$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa File: 79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa (raw, json) Hash identifier: DVQk3LbVpJEQDKmTHq1z+YUVYa1f0RMlGR5sy/4QIqY= Subject key identifier: 0E:D1:80:79:85:33:95:0B:C7:02:39:67:68:1D:81:C3:8C:1A:B5:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 41808796A8E12489BD42246DC0D7753F397A5162 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa Signing time: Fri 01 May 2026 01:00:32 +0000 ROA not before: Fri 01 May 2026 01:00:32 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 7224 IP address blocks: 54.25.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:80:87:96:a8:e1:24:89:bd:42:24:6d:c0:d7:75:3f:39:7a:51:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 01:00:32 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=be49f91d614acf446a0c460d389852f1a8e5ac97bde06f5936aa30a57acffdbd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:5b:ff:8d:30:8d:a4:a9:5a:73:1c:bc:d3: 81:ef:a9:ab:cd:65:1f:34:d7:31:83:36:4e:4c:16: a4:b8:1c:7a:2b:06:a8:f6:48:1b:a8:1b:b6:36:77: f6:58:91:83:91:74:43:dd:fe:ba:0e:4f:3c:07:84: d6:c5:5f:07:fc:b8:0e:55:c4:e4:f1:e3:23:20:2a: a9:e0:96:a8:d1:77:b7:2d:ee:89:34:2c:af:51:54: 1b:30:8a:9d:52:0c:59:eb:55:4a:51:d0:32:93:9a: fd:95:3d:96:35:6c:c5:b0:0f:97:30:ca:6e:13:18: 71:1c:dc:55:e4:72:7d:9e:a0:7c:2d:76:85:e0:82: a6:ec:f0:54:e1:46:8f:77:ce:07:76:41:b4:0e:8f: 61:10:b1:73:21:fb:f8:6b:65:b4:f9:f7:c1:26:9a: 42:2d:35:24:6e:ca:cf:b8:a9:6b:e5:13:d0:81:f3: 23:08:a6:2f:78:f4:e9:2b:5c:0c:6c:6d:e0:f0:46: 3c:4e:07:42:1a:a0:eb:74:eb:9a:b2:ca:10:ab:9b: 21:79:f6:5b:56:ac:64:e4:38:30:28:61:1b:b1:d8: d4:61:e2:9f:54:6a:fa:d7:7e:77:4d:91:35:e4:38: 78:77:10:be:17:1b:1e:cc:87:6f:18:12:45:d4:7c: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D1:80:79:85:33:95:0B:C7:02:39:67:68:1D:81:C3:8C:1A:B5:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.12.0/23 Signature Algorithm: sha256WithRSAEncryption d5:cf:4d:79:b3:da:67:9a:49:7f:66:05:94:a2:22:76:91:6d: 0f:87:24:b8:bb:09:dc:e8:96:03:d3:09:bf:f3:c1:27:22:35: 2a:e4:93:94:3b:c7:ec:46:63:13:56:a0:5f:3a:23:a0:af:88: fd:eb:b7:6d:3f:6c:0d:5e:cf:9f:7c:7c:bd:80:a3:d7:89:c5: f6:39:0c:97:c2:72:68:15:5c:58:13:cf:11:c2:45:95:1f:0a: 46:a9:dd:96:dd:7f:ee:34:fa:a5:b7:3d:a1:00:be:e7:56:4d: c7:cb:57:e8:72:3d:37:8f:a4:46:1b:1f:ac:30:f3:d6:08:b3: a1:77:d3:f1:36:1f:51:85:95:4f:16:c5:6e:fd:fb:c3:54:7a: 0d:17:01:c3:51:18:97:39:6d:90:84:a0:05:74:b8:29:59:28: 86:33:7b:5d:9e:c0:4e:29:54:ac:bf:ad:0d:e7:12:c2:a0:71: 61:cc:00:92:f4:ac:3e:55:63:20:b3:95:4e:b0:ee:22:b9:3b: d8:01:f7:38:8e:0b:8a:28:bb:69:64:2c:40:07:91:32:cb:d7: e4:02:8b:70:c6:de:73:b2:4a:01:0c:a8:1e:0f:62:5d:1f:83: 38:2d:6b:47:48:14:1d:d0:e4:4a:5e:b9:96:0b:92:02:ee:7e: 47:06:24:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQYCHlqjhJIm9QiRtwNd1Pzl6UWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDEwMDMyWhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTQ5ZjkxZDYxNGFjZjQ0NmEwYzQ2MGQzODk4NTJmMWE4 ZTVhYzk3YmRlMDZmNTkzNmFhMzBhNTdhY2ZmZGJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUVlv/jTCNpKlacxy804HvqavNZR801zGDNk5MFqS4HHor Bqj2SBuoG7Y2d/ZYkYORdEPd/roOTzwHhNbFXwf8uA5VxOTx4yMgKqnglqjRd7ct 7ok0LK9RVBswip1SDFnrVUpR0DKTmv2VPZY1bMWwD5cwym4TGHEc3FXkcn2eoHwt doXggqbs8FThRo93zgd2QbQOj2EQsXMh+/hrZbT598EmmkItNSRuys+4qWvlE9CB 8yMIpi949OkrXAxsbeDwRjxOB0IaoOt065qyyhCrmyF59ltWrGTkODAoYRux2NRh 4p9UavrXfndNkTXkOHh3EL4XGx7Mh28YEkXUfJSHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDtGAeYUzlQvHAjlnaB2Bw4watbMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5ZDk3YWU2LTRkYzYtNGU4Ni1iYmMzLWE2Y2U2NjBjZmZkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2GQwwDQYJKoZIhvcNAQELBQADggEBANXPTXmz2meaSX9mBZSiInaRbQ+H JLi7CdzolgPTCb/zwSciNSrkk5Q7x+xGYxNWoF86I6CviP3rt20/bA1ez598fL2A o9eJxfY5DJfCcmgVXFgTzxHCRZUfCkap3Zbdf+40+qW3PaEAvudWTcfLV+hyPTeP pEYbH6ww89YIs6F30/E2H1GFlU8WxW79+8NUeg0XAcNRGJc5bZCEoAV0uClZKIYz e12ewE4pVKy/rQ3nEsKgcWHMAJL0rD5VYyCzlU6w7iK5O9gB9ziOC4oou2lkLEAH kTLL1+QCi3DG3nOySgEMqB4PYl0fgzgta0dIFB3Q5EpeuZYLkgLufkcGJD8= -----END CERTIFICATE-----Generated at Tue May 12 23:34:33 2026 by rpki-client