$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa File: bc98b8a4-19f3-4303-9456-ca95391c61c5.roa (raw, json) Hash identifier: 3CTH7PI7NBNFnXgP9Ofqa9OI5b8Iq/oJ3PzjfMbuUHg= Subject key identifier: 6D:50:02:25:8D:BC:BC:EB:7B:CD:DE:F3:62:AB:07:D6:BD:76:03:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59E67235A5ADE9283DBF811B277EBAD8CCEE3176 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa Signing time: Sat 16 May 2026 01:31:27 +0000 ROA not before: Sat 16 May 2026 01:31:27 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e6:72:35:a5:ad:e9:28:3d:bf:81:1b:27:7e:ba:d8:cc:ee:31:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 01:31:27 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=01337162c3b4b5233ece6fda95b8521d29e2264d0075bf83a7f3dcf2d0ff6b21, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:64:8e:32:3a:87:5d:9c:55:49:f6:5c:f2: 54:38:da:93:e2:89:8b:b6:6b:a9:c6:ac:a4:d4:4c: 1c:5b:c6:fe:a8:ba:da:9c:1d:98:1a:e8:9e:b9:68: 01:dc:47:1c:00:95:e0:e9:76:4e:40:d9:94:1c:f4: 5d:32:71:20:5a:73:36:ee:d0:59:f4:36:8f:a0:a1: 96:bc:8d:47:2c:9c:70:73:cd:99:46:13:a7:6e:21: 3a:8c:e0:d9:69:8a:ca:a7:c9:63:ce:bc:25:43:59: f4:f7:2f:8b:6d:0e:14:02:da:14:0e:3d:92:8d:b6: 79:6e:41:08:60:ad:33:87:d9:d2:af:8e:e1:e6:bf: 42:2f:09:83:c9:c5:91:dc:48:12:8a:6d:da:1f:78: ab:38:6d:4f:ec:00:5c:65:47:05:51:30:c6:a2:33: c3:10:2f:5c:3c:09:13:a8:c2:47:0e:1b:45:f9:84: cb:ca:5f:34:23:0e:f2:1f:d0:99:a5:30:81:3e:f7: dd:c8:46:20:37:a8:cc:de:c8:5c:13:69:d9:5e:cf: 60:a8:c9:c5:90:b3:52:5f:3b:f6:bb:19:58:64:d2: c8:6d:a0:82:f2:3a:89:92:26:97:04:e2:21:89:57: 3e:8b:9a:97:be:7f:59:3d:fe:cf:13:f2:9f:af:4d: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:50:02:25:8D:BC:BC:EB:7B:CD:DE:F3:62:AB:07:D6:BD:76:03:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.0.0/18 Signature Algorithm: sha256WithRSAEncryption d3:a6:e2:66:05:ee:1e:63:b1:95:48:0e:86:33:93:23:e3:3f: ff:68:6c:91:28:c3:31:4c:4b:c1:f1:32:6d:f1:c3:c3:de:d1: c4:3b:77:f5:24:77:1c:4c:53:86:cb:f1:74:7a:47:b9:e2:66: ae:7d:71:74:aa:0d:d3:f1:aa:96:1e:66:4e:d9:f1:22:8b:89: 43:54:9d:a0:86:ce:53:2e:9e:6a:4b:1a:84:d1:df:3c:f7:71: 37:10:91:0e:b5:47:32:1e:70:6f:6f:9c:9a:06:e5:bb:62:7e: fb:d1:a1:82:bd:c6:60:a1:03:7b:72:53:5c:55:e1:13:fa:03: 10:a0:81:92:ae:7c:84:94:b1:2d:94:f0:ba:12:02:ac:63:97: 42:53:b4:d0:21:25:fb:e6:ce:ac:06:ba:84:74:a0:a8:84:d7: 72:5b:b0:3c:a2:18:a7:23:f8:f4:00:d4:13:05:eb:5e:5c:c6: b9:be:88:75:79:66:8d:60:22:6e:ae:a1:70:43:e7:5e:45:6d: e5:e4:78:da:a2:ae:01:e5:3f:ca:33:c0:c9:fd:af:e7:d3:bd: 1f:3b:c6:7e:75:ed:a7:2a:d4:2d:cb:99:09:2c:a5:ca:36:40: d3:07:51:5f:ca:a4:67:bb:6b:10:35:3a:2d:3d:38:83:f4:4e: 8d:90:8a:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWeZyNaWt6Sg9v4EbJ3662MzuMXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDEzMTI3WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTMzNzE2MmMzYjRiNTIzM2VjZTZmZGE5NWI4NTIxZDI5 ZTIyNjRkMDA3NWJmODNhN2YzZGNmMmQwZmY2YjIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC682SOMjqHXZxVSfZc8lQ42pPiiYu2a6nGrKTUTBxbxv6o utqcHZga6J65aAHcRxwAleDpdk5A2ZQc9F0ycSBaczbu0Fn0No+goZa8jUcsnHBz zZlGE6duITqM4NlpisqnyWPOvCVDWfT3L4ttDhQC2hQOPZKNtnluQQhgrTOH2dKv juHmv0IvCYPJxZHcSBKKbdofeKs4bU/sAFxlRwVRMMaiM8MQL1w8CROowkcOG0X5 hMvKXzQjDvIf0JmlMIE+993IRiA3qMzeyFwTadlez2CoycWQs1JfO/a7GVhk0sht oILyOomSJpcE4iGJVz6Lmpe+f1k9/s8T8p+vTSUnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbVACJY28vOt7zd7zYqsH1r12A/EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjOThiOGE0LTE5ZjMtNDMwMy05NDU2LWNhOTUzOTFjNjFjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYXFgAwDQYJKoZIhvcNAQELBQADggEBANOm4mYF7h5jsZVIDoYzkyPjP/9o bJEowzFMS8HxMm3xw8Pe0cQ7d/UkdxxMU4bL8XR6R7niZq59cXSqDdPxqpYeZk7Z 8SKLiUNUnaCGzlMunmpLGoTR3zz3cTcQkQ61RzIecG9vnJoG5btifvvRoYK9xmCh A3tyU1xV4RP6AxCggZKufISUsS2U8LoSAqxjl0JTtNAhJfvmzqwGuoR0oKiE13Jb sDyiGKcj+PQA1BMF615cxrm+iHV5Zo1gIm6uoXBD515FbeXkeNqirgHlP8ozwMn9 r+fTvR87xn517acq1C3LmQkspco2QNMHUV/KpGe7axA1Oi09OIP0To2QiqA= -----END CERTIFICATE-----Generated at Sat Jun 13 05:50:11 2026 by rpki-client