$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa File: be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa (raw, json) Hash identifier: 6TXexg/u1NeVpC5LaIbVguYt507A3IRFkh6DM1c4cXQ= Subject key identifier: 7F:45:6F:98:78:D3:D6:8E:56:20:49:D1:76:6B:D6:E9:B5:63:9B:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65F9238639EE2ED689A195767D0DC76BB0603269 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa Signing time: Tue 05 May 2026 01:00:07 +0000 ROA not before: Tue 05 May 2026 01:00:07 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f9:23:86:39:ee:2e:d6:89:a1:95:76:7d:0d:c7:6b:b0:60:32:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 01:00:07 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=08dd3ec160ef589f595650f09f8a7d405c7204249787ae25ebf5166862a6b5b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:e3:db:59:de:94:c7:31:79:09:48:bb:a0: d1:59:ac:f4:b7:16:34:c3:3f:5b:f9:fc:27:dd:5c: a0:77:1a:8c:57:41:88:19:ac:6f:fd:ed:73:4d:5b: a0:91:cb:98:dc:ef:15:79:4a:49:03:c6:3b:62:1c: 2e:1f:5b:99:89:70:f1:6a:77:df:6e:d0:ac:40:0e: 65:aa:47:b9:5c:83:3c:d0:b3:6a:a2:09:5c:9f:70: 25:21:3d:65:2e:d0:5c:33:33:e6:85:c4:68:67:9c: 5f:dd:9d:fd:df:5e:a5:c8:6a:22:ef:04:6d:71:86: 4a:ae:6a:f6:e8:ed:c5:39:4d:4a:3b:f6:46:61:81: 9f:85:ec:3c:73:4c:90:f6:fc:d0:f3:0f:41:84:99: 94:4d:8a:b5:cf:e2:0a:1d:fe:84:ff:4c:5d:06:d5: 1c:5b:58:88:af:c4:4b:72:f7:11:05:66:d5:2f:55: da:c4:cc:d6:12:cd:2f:b1:d9:c3:49:2c:16:4a:44: 33:1c:f3:48:e5:6a:38:2d:04:77:33:19:65:99:b9: 16:88:ec:53:9e:ad:dc:8b:48:54:5e:3b:a7:7c:37: 0a:78:0e:01:b4:77:49:ef:ac:47:3e:ea:d5:f7:47: ce:b9:d6:5e:54:e7:78:7b:1a:46:5e:aa:55:42:ef: e0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:45:6F:98:78:D3:D6:8E:56:20:49:D1:76:6B:D6:E9:B5:63:9B:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:bc:a2:ae:2d:73:f4:c8:cf:70:67:28:82:a7:8e:b1:91:44: 12:3b:be:62:66:21:11:fa:00:19:d4:a8:3f:e1:dc:25:64:cb: f4:e5:36:c9:e3:27:dc:02:d0:2f:7b:09:9d:85:22:50:e8:22: 58:64:99:90:07:23:f3:52:86:09:12:d0:fa:e5:e4:32:51:49: 6e:90:88:b8:67:d3:a6:c9:b0:54:a3:49:36:c2:de:33:16:7a: ee:be:67:09:9c:8a:9b:b1:5d:4a:25:f9:e5:49:56:31:21:3d: 89:9f:78:c0:3f:3d:06:c7:8e:1b:0b:ef:d1:74:4d:ce:5c:85: cd:92:3a:ac:82:72:ff:f2:72:55:a1:1b:8b:b4:a4:34:83:70: 6b:33:c8:37:b0:84:0f:a0:54:bf:50:08:cc:99:fe:16:0d:8b: df:fa:a7:00:be:a3:c6:b1:5a:6c:f8:b0:5a:7d:fd:25:71:f4: b1:50:15:d2:85:fe:dd:b9:af:3b:e2:00:9f:7e:8f:ca:00:3a: 2d:60:aa:64:32:d5:bc:db:4f:39:c5:76:f7:e4:00:32:c0:da: f7:54:d4:ae:93:b5:8e:7d:cb:5a:7b:76:5b:f9:83:85:f1:1d: 29:c5:10:8d:b8:1d:ae:4a:7d:13:3f:6e:69:e1:37:72:c6:d8: c3:92:6b:0e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZfkjhjnuLtaJoZV2fQ3Ha7BgMmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDEwMDA3WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGRkM2VjMTYwZWY1ODlmNTk1NjUwZjA5ZjhhN2Q0MDVj NzIwNDI0OTc4N2FlMjVlYmY1MTY2ODYyYTZiNWIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEDOPbWd6UxzF5CUi7oNFZrPS3FjTDP1v5/CfdXKB3GoxX QYgZrG/97XNNW6CRy5jc7xV5SkkDxjtiHC4fW5mJcPFqd99u0KxADmWqR7lcgzzQ s2qiCVyfcCUhPWUu0FwzM+aFxGhnnF/dnf3fXqXIaiLvBG1xhkquavbo7cU5TUo7 9kZhgZ+F7DxzTJD2/NDzD0GEmZRNirXP4god/oT/TF0G1RxbWIivxEty9xEFZtUv VdrEzNYSzS+x2cNJLBZKRDMc80jlajgtBHczGWWZuRaI7FOerdyLSFReO6d8Nwp4 DgG0d0nvrEc+6tX3R8651l5U53h7GkZeqlVC7+BdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUf0VvmHjT1o5WIEnRdmvW6bVjm6QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlODM3YTFiLTMyYzQtNDliMS05YjIwLTNiOGU0ZDhlMDcyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRVjANBgkqhkiG9w0BAQsFAAOCAQEAD7yiri1z9MjPcGcogqeOsZFEEju+ YmYhEfoAGdSoP+HcJWTL9OU2yeMn3ALQL3sJnYUiUOgiWGSZkAcj81KGCRLQ+uXk MlFJbpCIuGfTpsmwVKNJNsLeMxZ67r5nCZyKm7FdSiX55UlWMSE9iZ94wD89BseO Gwvv0XRNzlyFzZI6rIJy//JyVaEbi7SkNINwazPIN7CED6BUv1AIzJn+Fg2L3/qn AL6jxrFabPiwWn39JXH0sVAV0oX+3bmvO+IAn36PygA6LWCqZDLVvNtPOcV29+QA MsDa91TUrpO1jn3LWnt2W/mDhfEdKcUQjbgdrkp9Ez9uaeE3csbYw5JrDg== -----END CERTIFICATE-----Generated at Wed May 13 00:46:51 2026 by rpki-client