$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dad9f45-acf7-4b6d-8866-d2eda5e4d8d0.roa File: 9dad9f45-acf7-4b6d-8866-d2eda5e4d8d0.roa (raw, json) Hash identifier: e94ryBSM+LgFmb+FrVItKi9qgCh2s9D1dLocKj1LAHo= Subject key identifier: 21:85:5E:55:5C:C0:9D:55:81:BE:B9:3A:A6:D5:63:DF:2A:8B:11:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74663EB844154B485EA4EEA3878BD6405CDDE6ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dad9f45-acf7-4b6d-8866-d2eda5e4d8d0.roa Signing time: Tue 12 May 2026 01:30:45 +0000 ROA not before: Tue 12 May 2026 01:30:45 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:66:3e:b8:44:15:4b:48:5e:a4:ee:a3:87:8b:d6:40:5c:dd:e6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:30:45 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=6c9a21e4956530279e91c93f835d67d65d482284792f5e053eea1b2af0fbb472, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:d5:54:fd:35:29:72:8e:0b:ea:21:49:20: 0f:47:7d:0a:9f:b8:18:3f:01:f6:7d:13:e6:7d:2f: 99:8f:0d:13:e3:05:57:57:d7:97:9a:95:4f:5d:68: fd:72:ce:88:1e:08:24:92:25:22:df:2f:65:36:e3: da:d7:ac:e0:5b:5a:60:89:92:1b:70:d5:5f:9c:aa: 67:48:ed:36:c1:2b:ec:f5:f4:37:b0:c9:4b:ea:f6: 47:5e:50:38:29:1f:32:96:ce:4f:b3:25:7f:5e:59: da:9a:1b:e4:7e:7d:e3:65:5b:7e:32:3c:61:91:bb: 16:cb:0d:ce:a7:dc:c7:c8:c8:04:65:04:c0:e1:64: 91:c5:4d:ab:39:34:64:7f:61:3e:0f:ce:29:22:2b: 4d:a1:c1:33:e0:3d:c9:de:55:8d:07:a5:ed:02:32: 08:29:68:b7:30:3c:30:77:6f:b9:4f:15:5c:f9:c3: 59:f8:86:34:67:3c:2d:05:e3:ce:84:f1:82:ad:c2: ca:62:50:29:05:db:91:9a:33:2c:19:5a:e5:40:1d: 9e:fc:61:b7:8e:8e:11:53:c7:2d:1d:b3:fe:9e:e5: f2:32:b2:a2:d7:04:13:a7:35:9b:d2:51:c0:22:69: 17:7d:5c:c4:c4:8b:c6:5b:c0:7e:a2:e2:61:a5:0f: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:85:5E:55:5C:C0:9D:55:81:BE:B9:3A:A6:D5:63:DF:2A:8B:11:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dad9f45-acf7-4b6d-8866-d2eda5e4d8d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.133.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:58:b3:0d:0b:49:fd:19:25:03:4b:f0:76:8e:50:60:9d:e7: 0e:6c:9f:0e:3b:c9:cb:17:3c:7f:a0:df:3b:37:3a:b2:79:58: 2e:75:00:48:95:ce:58:f7:56:ab:35:9b:0d:67:5e:f5:69:c1: 6d:36:51:0f:36:fc:39:e0:09:1f:2b:86:33:90:89:d4:0e:0f: f7:50:9d:3b:e6:5a:eb:c2:22:b0:f4:95:13:09:08:4f:26:f0: a7:94:e8:53:95:7c:0b:f8:72:d1:cd:6f:97:4a:a4:b1:41:94: b2:04:d4:8b:c9:42:d3:ea:d3:76:59:4f:c7:56:c4:a9:59:24: 84:4f:3d:51:43:7e:40:3b:0b:f4:5a:d0:43:86:aa:30:1b:af: 5f:87:66:1f:ce:cc:df:ab:ff:c1:3e:59:4c:a2:20:87:4b:4e: 47:90:e4:99:3a:cc:be:79:8a:f8:b7:a4:32:eb:e6:08:a1:c0: 2b:94:49:25:66:b7:56:67:b0:eb:e8:44:66:52:a8:0f:a8:76: 84:15:77:70:68:c9:3f:ab:fd:c9:b5:0c:3f:e9:d8:79:dc:54: 0d:93:a4:33:0f:5b:76:33:3b:8b:f9:95:3c:c3:4b:e8:40:34: 93:80:28:46:ae:4f:a6:db:79:36:db:59:b4:96:3b:49:5a:cf: fd:55:31:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdGY+uEQVS0hepO6jh4vWQFzd5u0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMDQ1WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzlhMjFlNDk1NjUzMDI3OWU5MWM5M2Y4MzVkNjdkNjVk NDgyMjg0NzkyZjVlMDUzZWVhMWIyYWYwZmJiNDcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO3dVU/TUpco4L6iFJIA9HfQqfuBg/AfZ9E+Z9L5mPDRPj BVdX15ealU9daP1yzogeCCSSJSLfL2U249rXrOBbWmCJkhtw1V+cqmdI7TbBK+z1 9DewyUvq9kdeUDgpHzKWzk+zJX9eWdqaG+R+feNlW34yPGGRuxbLDc6n3MfIyARl BMDhZJHFTas5NGR/YT4PzikiK02hwTPgPcneVY0Hpe0CMggpaLcwPDB3b7lPFVz5 w1n4hjRnPC0F486E8YKtwspiUCkF25GaMywZWuVAHZ78YbeOjhFTxy0ds/6e5fIy sqLXBBOnNZvSUcAiaRd9XMTEi8ZbwH6i4mGlD/n5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIYVeVVzAnVWBvrk6ptVj3yqLERAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkYWQ5ZjQ1LWFjZjctNGI2ZC04ODY2LWQyZWRhNWU0ZDhkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKroUwDQYJKoZIhvcNAQELBQADggEBACtYsw0LSf0ZJQNL8HaOUGCd5w5s nw47ycsXPH+g3zs3OrJ5WC51AEiVzlj3Vqs1mw1nXvVpwW02UQ82/DngCR8rhjOQ idQOD/dQnTvmWuvCIrD0lRMJCE8m8KeU6FOVfAv4ctHNb5dKpLFBlLIE1IvJQtPq 03ZZT8dWxKlZJIRPPVFDfkA7C/Ra0EOGqjAbr1+HZh/OzN+r/8E+WUyiIIdLTkeQ 5Jk6zL55ivi3pDLr5gihwCuUSSVmt1ZnsOvoRGZSqA+odoQVd3BoyT+r/cm1DD/p 2HncVA2TpDMPW3YzO4v5lTzDS+hANJOAKEauT6bbeTbbWbSWO0laz/1VMVI= -----END CERTIFICATE-----Generated at Wed May 13 00:42:09 2026 by rpki-client