$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58be878-74a8-4e7a-b5ae-92e8986f5567.roa File: a58be878-74a8-4e7a-b5ae-92e8986f5567.roa (raw, json) Hash identifier: eDROM8NHGqLQcfQr7vusNdwTT7RyG/On7i4RRN+M0bs= Subject key identifier: 13:59:3B:04:3C:37:25:67:EA:B2:4D:CB:98:01:A6:BE:8C:B0:01:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C56E40AB36F8F469E5EB7AAE15958CDF3339129 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58be878-74a8-4e7a-b5ae-92e8986f5567.roa Signing time: Wed 29 Apr 2026 00:10:34 +0000 ROA not before: Wed 29 Apr 2026 00:10:34 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.54.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:56:e4:0a:b3:6f:8f:46:9e:5e:b7:aa:e1:59:58:cd:f3:33:91:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:10:34 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=4d37244f35dc58349c95ad006933261f3c2e4d8963bf8eb5fd10253b624b12e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:a5:4f:ed:e5:db:19:c8:23:63:f0:0b:2f: 45:8d:32:6a:61:f5:7c:21:6a:40:1d:e9:d5:72:43: 44:64:cc:b5:38:75:fb:e8:be:44:8b:99:5e:3d:36: 80:9e:89:61:97:f5:02:6b:73:6e:48:8a:d7:d5:ab: 79:be:d9:09:0d:80:b7:06:8b:86:6f:88:f6:71:99: db:dc:27:bd:90:e5:d9:a6:20:49:88:8f:3a:56:0b: dd:c0:f7:d9:e1:16:6e:d6:ef:57:f2:8f:b4:53:8e: 85:fb:41:f1:ef:3c:73:25:c9:a6:a6:af:80:cd:50: 49:03:90:e0:35:7d:03:0e:5b:2d:57:d6:6e:3d:2a: bf:b0:3d:a5:1a:03:17:19:08:5a:23:e3:0e:4f:1b: e8:d1:85:06:d7:1f:15:d1:a5:81:46:65:7f:d6:b8: 2a:f0:25:e7:f1:23:e6:38:83:ab:6a:a3:a8:fd:d6: 6b:f6:f0:22:76:a6:46:cb:91:15:6d:37:0b:7a:7d: 08:0f:03:ba:67:fa:c0:5a:14:bc:a9:c7:d8:04:5f: 0c:58:cc:03:73:3d:c4:19:0c:25:41:c9:74:97:94: e0:27:80:a5:85:e8:75:25:98:b1:d7:4b:dc:6d:c0: 18:d8:fd:73:d5:5a:db:49:72:a2:07:b1:f0:03:29: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:59:3B:04:3C:37:25:67:EA:B2:4D:CB:98:01:A6:BE:8C:B0:01:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58be878-74a8-4e7a-b5ae-92e8986f5567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.54.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:07:b7:3e:b4:cc:e8:93:5f:0e:34:8a:8e:18:9f:85:28:22: 7c:7d:36:0c:4a:bb:07:71:b9:c3:08:4d:5a:4a:4e:b0:49:7f: bd:a6:27:dc:d5:5e:af:e7:86:5f:66:48:d3:66:07:14:89:34: cc:24:d9:de:4b:d8:0b:31:24:92:39:c6:43:f8:8a:2e:30:18: 5e:3b:39:98:54:f9:8f:fc:be:a2:e6:35:c0:69:7d:0b:db:d1: 50:e7:a1:2b:d5:22:30:01:d0:20:65:25:88:5b:8d:49:63:cc: aa:d8:6a:be:2a:e1:14:78:b3:ca:02:69:69:e0:1e:96:c8:38: d8:97:a7:5b:42:76:2a:43:c8:48:64:cc:6d:01:c3:68:29:57: 56:e9:2c:8d:da:e5:05:33:a6:a2:b8:c2:17:77:37:21:0b:0c: 14:f3:c9:c7:f0:96:bc:66:04:64:8f:34:4b:8f:12:56:58:dd: c3:27:32:d3:2e:b3:71:86:f4:f9:98:f0:8f:27:d4:fe:d0:0c: 8f:b0:90:6e:85:58:18:7b:c5:2f:38:82:12:54:a0:23:9d:04: 19:b6:5e:e7:bc:be:a2:17:38:ed:ff:d3:20:75:68:89:ce:43: 19:aa:cd:72:55:5c:4c:0b:51:c9:fb:75:39:61:05:0d:85:f2: 1d:6a:96:ba -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPFbkCrNvj0aeXreq4VlYzfMzkSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAxMDM0WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDM3MjQ0ZjM1ZGM1ODM0OWM5NWFkMDA2OTMzMjYxZjNj MmU0ZDg5NjNiZjhlYjVmZDEwMjUzYjYyNGIxMmUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpNKVP7eXbGcgjY/ALL0WNMmph9XwhakAd6dVyQ0RkzLU4 dfvovkSLmV49NoCeiWGX9QJrc25IitfVq3m+2QkNgLcGi4ZviPZxmdvcJ72Q5dmm IEmIjzpWC93A99nhFm7W71fyj7RTjoX7QfHvPHMlyaamr4DNUEkDkOA1fQMOWy1X 1m49Kr+wPaUaAxcZCFoj4w5PG+jRhQbXHxXRpYFGZX/WuCrwJefxI+Y4g6tqo6j9 1mv28CJ2pkbLkRVtNwt6fQgPA7pn+sBaFLypx9gEXwxYzANzPcQZDCVByXSXlOAn gKWF6HUlmLHXS9xtwBjY/XPVWttJcqIHsfADKfgdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUE1k7BDw3JWfqsk3LmAGmvoywAcYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1OGJlODc4LTc0YTgtNGU3YS1iNWFlLTkyZTg5ODZmNTU2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4NjANBgkqhkiG9w0BAQsFAAOCAQEAmQe3PrTM6JNfDjSKjhifhSgifH02 DEq7B3G5wwhNWkpOsEl/vaYn3NVer+eGX2ZI02YHFIk0zCTZ3kvYCzEkkjnGQ/iK LjAYXjs5mFT5j/y+ouY1wGl9C9vRUOehK9UiMAHQIGUliFuNSWPMqthqvirhFHiz ygJpaeAelsg42JenW0J2KkPISGTMbQHDaClXVuksjdrlBTOmorjCF3c3IQsMFPPJ x/CWvGYEZI80S48SVljdwycy0y6zcYb0+ZjwjyfU/tAMj7CQboVYGHvFLziCElSg I50EGbZe57y+ohc47f/TIHVoic5DGarNclVcTAtRyft1OWEFDYXyHWqWug== -----END CERTIFICATE-----Generated at Wed May 13 00:16:33 2026 by rpki-client