$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b15d28d-9a18-49c9-9715-c65333504032.roa File: 4b15d28d-9a18-49c9-9715-c65333504032.roa (raw, json) Hash identifier: y4PIPg30vY2xDIZdndSdWsQ/HdajL8oBM5KXKz2m5u8= Subject key identifier: 48:A4:3E:94:DD:9F:07:D3:D0:7A:9E:FF:B9:73:C3:82:58:DA:0E:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F16D5F82F7BC92302F84EA4133FEE3FAC941695 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b15d28d-9a18-49c9-9715-c65333504032.roa Signing time: Mon 04 May 2026 01:00:47 +0000 ROA not before: Mon 04 May 2026 01:00:47 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 93.77.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:16:d5:f8:2f:7b:c9:23:02:f8:4e:a4:13:3f:ee:3f:ac:94:16:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 01:00:47 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=1270095d1d433db3847fb6312c7fedf5d5933f8a921361ee8998df11cc652679, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:ac:5a:88:98:15:58:11:5c:8c:13:fb:99: ec:48:0c:3a:cd:d6:fe:06:c6:1c:0a:92:1d:95:34: 4f:e0:c2:ac:53:e7:c1:a7:cd:1d:9d:c2:9d:cf:e5: 0e:a2:cf:d7:79:f0:1b:b3:61:de:25:76:d5:0b:6b: 62:71:4f:1d:92:67:93:1d:62:93:37:54:94:11:2c: 6b:6f:c1:f3:a5:56:be:76:67:01:bd:04:6f:d7:db: 70:71:d6:c2:ff:f4:44:8e:fc:62:f8:3a:66:ca:96: b7:8d:21:69:c1:31:84:35:2f:d7:a3:57:6c:1c:1d: a3:41:8b:cf:43:ae:50:03:4f:a8:65:68:b8:05:4a: 54:6d:5a:68:54:42:c0:d7:3d:c8:e1:1b:ef:8a:8a: ce:26:66:7f:67:2e:c8:fa:d4:15:b2:81:0b:84:9d: 1c:91:33:4b:64:20:a4:2f:16:03:15:81:15:49:a8: 19:f5:1b:c1:c7:5a:b9:3e:03:1c:f9:f1:43:1f:1c: 38:87:64:9a:d5:c3:99:be:dd:92:56:9e:5a:5f:d9: b3:bf:c9:b1:bc:8b:65:67:ea:2d:dd:79:c3:cc:9f: eb:45:e6:f7:2b:54:58:e5:c3:99:1d:2e:5f:5d:fb: 6b:f7:c4:02:78:6c:05:f8:a3:b2:8a:d7:2b:5a:45: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A4:3E:94:DD:9F:07:D3:D0:7A:9E:FF:B9:73:C3:82:58:DA:0E:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b15d28d-9a18-49c9-9715-c65333504032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.77.139.0/24 Signature Algorithm: sha256WithRSAEncryption 13:58:8a:3c:e6:e3:20:53:1a:a4:c7:1c:97:47:86:67:1c:cc: 04:0d:6f:c3:91:d6:cb:f2:00:51:e9:4c:87:c1:68:a7:da:e5: da:1e:60:63:21:30:4d:14:b9:7f:a5:c6:4a:b8:b8:93:77:bc: 6b:c4:71:24:35:d7:09:04:b6:e0:8a:26:94:83:22:ca:3f:02: 12:e7:79:07:f9:81:a0:92:08:c5:46:13:5a:b4:bf:f0:2b:b5: 83:c4:e6:0a:35:da:4a:49:26:5d:ff:83:a2:50:cf:ae:19:86: 9e:06:ba:30:26:be:f4:7f:b0:d1:18:0c:b8:c9:ce:09:3a:34: f6:d6:3f:95:9d:f9:e9:60:87:c4:58:51:a9:cd:66:9e:17:5a: e1:46:62:1c:23:e7:b7:e2:f1:07:c1:42:0a:a8:43:bb:dd:79: c0:72:f2:50:7a:9e:d4:c1:0c:30:7e:1a:a1:a0:f6:a1:d7:3a: ea:b7:c9:54:f8:37:7b:01:b0:73:36:b7:35:dc:0e:58:1a:21: 27:8e:75:aa:87:81:36:62:76:fe:7a:bc:7b:f6:90:4d:3a:22: df:86:a0:99:92:90:19:b4:e5:eb:89:61:72:dc:48:36:c8:98: 6c:ba:a7:4d:ae:b3:65:6e:90:d8:a1:07:b2:56:fe:2b:64:23: b9:33:12:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXxbV+C97ySMC+E6kEz/uP6yUFpUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEwMDQ3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjcwMDk1ZDFkNDMzZGIzODQ3ZmI2MzEyYzdmZWRmNWQ1 OTMzZjhhOTIxMzYxZWU4OTk4ZGYxMWNjNjUyNjc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqi6xaiJgVWBFcjBP7mexIDDrN1v4GxhwKkh2VNE/gwqxT 58GnzR2dwp3P5Q6iz9d58BuzYd4ldtULa2JxTx2SZ5MdYpM3VJQRLGtvwfOlVr52 ZwG9BG/X23Bx1sL/9ESO/GL4OmbKlreNIWnBMYQ1L9ejV2wcHaNBi89DrlADT6hl aLgFSlRtWmhUQsDXPcjhG++Kis4mZn9nLsj61BWygQuEnRyRM0tkIKQvFgMVgRVJ qBn1G8HHWrk+Axz58UMfHDiHZJrVw5m+3ZJWnlpf2bO/ybG8i2Vn6i3decPMn+tF 5vcrVFjlw5kdLl9d+2v3xAJ4bAX4o7KK1ytaRcLVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSKQ+lN2fB9PQep7/uXPDgljaDsAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiMTVkMjhkLTlhMTgtNDljOS05NzE1LWM2NTMzMzUwNDAzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABdTYswDQYJKoZIhvcNAQELBQADggEBABNYijzm4yBTGqTHHJdHhmcczAQN b8OR1svyAFHpTIfBaKfa5doeYGMhME0UuX+lxkq4uJN3vGvEcSQ11wkEtuCKJpSD Iso/AhLneQf5gaCSCMVGE1q0v/ArtYPE5go12kpJJl3/g6JQz64Zhp4GujAmvvR/ sNEYDLjJzgk6NPbWP5Wd+elgh8RYUanNZp4XWuFGYhwj57fi8QfBQgqoQ7vdecBy 8lB6ntTBDDB+GqGg9qHXOuq3yVT4N3sBsHM2tzXcDlgaISeOdaqHgTZidv56vHv2 kE06It+GoJmSkBm05euJYXLcSDbImGy6p02us2VukNihB7JW/itkI7kzEls= -----END CERTIFICATE-----Generated at Wed May 13 03:01:19 2026 by rpki-client