$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa File: c7ece882-658c-4358-bbe1-874d6cd93cfb.roa (raw, json) Hash identifier: kwYozFMP2Ly2rj0RMUGGT8bKkUchUjsB7ob9np1tfXA= Subject key identifier: 72:5E:BD:B9:01:C7:70:B6:4B:85:77:2F:52:2A:65:42:AC:14:E8:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 251E4C53A29D8B8EF894C9F9B409CA7FB5145162 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa Signing time: Wed 06 May 2026 00:21:29 +0000 ROA not before: Wed 06 May 2026 00:21:29 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.233.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1e:4c:53:a2:9d:8b:8e:f8:94:c9:f9:b4:09:ca:7f:b5:14:51:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:21:29 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=f9f9c719b0579cf4a12519acb1eced7db7f0e69557d11d86d5b21d79ef91a242, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:fe:8a:44:af:1b:6d:fc:67:b6:55:9c:22: 8e:33:4a:46:65:ea:02:75:77:57:82:5a:ef:e1:a2: d8:5d:54:5d:1e:74:cd:09:44:d1:f8:bd:77:0a:90: 37:ef:31:62:4e:70:b3:df:bc:c7:5b:66:09:a8:03: ab:18:a6:28:3f:02:60:da:85:21:3f:c2:72:e7:9f: 5a:e7:85:73:d4:d9:f0:13:f1:f0:c6:2c:2a:a5:19: 56:0c:e0:83:b2:d2:ed:6f:65:a2:df:d6:c9:0c:29: fa:ce:15:68:a1:b3:21:f8:a0:1a:c9:43:43:94:10: 15:75:c3:56:65:6b:a8:be:53:af:31:a8:25:cb:93: 1c:3f:82:c8:76:6c:6c:d8:5f:95:72:99:e2:46:65: ec:de:f5:e6:ed:80:fd:5f:7d:02:ce:fe:f2:6d:5b: 31:33:e2:c5:25:e3:cb:ab:e5:7e:c9:f1:8a:55:20: 6e:98:e0:b7:08:e1:22:90:28:1e:fa:6b:21:2b:05: a5:72:fc:97:67:78:26:a3:ec:95:cd:71:fe:e7:31: bb:c4:03:e1:32:00:b5:bb:3f:c6:d3:dc:7f:1d:19: 39:cf:e9:55:a4:13:c7:a0:bc:2e:4b:1e:a8:47:7a: 92:cc:39:a2:18:ef:25:81:ef:9a:bd:19:93:24:a7: c7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:BD:B9:01:C7:70:B6:4B:85:77:2F:52:2A:65:42:AC:14:E8:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.233.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9b:c5:db:6e:ea:b3:90:8c:41:a9:63:a2:e9:b9:18:c2:37:dc: 59:9d:5e:32:a2:9d:d1:cf:37:a3:1f:40:99:ed:1e:e7:72:9b: af:d8:a4:5b:8e:fd:e4:6f:14:e7:e0:ec:45:a7:05:fe:07:d3: de:d0:4d:33:ea:ef:73:b5:b8:a7:45:8f:1d:95:0d:df:8f:03: 91:e7:63:5d:46:34:fb:db:02:07:a9:f4:01:0d:7a:bf:55:22: 73:f3:8e:6d:b7:5d:ef:8d:2b:8c:c2:75:e4:7d:b0:87:89:57: 57:d5:81:42:7d:be:b1:27:ce:83:af:a0:dd:ee:88:72:6b:61: 8e:dd:ab:58:57:f5:cc:fe:4d:8a:ac:0a:ef:de:32:69:bf:84: 81:a0:91:fe:73:bd:70:db:4b:eb:2a:9e:3a:9d:e8:c6:54:d6: ef:b5:55:be:ed:f1:d5:ff:69:32:8e:1e:56:48:0c:80:42:a5: 6b:35:76:3b:f8:02:79:45:0b:f6:56:71:64:46:84:50:90:23: f1:70:6a:e7:25:d3:9a:35:b2:91:c8:66:8f:8a:33:11:05:fe: aa:4d:20:fc:f8:ae:c9:d3:a6:37:79:35:c5:7c:88:41:78:36: 20:6e:fb:b9:79:93:12:0b:17:25:97:1d:e2:8b:0e:db:e4:d2: c0:b1:d0:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJR5MU6Kdi474lMn5tAnKf7UUUWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAyMTI5WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWY5YzcxOWIwNTc5Y2Y0YTEyNTE5YWNiMWVjZWQ3ZGI3 ZjBlNjk1NTdkMTFkODZkNWIyMWQ3OWVmOTFhMjQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSNf6KRK8bbfxntlWcIo4zSkZl6gJ1d1eCWu/hothdVF0e dM0JRNH4vXcKkDfvMWJOcLPfvMdbZgmoA6sYpig/AmDahSE/wnLnn1rnhXPU2fAT 8fDGLCqlGVYM4IOy0u1vZaLf1skMKfrOFWihsyH4oBrJQ0OUEBV1w1Zla6i+U68x qCXLkxw/gsh2bGzYX5VymeJGZeze9ebtgP1ffQLO/vJtWzEz4sUl48ur5X7J8YpV IG6Y4LcI4SKQKB76ayErBaVy/JdneCaj7JXNcf7nMbvEA+EyALW7P8bT3H8dGTnP 6VWkE8egvC5LHqhHepLMOaIY7yWB75q9GZMkp8fTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcl69uQHHcLZLhXcvUiplQqwU6A8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3ZWNlODgyLTY1OGMtNDM1OC1iYmUxLTg3NGQ2Y2Q5M2NmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdA6QAwDQYJKoZIhvcNAQELBQADggEBAJvF227qs5CMQaljoum5GMI33Fmd XjKindHPN6MfQJntHudym6/YpFuO/eRvFOfg7EWnBf4H097QTTPq73O1uKdFjx2V Dd+PA5HnY11GNPvbAgep9AENer9VInPzjm23Xe+NK4zCdeR9sIeJV1fVgUJ9vrEn zoOvoN3uiHJrYY7dq1hX9cz+TYqsCu/eMmm/hIGgkf5zvXDbS+sqnjqd6MZU1u+1 Vb7t8dX/aTKOHlZIDIBCpWs1djv4AnlFC/ZWcWRGhFCQI/Fwaucl05o1spHIZo+K MxEF/qpNIPz4rsnTpjd5NcV8iEF4NiBu+7l5kxILFyWXHeKLDtvk0sCx0Kw= -----END CERTIFICATE-----Generated at Wed May 13 08:17:25 2026 by rpki-client