$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99490612-a8ab-4fe3-85a1-e0086c7397d3.roa File: 99490612-a8ab-4fe3-85a1-e0086c7397d3.roa (raw, json) Hash identifier: pY+xCMNQQ4OXlfQO/Cka//bs03r5huWhZM5cuYIL9wQ= Subject key identifier: CD:C5:40:CE:D6:90:CE:D2:94:A0:1D:8E:B5:37:DC:D4:A2:08:E8:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21B30B421DDCD21EA464E5DD489D90EA4CA71C38 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99490612-a8ab-4fe3-85a1-e0086c7397d3.roa Signing time: Tue 12 May 2026 21:46:50 +0000 ROA not before: Tue 12 May 2026 21:46:50 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 63.249.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b3:0b:42:1d:dc:d2:1e:a4:64:e5:dd:48:9d:90:ea:4c:a7:1c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 21:46:50 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=b6bc885fea76c043ad42cc315a491098bc3b9587fa916233dd98624b99ae6732, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f3:82:55:43:9e:0f:05:37:bb:ed:c8:c7:0d: 76:a0:8e:ea:f6:34:78:5a:08:88:da:ed:35:a9:b3: 67:b9:2b:f1:f2:f9:48:2e:1f:c5:d1:f5:df:69:d8: 7e:b1:b5:89:b1:91:60:7f:5a:a7:3d:9d:c1:64:76: 96:03:7f:a4:2f:f1:7f:44:e9:80:68:85:e0:f3:7e: bc:be:64:7b:b9:63:ab:5a:17:00:58:03:d0:13:24: 01:4b:9e:21:47:be:6d:f4:31:0a:a3:91:4a:ba:46: b1:76:f5:81:ba:60:99:c8:15:38:32:ec:cc:bd:e8: bc:2a:de:0d:08:62:b3:ba:58:96:a7:6c:97:4d:46: 66:67:3f:60:24:09:b6:5c:97:e3:19:33:36:72:b9: 0f:27:85:75:81:55:64:a4:d2:04:4c:20:dd:db:a7: 9d:75:58:a5:33:ce:f5:2b:26:3b:03:7f:3f:84:f7: b7:eb:2c:01:9c:bb:e8:90:9d:26:29:ec:d5:02:0a: fb:3f:cf:53:8e:34:50:38:3a:87:c6:3d:57:32:d2: be:85:c9:88:1e:91:96:9f:6b:a3:0e:7e:6c:c0:64: 3d:46:e1:1b:45:04:36:4d:98:a5:01:f8:6e:81:20: d4:84:da:8b:c7:55:88:3a:8c:2b:24:7f:0a:11:0b: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C5:40:CE:D6:90:CE:D2:94:A0:1D:8E:B5:37:DC:D4:A2:08:E8:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99490612-a8ab-4fe3-85a1-e0086c7397d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.249.192.0/19 Signature Algorithm: sha256WithRSAEncryption 96:e3:6e:27:a0:23:63:c0:3f:8f:48:ad:7c:64:60:36:08:40: d1:b3:dd:c7:e4:80:55:80:49:1a:d7:7a:55:16:92:6b:bb:c2: 71:68:89:d2:57:48:de:49:a9:36:12:29:2b:6c:83:31:fd:a9: 2a:6e:d0:98:3f:a0:81:e8:5c:15:69:7b:10:2f:29:d3:75:a6: 6b:55:0d:63:ca:5b:bf:7c:71:70:03:aa:d6:49:2c:bf:b9:3d: 13:b8:50:82:55:65:ba:f1:61:d9:f6:28:ba:d4:e2:f8:54:70: 29:2d:04:39:6b:07:8c:ea:87:f0:db:1d:26:a7:ca:45:34:8b: 46:b7:7a:a0:bd:18:cd:a0:cd:4b:6c:fa:ee:de:82:9c:50:a4: a2:a7:3d:fe:41:66:69:17:08:4f:21:00:1f:4a:f8:ee:2f:fe: 0b:d5:04:97:c6:4c:b5:54:61:ca:d0:9f:32:b9:c8:7e:81:7c: f0:44:ca:3d:51:11:b0:ad:43:16:60:37:3f:35:40:6e:ed:a2: a4:5f:de:05:b6:3a:b3:fe:fd:d0:f1:52:0a:ba:9d:28:a0:64: 44:97:3d:9f:e4:b2:05:8e:5c:a7:f2:2e:fc:45:7d:a1:00:50: 47:3f:2e:27:4a:94:76:81:fc:c9:5f:1b:8e:d9:31:cc:af:dc: 29:85:3a:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIbMLQh3c0h6kZOXdSJ2Q6kynHDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMjE0NjUwWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmJjODg1ZmVhNzZjMDQzYWQ0MmNjMzE1YTQ5MTA5OGJj M2I5NTg3ZmE5MTYyMzNkZDk4NjI0Yjk5YWU2NzMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDu84JVQ54PBTe77cjHDXagjur2NHhaCIja7TWps2e5K/Hy +UguH8XR9d9p2H6xtYmxkWB/Wqc9ncFkdpYDf6Qv8X9E6YBoheDzfry+ZHu5Y6ta FwBYA9ATJAFLniFHvm30MQqjkUq6RrF29YG6YJnIFTgy7My96Lwq3g0IYrO6WJan bJdNRmZnP2AkCbZcl+MZMzZyuQ8nhXWBVWSk0gRMIN3bp511WKUzzvUrJjsDfz+E 97frLAGcu+iQnSYp7NUCCvs/z1OONFA4OofGPVcy0r6FyYgekZafa6MOfmzAZD1G 4RtFBDZNmKUB+G6BINSE2ovHVYg6jCskfwoRCxJxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzcVAztaQztKUoB2OtTfc1KII6EYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5NDkwNjEyLWE4YWItNGZlMy04NWExLWUwMDg2YzczOTdkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU/+cAwDQYJKoZIhvcNAQELBQADggEBAJbjbiegI2PAP49IrXxkYDYIQNGz 3cfkgFWASRrXelUWkmu7wnFoidJXSN5JqTYSKStsgzH9qSpu0Jg/oIHoXBVpexAv KdN1pmtVDWPKW798cXADqtZJLL+5PRO4UIJVZbrxYdn2KLrU4vhUcCktBDlrB4zq h/DbHSanykU0i0a3eqC9GM2gzUts+u7egpxQpKKnPf5BZmkXCE8hAB9K+O4v/gvV BJfGTLVUYcrQnzK5yH6BfPBEyj1REbCtQxZgNz81QG7toqRf3gW2OrP+/dDxUgq6 nSigZESXPZ/ksgWOXKfyLvxFfaEAUEc/LidKlHaB/MlfG47ZMcyv3CmFOuo= -----END CERTIFICATE-----Generated at Wed May 13 06:38:26 2026 by rpki-client