$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f97c29c9-3c94-4811-9c51-f893093882a8.roa File: f97c29c9-3c94-4811-9c51-f893093882a8.roa (raw, json) Hash identifier: chMDHCdBGuS7pK9d0HxOsiTQwF6lYCOkWh18PzjePdk= Subject key identifier: 36:29:A8:06:82:9C:88:BC:21:FF:62:86:45:E9:35:DD:1D:61:5E:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C47E42EB0DCF65DE828FF2A5749D6317FF08595 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f97c29c9-3c94-4811-9c51-f893093882a8.roa Signing time: Fri 15 May 2026 00:41:21 +0000 ROA not before: Fri 15 May 2026 00:41:21 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 174.129.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:47:e4:2e:b0:dc:f6:5d:e8:28:ff:2a:57:49:d6:31:7f:f0:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 00:41:21 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=bb6dc028bf891be936f1bd684d8b7c051abe26a26ba27aad33a8a1b04ea9dad7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f2:da:b4:59:00:5b:17:1c:2f:2d:cf:fd:56: d6:23:92:36:46:3e:23:c7:39:63:37:60:01:18:a2: ea:e8:1e:46:18:9b:94:3f:ad:6e:f8:4c:28:6b:11: 72:bd:72:87:37:b0:c5:0c:ea:a2:a6:9d:de:e3:16: 1d:98:9a:a6:e5:7b:e6:28:c9:12:4e:14:13:4d:73: a4:bf:6f:9d:c7:4f:73:ad:ed:75:45:e8:cf:58:d7: fc:a6:47:73:70:5c:ac:bc:64:18:ae:46:3e:10:06: fd:4f:ce:5f:07:1c:9c:9e:23:1a:34:2b:c7:74:b5: 42:89:cc:f7:38:3b:4b:e2:ab:03:fb:0e:10:0e:98: 5b:14:92:5d:4c:01:16:bf:40:e9:11:e1:6c:93:fb: 40:01:8c:32:87:09:28:2e:56:9a:df:9e:81:8b:1e: 8d:4b:e6:11:66:79:ad:a6:3e:47:1a:52:d1:17:82: ac:51:09:bf:90:10:f8:f2:f9:9f:3b:e9:4c:8d:31: 6b:6a:ea:35:ec:0f:35:91:9e:8d:e7:31:b1:55:87: 64:95:58:16:6c:a0:ac:e4:dd:2f:f8:c9:6c:24:bf: 15:dc:3e:a4:86:fc:f5:5b:6f:11:e9:b7:01:51:0a: d5:f7:80:46:7a:dd:3c:96:dc:13:eb:01:c2:85:06: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:29:A8:06:82:9C:88:BC:21:FF:62:86:45:E9:35:DD:1D:61:5E:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f97c29c9-3c94-4811-9c51-f893093882a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.128.0/18 Signature Algorithm: sha256WithRSAEncryption 23:a5:d6:8f:88:ae:71:f0:14:8d:5f:18:04:1d:64:20:61:20: 1a:3a:38:0d:70:17:e1:98:ca:21:25:44:27:82:68:2f:6b:c9: 2d:fd:31:96:21:b9:f1:47:a6:ea:39:82:01:2c:24:3e:d3:bb: 27:e9:02:da:97:b0:d1:e0:bf:52:dd:95:fb:9b:4d:ff:70:2e: 72:6f:1f:98:16:8e:24:2d:7b:21:e1:41:3a:ac:26:08:52:00: 6f:57:f8:fe:58:9c:d3:5f:15:4a:1a:8c:be:25:f6:8c:38:fa: 00:f4:03:61:25:51:b9:b2:ae:db:35:28:0f:33:ff:70:6f:08: 0b:ae:9f:97:87:c4:34:fa:25:2d:21:b6:06:b2:00:08:a2:c8: 9c:6c:e2:2a:ef:b9:71:fd:3c:97:57:8b:17:46:be:43:16:55: 04:89:f3:bb:3a:36:98:cf:c5:9c:b4:90:5a:66:38:67:37:c1: 0d:e9:d3:fd:a0:4c:ed:f6:15:8a:13:8e:26:2c:60:85:c3:c8: ba:62:2f:99:0e:19:64:0f:12:79:44:9c:98:8d:97:81:3d:c5: 1f:f3:58:9a:c6:ff:43:be:2a:cf:aa:7c:ae:8b:47:77:20:b7: ca:6a:99:e9:58:a2:f9:d0:01:43:3f:9d:e8:f2:82:7e:28:76: b6:82:27:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbEfkLrDc9l3oKP8qV0nWMX/whZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDA0MTIxWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjZkYzAyOGJmODkxYmU5MzZmMWJkNjg0ZDhiN2MwNTFh YmUyNmEyNmJhMjdhYWQzM2E4YTFiMDRlYTlkYWQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf8tq0WQBbFxwvLc/9VtYjkjZGPiPHOWM3YAEYouroHkYY m5Q/rW74TChrEXK9coc3sMUM6qKmnd7jFh2Ymqble+YoyRJOFBNNc6S/b53HT3Ot 7XVF6M9Y1/ymR3NwXKy8ZBiuRj4QBv1Pzl8HHJyeIxo0K8d0tUKJzPc4O0viqwP7 DhAOmFsUkl1MARa/QOkR4WyT+0ABjDKHCSguVprfnoGLHo1L5hFmea2mPkcaUtEX gqxRCb+QEPjy+Z876UyNMWtq6jXsDzWRno3nMbFVh2SVWBZsoKzk3S/4yWwkvxXc PqSG/PVbbxHptwFRCtX3gEZ63TyW3BPrAcKFBnv3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNimoBoKciLwh/2KGRek13R1hXjQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5N2MyOWM5LTNjOTQtNDgxMS05YzUxLWY4OTMwOTM4ODJhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaugYAwDQYJKoZIhvcNAQELBQADggEBACOl1o+IrnHwFI1fGAQdZCBhIBo6 OA1wF+GYyiElRCeCaC9ryS39MZYhufFHpuo5ggEsJD7TuyfpAtqXsNHgv1Ldlfub Tf9wLnJvH5gWjiQteyHhQTqsJghSAG9X+P5YnNNfFUoajL4l9ow4+gD0A2ElUbmy rts1KA8z/3BvCAuun5eHxDT6JS0htgayAAiiyJxs4irvuXH9PJdXixdGvkMWVQSJ 87s6NpjPxZy0kFpmOGc3wQ3p0/2gTO32FYoTjiYsYIXDyLpiL5kOGWQPEnlEnJiN l4E9xR/zWJrG/0O+Ks+qfK6LR3cgt8pqmelYovnQAUM/nejygn4odraCJ0c= -----END CERTIFICATE-----Generated at Sat Jun 13 06:02:58 2026 by rpki-client