$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a728d17e-d435-496e-9424-123dad229b72.roa File: a728d17e-d435-496e-9424-123dad229b72.roa (raw, json) Hash identifier: 7QVHp+xyZd1RiN0ME9JKKvUBgim2QQHHf6OLrG5RZTg= Subject key identifier: 60:11:92:C4:F0:72:BF:AA:92:8F:1E:A2:FB:61:37:E1:D6:DC:7C:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63975D1881D56D613BB5C3F96E8B2454D88C0782 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a728d17e-d435-496e-9424-123dad229b72.roa Signing time: Fri 15 May 2026 01:40:44 +0000 ROA not before: Fri 15 May 2026 01:40:44 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 162.120.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:97:5d:18:81:d5:6d:61:3b:b5:c3:f9:6e:8b:24:54:d8:8c:07:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:40:44 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=5cba0d58193ccfaf119df9857a636b224d7c5dc4ae079e3f5483987025b92bb4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:82:55:b9:79:7e:b5:aa:af:25:31:bc:c5: 11:3e:0e:50:dd:44:f5:a2:01:28:03:b8:ec:f5:e8: d5:68:ef:44:82:73:50:e1:8e:58:89:2f:cd:a0:4e: 99:99:05:f3:5c:80:af:bc:0d:c3:0c:41:73:bb:0a: ed:58:35:ba:f0:71:a8:b4:fa:01:27:3a:b5:3b:13: 5a:ed:4e:3c:bc:35:b5:14:a2:8c:f1:7a:6f:ea:33: 44:3e:83:88:10:d1:26:ff:d9:00:a5:c0:4b:f2:36: f5:4c:fe:b0:92:ca:94:d4:56:06:6a:7c:ec:19:4f: 39:3b:8d:c9:39:f1:6f:e8:94:a8:72:93:db:f0:e8: 51:50:3d:71:99:ef:15:38:e5:f3:89:db:03:21:76: 42:02:55:82:d9:cd:10:f5:04:6e:a5:af:0b:82:6b: 98:34:23:b3:06:7e:80:49:9f:7b:f9:ce:55:c1:1f: d7:d6:15:9d:60:19:68:d0:30:e2:b3:f8:b3:04:85: cd:54:6a:26:59:b2:d2:c0:ff:c9:09:73:10:9f:df: 25:b0:b3:d7:85:f7:e4:6a:22:7a:d0:a3:fa:3c:05: 56:37:b6:a6:3d:57:13:05:a9:0f:7c:a1:09:9d:96: 71:01:93:d5:bb:34:aa:e1:74:85:d6:d1:84:00:f0: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:92:C4:F0:72:BF:AA:92:8F:1E:A2:FB:61:37:E1:D6:DC:7C:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a728d17e-d435-496e-9424-123dad229b72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.120.24.0/21 Signature Algorithm: sha256WithRSAEncryption 43:01:e7:45:c3:a6:d8:ab:5e:94:7c:fe:9b:10:dd:a8:2c:d6: 71:fa:c5:bd:83:d5:b7:58:ac:0c:5e:3e:12:77:75:77:8f:cd: 4d:ad:dc:42:29:d1:68:dc:3f:ef:7c:7e:c1:4e:a1:23:4c:39: b1:5e:ae:e2:a4:d0:33:2c:50:1e:57:4a:e5:38:52:e7:93:cb: 92:1b:af:0d:d7:31:04:70:20:f2:fb:9b:68:d6:2f:1d:66:c6: bc:46:c9:d4:0b:dd:51:ef:e6:29:e8:5c:9c:da:17:ba:a2:de: db:c5:de:5e:1d:62:c0:de:ea:f3:25:e1:1a:fb:27:23:22:74: c9:d9:9b:74:8f:90:26:d9:d0:3d:f1:b0:95:dd:91:e9:7f:40: 3e:f1:48:81:6e:6b:71:a4:e9:8e:02:d8:32:16:ee:71:7d:82: 8f:6b:da:a1:1f:38:22:e1:7d:1b:f0:8d:1c:84:01:ca:ad:33: 9b:02:4b:5b:2c:50:06:fc:6a:72:3f:55:8a:3e:a3:2e:56:96: 03:c5:47:fa:c0:0d:07:2f:17:49:cc:cb:76:ad:49:ae:1b:9b: e8:1e:64:b0:7b:2b:14:ce:8f:c0:29:20:94:ff:4a:bd:8f:77: 96:24:09:b6:38:9d:f2:99:9b:61:94:10:5c:0c:14:e3:4c:2b: a3:e7:f8:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY5ddGIHVbWE7tcP5boskVNiMB4IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDE0MDQ0WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2JhMGQ1ODE5M2NjZmFmMTE5ZGY5ODU3YTYzNmIyMjRk N2M1ZGM0YWUwNzllM2Y1NDgzOTg3MDI1YjkyYmI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDURoJVuXl+taqvJTG8xRE+DlDdRPWiASgDuOz16NVo70SC c1DhjliJL82gTpmZBfNcgK+8DcMMQXO7Cu1YNbrwcai0+gEnOrU7E1rtTjy8NbUU oozxem/qM0Q+g4gQ0Sb/2QClwEvyNvVM/rCSypTUVgZqfOwZTzk7jck58W/olKhy k9vw6FFQPXGZ7xU45fOJ2wMhdkICVYLZzRD1BG6lrwuCa5g0I7MGfoBJn3v5zlXB H9fWFZ1gGWjQMOKz+LMEhc1UaiZZstLA/8kJcxCf3yWws9eF9+RqInrQo/o8BVY3 tqY9VxMFqQ98oQmdlnEBk9W7NKrhdIXW0YQA8NVVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYBGSxPByv6qSjx6i+2E34dbcfJ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3MjhkMTdlLWQ0MzUtNDk2ZS05NDI0LTEyM2RhZDIyOWI3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOieBgwDQYJKoZIhvcNAQELBQADggEBAEMB50XDptirXpR8/psQ3ags1nH6 xb2D1bdYrAxePhJ3dXePzU2t3EIp0WjcP+98fsFOoSNMObFeruKk0DMsUB5XSuU4 UueTy5Ibrw3XMQRwIPL7m2jWLx1mxrxGydQL3VHv5inoXJzaF7qi3tvF3l4dYsDe 6vMl4Rr7JyMidMnZm3SPkCbZ0D3xsJXdkel/QD7xSIFua3Gk6Y4C2DIW7nF9go9r 2qEfOCLhfRvwjRyEAcqtM5sCS1ssUAb8anI/VYo+oy5WlgPFR/rADQcvF0nMy3at Sa4bm+geZLB7KxTOj8ApIJT/Sr2Pd5YkCbY4nfKZm2GUEFwMFONMK6Pn+GQ= -----END CERTIFICATE-----Generated at Sat Jun 13 05:49:49 2026 by rpki-client