$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa File: a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa (raw, json) Hash identifier: jsCsvScHX/sUuncxMGgK65LH0CSsjixFsVkVG1YnGT8= Subject key identifier: 81:3F:6A:0B:95:65:27:4D:DF:5F:89:91:5C:4B:26:95:0D:0E:FE:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65624BB7D7BD04EB03C52DB0D08846BED6A3F952 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa Signing time: Mon 04 May 2026 00:10:10 +0000 ROA not before: Mon 04 May 2026 00:10:10 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 166.117.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:62:4b:b7:d7:bd:04:eb:03:c5:2d:b0:d0:88:46:be:d6:a3:f9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:10:10 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=4246a93d92cc9cf5dcc7fcb65486ff77d99838caeaa97acb31d51c53d8f8c32c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:70:5b:72:06:cb:87:eb:77:bf:31:f0:42: ad:7a:87:80:fe:c7:01:93:19:a5:86:51:b5:77:2c: b7:c1:7d:18:db:4c:c4:cb:41:e7:05:b4:f8:46:56: e9:01:4c:c3:e0:eb:fe:16:0d:bf:c6:99:e1:4b:85: 92:96:17:a0:f5:5e:28:7d:47:33:07:2b:d3:21:6c: b4:35:8f:c6:0d:c4:29:da:c7:23:33:61:f6:4b:e2: 11:ad:ed:32:7d:57:1a:7e:3a:5e:6b:6a:96:44:2f: 33:29:5f:e0:a5:e1:76:2b:a5:30:5a:0c:f0:c1:2f: 02:ae:40:a4:21:8e:89:b7:a6:5d:0b:67:eb:6e:8e: 73:14:ea:ba:96:d5:2f:f4:a2:82:84:9d:4a:13:a5: f0:c5:f7:4f:64:50:ad:4d:3d:ac:6a:f8:4d:43:d0: 76:98:f2:c8:0e:f3:4f:2b:1a:95:af:a5:87:d0:66: 6e:7e:f2:f4:8b:e8:2b:d8:ca:b2:0b:96:d1:90:06: f8:3b:e1:14:c0:45:fe:fa:27:c6:84:6f:24:a6:97: ec:24:78:c6:b1:9b:7a:62:73:56:38:a8:43:05:ff: b1:f0:4d:fa:24:6e:fe:31:17:a9:24:26:51:a6:3c: 72:52:ed:80:0b:fa:66:65:c3:e2:4b:bd:fa:50:be: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3F:6A:0B:95:65:27:4D:DF:5F:89:91:5C:4B:26:95:0D:0E:FE:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.117.48.0/20 Signature Algorithm: sha256WithRSAEncryption d7:81:ba:72:6b:c1:df:32:cb:ce:9b:f2:6e:5c:a9:0f:71:9c: 7a:e5:48:68:ff:22:4b:b0:f8:05:21:6a:9b:47:a6:f8:0f:f9: 89:75:4f:f8:34:ab:75:f1:73:6e:dc:30:a4:75:7d:87:7a:c2: a2:68:ee:42:03:cf:fc:6b:0a:b3:04:4e:04:19:f1:5e:74:3a: eb:63:fd:d0:2d:25:50:7c:ee:c3:02:be:31:5a:0f:6d:cd:34: df:2a:5b:51:e9:9e:4f:3b:eb:66:76:47:dc:8a:bb:67:c1:ef: db:3c:5f:33:0f:46:1c:78:30:23:c5:f2:46:79:57:04:01:e7: 6d:13:6a:18:ca:39:d9:ef:bd:df:31:34:7c:9d:ee:59:0f:24: bb:cd:6b:d9:e8:d5:1e:e2:c3:6b:bd:38:31:59:93:0f:7f:7a: 83:d6:22:39:51:6b:98:7a:79:97:ab:18:04:bd:2d:6f:3f:eb: e1:37:5b:c0:10:e4:51:80:d8:be:4a:01:10:51:64:12:f7:d0: ec:6c:5f:11:66:10:86:f5:56:58:44:49:7f:f9:9a:49:68:b4: 36:72:56:1f:63:d6:3c:a8:c2:0d:77:2c:c7:e1:50:44:18:48: c3:26:85:61:0b:f1:24:62:b3:46:eb:8f:0c:ef:b9:c2:d9:5c: 56:cf:ed:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZWJLt9e9BOsDxS2w0IhGvtaj+VIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAxMDEwWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjQ2YTkzZDkyY2M5Y2Y1ZGNjN2ZjYjY1NDg2ZmY3N2Q5 OTgzOGNhZWFhOTdhY2IzMWQ1MWM1M2Q4ZjhjMzJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrQXBbcgbLh+t3vzHwQq16h4D+xwGTGaWGUbV3LLfBfRjb TMTLQecFtPhGVukBTMPg6/4WDb/GmeFLhZKWF6D1Xih9RzMHK9MhbLQ1j8YNxCna xyMzYfZL4hGt7TJ9Vxp+Ol5rapZELzMpX+Cl4XYrpTBaDPDBLwKuQKQhjom3pl0L Z+tujnMU6rqW1S/0ooKEnUoTpfDF909kUK1NPaxq+E1D0HaY8sgO808rGpWvpYfQ Zm5+8vSL6CvYyrILltGQBvg74RTARf76J8aEbySml+wkeMaxm3pic1Y4qEMF/7Hw Tfokbv4xF6kkJlGmPHJS7YAL+mZlw+JLvfpQvlfNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgT9qC5VlJ03fX4mRXEsmlQ0O/t0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3OGMyY2Y3LTZmMjktNDg5NS04YTJkLTgyNzFhMjJmMWYyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASmdTAwDQYJKoZIhvcNAQELBQADggEBANeBunJrwd8yy86b8m5cqQ9xnHrl SGj/Ikuw+AUhaptHpvgP+Yl1T/g0q3Xxc27cMKR1fYd6wqJo7kIDz/xrCrMETgQZ 8V50Outj/dAtJVB87sMCvjFaD23NNN8qW1Hpnk8762Z2R9yKu2fB79s8XzMPRhx4 MCPF8kZ5VwQB520TahjKOdnvvd8xNHyd7lkPJLvNa9no1R7iw2u9ODFZkw9/eoPW IjlRa5h6eZerGAS9LW8/6+E3W8AQ5FGA2L5KARBRZBL30OxsXxFmEIb1VlhESX/5 mklotDZyVh9j1jyowg13LMfhUEQYSMMmhWEL8SRis0brjwzvucLZXFbP7f0= -----END CERTIFICATE-----Generated at Tue May 12 21:50:14 2026 by rpki-client