$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d8bb395-f625-43f1-9791-c1ec39d964a9.roa File: 0d8bb395-f625-43f1-9791-c1ec39d964a9.roa (raw, json) Hash identifier: 40EgkR/RWb4h+tpTfyUh0RUTH7NJ0Dk8H+2JAE6E85s= Subject key identifier: FC:4C:C9:8D:82:F0:4E:01:0B:12:46:9C:05:A1:86:13:94:95:B8:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 126C340269D3FF4E53251535528A0B610385864F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d8bb395-f625-43f1-9791-c1ec39d964a9.roa Signing time: Sat 09 May 2026 00:11:26 +0000 ROA not before: Sat 09 May 2026 00:11:26 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 125.0.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6c:34:02:69:d3:ff:4e:53:25:15:35:52:8a:0b:61:03:85:86:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:11:26 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=ca4907ebc4c74e957c0d0d577697263b94c6fb9ce6b8292b255e2a85f769e7e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:8f:25:ae:fd:bf:08:5a:b2:cd:b4:e0:a2: 83:af:f7:5c:4f:60:de:9c:e6:83:20:fd:b5:04:8b: 94:31:84:60:0d:73:dc:1f:d6:28:f7:6d:f0:5e:cb: f9:6c:0e:54:db:ca:14:35:76:6b:05:e7:45:35:07: 8a:cd:60:cb:5a:39:da:9c:4d:b1:dc:be:1f:eb:11: 34:96:73:50:e2:7a:92:94:b8:bc:ea:5a:33:97:13: 6a:8d:9c:07:7e:c6:67:18:94:cb:f8:34:ed:ac:65: c1:b0:54:d4:b6:4e:e1:d1:e9:97:f2:0b:1e:48:5a: bf:0e:80:61:e0:9c:80:46:54:c8:d8:85:15:72:f0: 2e:2b:82:27:2e:eb:1f:1a:60:5c:38:2e:b1:6b:b3: 27:58:e6:7b:78:21:81:04:ea:e9:04:18:d2:4b:cb: cb:26:e1:5b:12:61:f6:14:5b:77:b9:e8:85:13:48: d4:8f:c3:ba:e4:40:06:62:0a:2a:46:1c:7e:ad:40: c1:83:38:3d:cd:60:36:4c:39:56:b0:bf:54:c7:49: 61:ed:9c:21:53:60:f1:02:6e:34:f6:1d:78:7f:18: 38:4b:f7:f5:6e:71:66:ee:65:64:d3:d5:9f:72:e2: 0c:d4:2b:ad:75:72:68:3d:61:cb:d2:01:2a:0e:c0: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4C:C9:8D:82:F0:4E:01:0B:12:46:9C:05:A1:86:13:94:95:B8:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d8bb395-f625-43f1-9791-c1ec39d964a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.0.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0c:62:c1:64:73:30:02:c5:18:f2:1f:39:39:92:0a:0f:f8:60: 2a:34:b1:82:83:01:ec:fb:5d:52:ca:04:f1:b7:81:08:e1:2d: f3:86:3b:8a:b2:b2:b3:4d:12:16:47:df:98:82:fd:5c:f0:c6: e2:6b:79:42:16:b9:a6:b9:53:7e:aa:cc:c5:0e:94:81:b8:cb: c0:65:37:2d:b9:23:0f:1a:91:f2:25:57:97:80:33:6a:33:a5: 2d:c7:3a:b5:1a:32:ac:a1:63:df:ea:94:51:cf:fb:44:ff:64: f7:31:17:6a:3b:27:41:27:b0:db:a8:61:af:94:91:a7:54:c4: 2b:15:f5:8d:be:fe:ae:0e:ea:1a:fe:e5:cd:b8:27:d1:01:8e: a9:ef:a9:a1:4e:bd:e2:3e:46:0e:cf:db:bb:78:97:58:ce:13: 37:33:0f:c0:ca:e8:d3:41:10:e2:8e:d1:e5:c3:c1:7d:cd:16: 79:be:cf:b8:e1:64:ee:1b:f1:f4:99:a6:70:cc:a2:30:cb:ee: db:bb:dd:4e:bf:4e:2d:fe:a4:f0:30:9b:7a:12:5e:b8:44:69: f6:b6:20:8e:03:1b:52:fc:82:22:e9:de:12:21:71:50:ee:56: 64:26:50:56:6e:3b:ca:4a:6c:5c:4f:34:44:de:1e:9c:91:ff: 49:24:f3:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEmw0AmnT/05TJRU1UooLYQOFhk8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAxMTI2WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTQ5MDdlYmM0Yzc0ZTk1N2MwZDBkNTc3Njk3MjYzYjk0 YzZmYjljZTZiODI5MmIyNTVlMmE4NWY3NjllN2U5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC8I8lrv2/CFqyzbTgooOv91xPYN6c5oMg/bUEi5QxhGAN c9wf1ij3bfBey/lsDlTbyhQ1dmsF50U1B4rNYMtaOdqcTbHcvh/rETSWc1DiepKU uLzqWjOXE2qNnAd+xmcYlMv4NO2sZcGwVNS2TuHR6ZfyCx5IWr8OgGHgnIBGVMjY hRVy8C4rgicu6x8aYFw4LrFrsydY5nt4IYEE6ukEGNJLy8sm4VsSYfYUW3e56IUT SNSPw7rkQAZiCipGHH6tQMGDOD3NYDZMOVawv1THSWHtnCFTYPECbjT2HXh/GDhL 9/VucWbuZWTT1Z9y4gzUK611cmg9YcvSASoOwAWRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/EzJjYLwTgELEkacBaGGE5SVuLowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkOGJiMzk1LWY2MjUtNDNmMS05NzkxLWMxZWMzOWQ5NjRhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ9AAAwDQYJKoZIhvcNAQELBQADggEBAAxiwWRzMALFGPIfOTmSCg/4YCo0 sYKDAez7XVLKBPG3gQjhLfOGO4qysrNNEhZH35iC/VzwxuJreUIWuaa5U36qzMUO lIG4y8BlNy25Iw8akfIlV5eAM2ozpS3HOrUaMqyhY9/qlFHP+0T/ZPcxF2o7J0En sNuoYa+UkadUxCsV9Y2+/q4O6hr+5c24J9EBjqnvqaFOveI+Rg7P27t4l1jOEzcz D8DK6NNBEOKO0eXDwX3NFnm+z7jhZO4b8fSZpnDMojDL7tu73U6/Ti3+pPAwm3oS XrhEafa2II4DG1L8giLp3hIhcVDuVmQmUFZuO8pKbFxPNETeHpyR/0kk82U= -----END CERTIFICATE-----Generated at Wed May 13 04:13:56 2026 by rpki-client