$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa File: b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa (raw, json) Hash identifier: VV2UU5wVBd+T7qpgxjyUwIUPOyiCXN9HgI7QwFsPtQQ= Subject key identifier: 14:FF:3F:F8:B7:65:61:3B:EC:C4:0F:89:54:14:69:D0:D1:67:9A:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15149306541D170DF82E9F7CAC07760819AC7395 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa Signing time: Sat 09 May 2026 00:20:55 +0000 ROA not before: Sat 09 May 2026 00:20:55 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:14:93:06:54:1d:17:0d:f8:2e:9f:7c:ac:07:76:08:19:ac:73:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:20:55 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=dd8230a0425bf90abeb0b7ddcb0e95c27d03624c622a14b53b7d7197c1e5e3e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:fa:f6:fd:30:55:f1:87:c6:7e:3c:1a:93: a9:ea:74:0e:5e:63:1b:2e:61:9f:0c:ce:00:05:ad: 62:5a:60:89:df:c6:f6:f6:14:d5:bb:3e:ae:62:95: ea:9d:15:0e:3a:ed:e9:f7:89:ed:34:14:ca:12:50: 2c:aa:73:d6:bf:1b:93:60:5b:ed:ac:4a:fa:ed:59: de:7b:7a:3d:0e:8a:72:98:01:c2:a0:d7:d7:e7:83: 4f:84:c6:bd:32:a5:b0:d0:90:56:71:bb:04:52:96: ea:fd:2c:36:2e:b1:8f:c4:43:32:84:77:a7:84:3b: 35:a5:9d:11:7c:6a:49:94:1b:25:94:7e:12:7e:85: d4:8f:01:83:cb:24:01:11:96:57:c1:77:4a:f6:5c: e0:ea:57:42:4f:55:90:08:4e:f9:e2:3e:8c:eb:16: 0d:d3:17:6e:a4:52:28:c1:c7:32:ed:33:0e:22:ea: 8e:c0:93:a1:2d:4b:13:33:af:b5:70:02:b8:24:91: da:14:4d:e6:91:24:f7:89:8a:cf:f0:75:b2:c3:6a: 2c:6e:ba:68:24:41:9f:d6:d3:3b:6d:35:80:8b:fc: d9:e0:7e:e1:7e:8c:8c:9f:30:5e:da:14:36:54:51: 65:03:ae:4b:f9:86:a8:cd:ac:fe:e2:8a:d7:e3:7c: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FF:3F:F8:B7:65:61:3B:EC:C4:0F:89:54:14:69:D0:D1:67:9A:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.176.0/21 Signature Algorithm: sha256WithRSAEncryption 00:18:f6:02:f6:c3:e5:e2:b0:42:0a:8b:91:64:62:28:f4:e6: 6f:d2:5b:84:58:71:7e:42:f1:44:89:da:8d:3a:35:12:e5:93: 24:e3:50:6b:e0:83:2c:78:f9:ab:38:68:30:33:07:71:6c:d9: 4f:62:56:1e:1a:c3:4a:d6:43:c7:03:a6:3a:24:ac:a4:29:ef: 5e:1d:dc:17:1f:df:3c:0d:3a:d2:a3:64:ba:ff:8b:9b:e6:0a: f3:d0:10:10:f1:98:b0:8a:9a:17:0a:90:a7:bb:2d:f5:eb:58: 69:03:97:45:03:be:45:49:12:ba:ba:0f:e3:1f:ab:a9:69:a4: 3b:37:f9:49:21:b1:14:db:fa:a1:f6:41:16:f7:14:9c:fa:64: 78:6b:02:94:a3:71:e5:81:af:94:f2:e7:11:06:40:a9:8f:d6: 71:66:38:a2:df:3e:1b:72:d0:0f:1e:27:52:34:fe:74:88:7d: 34:8c:23:15:3c:48:30:b8:51:cc:8f:ed:32:76:e3:b4:dc:2f: 87:79:a1:e2:bd:9e:4e:d4:21:4a:b8:3a:12:2c:3f:f9:a0:1a: 71:19:f5:94:4b:d5:92:8e:ce:e8:79:03:3d:aa:3a:e5:28:75: e6:4e:c5:5d:55:07:91:44:36:85:e1:75:1b:fe:ac:1e:dc:01: 69:7c:d4:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFRSTBlQdFw34Lp98rAd2CBmsc5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAyMDU1WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDgyMzBhMDQyNWJmOTBhYmViMGI3ZGRjYjBlOTVjMjdk MDM2MjRjNjIyYTE0YjUzYjdkNzE5N2MxZTVlM2U3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjV/r2/TBV8YfGfjwak6nqdA5eYxsuYZ8MzgAFrWJaYInf xvb2FNW7Pq5ileqdFQ467en3ie00FMoSUCyqc9a/G5NgW+2sSvrtWd57ej0OinKY AcKg19fng0+Exr0ypbDQkFZxuwRSlur9LDYusY/EQzKEd6eEOzWlnRF8akmUGyWU fhJ+hdSPAYPLJAERllfBd0r2XODqV0JPVZAITvniPozrFg3TF26kUijBxzLtMw4i 6o7Ak6EtSxMzr7VwArgkkdoUTeaRJPeJis/wdbLDaixuumgkQZ/W0zttNYCL/Nng fuF+jIyfMF7aFDZUUWUDrkv5hqjNrP7iitfjfLE7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFP8/+LdlYTvsxA+JVBRp0NFnmpkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyYTM2ZmQwLThjNDYtNGE5Ny1iMmUxLTUzZDAzMWM4NTQyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFALAwDQYJKoZIhvcNAQELBQADggEBAAAY9gL2w+XisEIKi5FkYij05m/S W4RYcX5C8USJ2o06NRLlkyTjUGvggyx4+as4aDAzB3Fs2U9iVh4aw0rWQ8cDpjok rKQp714d3Bcf3zwNOtKjZLr/i5vmCvPQEBDxmLCKmhcKkKe7LfXrWGkDl0UDvkVJ Erq6D+Mfq6lppDs3+UkhsRTb+qH2QRb3FJz6ZHhrApSjceWBr5Ty5xEGQKmP1nFm OKLfPhty0A8eJ1I0/nSIfTSMIxU8SDC4UcyP7TJ247TcL4d5oeK9nk7UIUq4OhIs P/mgGnEZ9ZRL1ZKOzuh5Az2qOuUodeZOxV1VB5FENoXhdRv+rB7cAWl81LY= -----END CERTIFICATE-----Generated at Wed May 13 00:12:24 2026 by rpki-client