$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cb006fb-e270-49ff-98d1-a3b2a4be8958.roa File: 9cb006fb-e270-49ff-98d1-a3b2a4be8958.roa (raw, json) Hash identifier: SVuZNaHCOAlf7fO6WhVyVzh3SpLeCwPqeZKgUsmr0Xw= Subject key identifier: CB:42:69:83:4C:2D:F6:26:3A:04:5A:79:F1:DA:64:B2:0E:4C:E3:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33E14E2ADD146EDDAEF9516BAB404842ABC4DEC6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cb006fb-e270-49ff-98d1-a3b2a4be8958.roa Signing time: Mon 04 May 2026 01:20:05 +0000 ROA not before: Mon 04 May 2026 01:20:05 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e1:4e:2a:dd:14:6e:dd:ae:f9:51:6b:ab:40:48:42:ab:c4:de:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 01:20:05 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=58b490ae5ec7b3d2e52986c46515e0e78e4755a7a86e15f3a1ac5ef7dcc4af78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:1d:5b:3e:bc:38:a1:05:15:4b:cc:f7:62: 90:55:53:4c:77:32:30:01:b5:e0:17:ec:5f:99:16: 15:e7:20:47:70:02:e2:b2:dc:f3:66:29:05:ee:b4: 3e:6a:58:ac:77:ea:8c:b6:d8:d0:3c:75:5b:84:ae: bd:1e:ea:4c:08:36:da:3c:ae:2c:4e:62:02:c5:ef: 91:df:7e:c3:75:e2:22:cb:36:ce:d3:40:0a:e7:f5: f1:69:f5:cb:b5:a0:b5:b7:cc:3e:f2:4f:70:eb:18: e7:b6:1d:cc:3b:8b:d4:9f:8d:6f:eb:bf:aa:94:d4: 48:e8:ec:24:ce:87:46:32:80:f9:56:db:9a:ee:5f: e9:90:0d:ac:af:cf:b2:9a:65:6f:46:03:7a:b3:c9: 41:e4:38:d5:06:39:84:f1:ab:b0:52:93:a9:48:c2: 1f:b8:61:77:30:02:04:82:04:c0:3f:da:49:19:73: dd:29:af:90:67:29:af:11:ba:ee:f0:4e:b5:56:e0: 37:68:8c:4c:e0:9e:76:20:b5:3c:73:b6:33:64:f6: c4:fa:fe:4c:0b:87:ce:b8:35:f5:fb:75:e3:d7:53: b8:e5:6b:47:16:6f:84:b3:ea:b2:77:4b:d1:fc:2e: cb:85:c6:fe:92:c3:8c:e2:95:84:e9:78:91:67:1e: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:42:69:83:4C:2D:F6:26:3A:04:5A:79:F1:DA:64:B2:0E:4C:E3:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cb006fb-e270-49ff-98d1-a3b2a4be8958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.112.0/20 Signature Algorithm: sha256WithRSAEncryption 83:21:38:54:6d:7f:eb:94:f7:93:a3:b3:91:18:66:63:45:47: de:40:75:2d:d4:c9:6f:14:c7:c2:cc:55:b0:14:05:cc:ec:a8: 22:c6:ca:85:d6:10:72:e6:60:18:35:9a:ac:bd:94:af:7c:55: 55:42:c8:3d:81:ca:d4:b2:23:a0:bf:36:0a:29:5b:25:a2:52: 6a:76:c6:76:a8:11:e0:96:94:34:0a:59:a0:b4:49:57:f6:f4: b1:9a:82:30:50:4d:f5:95:e3:1a:98:d4:c0:d7:16:f9:ee:86: a2:94:f5:3b:12:35:c7:ab:bf:21:02:17:1f:30:fe:ba:69:55: aa:c4:85:6b:18:27:6a:d5:b4:78:a7:d9:3d:04:ef:b0:e1:0b: 63:78:18:49:34:1f:38:fb:34:d3:b3:2d:35:6b:5e:85:61:92: 63:a1:87:f4:ce:ec:1d:20:91:27:d7:58:49:df:e6:04:c2:6c: 62:44:1f:fc:24:f3:26:35:21:66:f3:2d:be:2d:bf:d9:15:cd: 72:ea:6a:0f:5d:ce:51:e9:a8:77:15:41:82:41:20:3f:19:5e: 42:b5:4e:13:26:26:b9:b9:6f:83:97:fe:a4:50:ba:8c:36:5a: 4a:fc:86:ca:15:c3:1d:66:af:da:0b:b5:c1:88:93:55:d6:26: c1:e3:d3:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM+FOKt0Ubt2u+VFrq0BIQqvE3sYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEyMDA1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGI0OTBhZTVlYzdiM2QyZTUyOTg2YzQ2NTE1ZTBlNzhl NDc1NWE3YTg2ZTE1ZjNhMWFjNWVmN2RjYzRhZjc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKHh1bPrw4oQUVS8z3YpBVU0x3MjABteAX7F+ZFhXnIEdw AuKy3PNmKQXutD5qWKx36oy22NA8dVuErr0e6kwINto8rixOYgLF75HffsN14iLL Ns7TQArn9fFp9cu1oLW3zD7yT3DrGOe2Hcw7i9SfjW/rv6qU1Ejo7CTOh0YygPlW 25ruX+mQDayvz7KaZW9GA3qzyUHkONUGOYTxq7BSk6lIwh+4YXcwAgSCBMA/2kkZ c90pr5BnKa8Ruu7wTrVW4DdojEzgnnYgtTxztjNk9sT6/kwLh864NfX7dePXU7jl a0cWb4Sz6rJ3S9H8LsuFxv6Sw4zilYTpeJFnHqXDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy0Jpg0wt9iY6BFp58dpksg5M4/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljYjAwNmZiLWUyNzAtNDlmZi05OGQxLWEzYjJhNGJlODk1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARM33AwDQYJKoZIhvcNAQELBQADggEBAIMhOFRtf+uU95Ojs5EYZmNFR95A dS3UyW8Ux8LMVbAUBczsqCLGyoXWEHLmYBg1mqy9lK98VVVCyD2BytSyI6C/Ngop WyWiUmp2xnaoEeCWlDQKWaC0SVf29LGagjBQTfWV4xqY1MDXFvnuhqKU9TsSNcer vyECFx8w/rppVarEhWsYJ2rVtHin2T0E77DhC2N4GEk0Hzj7NNOzLTVrXoVhkmOh h/TO7B0gkSfXWEnf5gTCbGJEH/wk8yY1IWbzLb4tv9kVzXLqag9dzlHpqHcVQYJB ID8ZXkK1ThMmJrm5b4OX/qRQuow2Wkr8hsoVwx1mr9oLtcGIk1XWJsHj03A= -----END CERTIFICATE-----Generated at Tue May 12 21:39:58 2026 by rpki-client