$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa File: 595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa (raw, json) Hash identifier: tZzJpOVTamzBPbRsbgNqla7NwQU8mh7bA+4euIgFp5o= Subject key identifier: 95:21:F1:F0:E2:49:47:61:85:86:C6:E8:42:3F:D1:E2:CE:70:88:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75E9F45555834AA901C88FD78B7E6233A64AA910 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa Signing time: Sat 09 May 2026 00:20:05 +0000 ROA not before: Sat 09 May 2026 00:20:05 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 32.192.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e9:f4:55:55:83:4a:a9:01:c8:8f:d7:8b:7e:62:33:a6:4a:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:20:05 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=7e9fa9370c466ce0dd8527e9d527dc99ac90400224f49615abef19eac9302def, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:61:e4:3a:8e:ce:0a:12:83:99:13:d0:8d:ec: 51:de:f1:93:56:07:48:3c:ba:d1:08:02:8c:4d:33: 3b:32:3b:2d:bb:27:7c:45:7e:e3:f3:08:54:e4:dc: d6:d1:1a:9b:bd:80:fb:a5:32:56:c5:33:42:14:9f: 60:16:88:df:f8:63:a9:00:05:ef:21:33:ff:23:a9: f8:56:c3:18:af:68:3e:f7:21:a7:56:99:f9:f4:4e: 7d:00:fc:18:9f:ac:d3:96:a3:a2:86:1e:2f:b4:93: bb:fd:af:78:ef:42:bf:3c:52:31:f6:f8:10:0d:f5: 3c:d5:9f:9e:6e:a2:4c:e6:de:dc:70:2f:43:bf:9a: f5:2b:05:df:16:63:23:31:52:b9:e6:23:14:5c:e8: 67:23:fb:86:0c:80:cb:d1:df:84:fc:f5:c3:90:80: 13:fe:99:a1:92:2b:99:55:f9:03:7b:88:dd:e5:79: 86:e6:d2:25:87:70:52:b7:1a:55:60:ed:6a:cf:17: 55:9d:ee:58:1b:68:22:e9:dc:dd:29:4f:d0:fb:26: d3:54:51:7c:c0:ec:f3:e9:3b:a6:4e:0a:bb:88:9f: b6:23:14:4e:13:f3:0b:21:ea:1c:d9:db:df:8a:d3: f7:41:a1:ff:c3:2f:3b:dc:29:15:68:26:a3:59:28: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:21:F1:F0:E2:49:47:61:85:86:C6:E8:42:3F:D1:E2:CE:70:88:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.192.0.0/13 Signature Algorithm: sha256WithRSAEncryption 12:78:f5:f8:ca:ff:aa:2a:e0:0b:d4:87:a9:11:3c:b2:78:0b: 87:47:1d:03:a1:9f:2e:7c:7c:40:df:45:5d:2e:91:0e:f8:dc: f4:3b:84:d1:17:f5:ff:5a:c2:d2:78:47:d8:a4:28:1e:72:e3: 3e:fc:ab:62:69:a9:15:ad:7b:93:34:fb:62:eb:33:82:0e:09: 66:69:08:28:a5:7e:3c:dc:17:f9:f7:94:bf:29:08:5a:77:7a: 8e:32:18:61:5f:04:d9:a8:63:d9:08:a2:25:ce:e0:eb:1a:74: da:8c:93:02:cc:1c:4f:4c:eb:ef:51:67:94:7a:b0:a4:26:b5: fc:ef:06:d3:bf:62:6e:c6:f9:6e:65:05:63:82:78:82:b5:49: e4:08:9a:21:43:18:8d:c4:a6:3d:4c:ab:c0:80:3a:96:14:6e: 72:28:15:1c:9c:02:60:a3:cc:f2:e6:c5:99:0b:8f:e6:c6:2c: 16:16:b2:9d:7d:10:ba:2f:7f:b0:46:8e:38:d3:d3:57:4e:69: 67:c0:ea:29:cc:ab:f9:8a:75:df:5d:ea:19:16:8f:49:f2:da: fd:24:2b:b7:bf:2b:73:92:ef:c1:3a:68:8c:5e:07:f7:4a:91: 3b:84:ea:c6:a7:17:59:2c:44:ee:ed:5b:af:d7:6e:18:5a:a4: 3a:b1:21:ba -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUden0VVWDSqkByI/Xi35iM6ZKqRAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAyMDA1WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTlmYTkzNzBjNDY2Y2UwZGQ4NTI3ZTlkNTI3ZGM5OWFj OTA0MDAyMjRmNDk2MTVhYmVmMTllYWM5MzAyZGVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5YeQ6js4KEoOZE9CN7FHe8ZNWB0g8utEIAoxNMzsyOy27 J3xFfuPzCFTk3NbRGpu9gPulMlbFM0IUn2AWiN/4Y6kABe8hM/8jqfhWwxivaD73 IadWmfn0Tn0A/BifrNOWo6KGHi+0k7v9r3jvQr88UjH2+BAN9TzVn55uokzm3txw L0O/mvUrBd8WYyMxUrnmIxRc6Gcj+4YMgMvR34T89cOQgBP+maGSK5lV+QN7iN3l eYbm0iWHcFK3GlVg7WrPF1Wd7lgbaCLp3N0pT9D7JtNUUXzA7PPpO6ZOCruIn7Yj FE4T8wsh6hzZ29+K0/dBof/DLzvcKRVoJqNZKK1PAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUlSHx8OJJR2GFhsboQj/R4s5wiNQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5NWEyZWNmLTdkNGUtNDM0Yi04ZmVmLWYyZmVlZDUxYjRhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMgwDANBgkqhkiG9w0BAQsFAAOCAQEAEnj1+Mr/qirgC9SHqRE8sngLh0cd A6GfLnx8QN9FXS6RDvjc9DuE0Rf1/1rC0nhH2KQoHnLjPvyrYmmpFa17kzT7Yusz gg4JZmkIKKV+PNwX+feUvykIWnd6jjIYYV8E2ahj2QiiJc7g6xp02oyTAswcT0zr 71FnlHqwpCa1/O8G079ibsb5bmUFY4J4grVJ5AiaIUMYjcSmPUyrwIA6lhRucigV HJwCYKPM8ubFmQuP5sYsFhaynX0Qui9/sEaOONPTV05pZ8DqKcyr+Yp1313qGRaP SfLa/SQrt78rc5LvwTpojF4H90qRO4TqxqcXWSxE7u1br9duGFqkOrEhug== -----END CERTIFICATE-----Generated at Tue May 12 21:49:14 2026 by rpki-client