$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5d436bf-56a2-46f1-953f-169e0b481dd0.roa File: c5d436bf-56a2-46f1-953f-169e0b481dd0.roa (raw, json) Hash identifier: 4qnWWMdSSeEbmxuwGs8qygDE8vy4OHZkOzcCHD+U6CY= Subject key identifier: 7F:72:4D:24:D2:98:81:8E:FB:E9:21:91:D2:0D:32:A6:FB:38:0A:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08CB39F726CC42DA4B232E8643973C2A7388635C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5d436bf-56a2-46f1-953f-169e0b481dd0.roa Signing time: Mon 04 May 2026 01:00:49 +0000 ROA not before: Mon 04 May 2026 01:00:49 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cb:39:f7:26:cc:42:da:4b:23:2e:86:43:97:3c:2a:73:88:63:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 01:00:49 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=b730b3437eb0bce838db99da447ae7dd8ec83a4746d5720c3bb9ab042969e6de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:68:9b:c7:66:a0:fa:04:30:00:2d:57:4e: e3:7b:df:39:ae:70:bb:ac:62:49:22:55:6b:6a:3c: b5:cf:c3:f6:db:a0:74:d0:1a:44:49:55:20:6e:9a: 0c:e8:a7:4f:ef:1b:69:4d:1b:c5:73:3f:b2:9f:a0: c0:bc:5f:ae:bd:28:d4:0e:09:8f:f9:a8:4a:8c:81: ea:c3:8c:c0:2c:44:c7:ca:e8:52:02:08:61:6f:d8: ce:12:23:68:81:b8:a6:50:a2:bd:0c:84:02:71:83: 0d:d1:51:b5:c6:7c:22:c9:5f:76:a9:87:34:79:c4: ff:fa:8c:08:cd:fd:2e:a7:41:f4:2f:e2:e4:63:bc: 6c:5d:d8:1f:3b:cc:81:37:ce:0a:08:45:0d:c8:78: 53:09:9f:89:de:db:b1:3b:ad:81:e9:10:28:51:41: 7b:25:80:4a:47:e3:c0:cf:2a:5f:83:ba:e4:b5:fb: e1:22:0a:de:68:c4:60:c6:58:72:2d:49:9b:5c:cd: b3:ab:d2:3a:69:96:70:89:bc:a9:9d:97:39:c3:7d: be:df:bf:b5:91:22:3a:53:cd:62:30:ea:42:17:62: b0:e6:4c:bf:86:5b:f8:69:e6:1b:75:e4:9e:ab:ea: a4:e1:d9:ed:03:a2:ee:ee:d5:8a:06:3c:ca:52:bf: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:72:4D:24:D2:98:81:8E:FB:E9:21:91:D2:0D:32:A6:FB:38:0A:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5d436bf-56a2-46f1-953f-169e0b481dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:12:ec:9f:c3:9b:0f:ea:e9:1d:66:d1:f1:d8:91:7a:c4:a0: d5:54:f0:75:d4:96:bd:fb:4d:a4:6d:88:94:a7:cd:66:ff:5a: bc:42:e6:41:5a:80:f3:dd:ba:45:27:12:3d:b4:4d:b1:2d:0d: 05:55:6d:56:ae:a7:a4:f8:c7:e6:c5:a6:0b:27:24:54:7c:1d: 91:cc:31:fc:8d:db:c4:10:3a:5b:ff:61:19:0b:23:8b:ef:94: cf:c2:03:a3:25:19:ed:51:9e:16:4b:17:da:bf:a3:21:5a:98: 7a:e7:9e:12:d2:62:82:0e:a7:e6:a9:6a:7a:25:44:4f:dd:b2: 58:79:04:a9:85:e4:72:89:c0:38:a2:f8:5c:2b:87:e5:a8:45: 4b:d4:35:22:2e:ca:41:d7:2c:2e:db:7f:19:4e:f2:79:bd:68: c3:8d:34:8a:53:7c:1d:20:40:b3:fb:fd:a2:38:a7:7c:fe:9f: bd:16:e3:6e:46:e5:97:2a:26:09:55:28:41:34:5e:bb:69:50: 19:76:2f:d2:ce:ab:4a:8b:07:86:ce:59:3d:9a:c8:eb:f9:44: ce:35:38:90:86:08:7e:2c:cc:42:c5:fa:b5:51:94:95:94:40: c6:47:63:70:7d:35:a7:7b:ca:5b:60:95:bf:84:57:35:1a:6c: 6f:86:ae:2b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCMs59ybMQtpLIy6GQ5c8KnOIY1wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEwMDQ5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzMwYjM0MzdlYjBiY2U4MzhkYjk5ZGE0NDdhZTdkZDhl YzgzYTQ3NDZkNTcyMGMzYmI5YWIwNDI5NjllNmRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/3Wibx2ag+gQwAC1XTuN73zmucLusYkkiVWtqPLXPw/bb oHTQGkRJVSBumgzop0/vG2lNG8VzP7KfoMC8X669KNQOCY/5qEqMgerDjMAsRMfK 6FICCGFv2M4SI2iBuKZQor0MhAJxgw3RUbXGfCLJX3aphzR5xP/6jAjN/S6nQfQv 4uRjvGxd2B87zIE3zgoIRQ3IeFMJn4ne27E7rYHpEChRQXslgEpH48DPKl+DuuS1 ++EiCt5oxGDGWHItSZtczbOr0jpplnCJvKmdlznDfb7fv7WRIjpTzWIw6kIXYrDm TL+GW/hp5ht15J6r6qTh2e0Dou7u1YoGPMpSv2bZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUf3JNJNKYgY776SGR0g0ypvs4ClAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1ZDQzNmJmLTU2YTItNDZmMS05NTNmLTE2OWUwYjQ4MWRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCf5TANBgkqhkiG9w0BAQsFAAOCAQEAQxLsn8ObD+rpHWbR8diResSg1VTw ddSWvftNpG2IlKfNZv9avELmQVqA8926RScSPbRNsS0NBVVtVq6npPjH5sWmCyck VHwdkcwx/I3bxBA6W/9hGQsji++Uz8IDoyUZ7VGeFksX2r+jIVqYeueeEtJigg6n 5qlqeiVET92yWHkEqYXkconAOKL4XCuH5ahFS9Q1Ii7KQdcsLtt/GU7yeb1ow400 ilN8HSBAs/v9ojinfP6fvRbjbkbllyomCVUoQTReu2lQGXYv0s6rSosHhs5ZPZrI 6/lEzjU4kIYIfizMQsX6tVGUlZRAxkdjcH01p3vKW2CVv4RXNRpsb4auKw== -----END CERTIFICATE-----Generated at Wed May 13 07:18:49 2026 by rpki-client