$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1333b09-ab13-4cea-a083-8bb75228384e.roa File: f1333b09-ab13-4cea-a083-8bb75228384e.roa (raw, json) Hash identifier: 1k50vMoeJoQgpUhHaWur3DJuTtXUx/yzEF+y9eAZ6Ao= Subject key identifier: 09:23:5D:90:42:6C:27:AF:08:6D:52:5C:AA:A8:4F:FB:D3:61:C9:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0566045BA314CCCAEDB701362BD21AD20AB3E98E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1333b09-ab13-4cea-a083-8bb75228384e.roa Signing time: Wed 06 May 2026 00:31:17 +0000 ROA not before: Wed 06 May 2026 00:31:17 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:66:04:5b:a3:14:cc:ca:ed:b7:01:36:2b:d2:1a:d2:0a:b3:e9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:31:17 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=56d7ab3ee335db7fed261246005c89e03e4a0978875e7b256bd4a000a2ea8774, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:c3:b4:6f:ab:fd:3f:70:c4:56:5f:e9:14: 2d:29:5a:96:56:0c:9c:6c:56:d5:4e:f0:90:64:38: 62:ac:d0:26:ab:15:ae:a6:9b:60:16:d2:a1:b3:93: 37:32:ba:9a:8f:70:15:53:7a:fc:e8:71:bc:79:7d: 4e:70:9a:80:cf:19:b1:ac:bc:86:4f:98:82:bd:77: 20:59:5b:24:e5:a2:25:af:48:70:66:42:61:75:97: 80:c6:75:25:9d:60:a7:08:dc:74:b9:08:00:bc:54: c5:20:81:76:1b:c5:1a:b2:8c:16:c3:38:41:12:9f: 5e:ae:87:15:5e:f3:56:2a:b6:e4:ca:e0:3b:ff:fb: 7b:37:39:24:2f:1e:bc:6c:63:6f:70:6f:37:25:ab: 51:14:a8:c0:20:77:20:f5:dd:9a:ee:16:df:25:cb: 7d:6f:dc:89:89:be:2e:e3:7f:e2:38:b6:cc:63:21: cc:ec:15:f2:67:0e:5e:e7:c9:5f:d2:4b:26:22:25: 8c:fe:a7:61:f0:4f:4e:67:82:50:ba:8a:36:17:ac: b8:53:28:cb:e2:f0:d0:19:64:53:67:61:dc:0a:06: 79:86:67:fd:a7:52:7c:a9:15:50:fb:5d:30:33:c2: c8:71:a7:15:88:80:d9:06:eb:5a:04:8e:fa:43:ca: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:5D:90:42:6C:27:AF:08:6D:52:5C:AA:A8:4F:FB:D3:61:C9:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1333b09-ab13-4cea-a083-8bb75228384e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.84.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:c4:ef:69:82:f6:44:9c:2c:d4:eb:46:f6:77:f7:af:00:b7: 98:12:41:18:90:83:d3:88:28:47:03:48:12:6b:47:ef:de:9a: 53:34:62:5b:d6:2f:a3:30:a6:9f:a0:cb:fb:d9:f7:02:ba:b5: 33:e6:1e:1c:3f:6b:7e:ba:11:b1:d1:64:a8:c2:36:e5:f5:ca: 46:3d:4e:4f:08:07:dc:f5:ab:55:9c:4d:58:bf:6b:88:8c:67: e7:f0:09:92:68:af:97:80:d0:4d:c4:a3:65:37:ca:d4:3a:c5: 90:e7:8d:a4:5d:75:f1:ec:d2:9c:97:c7:92:90:55:41:db:2b: 46:e2:ac:c0:ce:f6:9e:71:ab:91:1d:42:f3:c8:c6:1f:ac:80: 47:df:89:f1:b7:1a:ea:4b:63:e1:0f:8d:44:e8:53:a5:25:90: ba:f2:27:25:d6:6b:9b:6c:4d:b1:00:47:0f:7b:7f:27:f3:f2: 4f:cd:57:5e:da:21:00:e3:0d:60:e2:38:57:ee:02:9f:d8:05: a2:bd:a7:96:bd:9f:33:db:59:5f:f6:d0:9d:9d:ac:d1:91:ef: d6:99:33:8a:14:77:c3:bd:15:ac:48:be:88:d6:d8:33:76:21: 2f:01:22:46:da:da:f6:d4:0e:6f:bd:c3:52:4f:aa:e6:d8:db: ab:a0:60:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBWYEW6MUzMrttwE2K9Ia0gqz6Y4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAzMTE3WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmQ3YWIzZWUzMzVkYjdmZWQyNjEyNDYwMDVjODllMDNl NGEwOTc4ODc1ZTdiMjU2YmQ0YTAwMGEyZWE4Nzc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmfsO0b6v9P3DEVl/pFC0pWpZWDJxsVtVO8JBkOGKs0Car Fa6mm2AW0qGzkzcyupqPcBVTevzocbx5fU5wmoDPGbGsvIZPmIK9dyBZWyTloiWv SHBmQmF1l4DGdSWdYKcI3HS5CAC8VMUggXYbxRqyjBbDOEESn16uhxVe81YqtuTK 4Dv/+3s3OSQvHrxsY29wbzclq1EUqMAgdyD13ZruFt8ly31v3ImJvi7jf+I4tsxj IczsFfJnDl7nyV/SSyYiJYz+p2HwT05nglC6ijYXrLhTKMvi8NAZZFNnYdwKBnmG Z/2nUnypFVD7XTAzwshxpxWIgNkG61oEjvpDypYFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCSNdkEJsJ68IbVJcqqhP+9NhyQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxMzMzYjA5LWFiMTMtNGNlYS1hMDgzLThiYjc1MjI4Mzg0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl1QwDQYJKoZIhvcNAQELBQADggEBAD/E72mC9kScLNTrRvZ3968At5gS QRiQg9OIKEcDSBJrR+/emlM0YlvWL6Mwpp+gy/vZ9wK6tTPmHhw/a366EbHRZKjC NuX1ykY9Tk8IB9z1q1WcTVi/a4iMZ+fwCZJor5eA0E3Eo2U3ytQ6xZDnjaRddfHs 0pyXx5KQVUHbK0birMDO9p5xq5EdQvPIxh+sgEffifG3GupLY+EPjUToU6UlkLry JyXWa5tsTbEARw97fyfz8k/NV17aIQDjDWDiOFfuAp/YBaK9p5a9nzPbWV/20J2d rNGR79aZM4oUd8O9FaxIvojW2DN2IS8BIkba2vbUDm+9w1JPqubY26ugYIs= -----END CERTIFICATE-----Generated at Sat Jun 13 07:08:59 2026 by rpki-client