$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa File: 98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa (raw, json) Hash identifier: WhCrB+MDdjW6Uc9ni+284eGarrP6z7fSvKBwLQN5isE= Subject key identifier: 01:A8:F3:04:D5:DC:8E:E5:BA:F3:89:7D:6A:9E:10:1C:5D:56:81:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 397096B1B22D3D929185B8F6C9E30553F6B8E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa Signing time: Sat 09 May 2026 00:21:33 +0000 ROA not before: Sat 09 May 2026 00:21:33 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 124.24.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:70:96:b1:b2:2d:3d:92:91:85:b8:f6:c9:e3:05:53:f6:b8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:21:33 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=8fe9d8676314d68f78701d9e0fa4a94fd42832c8c3e7c5caec1ac281777ac3c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:1a:12:ff:63:5d:36:81:19:d3:35:90:c1: f0:78:42:7a:71:99:90:ee:ef:24:2f:e1:52:ba:ec: 5f:1f:46:03:4a:87:30:8f:c0:87:60:f3:c2:55:09: 35:20:07:4f:80:b6:23:ee:7d:6d:ea:7f:d2:fc:eb: 08:37:4a:81:f7:0e:3c:48:f9:70:4f:3a:64:54:5c: 02:c9:0b:9a:3f:4f:f5:b3:40:5b:2f:b1:84:b8:b1: 6e:aa:e7:f3:bd:f0:f5:c9:12:9f:ff:ab:40:74:cb: 4b:69:bb:7b:7f:b7:02:e7:7f:6c:7d:38:a2:92:d8: 97:0b:64:d0:f6:a2:1b:72:5b:e1:20:d9:f5:06:5c: 10:04:67:12:35:d3:cc:c6:d5:8f:a6:1e:a0:f9:e5: 7f:45:e9:8d:20:39:31:6e:ea:6c:62:11:4b:74:ab: a4:d5:09:1b:be:4e:2d:ed:b3:79:9f:cf:6f:ea:39: b5:aa:ee:16:34:4b:f7:1d:d5:0a:7f:91:6f:86:d2: 6a:18:db:7e:b7:aa:f3:41:3e:0f:80:71:aa:8e:de: 4d:81:96:f2:92:d4:02:d5:60:1a:a9:94:bb:4b:32: 58:34:ec:35:5a:96:47:e2:be:45:68:9b:eb:cc:5b: d8:55:86:b2:12:9c:df:cf:76:f9:9b:43:ac:e9:fb: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A8:F3:04:D5:DC:8E:E5:BA:F3:89:7D:6A:9E:10:1C:5D:56:81:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.24.192.0/18 Signature Algorithm: sha256WithRSAEncryption be:c9:f4:5e:85:7f:b2:64:a7:5f:ff:ed:cb:d6:0c:13:90:12: 7e:cb:c6:73:aa:f3:a0:94:d6:55:c2:da:b7:0f:76:32:4f:82: f1:a3:2c:32:1e:80:22:0e:c2:8a:05:f0:6a:f6:21:de:8a:31: 0e:4d:5f:55:74:a5:7c:77:a2:a0:0a:7f:d8:ce:8c:58:fc:87: 7c:5f:06:cc:c1:a3:3d:08:d4:bc:fd:46:22:5b:26:58:58:2b: 57:d7:0c:39:4d:49:e5:8b:70:01:54:65:6c:27:88:5a:a1:45: 4e:94:1d:f1:07:da:65:6c:a9:29:25:9c:d3:67:67:14:bd:a2: 22:1e:90:ef:3b:c1:94:af:16:1f:6b:bd:5a:78:ac:ed:c2:0f: f5:fa:b0:23:83:6e:7d:4a:10:4d:9b:54:24:c3:9e:67:25:e7: d2:b5:2a:7f:c5:76:a1:a0:d0:ab:10:c1:3f:cc:08:89:1e:3a: e8:88:c1:79:c2:c1:aa:b5:60:63:37:4e:5b:d8:9f:78:ad:5a: a9:25:ee:7d:f3:2f:4d:16:95:96:7a:14:06:83:27:1f:ed:b7: 29:0b:8c:28:c0:be:0a:0f:70:ec:66:7c:cd:4e:e2:d8:79:68: 40:be:d5:48:88:cf:2a:48:fd:43:9f:dd:c0:80:c1:8d:c3:1a: 18:59:a2:0f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOXCWsbItPZKRhbj2yeMFU/a45DANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA1MDkwMDIxMzNaFw0yNjA4MDcyMzU5NTla MHoxSTBHBgNVBAUTQDhmZTlkODY3NjMxNGQ2OGY3ODcwMWQ5ZTBmYTRhOTRmZDQy ODMyYzhjM2U3YzVjYWVjMWFjMjgxNzc3YWMzYzIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAN5fGhL/Y102gRnTNZDB8HhCenGZkO7vJC/hUrrsXx9GA0qH MI/Ah2DzwlUJNSAHT4C2I+59bep/0vzrCDdKgfcOPEj5cE86ZFRcAskLmj9P9bNA Wy+xhLixbqrn873w9ckSn/+rQHTLS2m7e3+3Aud/bH04opLYlwtk0PaiG3Jb4SDZ 9QZcEARnEjXTzMbVj6YeoPnlf0XpjSA5MW7qbGIRS3SrpNUJG75OLe2zeZ/Pb+o5 taruFjRL9x3VCn+Rb4bSahjbfreq80E+D4Bxqo7eTYGW8pLUAtVgGqmUu0syWDTs NVqWR+K+RWib68xb2FWGshKc3892+ZtDrOn7+wECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQBqPME1dyO5brziX1qnhAcXVaB6jAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvOThiNWJmZjEtNDFjNC00MTQxLTkyZmItMjBlNWQ4NjAwZjdlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBnwYwDANBgkqhkiG9w0BAQsFAAOCAQEAvsn0XoV/smSnX//ty9YME5ASfsvG c6rzoJTWVcLatw92Mk+C8aMsMh6AIg7CigXwavYh3ooxDk1fVXSlfHeioAp/2M6M WPyHfF8GzMGjPQjUvP1GIlsmWFgrV9cMOU1J5YtwAVRlbCeIWqFFTpQd8QfaZWyp KSWc02dnFL2iIh6Q7zvBlK8WH2u9Wnis7cIP9fqwI4NufUoQTZtUJMOeZyXn0rUq f8V2oaDQqxDBP8wIiR466IjBecLBqrVgYzdOW9ifeK1aqSXuffMvTRaVlnoUBoMn H+23KQuMKMC+Cg9w7GZ8zU7i2HloQL7VSIjPKkj9Q5/dwIDBjcMaGFmiDw== -----END CERTIFICATE-----Generated at Tue May 12 21:54:57 2026 by rpki-client