$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa File: 7aec645b-f991-4a6c-97ff-47cd491428c4.roa (raw, json) Hash identifier: D4C/fxyoZjwUDtuF/QLhpXHvH/0mU6JJjBYh+jyjWcw= Subject key identifier: F9:AE:9D:05:BF:8D:5C:69:B0:09:A6:FB:8D:D7:D9:B7:63:68:87:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 065D4E99E986F8965F056D2A3921825EFAEAAE56 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa Signing time: Wed 06 May 2026 00:00:30 +0000 ROA not before: Wed 06 May 2026 00:00:30 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5d:4e:99:e9:86:f8:96:5f:05:6d:2a:39:21:82:5e:fa:ea:ae:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:00:30 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=666d4d0fd9fd28c9975d75e4e02164ee7e47a81a060ccc5c712f723a289b198f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:78:39:1b:12:13:09:77:e8:de:82:fc:de:f9: a6:66:cc:6f:e2:6d:9a:72:63:bf:31:f7:95:fd:e1: 88:9f:2c:b7:28:ae:6d:11:7b:6f:c6:e7:7e:a5:24: c5:dd:4d:b1:a3:8f:bd:78:78:d9:ef:7a:3e:6b:df: 82:f4:cb:d9:ea:45:13:34:22:73:92:9d:91:15:89: d0:35:d2:c7:e5:e2:b8:c0:0a:5c:e9:b8:44:a1:de: b4:7e:3d:74:c1:a6:da:77:e3:85:13:2d:61:99:5b: 8d:43:bd:ec:b8:60:36:cc:d1:03:65:1f:03:09:d2: 03:26:ae:d2:fc:1d:33:10:35:42:88:1f:f2:52:1c: e7:c6:be:19:17:2e:b4:08:4f:90:34:08:2e:07:55: 17:ec:55:7d:9c:34:94:af:03:5f:40:a1:5d:a0:b3: b9:2d:10:ef:2f:74:ca:c7:1f:c8:2e:f1:bf:0c:ea: ba:94:9b:db:9e:91:d3:bb:08:9e:e6:0a:1c:7e:8a: 16:cf:43:14:9a:e6:04:f1:76:4d:44:06:4c:68:da: d5:33:ea:20:e4:c5:1b:da:5f:15:cd:7d:c7:ba:b9: aa:77:88:0b:ce:53:72:d2:93:e3:5e:69:93:4d:19: e4:7f:21:a0:ea:e5:81:01:49:15:5a:c9:a1:e6:81: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:9D:05:BF:8D:5C:69:B0:09:A6:FB:8D:D7:D9:B7:63:68:87:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.112.0/21 Signature Algorithm: sha256WithRSAEncryption d6:81:71:cf:f6:4f:c3:b6:8c:2c:c0:8c:2f:90:aa:7e:be:25: 01:e6:a2:e4:f3:14:d4:cd:66:fa:ec:8f:59:79:00:8f:5d:57: 6e:c0:3b:37:5f:f8:e8:c5:29:77:9b:7e:a1:62:46:34:8d:f0: df:97:2b:60:ba:31:4e:b8:b6:e0:6b:b8:a7:45:a8:35:84:ae: 4f:59:32:97:a6:1b:45:b2:60:4f:67:09:32:58:f6:46:1f:84: 92:7e:58:d4:a9:bb:7f:64:f3:a5:34:09:f0:19:b7:8c:20:a4: 8f:27:0b:94:5c:47:f1:04:a3:3d:50:62:0f:96:dc:3e:37:30: cd:ff:f1:4d:3e:46:80:50:c2:f9:ec:54:30:e7:56:7e:d4:14: 84:41:7b:a7:d0:ba:8d:dd:55:45:00:9a:3c:fe:b3:74:53:9e: 70:fa:3e:3c:8c:29:26:c0:96:d6:c2:7a:d2:92:71:0e:7e:2d: 29:c3:04:8c:a8:3d:81:da:ab:46:06:c6:de:b4:0c:17:df:52: 6f:80:d1:c7:3b:10:23:a0:79:77:a2:48:a3:4f:bf:31:20:74: 6e:00:f2:62:b2:6f:29:35:05:d0:70:72:03:19:f2:b3:90:11: 01:d2:41:3a:77:af:25:d3:d8:1d:42:e2:9c:76:b9:2c:3f:f0: 01:98:ad:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBl1OmemG+JZfBW0qOSGCXvrqrlYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAwMDMwWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjZkNGQwZmQ5ZmQyOGM5OTc1ZDc1ZTRlMDIxNjRlZTdl NDdhODFhMDYwY2NjNWM3MTJmNzIzYTI4OWIxOThmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIeDkbEhMJd+jegvze+aZmzG/ibZpyY78x95X94YifLLco rm0Re2/G536lJMXdTbGjj714eNnvej5r34L0y9nqRRM0InOSnZEVidA10sfl4rjA ClzpuESh3rR+PXTBptp344UTLWGZW41Dvey4YDbM0QNlHwMJ0gMmrtL8HTMQNUKI H/JSHOfGvhkXLrQIT5A0CC4HVRfsVX2cNJSvA19AoV2gs7ktEO8vdMrHH8gu8b8M 6rqUm9uekdO7CJ7mChx+ihbPQxSa5gTxdk1EBkxo2tUz6iDkxRvaXxXNfce6uap3 iAvOU3LSk+NeaZNNGeR/IaDq5YEBSRVayaHmgYSjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+a6dBb+NXGmwCab7jdfZt2Noh5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhZWM2NDViLWY5OTEtNGE2Yy05N2ZmLTQ3Y2Q0OTE0MjhjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl3AwDQYJKoZIhvcNAQELBQADggEBANaBcc/2T8O2jCzAjC+Qqn6+JQHm ouTzFNTNZvrsj1l5AI9dV27AOzdf+OjFKXebfqFiRjSN8N+XK2C6MU64tuBruKdF qDWErk9ZMpemG0WyYE9nCTJY9kYfhJJ+WNSpu39k86U0CfAZt4wgpI8nC5RcR/EE oz1QYg+W3D43MM3/8U0+RoBQwvnsVDDnVn7UFIRBe6fQuo3dVUUAmjz+s3RTnnD6 PjyMKSbAltbCetKScQ5+LSnDBIyoPYHaq0YGxt60DBffUm+A0cc7ECOgeXeiSKNP vzEgdG4A8mKybyk1BdBwcgMZ8rOQEQHSQTp3ryXT2B1C4px2uSw/8AGYrWc= -----END CERTIFICATE-----Generated at Wed May 13 03:21:32 2026 by rpki-client