$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa File: 2bd59750-5d84-4c08-a088-8ea8711b48d8.roa (raw, json) Hash identifier: oAs3hlcCO2L6cMz6uvhTWMOp5442ilZJ47ej22+GdYU= Subject key identifier: AD:A8:B7:88:30:9F:CF:2A:B1:F9:C0:43:FF:EF:38:CE:0B:DD:31:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30C23E61AC154C94A6BF12A62CE750ACB94917C5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa Signing time: Wed 06 May 2026 00:21:31 +0000 ROA not before: Wed 06 May 2026 00:21:31 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c2:3e:61:ac:15:4c:94:a6:bf:12:a6:2c:e7:50:ac:b9:49:17:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:21:31 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=b85e5631515b81687389659f92c75f2fa51291bc7fb11b72adf699884c59fd68, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:d7:3e:55:83:46:9c:e9:2e:d6:d8:3f:d4: 4a:3e:4f:ff:45:b3:2b:f9:04:29:57:79:76:d7:87: 02:af:c1:2e:67:c4:b3:27:a6:a3:a0:2a:05:81:f8: f2:ce:78:2c:7f:21:50:c1:ee:41:84:8d:a4:00:61: 70:5d:74:b6:f2:2c:23:f1:c0:a7:29:a5:53:bf:98: f5:24:7b:38:92:bd:26:00:db:89:80:91:72:3a:e7: 80:58:b6:71:bc:a9:41:c6:41:19:c9:52:c1:4f:ad: 02:d2:a9:1e:e8:a7:f2:89:c2:a5:03:37:75:60:04: bb:1f:b7:04:aa:cf:30:e3:80:b0:f0:7f:9b:76:bc: be:2e:44:5e:d8:c2:51:fc:e6:d6:1b:a4:15:22:f9: f4:3e:2d:7b:67:34:71:aa:c7:7e:aa:12:c7:68:c7: aa:ac:a9:d3:96:fc:75:c1:6f:2a:39:f0:d1:2c:fe: 9a:fd:3a:ca:3e:77:1d:5c:5f:92:2d:08:e4:36:bc: a5:da:ed:44:38:2f:b0:54:e5:fd:52:ab:fe:dd:40: af:e2:58:b3:35:48:e3:9b:62:03:be:1a:29:d9:d1: 78:65:60:8b:58:e9:82:3a:b2:69:53:c4:43:25:1b: 02:2d:6e:38:dc:ca:d5:f4:ca:c1:57:18:90:c7:07: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A8:B7:88:30:9F:CF:2A:B1:F9:C0:43:FF:EF:38:CE:0B:DD:31:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.164.0/22 Signature Algorithm: sha256WithRSAEncryption 80:7d:8d:39:1e:25:d7:af:b7:25:5c:75:ca:10:8e:43:33:25: 97:2e:83:cd:7c:98:1c:dc:f2:84:b6:c0:39:f0:96:6a:56:da: 83:ff:70:2f:9d:17:3c:af:a8:8c:92:06:61:49:da:93:8c:39: 9c:05:f9:37:a6:54:26:5b:a4:1a:22:62:ee:2d:54:2e:25:1a: 4f:a0:3d:fd:c3:ef:63:e5:e2:0a:1d:41:ba:f6:36:d2:86:3a: ba:05:41:5e:91:fe:a3:42:4f:0f:2b:65:09:0c:88:5c:ea:ff: a1:18:4a:9d:bb:91:94:83:a9:c1:58:17:69:9e:ec:56:1c:e3: 2a:3f:57:17:75:2b:22:eb:ee:7e:d2:36:f0:e9:0a:4a:3c:2a: 7b:11:51:f4:69:1f:c7:35:8b:0f:e9:cd:81:70:6d:c6:e0:d1: 91:68:d4:e8:d1:97:29:d5:b1:a6:3f:bc:23:a4:93:85:0c:3f: 7b:1a:5e:1f:c0:ea:c5:70:4d:63:ea:a4:d2:5d:eb:91:f5:93: 61:45:01:4b:81:9c:86:82:a8:90:cb:04:85:24:88:8d:82:27: 3d:5d:3b:11:78:64:5b:3a:79:9d:4c:b3:fa:8e:d9:cb:67:2b: c4:f9:fe:d5:88:6a:7d:ad:4f:90:f6:8b:63:46:19:58:c6:55: b9:d8:9b:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMMI+YawVTJSmvxKmLOdQrLlJF8UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAyMTMxWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODVlNTYzMTUxNWI4MTY4NzM4OTY1OWY5MmM3NWYyZmE1 MTI5MWJjN2ZiMTFiNzJhZGY2OTk4ODRjNTlmZDY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSHtc+VYNGnOku1tg/1Eo+T/9Fsyv5BClXeXbXhwKvwS5n xLMnpqOgKgWB+PLOeCx/IVDB7kGEjaQAYXBddLbyLCPxwKcppVO/mPUkeziSvSYA 24mAkXI654BYtnG8qUHGQRnJUsFPrQLSqR7op/KJwqUDN3VgBLsftwSqzzDjgLDw f5t2vL4uRF7YwlH85tYbpBUi+fQ+LXtnNHGqx36qEsdox6qsqdOW/HXBbyo58NEs /pr9Oso+dx1cX5ItCOQ2vKXa7UQ4L7BU5f1Sq/7dQK/iWLM1SOObYgO+GinZ0Xhl YItY6YI6smlTxEMlGwItbjjcytX0ysFXGJDHB1sJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrai3iDCfzyqx+cBD/+84zgvdMVcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZDU5NzUwLTVkODQtNGMwOC1hMDg4LThlYTg3MTFiNDhkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjl6QwDQYJKoZIhvcNAQELBQADggEBAIB9jTkeJdevtyVcdcoQjkMzJZcu g818mBzc8oS2wDnwlmpW2oP/cC+dFzyvqIySBmFJ2pOMOZwF+TemVCZbpBoiYu4t VC4lGk+gPf3D72Pl4godQbr2NtKGOroFQV6R/qNCTw8rZQkMiFzq/6EYSp27kZSD qcFYF2me7FYc4yo/Vxd1KyLr7n7SNvDpCko8KnsRUfRpH8c1iw/pzYFwbcbg0ZFo 1OjRlynVsaY/vCOkk4UMP3saXh/A6sVwTWPqpNJd65H1k2FFAUuBnIaCqJDLBIUk iI2CJz1dOxF4ZFs6eZ1Ms/qO2ctnK8T5/tWIan2tT5D2i2NGGVjGVbnYm5g= -----END CERTIFICATE-----Generated at Tue May 12 21:55:40 2026 by rpki-client