$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29b04d7a-f54d-4eba-87de-ca3cdce561d4.roa File: 29b04d7a-f54d-4eba-87de-ca3cdce561d4.roa (raw, json) Hash identifier: /bL40fkfrSoHkbA8BdnxhZ++M6W9BLlj4pYlS2p5gf0= Subject key identifier: 43:0B:BB:5C:72:D4:ED:04:3B:51:A8:1F:1B:BD:DA:44:25:1C:B0:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 179C54DDA183152BEFA7B5B767B80BD8892E5672 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29b04d7a-f54d-4eba-87de-ca3cdce561d4.roa Signing time: Fri 08 May 2026 00:40:47 +0000 ROA not before: Fri 08 May 2026 00:40:47 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.88.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9c:54:dd:a1:83:15:2b:ef:a7:b5:b7:67:b8:0b:d8:89:2e:56:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:40:47 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=83a9a407d8e18e1a08bb25f8f2c6117c19f00647e90eba7cb84fad59360d69e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:72:51:27:aa:c9:49:fa:b0:65:49:15:7c: 5c:68:99:6f:03:ee:35:00:df:95:2e:60:e3:50:42: 0a:05:62:d8:af:68:35:05:61:53:d9:b6:dd:36:a0: 55:e9:b5:92:39:d2:2e:0c:31:be:57:32:0c:fd:59: a0:27:75:92:01:af:7a:5c:f8:f9:c3:ae:9c:0a:09: ef:d3:29:7e:18:6e:a2:51:4e:76:0d:8b:f3:ac:aa: 26:ca:2d:a0:90:3e:1e:2d:df:1f:70:1a:1b:16:68: 32:0a:23:06:f6:f3:51:a4:0b:81:d1:6d:8f:1f:34: 67:32:12:5f:78:1d:5f:f8:d6:51:3a:c5:b5:a3:f9: ed:07:7e:e8:2c:33:37:ff:2d:ae:c3:d7:bd:d0:dc: e7:22:ac:23:04:d2:43:ea:e3:5e:e9:41:0a:b5:03: 04:a9:7b:39:d8:64:64:b0:ce:4f:21:ff:1c:b1:83: c9:4c:b6:a3:e3:51:b3:45:21:8e:63:7e:33:c6:6c: 70:07:d9:22:b3:e2:f4:a8:77:64:fd:5d:f3:b2:79: c8:a2:95:3e:03:a1:ab:54:71:ae:b2:f5:98:88:40: f6:f9:dd:ba:24:91:63:46:9e:70:99:f7:e3:ae:7d: fa:3c:e1:82:18:72:59:70:4d:b6:2c:3c:99:0e:63: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:BB:5C:72:D4:ED:04:3B:51:A8:1F:1B:BD:DA:44:25:1C:B0:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29b04d7a-f54d-4eba-87de-ca3cdce561d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.88.144.0/22 Signature Algorithm: sha256WithRSAEncryption 51:ea:49:de:28:20:e9:9d:1e:d6:32:32:0b:04:d5:64:39:44: 57:90:27:2b:e1:42:38:f1:4a:f5:60:ad:45:1c:46:d5:f6:cd: 18:a5:ad:61:40:de:a3:a7:a4:52:22:2e:24:16:bf:fa:c9:83: cb:7d:00:65:41:81:08:e2:ab:e4:2e:6a:f3:58:6d:f6:1e:5d: c7:98:45:12:29:04:e4:42:d6:e0:e4:1f:3d:e2:8d:68:30:1b: 01:41:d4:49:df:a7:09:7c:a4:24:76:31:62:f5:13:04:3b:77: ae:6e:89:a7:f6:09:ab:c1:74:08:0e:9e:98:ff:ac:f6:93:9a: 08:ed:fa:11:eb:77:e2:b2:71:8d:38:76:18:cf:d1:f3:92:82: bd:d0:70:c0:4e:2d:0d:f4:b6:f4:8a:5e:00:bb:81:34:e0:fd: 1e:b3:75:19:d8:97:8f:0e:92:58:31:cb:d4:a8:ba:79:ce:db: d7:d6:0e:e7:f3:8b:62:15:6f:7d:f2:37:82:bd:48:c7:3e:b4: 72:8f:b3:35:38:1b:10:e8:39:48:54:9f:28:09:8a:9e:a6:b6: fa:8e:01:88:c9:53:46:c4:ad:f6:81:b3:23:66:ec:41:2a:8f: 58:9f:1b:b1:a4:bf:41:85:3c:b8:6f:13:9d:cd:c2:e8:34:69: 9f:a8:20:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF5xU3aGDFSvvp7W3Z7gL2IkuVnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDA0MDQ3WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2E5YTQwN2Q4ZTE4ZTFhMDhiYjI1ZjhmMmM2MTE3YzE5 ZjAwNjQ3ZTkwZWJhN2NiODRmYWQ1OTM2MGQ2OWU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI6XJRJ6rJSfqwZUkVfFxomW8D7jUA35UuYONQQgoFYtiv aDUFYVPZtt02oFXptZI50i4MMb5XMgz9WaAndZIBr3pc+PnDrpwKCe/TKX4YbqJR TnYNi/OsqibKLaCQPh4t3x9wGhsWaDIKIwb281GkC4HRbY8fNGcyEl94HV/41lE6 xbWj+e0HfugsMzf/La7D173Q3OcirCME0kPq417pQQq1AwSpeznYZGSwzk8h/xyx g8lMtqPjUbNFIY5jfjPGbHAH2SKz4vSod2T9XfOyeciilT4DoatUca6y9ZiIQPb5 3bokkWNGnnCZ9+Ouffo84YIYcllwTbYsPJkOYwg7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQwu7XHLU7QQ7UagfG73aRCUcsFowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5YjA0ZDdhLWY1NGQtNGViYS04N2RlLWNhM2NkY2U1NjFkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFWJAwDQYJKoZIhvcNAQELBQADggEBAFHqSd4oIOmdHtYyMgsE1WQ5RFeQ JyvhQjjxSvVgrUUcRtX2zRilrWFA3qOnpFIiLiQWv/rJg8t9AGVBgQjiq+QuavNY bfYeXceYRRIpBORC1uDkHz3ijWgwGwFB1Enfpwl8pCR2MWL1EwQ7d65uiaf2CavB dAgOnpj/rPaTmgjt+hHrd+KycY04dhjP0fOSgr3QcMBOLQ30tvSKXgC7gTTg/R6z dRnYl48Oklgxy9SounnO29fWDufzi2IVb33yN4K9SMc+tHKPszU4GxDoOUhUnygJ ip6mtvqOAYjJU0bErfaBsyNm7EEqj1ifG7Gkv0GFPLhvE53Nwug0aZ+oIHQ= -----END CERTIFICATE-----Generated at Tue May 12 21:58:45 2026 by rpki-client