$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa File: 9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa (raw, json) Hash identifier: eJl/onGdlXUdWvTMH2okCYfM9NXg3fYzzNHXubDa3tw= Subject key identifier: DB:94:E1:42:4D:E5:7F:92:A7:0D:45:67:57:AC:AC:97:19:D8:9A:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 301851BEFB2B511EF91AB2B8919DEC475327A9CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa Signing time: Wed 06 May 2026 00:30:46 +0000 ROA not before: Wed 06 May 2026 00:30:46 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:18:51:be:fb:2b:51:1e:f9:1a:b2:b8:91:9d:ec:47:53:27:a9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:30:46 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=13795ed29d2bded623ee1e090cf02ff5cb710c201f1d679b523c4c44b9e1b724, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:38:4c:49:a9:20:3e:7e:8d:02:05:09:ec: 75:be:ad:04:8c:6a:f7:5d:41:e5:a4:fa:16:32:2e: 2e:ca:17:18:58:b4:b2:fa:1d:f0:79:8b:1b:d5:45: d9:a3:8d:1f:a8:cf:06:dd:ba:c0:75:ad:fa:09:d6: bc:3b:5e:18:87:83:fa:f6:09:95:a0:cf:c6:cd:f6: 42:a0:0e:1d:63:45:89:88:c6:f0:76:06:4e:c6:24: bd:eb:74:2c:63:b1:d7:f2:38:29:f6:79:3f:2b:4a: 1e:af:55:d3:d0:36:6f:5d:a7:be:93:19:18:54:4e: b7:5e:a5:c7:a9:29:22:0e:d4:fe:52:91:ee:f5:0e: cf:45:26:2b:ab:18:e9:91:8b:e2:1b:d6:9f:31:c3: 18:63:d2:25:b4:d0:bd:22:32:c7:0c:a5:1b:ae:bb: b0:78:da:99:7c:03:73:a1:f7:8a:e1:b9:7b:69:3a: fd:a1:0a:59:9a:e8:36:ca:56:b3:88:74:0d:5f:8f: 5b:84:0f:25:bb:34:e0:3d:2c:eb:85:cf:81:0b:08: 57:6a:3c:bd:68:7a:7c:b1:4d:2f:80:a0:45:11:17: 45:5c:4e:1e:dd:82:ab:8a:d8:35:e0:7b:7f:af:b7: b5:f9:dc:56:5c:bb:88:54:0a:87:51:64:d5:b8:55: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:94:E1:42:4D:E5:7F:92:A7:0D:45:67:57:AC:AC:97:19:D8:9A:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.144.0/23 Signature Algorithm: sha256WithRSAEncryption 53:47:e3:98:83:73:3d:10:aa:40:d5:5d:64:4a:fe:fb:f0:d0: 99:3b:46:8f:ac:eb:fa:97:5b:71:52:1e:08:74:ab:f7:48:53: 36:43:25:dc:af:38:8f:5f:6d:50:a5:d1:6a:05:15:57:7c:4a: 50:62:75:cc:bc:22:ef:34:34:8d:21:d8:f6:ae:fa:0a:ea:f0: 28:c3:7d:22:16:e4:32:9e:63:31:bb:7a:63:cc:ec:ba:14:87: 56:50:e4:5a:b7:ee:90:32:55:ee:74:8f:7d:89:72:80:97:02: c3:e4:ea:b5:6b:aa:a3:dc:30:b3:3b:11:ab:10:a8:9d:1b:cb: 38:04:42:64:39:fd:75:1f:d6:d0:b5:95:d7:99:09:e3:30:30: de:01:ec:18:1a:b5:5d:b4:76:e8:60:d2:95:90:0a:6d:fd:bd: ed:77:d2:9f:79:40:ce:27:2e:be:97:8c:a9:6f:e2:20:0c:52: a1:36:1f:1d:d4:ab:17:83:2e:22:01:41:a2:c0:21:e0:f0:60: 71:b7:fa:04:0f:8e:0a:d1:6a:7b:16:67:74:ca:13:fc:e7:0f: 77:e3:27:20:db:18:ee:74:d1:ee:8c:d9:e9:aa:6c:df:bb:72: 65:52:89:da:43:dc:18:01:f6:d3:5d:3e:c3:c6:e0:97:6a:83: 57:a7:a4:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMBhRvvsrUR75GrK4kZ3sR1MnqcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAzMDQ2WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzc5NWVkMjlkMmJkZWQ2MjNlZTFlMDkwY2YwMmZmNWNi NzEwYzIwMWYxZDY3OWI1MjNjNGM0NGI5ZTFiNzI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfAjhMSakgPn6NAgUJ7HW+rQSMavddQeWk+hYyLi7KFxhY tLL6HfB5ixvVRdmjjR+ozwbdusB1rfoJ1rw7XhiHg/r2CZWgz8bN9kKgDh1jRYmI xvB2Bk7GJL3rdCxjsdfyOCn2eT8rSh6vVdPQNm9dp76TGRhUTrdepcepKSIO1P5S ke71Ds9FJiurGOmRi+Ib1p8xwxhj0iW00L0iMscMpRuuu7B42pl8A3Oh94rhuXtp Ov2hClma6DbKVrOIdA1fj1uEDyW7NOA9LOuFz4ELCFdqPL1oenyxTS+AoEURF0Vc Th7dgquK2DXge3+vt7X53FZcu4hUCodRZNW4VeFhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU25ThQk3lf5KnDUVnV6yslxnYmkQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmNzcyNmQ4LWNjYjYtNGYzNC1iOTYxLThiODY0ZTU1NjFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl5AwDQYJKoZIhvcNAQELBQADggEBAFNH45iDcz0QqkDVXWRK/vvw0Jk7 Ro+s6/qXW3FSHgh0q/dIUzZDJdyvOI9fbVCl0WoFFVd8SlBidcy8Iu80NI0h2Pau +grq8CjDfSIW5DKeYzG7emPM7LoUh1ZQ5Fq37pAyVe50j32JcoCXAsPk6rVrqqPc MLM7EasQqJ0byzgEQmQ5/XUf1tC1ldeZCeMwMN4B7BgatV20duhg0pWQCm39ve13 0p95QM4nLr6XjKlv4iAMUqE2Hx3UqxeDLiIBQaLAIeDwYHG3+gQPjgrRansWZ3TK E/znD3fjJyDbGO500e6M2emqbN+7cmVSidpD3BgB9tNdPsPG4Jdqg1enpBI= -----END CERTIFICATE-----Generated at Tue May 12 21:54:19 2026 by rpki-client