$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a330ff6-4915-4981-9d68-3f0eb4097d8a.roa File: 8a330ff6-4915-4981-9d68-3f0eb4097d8a.roa (raw, json) Hash identifier: URu46FsZrd8WGqLRAtaIqbtx6STJazQViSKR5kLFw9U= Subject key identifier: 26:E7:8E:7E:42:7C:8B:E8:EA:02:75:BB:E5:BB:67:9C:30:51:48:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05ACD59AC582E49687B3E9C2876C1FD4FB9D1151 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a330ff6-4915-4981-9d68-3f0eb4097d8a.roa Signing time: Fri 08 May 2026 00:31:26 +0000 ROA not before: Fri 08 May 2026 00:31:26 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 74.201.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ac:d5:9a:c5:82:e4:96:87:b3:e9:c2:87:6c:1f:d4:fb:9d:11:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:31:26 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=3308680e3b2db56420953253585410e55284af38c373383dc4a006091b77a1c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:cb:34:a2:ee:b1:9b:0f:21:41:d8:55:09: ab:e1:3c:f9:d1:36:c2:09:e5:04:2a:57:3c:12:d6: a2:3e:72:41:3b:cc:78:4a:8b:4b:2a:92:47:89:15: ba:14:e5:38:24:2f:87:e0:f7:14:07:c4:50:1c:38: 46:bc:34:c8:16:cf:5e:80:e1:0e:96:19:de:c7:b9: 0f:ac:dc:80:c6:17:01:88:0f:9e:97:7e:29:74:dc: f7:5a:12:1b:06:93:7d:f3:b9:95:4a:81:06:2a:73: 11:7b:25:74:f6:ae:25:6d:40:02:1e:c5:a5:ff:71: d4:14:d7:ca:71:e7:9a:06:64:f1:12:b8:dd:4b:c2: e4:16:6c:d0:48:95:44:e6:3f:d9:01:24:34:19:94: 9b:7a:ed:82:c9:b6:e0:04:c2:0a:65:5f:a4:4a:83: 1c:0f:a3:1d:de:3b:33:61:31:7d:b5:29:e5:77:07: eb:e0:2c:45:d0:bf:c6:97:c7:85:32:1d:c6:40:2b: 85:55:cb:99:bf:29:cd:eb:75:f6:06:d9:5b:b4:7c: 0c:16:7a:af:89:87:6a:a1:c3:21:6a:47:ce:e0:56: cb:69:ad:b3:78:cc:1a:19:28:a2:65:af:c1:d1:82: a7:2b:b6:44:a5:8e:02:d7:08:19:bd:36:9e:1e:d0: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E7:8E:7E:42:7C:8B:E8:EA:02:75:BB:E5:BB:67:9C:30:51:48:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a330ff6-4915-4981-9d68-3f0eb4097d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.201.20.0/22 Signature Algorithm: sha256WithRSAEncryption 98:31:ec:e9:25:4d:4b:eb:11:2d:49:31:b6:98:ff:d9:01:28: 86:84:ad:0f:25:76:95:ce:ca:53:9b:e1:10:12:c6:43:f3:57: 2a:46:01:79:ec:85:35:c0:d3:08:0b:d5:3f:43:4f:17:7c:88: bb:22:50:be:b9:32:e8:ff:72:1c:d6:d3:0d:70:3a:7a:02:02: 0b:d2:1c:5e:72:d6:f7:6a:6a:69:e5:30:2f:28:57:1b:30:38: 46:c3:41:5d:b9:10:ac:fb:ff:9d:35:06:ab:06:1a:b3:76:5f: 3e:22:28:59:e2:fd:67:f7:b6:2f:bd:dc:a0:2e:e5:d9:33:8f: 26:fa:30:42:4a:5f:ff:74:56:8f:e6:c3:62:ec:0f:4c:b8:ae: 94:57:6a:d1:2e:49:27:48:05:8f:8c:2b:fa:83:0f:b2:e7:f7: ec:53:1e:3a:ac:9c:fb:ff:29:96:83:4e:16:6e:ff:89:4c:0e: a1:43:24:ea:1a:5c:37:94:9a:4b:84:c1:01:5a:09:e3:4e:5e: 09:6a:b5:17:7d:3a:e6:49:83:6d:d0:70:7f:fa:88:14:d8:de: 8e:a1:75:70:ce:19:48:dc:99:39:03:e4:2f:08:b1:8b:40:c4: bb:e0:f9:94:18:66:bb:31:58:b2:0b:f8:eb:77:19:97:cc:91: 13:cc:b0:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBazVmsWC5JaHs+nCh2wf1PudEVEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAzMTI2WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzA4NjgwZTNiMmRiNTY0MjA5NTMyNTM1ODU0MTBlNTUy ODRhZjM4YzM3MzM4M2RjNGEwMDYwOTFiNzdhMWM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ5cs0ou6xmw8hQdhVCavhPPnRNsIJ5QQqVzwS1qI+ckE7 zHhKi0sqkkeJFboU5TgkL4fg9xQHxFAcOEa8NMgWz16A4Q6WGd7HuQ+s3IDGFwGI D56Xfil03PdaEhsGk33zuZVKgQYqcxF7JXT2riVtQAIexaX/cdQU18px55oGZPES uN1LwuQWbNBIlUTmP9kBJDQZlJt67YLJtuAEwgplX6RKgxwPox3eOzNhMX21KeV3 B+vgLEXQv8aXx4UyHcZAK4VVy5m/Kc3rdfYG2Vu0fAwWeq+Jh2qhwyFqR87gVstp rbN4zBoZKKJlr8HRgqcrtkSljgLXCBm9Np4e0GuZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJueOfkJ8i+jqAnW75btnnDBRSCgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhMzMwZmY2LTQ5MTUtNDk4MS05ZDY4LTNmMGViNDA5N2Q4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJKyRQwDQYJKoZIhvcNAQELBQADggEBAJgx7OklTUvrES1JMbaY/9kBKIaE rQ8ldpXOylOb4RASxkPzVypGAXnshTXA0wgL1T9DTxd8iLsiUL65Muj/chzW0w1w OnoCAgvSHF5y1vdqamnlMC8oVxswOEbDQV25EKz7/501BqsGGrN2Xz4iKFni/Wf3 ti+93KAu5dkzjyb6MEJKX/90Vo/mw2LsD0y4rpRXatEuSSdIBY+MK/qDD7Ln9+xT HjqsnPv/KZaDThZu/4lMDqFDJOoaXDeUmkuEwQFaCeNOXglqtRd9OuZJg23QcH/6 iBTY3o6hdXDOGUjcmTkD5C8IsYtAxLvg+ZQYZrsxWLIL+Ot3GZfMkRPMsJg= -----END CERTIFICATE-----Generated at Wed May 13 00:59:57 2026 by rpki-client