$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2bc09ec-bc3f-46cd-924f-89f533661764.roa File: a2bc09ec-bc3f-46cd-924f-89f533661764.roa (raw, json) Hash identifier: ghnagiwAru4UvnqZhScHYCQ2/r/4X8MAwzVXKAnnCqY= Subject key identifier: 28:C1:F2:7A:5C:A6:CC:8E:17:1A:46:AA:98:0E:90:F6:38:4E:66:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 675F0BCDFB90D2393E8093726E974A4699DDE589 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2bc09ec-bc3f-46cd-924f-89f533661764.roa Signing time: Sat 09 May 2026 00:30:12 +0000 ROA not before: Sat 09 May 2026 00:30:12 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5f:0b:cd:fb:90:d2:39:3e:80:93:72:6e:97:4a:46:99:dd:e5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:30:12 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=0b245f39c4e3fe063989bfb381410a4a66b319457d99606da657797d2cdd251c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:6f:d4:6e:a8:c3:69:25:ab:fb:45:b0:5e: 43:df:b6:9d:43:42:f4:e2:0a:d9:74:e8:d9:34:79: 8d:ba:ae:ad:27:8b:56:15:e0:90:29:5c:2d:f7:22: 72:64:aa:35:61:b8:10:ba:00:56:11:00:e4:bd:4a: f8:8b:1a:5e:94:9c:2d:18:11:1c:07:c5:3b:70:95: 11:35:06:b1:cd:9b:b2:b8:0a:3b:53:09:bb:c7:b2: 30:e9:cd:b3:b2:e0:04:2b:f2:52:34:16:eb:34:bc: ee:a6:8f:68:7b:9c:44:28:62:58:25:0f:5e:17:fd: d3:c7:86:a3:a5:91:4e:64:dd:cb:56:e3:09:2b:4c: 26:7c:1f:69:45:db:14:e2:91:91:d8:2f:9f:f4:0f: 05:d9:e6:27:8e:59:44:09:9b:8e:41:30:46:56:ad: b4:c5:d4:de:bd:e7:64:a2:a7:0e:5f:f4:33:38:b1: 90:de:b7:c3:61:77:1a:a7:ae:69:87:d3:1d:d9:24: 12:cd:33:13:79:f4:b1:1f:4a:53:c8:03:5c:60:59: dd:45:c2:fd:5e:1f:f7:18:61:47:48:ba:0d:1c:7a: 57:a9:f1:6e:1c:c5:40:94:bd:26:aa:c1:0d:ed:da: a5:ec:a1:6c:41:d0:ff:4d:81:3f:cc:a3:fe:3f:fc: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C1:F2:7A:5C:A6:CC:8E:17:1A:46:AA:98:0E:90:F6:38:4E:66:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2bc09ec-bc3f-46cd-924f-89f533661764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.18.0/23 Signature Algorithm: sha256WithRSAEncryption 86:90:72:b2:ea:02:45:58:63:5a:f1:e4:70:19:a5:db:8e:6c: ee:9b:ea:6e:fe:e6:a6:6b:7e:ee:b4:2c:28:ec:a7:bc:59:63: e8:ab:f3:f2:fc:ec:8e:e9:03:00:d5:4b:d9:61:3b:32:77:0e: 21:47:b7:11:c7:86:04:97:71:c1:05:e8:05:02:95:17:6a:f3: 21:57:8d:36:86:eb:32:5f:30:79:32:7a:a7:e5:86:9a:4b:db: 94:d6:33:b3:9b:73:d8:f6:c3:7c:05:71:6a:9d:8b:06:50:15: f3:2a:07:87:de:0d:36:87:6c:8e:e7:21:6e:74:c0:a0:54:b9: 4c:7c:57:8b:c3:4f:b2:95:5c:14:87:43:df:2f:3a:0d:8f:11: 51:6a:a4:42:29:2e:a3:6a:45:3f:59:87:42:dd:71:5d:35:97: 68:65:26:9e:95:1c:e6:a2:1d:07:ca:f8:af:d2:fa:2e:70:5e: 47:f5:0a:9c:ae:70:c5:cb:a1:64:fc:a4:06:9a:c8:4b:d2:f0: c5:a5:b5:7c:69:46:a6:ec:53:64:4d:0b:f9:bc:68:cb:e1:06: 91:6d:e3:04:10:48:34:57:4a:f5:dc:9c:50:58:d6:47:62:f7: d1:bd:a6:1d:70:ff:8f:0a:ed:5a:62:38:47:f5:84:e8:5c:de: 9a:9a:a7:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ18LzfuQ0jk+gJNybpdKRpnd5YkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAzMDEyWhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjI0NWYzOWM0ZTNmZTA2Mzk4OWJmYjM4MTQxMGE0YTY2 YjMxOTQ1N2Q5OTYwNmRhNjU3Nzk3ZDJjZGQyNTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ+2/UbqjDaSWr+0WwXkPftp1DQvTiCtl06Nk0eY26rq0n i1YV4JApXC33InJkqjVhuBC6AFYRAOS9SviLGl6UnC0YERwHxTtwlRE1BrHNm7K4 CjtTCbvHsjDpzbOy4AQr8lI0Fus0vO6mj2h7nEQoYlglD14X/dPHhqOlkU5k3ctW 4wkrTCZ8H2lF2xTikZHYL5/0DwXZ5ieOWUQJm45BMEZWrbTF1N6952Sipw5f9DM4 sZDet8NhdxqnrmmH0x3ZJBLNMxN59LEfSlPIA1xgWd1Fwv1eH/cYYUdIug0celep 8W4cxUCUvSaqwQ3t2qXsoWxB0P9NgT/Mo/4//JixAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKMHyelymzI4XGkaqmA6Q9jhOZv4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyYmMwOWVjLWJjM2YtNDZjZC05MjRmLTg5ZjUzMzY2MTc2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYnRIwDQYJKoZIhvcNAQELBQADggEBAIaQcrLqAkVYY1rx5HAZpduObO6b 6m7+5qZrfu60LCjsp7xZY+ir8/L87I7pAwDVS9lhOzJ3DiFHtxHHhgSXccEF6AUC lRdq8yFXjTaG6zJfMHkyeqflhppL25TWM7Obc9j2w3wFcWqdiwZQFfMqB4feDTaH bI7nIW50wKBUuUx8V4vDT7KVXBSHQ98vOg2PEVFqpEIpLqNqRT9Zh0LdcV01l2hl Jp6VHOaiHQfK+K/S+i5wXkf1CpyucMXLoWT8pAaayEvS8MWltXxpRqbsU2RNC/m8 aMvhBpFt4wQQSDRXSvXcnFBY1kdi99G9ph1w/48K7VpiOEf1hOhc3pqap60= -----END CERTIFICATE-----Generated at Wed May 13 02:22:34 2026 by rpki-client