$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa File: ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa (raw, json) Hash identifier: 13Eb3rMR0FeWUv9UTFYL7i+OyiDQYZaUXNRGET1iuy8= Subject key identifier: 60:57:09:48:FB:9D:8A:B4:51:55:7F:3E:B8:C1:81:50:80:4C:C4:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AB920F70E83188517CF7DA305FABBE7419A9C67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa Signing time: Sun 17 May 2026 00:50:12 +0000 ROA not before: Sun 17 May 2026 00:50:12 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 98.90.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b9:20:f7:0e:83:18:85:17:cf:7d:a3:05:fa:bb:e7:41:9a:9c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:50:12 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=8a6ae8f72efc0c57cd2cbaeef06e501f55c3099933772b2a7b41774950a5787e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:cb:40:ec:47:7a:47:5e:f2:72:62:b9:99: 41:99:9e:1a:b7:e3:6f:2f:be:8f:02:0b:ed:39:8e: 89:a0:d6:18:31:1d:41:b7:20:1e:e2:a2:f0:69:97: 92:ce:f1:32:2f:08:a2:6a:1e:bc:d8:b2:10:c9:a3: 67:ba:51:12:ea:dc:50:37:59:32:bd:79:52:60:b2: 4a:d2:da:f1:e6:39:17:34:2a:f7:b1:48:64:ee:0a: 3b:90:dc:d1:70:8c:67:99:51:76:68:9e:07:92:cd: 4f:a1:6a:61:bf:23:f8:5e:b6:88:c0:15:ad:74:b0: bf:55:26:10:4f:03:db:05:1a:6d:3d:94:e3:1b:e0: 76:d7:a2:da:a0:39:c8:33:99:06:46:40:22:34:32: 28:9d:4c:f8:26:47:0b:d0:09:3c:9e:37:b8:8f:d3: 4d:3a:90:27:ba:85:d8:d4:21:09:b7:f8:ea:f3:f7: ba:48:fb:ec:0b:ca:98:fa:6d:8c:db:7d:80:d3:c6: 38:bc:d0:32:69:59:a3:80:f3:93:a5:9c:c6:67:f8: 4a:93:8c:74:cf:92:6f:eb:e8:5f:d1:06:ba:e9:4d: 60:1a:89:ca:fe:36:47:9f:7b:4a:b3:fd:01:13:ea: 1e:77:fe:27:eb:d3:23:13:da:e1:9a:1e:1c:b9:55: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:57:09:48:FB:9D:8A:B4:51:55:7F:3E:B8:C1:81:50:80:4C:C4:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.90.62.0/23 Signature Algorithm: sha256WithRSAEncryption 85:74:4b:ef:f5:07:0c:88:1a:df:d0:94:b5:79:8c:60:89:17: 61:00:06:9c:f3:74:6b:82:55:ae:01:bc:8b:94:e5:ff:a7:ad: 32:bb:c4:33:63:b3:5d:6e:96:b4:50:b6:24:29:27:d2:01:f4: 56:ae:78:7f:90:bb:4f:09:37:de:87:8a:7d:dc:29:c3:9e:2b: 5e:96:e2:54:6a:fe:03:98:4b:2f:5f:03:c0:5f:c6:74:06:12: b5:5e:f1:68:02:32:c3:48:1f:16:b4:91:64:b3:85:4b:ab:a2: bb:cc:37:f7:61:00:f5:d3:ac:db:f6:25:3c:66:ff:ff:85:31: df:f4:e7:40:52:7d:2a:c5:b1:e8:1a:7e:b2:38:ec:a9:11:67: 46:c6:36:53:e0:54:27:b8:99:83:52:95:e6:ef:5f:4b:ea:c3: 99:9b:e0:a7:61:1a:dd:d1:7f:b0:aa:a5:3b:03:de:f0:13:eb: 91:d6:b9:e6:93:eb:e1:4b:e9:ab:41:bf:82:a0:2b:6a:54:5b: bb:14:53:04:43:5d:7f:e5:e9:9f:a8:6d:62:a8:64:74:c8:e3: 17:59:65:1d:39:20:93:02:f4:9b:46:1e:86:ef:d6:70:70:d7: 6a:9b:04:4a:6a:ce:6f:bd:bc:71:5b:b5:3d:57:b5:36:3a:97: 29:1f:de:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOrkg9w6DGIUXz32jBfq750GanGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDA1MDEyWhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTZhZThmNzJlZmMwYzU3Y2QyY2JhZWVmMDZlNTAxZjU1 YzMwOTk5MzM3NzJiMmE3YjQxNzc0OTUwYTU3ODdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4l8tA7Ed6R17ycmK5mUGZnhq3428vvo8CC+05jomg1hgx HUG3IB7iovBpl5LO8TIvCKJqHrzYshDJo2e6URLq3FA3WTK9eVJgskrS2vHmORc0 KvexSGTuCjuQ3NFwjGeZUXZongeSzU+hamG/I/hetojAFa10sL9VJhBPA9sFGm09 lOMb4HbXotqgOcgzmQZGQCI0MiidTPgmRwvQCTyeN7iP0006kCe6hdjUIQm3+Orz 97pI++wLypj6bYzbfYDTxji80DJpWaOA85OlnMZn+EqTjHTPkm/r6F/RBrrpTWAa icr+Nkefe0qz/QET6h53/ifr0yMT2uGaHhy5VZmXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYFcJSPudirRRVX8+uMGBUIBMxDQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhMTlmYmMwLWZhNzctNGQ0MS1hMzMwLTNjOGU4ZTBlNWM0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiWj4wDQYJKoZIhvcNAQELBQADggEBAIV0S+/1BwyIGt/QlLV5jGCJF2EA BpzzdGuCVa4BvIuU5f+nrTK7xDNjs11ulrRQtiQpJ9IB9FaueH+Qu08JN96Hin3c KcOeK16W4lRq/gOYSy9fA8BfxnQGErVe8WgCMsNIHxa0kWSzhUurorvMN/dhAPXT rNv2JTxm//+FMd/050BSfSrFsegafrI47KkRZ0bGNlPgVCe4mYNSlebvX0vqw5mb 4KdhGt3Rf7CqpTsD3vAT65HWueaT6+FL6atBv4KgK2pUW7sUUwRDXX/l6Z+obWKo ZHTI4xdZZR05IJMC9JtGHobv1nBw12qbBEpqzm+9vHFbtT1XtTY6lykf3gk= -----END CERTIFICATE-----Generated at Sat Jun 13 08:03:07 2026 by rpki-client