$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76338d63-f512-488e-a3a8-726efa277d81.roa File: 76338d63-f512-488e-a3a8-726efa277d81.roa (raw, json) Hash identifier: julnOa7hRMr6kddPWQWKIy+MWNBqdYbMPz2nQKuxVDQ= Subject key identifier: 84:B6:9A:F4:1A:5A:26:E6:1A:D0:55:53:FC:DC:85:3D:BC:C2:25:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 207FFACC340054F38CADAA934C9AA064C8F1BB60 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76338d63-f512-488e-a3a8-726efa277d81.roa Signing time: Tue 12 May 2026 00:50:08 +0000 ROA not before: Tue 12 May 2026 00:50:08 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7f:fa:cc:34:00:54:f3:8c:ad:aa:93:4c:9a:a0:64:c8:f1:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:50:08 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=08aeca08e010fc6f6a5c466cca7b3565e319f7f1a5a2189d0ca53e835351cd4d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:23:ac:1f:15:c1:de:f8:c7:f6:64:50:b1: 26:81:e7:a9:92:c9:c0:63:db:f9:23:93:db:91:d9: 1b:c2:19:bf:a0:0f:13:b0:11:fd:42:a9:e6:13:3d: 52:36:d7:54:a3:ad:49:f8:ce:d2:86:6e:6e:7e:4e: 2b:5c:65:ae:64:00:74:db:89:85:ae:92:8d:52:39: dc:4d:d5:37:d0:2a:e2:a0:c4:52:f7:e2:33:00:0e: 6d:e6:c4:5b:18:65:54:92:09:bc:97:17:e8:1f:fd: 16:d9:08:62:15:02:21:61:0b:1f:57:15:b0:da:92: 4c:70:b8:33:73:43:da:1f:75:ee:07:6c:e1:82:ec: af:00:ee:af:d0:e2:04:87:c4:b7:b3:22:8e:74:14: c2:d4:e2:1b:28:00:2d:24:90:2e:8a:34:f4:45:5f: 14:57:3f:dd:4c:ac:8d:89:c5:03:c5:ea:93:c9:fb: 77:72:06:67:e2:e8:68:e1:dd:88:ea:46:e1:89:e1: 28:57:8a:46:cf:86:18:7c:b0:e6:68:ff:9c:95:9d: e1:4e:e6:74:16:fe:47:2e:6c:19:7a:d2:1f:6e:e8: 59:22:00:ca:d8:0f:9b:98:38:4c:8a:0a:44:54:1a: 26:30:93:47:86:4e:71:07:90:0e:0a:59:45:8d:51: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B6:9A:F4:1A:5A:26:E6:1A:D0:55:53:FC:DC:85:3D:BC:C2:25:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76338d63-f512-488e-a3a8-726efa277d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.65.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:9a:5b:72:57:a9:64:58:04:60:f7:48:d3:55:57:c3:31:cb: 74:b6:5a:e1:98:d5:36:e5:70:8d:93:5c:1f:7a:94:09:3d:30: f8:e3:e9:0e:39:b9:1a:ea:eb:11:f9:74:53:ed:3b:4f:e1:d4: f0:92:9b:b4:3f:1e:10:ca:ee:db:30:cf:56:92:e7:af:ea:b1: bc:79:dd:d0:70:ee:6a:48:93:8c:45:4f:f4:23:44:f7:d2:a5: 8f:de:4b:a7:e6:45:83:b3:3d:98:d8:e8:0c:68:c6:ce:13:51: fd:3d:f9:60:b1:75:a8:73:cb:eb:9d:c2:80:61:af:65:1b:b0: 72:2f:b9:56:11:33:28:80:1a:b9:cf:b9:cd:dd:b7:da:63:1b: 69:f3:87:f4:83:c9:e1:e7:48:fe:42:bd:98:2a:98:b1:1c:9b: 04:ae:64:93:90:89:2e:0e:00:78:fd:67:c8:d6:e0:c2:14:4c: cb:e0:f8:35:8f:bc:89:d6:34:ab:7b:30:3d:2e:29:e9:14:da: 1c:22:17:8e:04:50:72:ee:0e:6d:fd:fc:b8:a1:14:cd:d4:18: 9a:f4:5b:af:cb:0e:1e:e3:c0:f5:c8:13:22:a2:81:f1:20:bf: cb:d7:f3:d3:b3:a4:00:96:0b:96:66:44:25:09:ce:ca:03:5d: b2:15:06:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIH/6zDQAVPOMraqTTJqgZMjxu2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDA1MDA4WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGFlY2EwOGUwMTBmYzZmNmE1YzQ2NmNjYTdiMzU2NWUz MTlmN2YxYTVhMjE4OWQwY2E1M2U4MzUzNTFjZDRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXTiOsHxXB3vjH9mRQsSaB56mSycBj2/kjk9uR2RvCGb+g DxOwEf1CqeYTPVI211SjrUn4ztKGbm5+TitcZa5kAHTbiYWuko1SOdxN1TfQKuKg xFL34jMADm3mxFsYZVSSCbyXF+gf/RbZCGIVAiFhCx9XFbDakkxwuDNzQ9ofde4H bOGC7K8A7q/Q4gSHxLezIo50FMLU4hsoAC0kkC6KNPRFXxRXP91MrI2JxQPF6pPJ +3dyBmfi6Gjh3YjqRuGJ4ShXikbPhhh8sOZo/5yVneFO5nQW/kcubBl60h9u6Fki AMrYD5uYOEyKCkRUGiYwk0eGTnEHkA4KWUWNUcX9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhLaa9BpaJuYa0FVT/NyFPbzCJWgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2MzM4ZDYzLWY1MTItNDg4ZS1hM2E4LTcyNmVmYTI3N2Q4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEEwDQYJKoZIhvcNAQELBQADggEBAC6aW3JXqWRYBGD3SNNVV8Mxy3S2 WuGY1TblcI2TXB96lAk9MPjj6Q45uRrq6xH5dFPtO0/h1PCSm7Q/HhDK7tswz1aS 56/qsbx53dBw7mpIk4xFT/QjRPfSpY/eS6fmRYOzPZjY6Axoxs4TUf09+WCxdahz y+udwoBhr2UbsHIvuVYRMyiAGrnPuc3dt9pjG2nzh/SDyeHnSP5CvZgqmLEcmwSu ZJOQiS4OAHj9Z8jW4MIUTMvg+DWPvInWNKt7MD0uKekU2hwiF44EUHLuDm39/Lih FM3UGJr0W6/LDh7jwPXIEyKigfEgv8vX89OzpACWC5ZmRCUJzsoDXbIVBr0= -----END CERTIFICATE-----Generated at Wed May 13 04:33:27 2026 by rpki-client