$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa File: ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa (raw, json) Hash identifier: o5GY8sf4ZM01pr3cWo0mAFFSJWKDS5fs51htIQNn+RQ= Subject key identifier: F8:AD:BC:45:CA:8D:22:96:F7:58:18:FF:4F:3A:FA:4F:3D:2F:9B:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BE1513CE29F52A881E9805367152AC5687DFF51 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa Signing time: Mon 04 May 2026 00:11:13 +0000 ROA not before: Mon 04 May 2026 00:11:13 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 166.117.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e1:51:3c:e2:9f:52:a8:81:e9:80:53:67:15:2a:c5:68:7d:ff:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:11:13 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=0bd94832d26d069c9e2be42636c510d766d930ef811739c6533f32700d4ad8d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:10:1b:59:c3:50:54:92:db:d3:73:34:37: 21:7b:36:6b:a0:64:09:08:98:38:0b:d4:d2:d3:a1: 2f:f0:87:ba:10:d7:9f:42:1e:21:6b:36:dd:b5:74: 93:2f:f6:93:23:ce:0a:45:ea:f7:7e:93:a6:40:21: 5a:74:91:e2:c0:e8:c1:9f:de:b5:e2:19:b2:7c:bb: 6e:b1:52:f4:fc:dd:19:02:7d:e2:93:35:ce:1c:c2: cb:ce:19:d9:b0:ec:c9:f4:2e:bb:41:27:e7:02:c2: 98:79:da:6c:78:0f:9a:ef:10:c6:3a:1f:2e:b1:1f: 97:bf:8b:b6:c9:f4:c7:f9:41:a5:c2:a1:fc:2a:14: da:9a:c4:98:fd:62:f0:e2:20:d7:d6:5f:2e:a9:d1: 7c:d1:b8:6d:f8:7f:74:40:b3:70:d0:1d:36:62:50: be:15:18:17:59:09:ec:95:8b:40:51:f7:4f:e0:85: f6:c5:8a:2b:5f:2e:20:93:bb:83:6c:6c:21:3a:83: 44:99:20:3e:95:51:3b:47:5f:34:70:d6:fb:07:e4: 00:4e:19:13:ca:2f:f4:77:c7:a0:28:b0:e0:e2:d0: 4b:99:1f:36:e1:af:0d:a4:42:83:c8:e7:df:c0:1e: 75:54:da:85:ea:fc:95:86:d3:96:1a:b4:b9:13:eb: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AD:BC:45:CA:8D:22:96:F7:58:18:FF:4F:3A:FA:4F:3D:2F:9B:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.117.112.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:d3:50:0d:6f:dd:85:a0:17:5d:40:cc:fc:f4:cd:94:ee:6e: 47:e6:88:04:de:9d:49:d9:be:59:d1:56:0e:0e:96:43:07:7e: df:10:d9:52:43:bf:0a:2d:09:98:b2:c0:9b:6b:6c:b5:69:77: 8a:ce:f3:a0:5f:2a:cc:fc:c3:64:1b:e4:b4:fc:aa:d9:2a:1f: c9:86:f1:55:be:78:df:cf:22:bb:ac:87:e3:f0:88:e4:7a:08: 2e:4b:1d:bd:8d:e0:44:8b:98:bc:0d:50:c1:13:1a:a6:bd:1b: 82:9b:ce:de:6c:13:c0:4b:1a:10:b8:dd:2b:3a:cd:53:46:da: 56:df:2c:bd:ee:f8:df:d7:9f:a6:8b:81:11:5a:40:dd:ce:1a: df:28:11:45:63:1c:8e:d7:37:79:28:1b:ab:1a:bc:9a:a5:3b: 3f:21:cf:25:2b:fb:18:ad:6c:ac:46:a3:52:11:b8:61:19:4e: b2:e1:37:7f:a8:d6:76:f9:89:4a:09:47:da:70:f2:9c:df:e1: 94:b5:3b:39:ab:01:87:8e:11:22:02:72:5f:85:0b:6c:9b:5d: 0b:8c:9e:3b:10:f6:34:19:b1:98:06:d8:90:c4:ff:98:65:4a: 4a:c0:76:da:6a:1c:fe:64:83:47:66:0f:56:a8:a4:c1:91:30: 42:a2:03:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW+FRPOKfUqiB6YBTZxUqxWh9/1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAxMTEzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmQ5NDgzMmQyNmQwNjljOWUyYmU0MjYzNmM1MTBkNzY2 ZDkzMGVmODExNzM5YzY1MzNmMzI3MDBkNGFkOGQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDifxAbWcNQVJLb03M0NyF7NmugZAkImDgL1NLToS/wh7oQ 159CHiFrNt21dJMv9pMjzgpF6vd+k6ZAIVp0keLA6MGf3rXiGbJ8u26xUvT83RkC feKTNc4cwsvOGdmw7Mn0LrtBJ+cCwph52mx4D5rvEMY6Hy6xH5e/i7bJ9Mf5QaXC ofwqFNqaxJj9YvDiINfWXy6p0XzRuG34f3RAs3DQHTZiUL4VGBdZCeyVi0BR90/g hfbFiitfLiCTu4NsbCE6g0SZID6VUTtHXzRw1vsH5ABOGRPKL/R3x6AosODi0EuZ Hzbhrw2kQoPI59/AHnVU2oXq/JWG05YatLkT64orAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+K28RcqNIpb3WBj/Tzr6Tz0vm0YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlNWI2M2RjLWUwYWUtNGJlZC04YmVkLTUwNzExZDg4NjNiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASmdXAwDQYJKoZIhvcNAQELBQADggEBAHrTUA1v3YWgF11AzPz0zZTubkfm iATenUnZvlnRVg4OlkMHft8Q2VJDvwotCZiywJtrbLVpd4rO86BfKsz8w2Qb5LT8 qtkqH8mG8VW+eN/PIrush+PwiOR6CC5LHb2N4ESLmLwNUMETGqa9G4Kbzt5sE8BL GhC43Ss6zVNG2lbfLL3u+N/Xn6aLgRFaQN3OGt8oEUVjHI7XN3koG6savJqlOz8h zyUr+xitbKxGo1IRuGEZTrLhN3+o1nb5iUoJR9pw8pzf4ZS1OzmrAYeOESICcl+F C2ybXQuMnjsQ9jQZsZgG2JDE/5hlSkrAdtpqHP5kg0dmD1aopMGRMEKiAyg= -----END CERTIFICATE-----Generated at Tue May 12 21:40:16 2026 by rpki-client