$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa File: b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa (raw, json) Hash identifier: ezHVW7mRzcAFX5yAMqbBHeFYFZT1Vj/9qYKTWW6YARA= Subject key identifier: D1:13:92:8D:74:71:C6:4C:40:E4:DD:ED:D1:DE:29:50:46:BE:D5:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2626FFD03802138A76A049EF7C74380C1F0D29C5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa Signing time: Tue 12 May 2026 01:40:42 +0000 ROA not before: Tue 12 May 2026 01:40:42 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:26:ff:d0:38:02:13:8a:76:a0:49:ef:7c:74:38:0c:1f:0d:29:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:40:42 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=9830f98e3454ec491f6adde37b3551206569b9e8023eb8040fd9909063321ddc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:92:ab:67:8a:bc:fc:62:20:31:73:54:37:9e: 81:af:5f:2f:b5:20:33:18:86:30:2c:ec:93:fa:55: b0:08:98:51:4f:aa:29:2f:7d:a8:2f:22:bf:e6:eb: 40:54:1c:77:42:f5:eb:60:e9:72:bc:66:68:f1:90: 98:52:02:63:1f:01:23:5b:ba:77:af:30:5a:02:53: 6a:d5:17:0d:7a:bf:65:06:7e:04:d2:bb:04:b7:99: 1d:7b:ef:9b:3a:79:46:0f:f2:c3:ca:ac:36:97:59: 8a:6b:3c:a8:c5:4c:ae:8a:39:20:34:45:4b:7b:16: bc:aa:21:6e:57:34:3e:11:95:9d:ed:b7:b1:51:29: ce:64:dd:2c:33:9e:19:53:32:56:e9:c1:1c:ab:ab: 6c:2f:84:94:37:4f:2a:f6:17:43:76:c5:4f:4c:bf: 5c:21:bf:dc:92:da:21:1d:d7:b9:44:f4:f9:e2:0b: 38:67:cd:6c:36:28:0f:a7:73:4d:d4:b8:04:05:a7: ae:ac:98:32:16:8a:f0:62:c1:0d:bf:9f:01:d5:d7: a9:ef:cd:d5:cf:3a:45:ba:c7:ca:4d:37:13:fe:04: 82:e9:8f:ff:5d:30:94:df:c1:fb:6a:f0:33:7f:4b: 99:d0:73:c2:a5:8e:f2:00:01:85:0d:1a:2c:c4:73: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:13:92:8D:74:71:C6:4C:40:E4:DD:ED:D1:DE:29:50:46:BE:D5:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.12.0/24 Signature Algorithm: sha256WithRSAEncryption 48:d0:4a:6a:eb:29:8c:17:97:64:bc:24:67:43:10:35:61:13: 4f:35:61:09:73:68:3b:52:25:86:67:5d:36:a2:3e:3f:17:cb: a5:a6:7d:08:62:26:39:d7:8a:d7:00:a0:3a:d8:f9:0a:ae:21: a1:a0:36:e3:58:6d:98:61:f6:42:91:09:27:98:d2:88:66:51: b2:a0:32:a6:20:fa:65:c6:bc:3b:4a:7a:e7:fa:19:3f:fb:b0: 17:8d:16:b4:48:35:dd:96:dd:33:24:15:83:f6:8a:40:13:b7: 83:6d:ec:c7:e5:a8:38:8d:4e:f5:d8:4f:10:26:a3:dd:63:4a: 1b:79:aa:66:8b:91:b3:99:9d:76:bd:c9:19:28:d7:17:1f:9a: d4:79:d2:d3:33:bc:59:10:e1:57:70:3a:76:a1:d6:6b:b6:b0: 17:47:f9:93:91:80:f2:55:37:a5:d1:a5:69:ff:7a:eb:19:5e: ba:8b:a7:8b:a3:8b:96:ce:42:b7:b2:75:5b:23:e6:bc:e4:18: 25:4e:0f:96:15:59:82:b5:d0:47:b3:77:db:3b:39:7e:cf:38: ce:e7:a1:1d:a4:09:55:d4:6d:ee:4f:1a:63:8f:60:a4:b5:b1: 17:c1:71:4c:fe:0c:21:c4:d5:1a:6a:2c:f7:1e:36:3a:6a:b8: 44:b9:ac:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJib/0DgCE4p2oEnvfHQ4DB8NKcUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDE0MDQyWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODMwZjk4ZTM0NTRlYzQ5MWY2YWRkZTM3YjM1NTEyMDY1 NjliOWU4MDIzZWI4MDQwZmQ5OTA5MDYzMzIxZGRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnkqtnirz8YiAxc1Q3noGvXy+1IDMYhjAs7JP6VbAImFFP qikvfagvIr/m60BUHHdC9etg6XK8ZmjxkJhSAmMfASNbunevMFoCU2rVFw16v2UG fgTSuwS3mR1775s6eUYP8sPKrDaXWYprPKjFTK6KOSA0RUt7FryqIW5XND4RlZ3t t7FRKc5k3SwznhlTMlbpwRyrq2wvhJQ3Tyr2F0N2xU9Mv1whv9yS2iEd17lE9Pni CzhnzWw2KA+nc03UuAQFp66smDIWivBiwQ2/nwHV16nvzdXPOkW6x8pNNxP+BILp j/9dMJTfwftq8DN/S5nQc8KljvIAAYUNGizEcwV/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0ROSjXRxxkxA5N3t0d4pUEa+1eMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyZmJlMzQ4LTlhNmYtNDU0OS1hOGM4LTg0OWJjYWZiYjFlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmAwwDQYJKoZIhvcNAQELBQADggEBAEjQSmrrKYwXl2S8JGdDEDVhE081 YQlzaDtSJYZnXTaiPj8Xy6WmfQhiJjnXitcAoDrY+QquIaGgNuNYbZhh9kKRCSeY 0ohmUbKgMqYg+mXGvDtKeuf6GT/7sBeNFrRINd2W3TMkFYP2ikATt4Nt7MflqDiN TvXYTxAmo91jSht5qmaLkbOZnXa9yRko1xcfmtR50tMzvFkQ4VdwOnah1mu2sBdH +ZORgPJVN6XRpWn/eusZXrqLp4uji5bOQreydVsj5rzkGCVOD5YVWYK10Eezd9s7 OX7POM7noR2kCVXUbe5PGmOPYKS1sRfBcUz+DCHE1RpqLPceNjpquES5rL4= -----END CERTIFICATE-----Generated at Wed May 13 00:16:18 2026 by rpki-client