$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa File: 1f96569d-1e29-4c82-8714-f7e019d9de0e.roa (raw, json) Hash identifier: maD3hE8eLG8Q0j2AO5XfX2XTwp5CYgIjJIrPm/qiPd4= Subject key identifier: 9B:40:AE:03:7D:9C:99:17:2A:7C:43:E5:06:22:FE:54:2B:45:AC:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 407C7BC07081C322D7B01F5E23C39D851345F1DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa Signing time: Wed 06 May 2026 00:10:40 +0000 ROA not before: Wed 06 May 2026 00:10:40 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 134.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7c:7b:c0:70:81:c3:22:d7:b0:1f:5e:23:c3:9d:85:13:45:f1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:10:40 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=473c3f20280420e51cc3b720802f4d89944406eedde81a26946aabb7259a1cf6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:01:e7:e2:ea:77:9d:5c:3b:2c:27:e1:ee: 6c:5f:61:6f:3a:73:cb:9e:a4:df:f1:d5:f4:9a:58: ef:fe:fe:39:18:bc:0a:90:65:b8:52:63:d4:5b:da: d3:19:1d:50:70:88:a5:94:0f:ce:3b:a7:14:28:51: 35:1c:3a:ca:fc:b5:a2:4f:01:15:f7:69:c6:4c:95: 86:2d:ac:9c:39:67:4d:37:70:d8:66:15:27:ca:68: 71:1c:92:91:43:fa:e0:67:79:93:fe:b1:ca:05:64: da:a3:fa:af:9f:4d:5a:b8:a3:94:50:72:6d:08:08: 37:c7:b2:7e:ba:0b:de:8f:51:9b:4a:63:df:af:c7: 23:db:da:54:ef:74:43:5d:82:23:a4:12:7a:27:b3: e8:d6:be:db:b1:27:b3:89:19:2d:93:39:3b:e5:27: 86:48:1b:a8:f5:e4:1e:a6:c8:66:02:25:c4:d1:68: da:e7:1f:80:df:ff:9e:32:71:2f:3f:a3:61:9b:5e: 0e:e5:45:b1:bd:69:c7:02:1a:4f:a5:d1:85:73:ad: 13:aa:23:0f:46:8c:f5:ed:f7:8e:3c:75:e5:23:fb: 4f:20:73:5c:14:3f:91:a2:54:9e:f3:59:c5:cf:25: e6:54:1c:be:08:c1:ac:e7:89:c8:b4:1d:23:96:a1: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:40:AE:03:7D:9C:99:17:2A:7C:43:E5:06:22:FE:54:2B:45:AC:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption bc:b6:05:24:c8:07:ee:f1:c4:f8:f6:94:81:20:df:f1:e4:77: 33:c7:d3:85:05:96:72:ec:3f:6b:3a:e2:67:29:08:fe:be:ad: a6:3b:bb:48:5c:db:d3:32:bc:b2:be:ee:c1:5a:d9:c4:bd:4f: 59:d6:54:a8:98:4b:18:1e:d7:0e:4b:8b:36:1d:1e:07:15:62: 87:51:af:30:cc:88:ca:76:49:bd:56:82:63:90:54:7c:3c:ab: 72:60:ae:fc:53:d4:4a:9f:c1:84:42:30:c9:d4:fa:2b:22:1b: 4d:11:1a:13:b5:2b:df:0f:be:50:bf:87:2f:7b:9e:c8:0b:31: c5:53:24:4d:d9:8f:2e:37:f5:62:05:d3:bc:f0:79:9e:f4:61: 71:d3:b9:27:16:f6:08:46:c2:60:4b:06:3f:30:7c:b0:d2:33: 20:4d:78:9b:ae:b3:94:d8:91:49:c3:b3:d8:d2:5a:d8:cb:f6: 23:70:31:dd:ac:5b:e6:a0:4b:39:ce:f9:fb:3d:28:ce:c4:9a: 7f:3b:23:67:51:0c:85:3e:4a:ac:64:2e:44:af:a0:e4:0e:b1: 43:a0:a3:d0:16:d8:3a:0e:34:b1:7b:c0:4b:bf:b4:35:c6:30: c5:c1:74:a3:cf:db:b9:2c:70:65:cd:0f:d7:d1:0e:2a:de:02: 60:21:60:9e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQHx7wHCBwyLXsB9eI8OdhRNF8d0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAxMDQwWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzNjM2YyMDI4MDQyMGU1MWNjM2I3MjA4MDJmNGQ4OTk0 NDQwNmVlZGRlODFhMjY5NDZhYWJiNzI1OWExY2Y2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwtQHn4up3nVw7LCfh7mxfYW86c8uepN/x1fSaWO/+/jkY vAqQZbhSY9Rb2tMZHVBwiKWUD847pxQoUTUcOsr8taJPARX3acZMlYYtrJw5Z003 cNhmFSfKaHEckpFD+uBneZP+scoFZNqj+q+fTVq4o5RQcm0ICDfHsn66C96PUZtK Y9+vxyPb2lTvdENdgiOkEnons+jWvtuxJ7OJGS2TOTvlJ4ZIG6j15B6myGYCJcTR aNrnH4Df/54ycS8/o2GbXg7lRbG9accCGk+l0YVzrROqIw9GjPXt9448deUj+08g c1wUP5GiVJ7zWcXPJeZUHL4Iwaznici0HSOWoS2XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm0CuA32cmRcqfEPlBiL+VCtFrGcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmOTY1NjlkLTFlMjktNGM4Mi04NzE0LWY3ZTAxOWQ5ZGUwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCGSTANBgkqhkiG9w0BAQsFAAOCAQEAvLYFJMgH7vHE+PaUgSDf8eR3M8fT hQWWcuw/azriZykI/r6tpju7SFzb0zK8sr7uwVrZxL1PWdZUqJhLGB7XDkuLNh0e BxVih1GvMMyIynZJvVaCY5BUfDyrcmCu/FPUSp/BhEIwydT6KyIbTREaE7Ur3w++ UL+HL3ueyAsxxVMkTdmPLjf1YgXTvPB5nvRhcdO5Jxb2CEbCYEsGPzB8sNIzIE14 m66zlNiRScOz2NJa2Mv2I3Ax3axb5qBLOc75+z0ozsSafzsjZ1EMhT5KrGQuRK+g 5A6xQ6Cj0BbYOg40sXvAS7+0NcYwxcF0o8/buSxwZc0P19EOKt4CYCFgng== -----END CERTIFICATE-----Generated at Wed May 13 02:33:09 2026 by rpki-client