$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa File: 197db50e-a85a-4e13-b89b-2e27b2a468c8.roa (raw, json) Hash identifier: K+E4hiqGe9GtNBKHa/nP8jhKTaWKqJHAvGnNVbQKkr4= Subject key identifier: D3:87:03:3C:14:8C:CD:E8:E6:79:29:77:B3:F5:23:27:0C:1C:3F:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D5EFEDFB7538A3C5EA1C69F77675BBDC3CBFEE1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa Signing time: Wed 06 May 2026 00:20:41 +0000 ROA not before: Wed 06 May 2026 00:20:41 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5e:fe:df:b7:53:8a:3c:5e:a1:c6:9f:77:67:5b:bd:c3:cb:fe:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:20:41 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=7714a48e8b618cbdd3c83720f77abe3ccc96e6479d5e791e64e13d9d5d090bc0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:fd:9b:23:9e:8b:0e:14:d0:97:65:9d:23: 17:da:50:5f:04:bb:f9:08:09:67:0f:c2:79:68:f6: 08:c4:a8:1f:49:9b:e5:27:72:aa:f2:50:a2:a7:1e: e4:ca:c0:49:9f:c6:ed:6d:3f:f3:d4:b5:30:82:4f: bd:dd:d1:00:7d:eb:07:68:95:f7:10:ba:c3:09:d0: ac:89:6e:47:d5:07:43:67:8d:87:43:f0:15:9c:e3: 88:a8:59:4d:fb:61:e3:71:33:bb:d9:20:e1:49:fc: 6f:ac:10:ea:5a:05:25:36:4e:62:3c:f5:29:ef:a0: 88:42:86:e0:db:59:e8:64:d6:54:42:b2:9e:dc:c7: ff:de:9c:7a:2e:2c:53:b6:1b:56:cf:cc:bd:a8:17: 9e:16:39:89:ab:1f:15:89:d0:c6:43:4a:3f:cf:2c: 42:aa:0e:cd:6f:e0:6d:7e:71:9d:ff:9a:62:b8:b2: 00:64:f8:e7:46:37:6e:82:e6:bb:c5:2c:91:35:db: 47:ae:93:ff:23:0e:a6:93:7b:32:25:df:ed:37:2f: 9e:84:34:7e:6b:98:f1:70:6d:be:2c:b5:d6:62:c6: 27:3f:58:7b:82:ed:f3:ec:8f:0c:44:2b:47:b1:86: 05:8c:10:9a:7d:cd:27:94:15:9d:b4:26:67:1a:57: 20:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:87:03:3C:14:8C:CD:E8:E6:79:29:77:B3:F5:23:27:0C:1C:3F:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.104.0/23 Signature Algorithm: sha256WithRSAEncryption 79:fd:40:04:ea:20:ed:e7:57:0b:77:9e:86:13:75:50:69:2f: 6a:cf:aa:55:78:e1:03:38:b3:54:ca:81:bc:2a:de:ed:95:c7: ec:cf:61:47:fb:18:4b:bd:6c:4c:2c:a8:f7:54:18:43:eb:24: 1e:ce:79:99:fa:5b:5d:2e:71:2c:ed:39:03:a8:d7:5e:bf:16: 9a:f0:c3:a9:36:37:a6:53:cd:73:ee:a3:6c:59:7d:33:fc:67: a1:52:a9:7d:d5:94:8e:73:c4:d4:5a:2c:29:55:f2:bc:22:c0: 44:98:15:7c:97:41:5b:fc:15:8d:d1:64:a4:fd:99:8b:1a:ea: 1b:47:ce:dc:48:83:8e:8f:d7:9f:3c:0e:35:95:3c:1f:3b:98: 7b:d7:e9:af:05:dd:a0:a6:b7:8a:04:71:64:ba:1a:4b:30:2d: 5b:fc:de:c4:11:c6:b4:4e:5f:07:e5:26:b3:a2:aa:bf:0f:b7: bc:94:ac:63:2a:93:1b:6c:36:3e:dd:47:8c:24:0e:15:8f:75: 13:e4:1f:9c:bf:2e:dc:ea:b6:d9:c8:36:12:a4:e5:bd:c5:94: ad:9c:b5:48:ac:da:c2:c4:f5:b1:c0:5f:75:32:08:fa:2a:77: b9:85:0e:26:43:d6:dd:ac:52:4f:1a:22:ae:b1:c1:35:83:0d: 44:a8:91:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULV7+37dTijxeocafd2dbvcPL/uEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAyMDQxWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzE0YTQ4ZThiNjE4Y2JkZDNjODM3MjBmNzdhYmUzY2Nj OTZlNjQ3OWQ1ZTc5MWU2NGUxM2Q5ZDVkMDkwYmMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOEP2bI56LDhTQl2WdIxfaUF8Eu/kICWcPwnlo9gjEqB9J m+UncqryUKKnHuTKwEmfxu1tP/PUtTCCT73d0QB96wdolfcQusMJ0KyJbkfVB0Nn jYdD8BWc44ioWU37YeNxM7vZIOFJ/G+sEOpaBSU2TmI89SnvoIhChuDbWehk1lRC sp7cx//enHouLFO2G1bPzL2oF54WOYmrHxWJ0MZDSj/PLEKqDs1v4G1+cZ3/mmK4 sgBk+OdGN26C5rvFLJE120euk/8jDqaTezIl3+03L56ENH5rmPFwbb4stdZixic/ WHuC7fPsjwxEK0exhgWMEJp9zSeUFZ20JmcaVyANAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU04cDPBSMzejmeSl3s/UjJwwcPwcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5N2RiNTBlLWE4NWEtNGUxMy1iODliLTJlMjdiMmE0NjhjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlmgwDQYJKoZIhvcNAQELBQADggEBAHn9QATqIO3nVwt3noYTdVBpL2rP qlV44QM4s1TKgbwq3u2Vx+zPYUf7GEu9bEwsqPdUGEPrJB7OeZn6W10ucSztOQOo 116/Fprww6k2N6ZTzXPuo2xZfTP8Z6FSqX3VlI5zxNRaLClV8rwiwESYFXyXQVv8 FY3RZKT9mYsa6htHztxIg46P1588DjWVPB87mHvX6a8F3aCmt4oEcWS6GkswLVv8 3sQRxrROXwflJrOiqr8Pt7yUrGMqkxtsNj7dR4wkDhWPdRPkH5y/LtzqttnINhKk 5b3FlK2ctUis2sLE9bHAX3UyCPoqd7mFDiZD1t2sUk8aIq6xwTWDDUSokX8= -----END CERTIFICATE-----Generated at Tue May 12 21:40:19 2026 by rpki-client