$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa File: c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa (raw, json) Hash identifier: 85+0w5jmeUjzgXC/KAPHHw23cbIMoowGxwr7qtxDA7w= Subject key identifier: 74:C9:1A:E7:02:C2:9B:F2:00:63:38:E3:1F:EB:9A:5C:79:16:C8:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 023E5BFA76E7F00CB5B77A2068E5E3E2CE9B94CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa Signing time: Tue 05 May 2026 00:51:17 +0000 ROA not before: Tue 05 May 2026 00:51:17 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.8.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3e:5b:fa:76:e7:f0:0c:b5:b7:7a:20:68:e5:e3:e2:ce:9b:94:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:51:17 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=3882954df56f29de24298f893f0b4c02be756190262a94c14f72d2f94645b210, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:63:10:8c:5e:8e:ed:ff:81:05:2e:0a:97: 24:b8:d9:05:c4:76:4d:e1:81:68:a6:af:ec:29:a3: e3:18:be:93:57:16:ab:16:b3:18:23:f3:ab:8b:c1: a0:87:94:c1:3d:c7:16:40:17:5e:78:11:15:92:29: 6a:13:8f:40:a1:0a:e5:7b:a6:d3:ee:6e:83:cf:22: 80:16:04:3b:7e:6c:02:61:79:aa:d9:c5:c1:9f:12: 7f:b5:26:2d:fe:3f:fb:a4:cc:e0:69:c9:bd:19:30: bc:9b:b0:ac:62:14:c9:77:ef:15:56:62:c5:48:34: f1:d1:78:53:35:61:7d:e1:f4:3e:09:ce:0e:f8:c6: 56:35:f4:c6:76:77:61:aa:e5:ca:f3:d4:06:2d:07: 10:4a:ea:f8:f7:6d:79:a4:4b:69:13:24:7e:78:18: b3:54:3b:18:f2:a3:00:8c:3d:50:1d:78:36:a8:3e: 87:7a:e2:35:62:e9:60:99:d8:27:8b:1a:11:c0:81: 52:a3:10:2a:de:11:f1:4f:a0:09:61:3f:ce:46:1a: 4f:c4:a3:5e:21:6b:a6:a2:28:42:5c:4b:ae:5b:00: cd:c8:0e:2e:98:a3:2b:23:68:cb:ef:81:c2:7b:76: 60:75:b2:c0:f2:35:c9:db:d4:97:fa:03:de:b3:52: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C9:1A:E7:02:C2:9B:F2:00:63:38:E3:1F:EB:9A:5C:79:16:C8:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.8.248.0/21 Signature Algorithm: sha256WithRSAEncryption 98:8d:38:64:d5:14:bc:27:4e:47:bd:28:3a:7d:dc:c8:eb:43: ff:45:db:33:9d:c3:9e:7f:75:ea:74:36:62:ac:02:41:00:a7: 46:08:d3:3e:79:c8:c7:41:bb:28:9e:d4:a0:1a:82:bc:7e:9b: 64:af:d0:d9:a4:9a:d8:18:39:3e:3b:ef:2c:2f:b3:13:02:a6: c4:db:e1:9b:65:59:07:d2:9e:83:89:10:34:4f:01:b6:02:3e: 84:99:28:c7:aa:85:70:c8:d8:eb:2f:f2:5c:ec:e7:d3:29:a5: ea:05:8a:d4:ac:7a:13:68:24:09:77:6a:d1:38:a4:65:85:ed: 17:62:b4:86:cc:97:12:30:a1:7a:5e:95:c8:7c:4b:94:f2:41: 3f:8b:23:b5:40:6e:d7:36:87:76:de:20:ac:1b:ac:7b:4a:48: 9d:d9:19:e2:fd:23:37:db:f4:b3:3f:07:d9:ba:87:d9:76:32: d9:26:d7:03:47:e1:82:30:f9:cc:60:56:4c:b9:38:7b:36:d0: 28:97:77:45:e2:e3:6b:07:35:d0:36:3a:0b:30:e5:4d:6e:b4: f0:32:4e:e9:1b:4e:9d:11:f6:29:29:6d:1f:e7:10:d2:fe:d6: c6:0b:1f:8d:79:95:00:92:3e:a9:55:51:b2:3f:b2:ac:15:d5: 16:08:74:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAj5b+nbn8Ay1t3ogaOXj4s6blMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDA1MTE3WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzODgyOTU0ZGY1NmYyOWRlMjQyOThmODkzZjBiNGMwMmJl NzU2MTkwMjYyYTk0YzE0ZjcyZDJmOTQ2NDViMjEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHkGMQjF6O7f+BBS4KlyS42QXEdk3hgWimr+wpo+MYvpNX FqsWsxgj86uLwaCHlME9xxZAF154ERWSKWoTj0ChCuV7ptPuboPPIoAWBDt+bAJh earZxcGfEn+1Ji3+P/ukzOBpyb0ZMLybsKxiFMl37xVWYsVINPHReFM1YX3h9D4J zg74xlY19MZ2d2Gq5crz1AYtBxBK6vj3bXmkS2kTJH54GLNUOxjyowCMPVAdeDao Pod64jVi6WCZ2CeLGhHAgVKjECreEfFPoAlhP85GGk/Eo14ha6aiKEJcS65bAM3I Di6YoysjaMvvgcJ7dmB1ssDyNcnb1Jf6A96zUs0NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdMka5wLCm/IAYzjjH+uaXHkWyLAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMjAwNWNlLWQ2ZDMtNGYyNi05YjQ2LTQzNTViMTJhNDdiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPPCPgwDQYJKoZIhvcNAQELBQADggEBAJiNOGTVFLwnTke9KDp93MjrQ/9F 2zOdw55/dep0NmKsAkEAp0YI0z55yMdBuyie1KAagrx+m2Sv0NmkmtgYOT477ywv sxMCpsTb4ZtlWQfSnoOJEDRPAbYCPoSZKMeqhXDI2Osv8lzs59MppeoFitSsehNo JAl3atE4pGWF7RditIbMlxIwoXpelch8S5TyQT+LI7VAbtc2h3beIKwbrHtKSJ3Z GeL9Izfb9LM/B9m6h9l2Mtkm1wNH4YIw+cxgVky5OHs20CiXd0Xi42sHNdA2Ogsw 5U1utPAyTukbTp0R9ikpbR/nENL+1sYLH415lQCSPqlVUbI/sqwV1RYIdKs= -----END CERTIFICATE-----Generated at Tue May 12 21:55:41 2026 by rpki-client