$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa File: ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa (raw, json) Hash identifier: KacSQHWO4ZzkXU362x2aJ8ywk6ruT2u5v48Xo0UceDE= Subject key identifier: DD:A8:57:5B:81:C9:23:EE:19:49:D8:3E:E7:60:5E:91:1B:55:B7:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2086573CCBA20FF1422AFCE8E02F3F8DDE9D230E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa Signing time: Sat 09 May 2026 00:10:51 +0000 ROA not before: Sat 09 May 2026 00:10:51 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.244.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:86:57:3c:cb:a2:0f:f1:42:2a:fc:e8:e0:2f:3f:8d:de:9d:23:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:10:51 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=5f1d5ef36e047d7b443ea092aafb3cc0f246c0c4b6de18d8ddf717d3d7dceb95, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:cc:c5:55:12:2f:87:cf:e1:b4:b9:82:af: 69:fc:4a:02:6e:5b:ab:89:58:4a:61:7a:07:ef:46: 86:ab:8a:d7:0d:95:d0:99:9f:ff:6b:56:4e:35:99: d9:4a:01:37:7b:9c:d4:82:d8:80:1b:9b:eb:7f:0b: f0:1c:d0:25:fe:83:69:ec:60:19:b6:bc:f9:b6:8f: a0:13:73:8b:f0:41:3d:0d:db:6e:53:68:8f:e6:10: d4:74:31:65:fa:c7:20:27:42:23:f0:f8:80:8c:4d: 06:63:02:b6:26:9d:7b:ba:8f:58:7a:20:ed:a2:5c: dc:65:43:58:e4:80:d2:25:d2:98:b7:90:c1:fa:f0: 9d:a8:15:54:ee:a9:a4:72:9c:58:a6:11:0d:65:1f: 8e:57:48:b4:bb:3d:b6:65:61:42:70:52:1c:3f:0e: a0:08:97:61:76:81:11:35:ec:ea:84:94:ff:cc:b0: ab:9f:87:e6:a3:40:e0:e3:90:0f:38:1d:42:13:d6: eb:01:9c:f5:f0:74:33:23:85:52:6d:a8:97:0d:02: 6a:16:89:89:9e:60:05:3d:26:ca:aa:47:38:93:83: 71:e5:54:d1:4c:cb:68:d8:82:8a:b0:d5:23:00:0b: b3:b7:01:e1:51:e8:f9:c0:15:4d:74:be:77:d6:1d: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:57:5B:81:C9:23:EE:19:49:D8:3E:E7:60:5E:91:1B:55:B7:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.244.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:ee:99:b9:75:8e:27:72:6f:b0:23:30:32:14:c6:67:45:55: f5:6e:0b:94:9e:d4:4d:e2:12:47:85:00:39:c5:b0:cc:86:8e: 04:25:7b:14:9f:71:b0:d8:22:41:49:36:09:19:c1:4d:3a:8d: a2:31:0c:46:7d:36:8e:a0:5f:c5:62:d0:d5:ba:d0:d4:0c:29: a9:a3:d0:6c:f1:12:f7:cb:a2:0f:98:81:b4:01:ea:10:6f:c5: cd:41:21:e7:50:64:90:2c:2c:d4:0c:8b:e2:df:1d:17:d4:fc: 24:a9:f4:d6:73:5d:05:bd:1b:d0:a1:92:f2:ae:11:d5:f3:2e: b6:8f:3d:ae:2d:20:70:8f:16:a8:90:5e:f7:b7:0d:9d:51:9a: 7b:e0:42:66:80:c4:f4:1f:6e:e7:99:fa:b4:57:a4:e9:eb:c8: dd:2f:ff:3e:e4:1f:57:db:cd:e4:5b:d9:50:b7:d0:44:6a:69: 37:77:01:0b:cc:15:ca:0a:5a:d3:c8:b9:26:9e:b5:ed:32:d8: fa:7a:e5:95:ea:89:ab:a7:5a:4c:98:b6:6e:07:4f:0d:0e:03: ec:1f:46:bf:50:48:22:d1:92:12:4a:80:40:a2:29:0b:b0:51: 42:51:e8:40:31:b7:21:d4:70:c0:74:92:ef:0e:a1:80:2d:ca: a3:12:09:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIIZXPMuiD/FCKvzo4C8/jd6dIw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAxMDUxWhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjFkNWVmMzZlMDQ3ZDdiNDQzZWEwOTJhYWZiM2NjMGYy NDZjMGM0YjZkZTE4ZDhkZGY3MTdkM2Q3ZGNlYjk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQmczFVRIvh8/htLmCr2n8SgJuW6uJWEphegfvRoaritcN ldCZn/9rVk41mdlKATd7nNSC2IAbm+t/C/Ac0CX+g2nsYBm2vPm2j6ATc4vwQT0N 225TaI/mENR0MWX6xyAnQiPw+ICMTQZjArYmnXu6j1h6IO2iXNxlQ1jkgNIl0pi3 kMH68J2oFVTuqaRynFimEQ1lH45XSLS7PbZlYUJwUhw/DqAIl2F2gRE17OqElP/M sKufh+ajQODjkA84HUIT1usBnPXwdDMjhVJtqJcNAmoWiYmeYAU9JsqqRziTg3Hl VNFMy2jYgoqw1SMAC7O3AeFR6PnAFU10vnfWHR6/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3ahXW4HJI+4ZSdg+52BekRtVt+IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkMmRiY2UxLWRmYWUtNGQ4ZC05ZWYxLTk3MmIzMWU3MzJhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbY9AAwDQYJKoZIhvcNAQELBQADggEBAD/umbl1jidyb7AjMDIUxmdFVfVu C5Se1E3iEkeFADnFsMyGjgQlexSfcbDYIkFJNgkZwU06jaIxDEZ9No6gX8Vi0NW6 0NQMKamj0GzxEvfLog+YgbQB6hBvxc1BIedQZJAsLNQMi+LfHRfU/CSp9NZzXQW9 G9ChkvKuEdXzLraPPa4tIHCPFqiQXve3DZ1RmnvgQmaAxPQfbueZ+rRXpOnryN0v /z7kH1fbzeRb2VC30ERqaTd3AQvMFcoKWtPIuSaete0y2Pp65ZXqiaunWkyYtm4H Tw0OA+wfRr9QSCLRkhJKgECiKQuwUUJR6EAxtyHUcMB0ku8OoYAtyqMSCUo= -----END CERTIFICATE-----Generated at Tue May 12 21:40:12 2026 by rpki-client