$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7325b5c8-c5a3-498a-9164-530c63b89822.roa File: 7325b5c8-c5a3-498a-9164-530c63b89822.roa (raw, json) Hash identifier: ri5xJprqBNmttOKZyTBdlC1jOg4p2yEdbzrCD2QSE2M= Subject key identifier: 4A:77:F4:CA:0E:0A:AF:F4:AB:F3:AF:0E:DB:56:43:49:B3:5C:E4:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5057958057CD0A910A6AA1A667494DB18C02BAC3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7325b5c8-c5a3-498a-9164-530c63b89822.roa Signing time: Sat 09 May 2026 00:11:24 +0000 ROA not before: Sat 09 May 2026 00:11:24 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 40.38.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:57:95:80:57:cd:0a:91:0a:6a:a1:a6:67:49:4d:b1:8c:02:ba:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:11:24 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=5450d51dd78a7db7a4e9a42b67110fa0e11dbb9c480aa719bf92dff69cd23681, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:84:30:cf:37:94:63:d1:2f:fe:a2:9d:ac: 08:d0:cf:b2:18:c4:b4:a3:89:c1:16:b4:2a:71:f7: 3d:b3:ec:5b:60:30:b3:ca:5e:ec:59:20:f1:47:ef: fd:00:e6:11:ca:e6:a3:d2:bf:06:13:9d:f5:35:1d: 65:fe:db:26:33:e8:97:10:da:8d:72:39:27:c8:23: a8:c3:c1:95:22:32:73:26:de:76:86:81:f3:a3:40: 00:04:86:d1:c3:dc:85:b6:ed:c3:b6:e2:02:73:b0: 24:aa:f7:0e:72:26:04:8d:98:a7:bf:c1:39:f8:9d: 6c:8b:3d:99:8c:2d:fb:93:0f:3c:3f:37:8b:b1:3d: 00:21:65:9a:c5:c1:3c:5c:45:9c:ec:a9:fa:1b:62: ad:dd:ad:19:f7:a7:5c:eb:17:47:4a:7f:f5:a4:56: 1f:c8:77:b7:9c:3f:5c:78:91:a8:59:29:a6:d9:2e: fb:80:66:88:dd:8a:a6:21:ed:eb:4d:d0:89:8a:a5: 13:77:78:ce:9f:83:29:a4:12:f4:c0:88:34:16:53: 71:a6:df:a9:6a:4b:97:1d:4c:de:3b:e2:50:7f:cc: f8:95:2e:5c:60:ae:2d:77:81:84:a4:6c:86:6f:82: 6a:49:b7:17:7e:78:b7:78:45:45:b5:be:44:2d:fd: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:77:F4:CA:0E:0A:AF:F4:AB:F3:AF:0E:DB:56:43:49:B3:5C:E4:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7325b5c8-c5a3-498a-9164-530c63b89822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption 24:e9:a7:17:d6:a1:81:0d:10:bc:3e:1e:3b:1f:cc:d6:90:11: 62:eb:d8:aa:ff:3f:07:ff:5f:c6:b1:8b:3f:f7:ad:c4:79:87: 28:48:4f:6b:08:f2:2f:82:e2:f1:f4:39:0e:4a:ab:de:98:83: a7:48:fa:c5:03:54:6d:d0:68:af:28:6f:67:35:e0:2b:03:95: 24:95:0e:ee:dc:ec:c9:5a:af:3d:e2:44:17:19:25:4f:cc:ae: e4:21:3b:ec:59:65:03:1d:2d:79:3e:49:16:d7:34:fe:e8:08: 1c:c6:07:b8:23:80:25:dd:d7:e7:08:9b:b7:0b:eb:21:d6:00: 70:ed:5d:67:fa:9d:1e:80:69:32:5d:df:78:57:c0:51:64:6e: 89:53:9c:45:de:75:e2:07:42:c2:40:67:02:b2:65:c3:ec:f9: 0a:76:35:c3:92:8a:c5:fe:a1:b2:b4:7b:f7:3d:0e:a9:51:1c: b1:99:ec:63:a9:9e:6e:14:22:17:e6:b3:9f:c2:67:bd:f3:38: e1:86:2c:d6:2d:3f:7a:91:59:79:93:eb:1d:5d:89:29:fa:38: 38:72:fd:e2:70:da:9a:cc:1e:e2:8f:06:85:d4:fc:dc:1f:49: 0d:9d:18:72:7b:18:f3:7d:19:40:7b:90:31:31:fe:70:9b:26: 19:ed:d9:d9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUFeVgFfNCpEKaqGmZ0lNsYwCusMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAxMTI0WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDUwZDUxZGQ3OGE3ZGI3YTRlOWE0MmI2NzExMGZhMGUx MWRiYjljNDgwYWE3MTliZjkyZGZmNjljZDIzNjgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXiYQwzzeUY9Ev/qKdrAjQz7IYxLSjicEWtCpx9z2z7Ftg MLPKXuxZIPFH7/0A5hHK5qPSvwYTnfU1HWX+2yYz6JcQ2o1yOSfII6jDwZUiMnMm 3naGgfOjQAAEhtHD3IW27cO24gJzsCSq9w5yJgSNmKe/wTn4nWyLPZmMLfuTDzw/ N4uxPQAhZZrFwTxcRZzsqfobYq3drRn3p1zrF0dKf/WkVh/Id7ecP1x4kahZKabZ LvuAZojdiqYh7etN0ImKpRN3eM6fgymkEvTAiDQWU3Gm36lqS5cdTN474lB/zPiV Llxgri13gYSkbIZvgmpJtxd+eLd4RUW1vkQt/ZstAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSnf0yg4Kr/Sr868O21ZDSbNc5BEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczMjViNWM4LWM1YTMtNDk4YS05MTY0LTUzMGM2M2I4OTgyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoJjANBgkqhkiG9w0BAQsFAAOCAQEAJOmnF9ahgQ0QvD4eOx/M1pARYuvY qv8/B/9fxrGLP/etxHmHKEhPawjyL4Li8fQ5Dkqr3piDp0j6xQNUbdBoryhvZzXg KwOVJJUO7tzsyVqvPeJEFxklT8yu5CE77FllAx0teT5JFtc0/ugIHMYHuCOAJd3X 5wibtwvrIdYAcO1dZ/qdHoBpMl3feFfAUWRuiVOcRd514gdCwkBnArJlw+z5CnY1 w5KKxf6hsrR79z0OqVEcsZnsY6mebhQiF+azn8JnvfM44YYs1i0/epFZeZPrHV2J Kfo4OHL94nDamswe4o8GhdT83B9JDZ0YcnsY830ZQHuQMTH+cJsmGe3Z2Q== -----END CERTIFICATE-----Generated at Wed May 13 04:08:22 2026 by rpki-client