$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c701bd21-9067-42e5-a39f-aa5704e27dab.roa File: c701bd21-9067-42e5-a39f-aa5704e27dab.roa (raw, json) Hash identifier: 7RvUu/hGwFFweZpvyJ5s6Zm2b13EfXhv/0121KQnmGI= Subject key identifier: 7D:76:2E:A0:9B:E2:E6:F4:C8:A5:0C:DC:10:85:35:6F:60:4B:FC:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05DF8924C79E0BE5061E05310B33D9C4A705DC63 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c701bd21-9067-42e5-a39f-aa5704e27dab.roa Signing time: Tue 12 May 2026 00:41:13 +0000 ROA not before: Tue 12 May 2026 00:41:13 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:df:89:24:c7:9e:0b:e5:06:1e:05:31:0b:33:d9:c4:a7:05:dc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:41:13 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=f012fa677c528aa5795f4875aeae689ee0c977bcb5790f70308fa04d76fdbbb2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:80:9a:8c:f5:a2:d9:67:23:69:f7:57:c6: 13:de:91:b0:c3:ea:e8:59:4e:cc:86:45:93:23:5a: 29:a0:3e:ab:97:31:31:cb:87:b2:12:6b:77:db:45: ce:77:24:28:33:4c:4c:f7:b8:cf:f0:12:59:b9:9e: a8:60:1d:c5:38:35:84:0a:21:93:7d:01:1c:ad:12: ad:21:98:d6:6f:1b:6f:83:93:76:91:d8:78:13:cf: 39:a7:5a:1f:2f:6d:ff:68:94:3c:92:b5:e3:21:15: e8:ba:65:c4:81:32:99:63:75:37:bc:2e:d1:a9:d3: 34:78:a8:8b:09:ec:88:92:d8:0b:24:7e:fd:3e:1d: a5:d4:f4:84:1c:67:0a:dc:eb:b3:1c:12:19:77:ef: 62:8d:c3:76:17:4d:7d:8c:9d:d9:21:9a:d4:74:56: 9e:7c:3e:29:04:b7:88:96:44:a3:b5:9e:e4:4b:cc: d5:1d:4f:da:f9:22:8b:a2:21:97:62:94:30:c5:19: f2:2c:64:c5:15:18:99:56:c7:29:0b:42:35:ed:9b: d9:26:43:49:c1:6c:7f:da:e7:88:cb:3c:b8:3a:9c: db:9e:59:33:71:27:7c:bd:92:31:b9:b6:18:62:08: 3b:e5:67:2a:11:7b:76:80:5a:b9:bd:66:f7:0a:4e: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:76:2E:A0:9B:E2:E6:F4:C8:A5:0C:DC:10:85:35:6F:60:4B:FC:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c701bd21-9067-42e5-a39f-aa5704e27dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.26.0/24 Signature Algorithm: sha256WithRSAEncryption 58:5a:92:26:53:2a:47:2a:76:93:c6:40:26:70:94:da:37:39: fe:ee:4e:bd:a4:f4:56:18:75:ca:e2:88:be:d8:12:da:bf:88: f2:dd:c4:83:81:71:72:9f:6b:c8:68:5e:49:40:fe:b7:9f:17: 80:cf:af:87:e0:b6:fa:9e:6d:f4:6a:c8:2b:cb:e8:be:6b:24: d3:89:7b:f9:0e:4c:5a:0a:51:f3:5a:72:45:7a:9c:87:39:76: f2:0a:ea:c1:c4:7b:6b:b8:f3:86:90:0e:93:c3:d6:05:9a:4b: 7f:0b:4a:8b:22:f1:a5:71:1c:bf:fc:87:95:83:8b:43:18:bf: 02:95:27:38:10:93:b3:ed:24:54:0d:57:bf:47:2e:2b:0b:16: 2d:84:e0:5c:35:a7:96:42:cf:e8:5f:d9:e6:a2:8d:b3:14:42: a9:ce:74:20:00:96:c2:f6:53:dd:c4:0b:97:5f:19:85:4a:d4: bf:cd:de:bf:19:98:81:5b:c6:49:91:2f:e9:f5:60:26:a9:76: 76:e9:8c:08:f3:3f:b5:5b:3b:4b:65:6f:c3:36:cc:60:e8:d2: 9c:7e:44:fc:bd:91:80:01:80:7c:8d:cd:44:ea:1a:04:34:bf: 32:78:25:fd:31:98:19:ea:a8:a2:50:31:3c:33:08:81:f6:96: a6:d4:74:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBd+JJMeeC+UGHgUxCzPZxKcF3GMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDA0MTEzWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDEyZmE2NzdjNTI4YWE1Nzk1ZjQ4NzVhZWFlNjg5ZWUw Yzk3N2JjYjU3OTBmNzAzMDhmYTA0ZDc2ZmRiYmIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt4ICajPWi2WcjafdXxhPekbDD6uhZTsyGRZMjWimgPquX MTHLh7ISa3fbRc53JCgzTEz3uM/wElm5nqhgHcU4NYQKIZN9ARytEq0hmNZvG2+D k3aR2HgTzzmnWh8vbf9olDySteMhFei6ZcSBMpljdTe8LtGp0zR4qIsJ7IiS2Ask fv0+HaXU9IQcZwrc67McEhl372KNw3YXTX2MndkhmtR0Vp58PikEt4iWRKO1nuRL zNUdT9r5IouiIZdilDDFGfIsZMUVGJlWxykLQjXtm9kmQ0nBbH/a54jLPLg6nNue WTNxJ3y9kjG5thhiCDvlZyoRe3aAWrm9ZvcKTldhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfXYuoJvi5vTIpQzcEIU1b2BL/D4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3MDFiZDIxLTkwNjctNDJlNS1hMzlmLWFhNTcwNGUyN2RhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmBowDQYJKoZIhvcNAQELBQADggEBAFhakiZTKkcqdpPGQCZwlNo3Of7u Tr2k9FYYdcriiL7YEtq/iPLdxIOBcXKfa8hoXklA/refF4DPr4fgtvqebfRqyCvL 6L5rJNOJe/kOTFoKUfNackV6nIc5dvIK6sHEe2u484aQDpPD1gWaS38LSosi8aVx HL/8h5WDi0MYvwKVJzgQk7PtJFQNV79HLisLFi2E4Fw1p5ZCz+hf2eaijbMUQqnO dCAAlsL2U93EC5dfGYVK1L/N3r8ZmIFbxkmRL+n1YCapdnbpjAjzP7VbO0tlb8M2 zGDo0px+RPy9kYABgHyNzUTqGgQ0vzJ4Jf0xmBnqqKJQMTwzCIH2lqbUdJE= -----END CERTIFICATE-----Generated at Wed May 13 08:17:34 2026 by rpki-client