0c:bf:8e:56:dd:95:c0:4e:df:22:c5:c6:58:3d:71:60:95:cd: 07:83:9b:f5:51:90:d5:b6:17:6d:7d:bc:0f:59:2e:d0:8e:dd: f3:75:e2:0b:1b:3d:31:16:24:51:f8:0a:38:ec:12:93:f4:0c: 16:89:10:a9:d4:82:79:5c:2c:bf:cb:8f:4f:3c:cb:7e:11:63: ed:bb:d4:ad -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIrmWTd88veegtM0moFW8poWwKFcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAyMDM3WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWMzOTJmYzk3NDY1ZTEwNjY2MmZkN2QzNGIyNzhmN2I1 ZTBkMDMwNDk0Nzg2ODVjZmRmYmQ3MDM1MjIyNDVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcErtIH5kvjaIPSYZ8NmXE4v63wYn9LNtzEcZoQwcZOU8Z ABn4NGBYwzmOX7ZyZD9EWY7/24JX0dnDe8HcsYF+qMz0KhrCr4AkgufpEq9KAtfu L4ExRIv2teDOJtXymWkOJu7ZL+lBiyl/0C2/mLzOtZ3Zaggsb8lbyV6fA2hz4hw+ mnsfb6mFCdsp5nEgMQBnlEqhksFjgpd9CS1iJUxvOjRgRfXYIFLudeL/g1rPtUNg cL7weMSf4EirZWKVNOFmqnw+Gh1OiAQjEqsLla/nVu5sjLEu1xkai2wjhoH0KuH4 QTDItFvpZkdCHg3MonFbUQNYlSXV3qza9V7xn2QtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUohTvyTgAzNF+NXmI4InMUnBC208wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyMWFhN2JlLWQ0YjctNGQ0NC05N2QyLTZmYmMyMTQ0ZjQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEAyjl/fCGioHNADgCqneFSL7FqRfyS nyLlUPaVygu1jIt1TJIP++6BgQjEThqc4Jtd0x2Slf4UG6FRHAicSMP9s6zIHA1V dDKI2AvYILU7mO7uUZSq5cNzxvV//dZ8qipXGtFhBDNlBreZfCWU9IwLhr0/iA/d onO/Du8RD7uOdVp0Yfe5gdxIq3aFksg/4zIrnvZyW+OwdwaD7BTzrPD3rQD6D1RG 4R1JBQ18iRABzaeBoor+DL+OVt2VwE7fIsXGWD1xYJXNB4Ob9VGQ1bYXbX28D1ku 0I7d83XiCxs9MRYkUfgKOOwSk/QMFokQqdSCeVwsv8uPTzzLfhFj7bvUrQ== -----END CERTIFICATE-----Generated at Wed May 13 00:39:06 2026 by rpki-client