$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa File: b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa (raw, json) Hash identifier: CnNQmChe3UGqpCUPiP+4gwj9WY6prowsvLU3FtXQEDo= Subject key identifier: 02:CA:E7:02:39:81:D0:DF:6E:08:77:6C:F8:0D:D9:91:2C:6A:C7:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 381DA280653331F23E7FB5756539076E456D1DF2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa Signing time: Sat 09 May 2026 00:20:05 +0000 ROA not before: Sat 09 May 2026 00:20:05 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 32.192.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:a2:80:65:33:31:f2:3e:7f:b5:75:65:39:07:6e:45:6d:1d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:20:05 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=42f06d42fd9249abce0cb8160ac1c775696d2cb82bbd7688e140e255e3b4e336, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:e5:2d:54:9b:26:28:61:52:dc:8d:ec:cf: 9a:f8:4b:91:39:f1:0d:f7:a8:67:18:9a:97:55:49: 72:8d:d6:02:21:7c:aa:5f:7a:bd:3b:13:35:8e:fa: 79:18:a2:60:cc:e4:88:61:de:1b:50:cc:4d:7d:3e: 96:2b:24:00:14:fd:fc:01:93:6b:ff:fb:39:01:11: 58:fa:9d:49:96:d6:b7:79:60:11:4f:2f:fd:58:2c: be:c5:91:07:57:be:aa:5a:d9:26:9d:fd:c9:5f:2e: 5f:bc:22:93:2f:e4:4c:eb:7f:be:45:a0:cf:20:08: 52:52:98:e4:a8:03:90:d2:f5:d9:e5:3b:1f:4c:33: 24:4a:a2:b7:c2:45:b9:2d:e8:0c:37:c7:ea:22:c5: 43:9e:f5:42:0e:d9:fe:0e:bd:7a:b0:ae:9c:a3:ce: 02:87:c9:d4:d3:51:ca:4a:72:5a:86:60:e8:74:8d: 18:74:24:06:c3:ad:2e:83:c0:1c:dd:a4:3a:aa:a8: 30:28:83:9e:8f:2d:5b:1c:6a:8b:26:3b:ff:fe:af: 23:ab:25:80:2c:58:c9:12:48:8c:9a:47:9d:2f:f2: 23:6e:fa:58:ae:3b:9c:eb:27:10:f7:6f:ec:b9:89: d0:43:da:80:51:52:1c:8b:d0:79:cb:78:0d:ff:62: 7f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:E7:02:39:81:D0:DF:6E:08:77:6C:F8:0D:D9:91:2C:6A:C7:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.192.0.0/13 Signature Algorithm: sha256WithRSAEncryption 5e:ec:79:69:5f:cd:a0:a5:17:fc:d7:3f:61:60:66:b0:9a:3f: a8:66:b7:90:cb:00:68:ea:09:0b:1b:2f:8a:26:74:dd:4c:38: e6:3c:68:89:77:cc:96:af:f4:fd:3d:ee:0b:d2:b0:e3:a1:dd: 62:ff:08:eb:41:78:10:c5:54:fe:db:f6:f9:ca:59:cd:a7:1b: 7c:b2:6a:ad:23:15:66:95:4e:c2:07:c0:ce:d6:53:64:c1:f4: 47:32:df:86:88:9f:9c:eb:95:36:c4:f4:29:ba:36:13:ef:74: ec:c3:af:b2:f8:a6:b8:81:e8:ce:e7:50:67:96:3f:6c:27:2e: 8a:b5:7d:70:70:d9:4e:f1:ad:3f:24:ef:44:79:13:d6:7b:81: 54:90:56:90:8f:a3:be:97:f9:65:e8:65:b4:dd:62:7a:c3:b8: 73:13:1f:4a:8a:dd:69:f6:7e:3f:92:e7:83:58:fc:84:9f:f0: 19:6d:7c:dd:87:96:8f:84:13:17:91:b9:9a:05:ff:06:13:44: b9:0c:4f:28:77:d9:94:29:35:61:b6:bf:2e:3a:0e:e8:70:ba: 9b:e2:91:65:50:65:26:e5:fe:13:19:52:6d:34:38:97:fd:5b: 8f:66:fc:84:4c:4e:a1:cc:de:fa:5b:83:e4:ce:c1:46:2e:f1: 84:f2:13:e9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOB2igGUzMfI+f7V1ZTkHbkVtHfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAyMDA1WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmYwNmQ0MmZkOTI0OWFiY2UwY2I4MTYwYWMxYzc3NTY5 NmQyY2I4MmJiZDc2ODhlMTQwZTI1NWUzYjRlMzM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkv+UtVJsmKGFS3I3sz5r4S5E58Q33qGcYmpdVSXKN1gIh fKpfer07EzWO+nkYomDM5Ihh3htQzE19PpYrJAAU/fwBk2v/+zkBEVj6nUmW1rd5 YBFPL/1YLL7FkQdXvqpa2Sad/clfLl+8IpMv5Ezrf75FoM8gCFJSmOSoA5DS9dnl Ox9MMyRKorfCRbkt6Aw3x+oixUOe9UIO2f4OvXqwrpyjzgKHydTTUcpKclqGYOh0 jRh0JAbDrS6DwBzdpDqqqDAog56PLVscaosmO//+ryOrJYAsWMkSSIyaR50v8iNu +liuO5zrJxD3b+y5idBD2oBRUhyL0HnLeA3/Yn9VAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAsrnAjmB0N9uCHds+A3ZkSxqxwAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3MTg5YTYyLTQxMGMtNGU4Zi04YmZlLTZkYTc5NzhjOTVkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMgwDANBgkqhkiG9w0BAQsFAAOCAQEAXux5aV/NoKUX/Nc/YWBmsJo/qGa3 kMsAaOoJCxsviiZ03Uw45jxoiXfMlq/0/T3uC9Kw46HdYv8I60F4EMVU/tv2+cpZ zacbfLJqrSMVZpVOwgfAztZTZMH0RzLfhoifnOuVNsT0Kbo2E+907MOvsvimuIHo zudQZ5Y/bCcuirV9cHDZTvGtPyTvRHkT1nuBVJBWkI+jvpf5ZehltN1iesO4cxMf SordafZ+P5Lng1j8hJ/wGW183YeWj4QTF5G5mgX/BhNEuQxPKHfZlCk1Yba/LjoO 6HC6m+KRZVBlJuX+ExlSbTQ4l/1bj2b8hExOocze+luD5M7BRi7xhPIT6Q== -----END CERTIFICATE-----Generated at Wed May 13 00:12:48 2026 by rpki-client