$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa File: 5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa (raw, json) Hash identifier: gCShOlQmpgjiQ+eXiQgyZdO6DwfsdpxjIy8ZldXAPDA= Subject key identifier: 55:4C:AD:F2:20:D5:B5:4A:1F:E8:25:98:A3:60:62:D3:50:AC:E7:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A7F780B281931DA31B03CF55355453B817FB8CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa Signing time: Mon 04 May 2026 00:30:13 +0000 ROA not before: Mon 04 May 2026 00:30:13 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.130.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7f:78:0b:28:19:31:da:31:b0:3c:f5:53:55:45:3b:81:7f:b8:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:30:13 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=8a821f8f35fb1770b4d0692e5edd8a08d00372c99eb28418bdd1fe4753741264, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:ab:2d:74:a7:b2:15:1b:00:a6:be:34:d8: 5d:a1:fa:f4:44:f6:29:c7:81:07:15:df:f9:ab:67: 9c:df:cd:46:f3:25:2f:f4:c7:4f:04:78:a5:23:38: 39:c5:b7:cf:a1:8f:0b:bd:f0:4a:9b:10:2b:a3:a8: 99:e0:d9:8b:2a:4f:f4:04:6c:7a:1f:d2:e6:82:55: 68:60:e9:8d:0a:2b:3c:5f:98:10:c0:01:0f:98:5a: a5:02:90:1e:f9:d5:e8:d3:63:eb:e8:a0:0f:aa:b4: 0e:41:34:bd:e8:9a:a1:4d:c3:ec:c9:8c:c4:43:d5: 36:9e:ea:93:55:e0:e7:22:cb:cd:e7:50:3c:26:03: 84:12:0a:ea:9d:33:a0:ec:73:0b:87:02:71:0a:c7: 03:b9:58:ec:7e:17:bd:1e:48:92:c0:ae:2e:fb:9d: 37:3e:13:b3:fc:1a:6c:8a:47:1b:a6:05:02:1d:19: d6:fc:72:0a:62:fd:58:27:a6:92:73:93:1f:f2:3f: 91:6d:73:6e:f8:82:c3:cd:e6:66:c0:0f:d7:14:7a: 7d:79:b2:d2:93:ec:fb:5f:17:c5:b8:5d:91:81:d6: 1f:9d:2f:93:99:ed:fb:25:92:f6:4c:3d:16:ac:9f: dc:d5:d8:34:c3:7a:1c:13:e4:57:51:08:a5:d7:4a: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4C:AD:F2:20:D5:B5:4A:1F:E8:25:98:A3:60:62:D3:50:AC:E7:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.130.16.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:63:2f:ef:2a:cf:86:4f:45:4c:6b:54:93:00:df:fa:84:c1: d7:e5:4d:c5:ec:b7:f0:84:a7:6a:a3:d7:05:66:cd:6f:e9:df: 52:34:42:04:64:51:f7:e6:79:da:ff:b9:14:de:d8:c8:a6:e4: 40:f7:53:5c:24:ca:58:cc:20:65:4b:8b:71:2f:95:83:2b:0c: c9:02:bc:29:2f:ec:a6:c6:16:13:db:51:e2:58:3a:0d:41:b3: b0:fe:dc:d1:74:fb:4a:f9:03:5b:c1:49:cd:1f:88:c6:c6:55: f5:d1:cc:cf:61:d5:1d:24:ae:ae:fe:26:03:e1:55:ca:06:06: 78:99:fb:fc:f1:e1:5e:e0:3e:b4:60:d4:00:be:d6:49:fe:ab: df:18:7d:88:39:76:4b:55:28:dd:3b:ea:6d:e8:af:45:60:83: c2:e5:ad:8c:62:98:b4:68:20:d2:c1:f9:0b:07:26:13:97:4e: 64:a6:aa:c2:e7:3a:2c:87:a0:18:04:fa:3d:29:0b:01:5c:48: fd:28:f5:70:d0:93:76:5a:42:b4:3d:e8:e9:2e:f0:06:d5:db: 11:66:27:4f:a4:ef:64:d8:0d:4f:45:54:54:1d:3f:66:a7:e9: a4:3f:c3:61:87:06:c9:33:0e:31:ca:f6:59:3b:6d:09:11:d7: 91:d0:d4:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGn94CygZMdoxsDz1U1VFO4F/uMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAzMDEzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTgyMWY4ZjM1ZmIxNzcwYjRkMDY5MmU1ZWRkOGEwOGQw MDM3MmM5OWViMjg0MThiZGQxZmU0NzUzNzQxMjY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEJ6stdKeyFRsApr402F2h+vRE9inHgQcV3/mrZ5zfzUbz JS/0x08EeKUjODnFt8+hjwu98EqbECujqJng2YsqT/QEbHof0uaCVWhg6Y0KKzxf mBDAAQ+YWqUCkB751ejTY+vooA+qtA5BNL3omqFNw+zJjMRD1Tae6pNV4Ociy83n UDwmA4QSCuqdM6DscwuHAnEKxwO5WOx+F70eSJLAri77nTc+E7P8GmyKRxumBQId Gdb8cgpi/VgnppJzkx/yP5Ftc274gsPN5mbAD9cUen15stKT7PtfF8W4XZGB1h+d L5OZ7fslkvZMPRasn9zV2DTDehwT5FdRCKXXSnXNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVUyt8iDVtUof6CWYo2Bi01Cs57IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlOTcwYTMwLTRiZGYtNGY1OS1hYTdjLWZmNmZkNTgxYmE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNghAwDQYJKoZIhvcNAQELBQADggEBABtjL+8qz4ZPRUxrVJMA3/qEwdfl TcXst/CEp2qj1wVmzW/p31I0QgRkUffmedr/uRTe2Mim5ED3U1wkyljMIGVLi3Ev lYMrDMkCvCkv7KbGFhPbUeJYOg1Bs7D+3NF0+0r5A1vBSc0fiMbGVfXRzM9h1R0k rq7+JgPhVcoGBniZ+/zx4V7gPrRg1AC+1kn+q98YfYg5dktVKN076m3or0Vgg8Ll rYximLRoINLB+QsHJhOXTmSmqsLnOiyHoBgE+j0pCwFcSP0o9XDQk3ZaQrQ96Oku 8AbV2xFmJ0+k72TYDU9FVFQdP2an6aQ/w2GHBskzDjHK9lk7bQkR15HQ1PE= -----END CERTIFICATE-----Generated at Wed May 13 02:31:01 2026 by rpki-client