$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c88d284e-2c18-4724-b045-476c4fec3f53.roa File: c88d284e-2c18-4724-b045-476c4fec3f53.roa (raw, json) Hash identifier: L1vDjbS3a9DP8fEFht2RoXJSNKvKaliLdsY+nds5L6s= Subject key identifier: C0:CB:E9:F7:BD:3B:90:AA:D3:10:CD:FF:61:E7:50:DD:DB:FE:3D:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 249EDCE77D06268FAB6358CA39F4DBDF40C8065B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c88d284e-2c18-4724-b045-476c4fec3f53.roa Signing time: Wed 06 May 2026 00:30:11 +0000 ROA not before: Wed 06 May 2026 00:30:11 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.160.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9e:dc:e7:7d:06:26:8f:ab:63:58:ca:39:f4:db:df:40:c8:06:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:30:11 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=b17d04ed6993827ff952966048347191e81651d70f5f3572967bfd4b2cd5c1f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:39:74:36:d2:dc:59:f4:78:1e:e4:08:54: 21:3f:02:96:11:d8:ba:cc:01:99:33:9e:1e:4d:3b: 94:60:19:1a:82:bd:07:40:24:2f:de:58:da:53:e8: 6d:a0:f7:40:e2:73:e7:db:16:30:29:e7:89:13:20: af:dc:0c:95:bd:93:57:36:42:d1:c9:52:bf:42:b7: c9:3d:1a:04:05:97:79:ca:a8:9d:80:7a:c1:d4:05: c9:3b:5c:5a:c2:28:b6:a3:59:a2:da:e6:9f:b8:9e: 13:75:44:1c:2d:09:b5:ff:2f:3e:b7:25:25:58:43: cd:54:1a:fd:2a:0a:4a:20:54:80:38:80:c8:32:55: 18:7a:f8:4d:16:e7:71:bf:f7:0a:47:fd:54:16:dc: c4:92:f7:7b:b4:63:b6:63:81:c8:8b:73:f9:2b:c4: 13:d8:12:c3:bf:cc:e9:67:9e:0d:d0:9e:e6:75:7b: 85:25:b7:cd:b7:b1:ac:a7:87:a5:97:37:95:ed:00: 28:c3:ba:e8:5c:8f:b4:4c:71:1f:fd:84:f6:05:6e: a6:29:fa:67:bd:e5:c9:eb:65:01:21:b6:9d:50:3a: a1:a9:d7:b7:2f:da:58:2e:b2:da:c2:b9:40:90:f0: 28:3b:19:da:7c:35:cc:7c:3d:98:b8:91:c1:fb:8d: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CB:E9:F7:BD:3B:90:AA:D3:10:CD:FF:61:E7:50:DD:DB:FE:3D:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c88d284e-2c18-4724-b045-476c4fec3f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.160.0.0/17 Signature Algorithm: sha256WithRSAEncryption ca:2c:9c:ad:d5:5d:dc:05:78:3f:30:89:e3:a5:43:62:6e:18: ed:aa:20:a1:1c:e0:aa:a2:af:9f:39:44:ee:15:58:90:53:c5: 23:da:0f:d7:3b:09:2a:b1:9a:c3:08:3f:06:b4:2e:c6:5e:b5: 46:cf:57:c7:61:4d:3f:ba:f4:e9:f0:30:ff:c9:fd:fc:b9:7e: 9f:ed:6c:3e:dc:6b:47:f8:39:86:1f:28:46:81:80:7f:9c:40: 35:ef:ef:c8:fc:32:ad:98:0e:5e:54:c5:0e:bd:3c:4c:20:05: d2:f2:cf:dc:2b:ca:b7:f5:87:38:8e:2c:51:df:51:43:e2:d7: 3d:d5:c0:57:69:b2:2f:4e:63:b0:6c:81:31:73:52:de:65:6f: aa:c3:fd:5b:b7:35:3c:58:21:56:c5:c2:fa:74:72:74:d6:82: 49:40:5e:f8:34:89:84:05:40:89:11:94:98:7c:a7:6f:af:10: f8:49:96:dc:ae:17:cd:6f:15:b2:9f:d3:38:23:75:fa:01:d7: 77:97:7f:d5:c5:64:ad:be:31:e4:0d:4d:25:fd:b1:ad:f9:89: 5b:88:75:4f:95:ad:2c:56:40:d1:3b:b7:29:54:dc:fa:bd:e3: 65:12:de:45:f5:38:36:3d:ca:1a:0a:ae:ea:ef:94:0d:e0:36: 2f:ab:de:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJJ7c530GJo+rY1jKOfTb30DIBlswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAzMDExWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTdkMDRlZDY5OTM4MjdmZjk1Mjk2NjA0ODM0NzE5MWU4 MTY1MWQ3MGY1ZjM1NzI5NjdiZmQ0YjJjZDVjMWY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzNjl0NtLcWfR4HuQIVCE/ApYR2LrMAZkznh5NO5RgGRqC vQdAJC/eWNpT6G2g90Dic+fbFjAp54kTIK/cDJW9k1c2QtHJUr9Ct8k9GgQFl3nK qJ2AesHUBck7XFrCKLajWaLa5p+4nhN1RBwtCbX/Lz63JSVYQ81UGv0qCkogVIA4 gMgyVRh6+E0W53G/9wpH/VQW3MSS93u0Y7ZjgciLc/krxBPYEsO/zOlnng3QnuZ1 e4Ult823saynh6WXN5XtACjDuuhcj7RMcR/9hPYFbqYp+me95cnrZQEhtp1QOqGp 17cv2lgustrCuUCQ8Cg7Gdp8Ncx8PZi4kcH7jX/5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwMvp9707kKrTEM3/YedQ3dv+PbwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4OGQyODRlLTJjMTgtNDcyNC1iMDQ1LTQ3NmM0ZmVjM2Y1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdCoAAwDQYJKoZIhvcNAQELBQADggEBAMosnK3VXdwFeD8wieOlQ2JuGO2q IKEc4Kqir585RO4VWJBTxSPaD9c7CSqxmsMIPwa0LsZetUbPV8dhTT+69OnwMP/J /fy5fp/tbD7ca0f4OYYfKEaBgH+cQDXv78j8Mq2YDl5UxQ69PEwgBdLyz9wryrf1 hziOLFHfUUPi1z3VwFdpsi9OY7BsgTFzUt5lb6rD/Vu3NTxYIVbFwvp0cnTWgklA Xvg0iYQFQIkRlJh8p2+vEPhJltyuF81vFbKf0zgjdfoB13eXf9XFZK2+MeQNTSX9 sa35iVuIdU+VrSxWQNE7tylU3Pq942US3kX1ODY9yhoKrurvlA3gNi+r3jQ= -----END CERTIFICATE-----Generated at Wed May 13 08:16:30 2026 by rpki-client