$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa File: 59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa (raw, json) Hash identifier: VWebw3em+AJayJ+MKMQVYgllCajupw7jWbWC5VYbKDc= Subject key identifier: 49:70:44:08:FB:A6:DF:3E:82:6C:7E:05:D4:9B:45:47:7E:7E:2E:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AC9295D827A8A2F321827A1940F4F3418938FD3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa Signing time: Tue 19 May 2026 00:40:08 +0000 ROA not before: Tue 19 May 2026 00:40:08 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.13.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c9:29:5d:82:7a:8a:2f:32:18:27:a1:94:0f:4f:34:18:93:8f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 00:40:08 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=b1ae09e362174ff0032032b92dbecafc583ba650e2cf10436cb742951793ef54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d5:ce:1a:3e:5e:a7:0e:fa:69:15:8d:34:3f: ed:c7:37:14:4a:aa:f4:02:28:b3:4d:59:1a:0a:9a: e4:eb:78:52:3c:08:33:1b:d8:3b:89:ef:e6:8d:2a: b3:2d:c8:64:d4:e7:b6:da:67:46:f5:56:f9:1a:96: d9:9e:43:0d:49:07:05:6c:be:e4:11:c2:1d:55:31: 6f:1e:6d:a0:5f:61:28:6f:29:22:5a:db:3d:a8:5e: 79:d4:9a:38:5e:83:9c:f6:b7:30:8c:d2:89:14:bd: 6f:3e:cf:f6:37:2d:4a:4c:20:37:bc:9a:51:3c:e6: 2a:6c:be:0b:20:be:a0:ef:c5:56:80:a3:73:b0:1a: 38:22:09:db:b0:cf:e4:2b:6b:0f:ec:5f:03:cb:06: de:10:18:f8:c4:d5:0c:d5:50:3f:aa:30:23:99:4f: 30:c8:e8:a2:7c:09:55:cd:3c:ea:b6:8f:47:4b:25: f5:9c:7b:2f:bd:ea:0b:a0:6e:43:11:c5:bd:12:e5: a6:1e:bc:df:8e:19:d7:7b:29:bc:55:bd:1d:f6:32: 44:fd:3e:fd:b3:be:0d:b3:50:d3:13:ab:be:f2:92: b9:b8:02:56:e6:00:39:e0:de:d6:b1:18:8b:d5:3d: 34:90:af:09:a0:9b:da:2a:62:d4:86:2f:b2:f0:04: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:70:44:08:FB:A6:DF:3E:82:6C:7E:05:D4:9B:45:47:7E:7E:2E:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.190.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:68:8d:c1:ba:97:db:7f:94:ce:7a:af:49:5e:2b:4e:2f:32: b0:81:19:4b:e2:2b:1a:c8:7f:c3:6b:b1:74:fe:3a:5b:59:6d: 3c:30:c7:16:82:3c:87:ff:35:f2:48:85:87:ba:1d:d1:16:d6: 80:b0:1d:83:39:a0:02:73:3f:45:67:f0:ae:0d:6b:7d:25:4c: fa:be:f0:39:cf:ac:94:3d:d2:96:dd:21:58:3b:13:df:59:9b: 39:a2:21:30:3f:a6:3c:40:fa:2d:e7:8d:f0:50:48:9c:30:2f: 26:9b:7b:2f:ac:28:0a:68:5d:a2:22:61:a9:b9:c4:b5:4e:ff: d3:7b:63:4f:1f:73:a8:64:74:78:0e:11:30:bf:b3:20:55:c0: e7:82:0c:8c:5b:a0:59:6d:71:25:c2:95:47:6b:5f:fe:51:4d: 61:b8:66:6d:08:7e:b7:01:41:23:1e:a3:af:0e:7c:93:99:7d: 1a:c9:44:6a:6c:2a:10:2a:39:9d:90:e7:c0:64:dd:6a:49:f6: 20:76:9b:de:c3:71:d2:6e:24:6e:f2:71:84:45:7c:ed:ab:8b: d3:43:01:81:bb:0b:43:38:7c:b9:9c:32:ec:f2:6a:0e:bf:86: 1b:2b:78:ee:ce:9a:42:e9:31:55:1e:44:5f:7a:6d:e1:90:01: cd:49:b8:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSskpXYJ6ii8yGCehlA9PNBiTj9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDA0MDA4WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWFlMDllMzYyMTc0ZmYwMDMyMDMyYjkyZGJlY2FmYzU4 M2JhNjUwZTJjZjEwNDM2Y2I3NDI5NTE3OTNlZjU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD01c4aPl6nDvppFY00P+3HNxRKqvQCKLNNWRoKmuTreFI8 CDMb2DuJ7+aNKrMtyGTU57baZ0b1VvkaltmeQw1JBwVsvuQRwh1VMW8ebaBfYShv KSJa2z2oXnnUmjheg5z2tzCM0okUvW8+z/Y3LUpMIDe8mlE85ipsvgsgvqDvxVaA o3OwGjgiCduwz+Qraw/sXwPLBt4QGPjE1QzVUD+qMCOZTzDI6KJ8CVXNPOq2j0dL JfWcey+96gugbkMRxb0S5aYevN+OGdd7KbxVvR32MkT9Pv2zvg2zUNMTq77ykrm4 AlbmADng3taxGIvVPTSQrwmgm9oqYtSGL7LwBL7tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSXBECPum3z6CbH4F1JtFR35+Lr4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ZDE2YzliLWNmOTAtNDMwZC1iODMxLTFhYWZiYTRiYTdhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnDb4wDQYJKoZIhvcNAQELBQADggEBACpojcG6l9t/lM56r0leK04vMrCB GUviKxrIf8NrsXT+OltZbTwwxxaCPIf/NfJIhYe6HdEW1oCwHYM5oAJzP0Vn8K4N a30lTPq+8DnPrJQ90pbdIVg7E99ZmzmiITA/pjxA+i3njfBQSJwwLyabey+sKApo XaIiYam5xLVO/9N7Y08fc6hkdHgOETC/syBVwOeCDIxboFltcSXClUdrX/5RTWG4 Zm0IfrcBQSMeo68OfJOZfRrJRGpsKhAqOZ2Q58Bk3WpJ9iB2m97DcdJuJG7ycYRF fO2ri9NDAYG7C0M4fLmcMuzyag6/hhsreO7OmkLpMVUeRF96beGQAc1JuGc= -----END CERTIFICATE-----Generated at Sat Jun 13 08:22:24 2026 by rpki-client