$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa File: d4afba84-8d51-440d-a653-037c4b7ea55e.roa (raw, json) Hash identifier: qXYi6CDIAnEtCQqnbd2EEXF/U3F7AkLSGMf2bjovm30= Subject key identifier: 79:AB:49:81:B6:45:35:E9:90:4F:82:FD:57:90:5C:86:39:C8:87:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48488066F6C593ACD618FF9D8C4B3335D5E01942 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa Signing time: Wed 06 May 2026 00:00:31 +0000 ROA not before: Wed 06 May 2026 00:00:31 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 99.151.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:48:80:66:f6:c5:93:ac:d6:18:ff:9d:8c:4b:33:35:d5:e0:19:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:00:31 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=d1dac5c160f218f484b76018d9f3d56fb5a21a3e5f8f300882ebffec7b3ef308, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:5c:4c:fc:b5:64:d2:56:65:e8:c4:1a:f6: 85:a6:25:bf:a9:aa:d0:42:fb:b2:59:b8:b9:30:7d: bb:ef:37:3b:38:c9:13:ff:a4:6f:d8:78:89:61:db: a0:0d:be:ff:1a:0a:60:b0:d5:65:e9:88:24:da:7f: 70:3c:c7:ed:85:83:8c:d8:0a:39:43:28:89:0d:4f: ff:8b:83:b1:4c:ef:f0:02:b5:0b:cd:a3:4a:7f:ec: b3:b6:db:c7:5e:17:67:e3:b4:25:9d:11:1e:7d:25: 2c:0f:e1:37:bc:20:19:ee:c8:23:52:89:bd:1e:a4: 44:10:25:ad:0e:11:7a:e5:63:3c:57:98:07:ec:e4: f8:4a:9e:b0:d8:31:eb:6d:d4:88:32:d3:31:6d:3b: f9:d8:18:af:53:ff:96:be:3e:54:35:61:68:08:d0: b6:f4:36:03:8b:ff:88:4a:c0:1e:81:b0:82:3d:0c: c1:cb:3a:1f:5e:e9:b2:f9:62:ad:f4:87:df:1b:8d: c5:8d:05:2f:f1:30:cd:7e:e8:90:86:e7:28:58:28: 7d:3d:4e:81:f5:7e:44:05:60:16:d4:3d:89:5b:f9: 06:dc:92:ca:17:8b:7b:9f:4f:5a:49:2c:6c:a2:dd: 6e:88:c6:ae:b9:d2:0a:e7:a5:63:7c:9c:00:68:61: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AB:49:81:B6:45:35:E9:90:4F:82:FD:57:90:5C:86:39:C8:87:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.96.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:11:2c:97:2f:95:c9:23:0e:eb:53:98:db:fa:bb:2b:4e:a1: e5:b2:ed:3a:be:e6:f8:7c:0f:c5:5d:ca:43:14:8e:58:0b:78: 57:4a:0b:ae:9c:52:8f:89:69:ec:ad:c3:24:7d:2c:6d:e1:fd: 32:4d:55:e4:b5:8a:10:62:82:36:a8:08:78:03:1b:c5:93:e1: 2f:40:52:9d:4f:ff:f7:81:9c:85:92:3c:36:f5:3c:87:5c:29: c0:49:56:6e:5b:24:4e:65:5d:fa:51:cb:49:fa:e8:d1:a4:d3: 54:10:f4:f5:cd:4b:72:fd:75:35:c7:f8:8a:8c:e2:db:d9:27: e7:e9:ed:0b:8d:59:3a:42:8e:da:b4:06:fa:b8:9f:ff:50:4a: ee:ad:74:73:fb:91:58:51:41:b1:e3:eb:c6:8c:07:ab:c1:5c: fb:86:8c:36:9f:81:47:7d:fd:d1:3e:d4:c1:6f:71:59:34:1f: 52:2e:99:da:71:38:28:5f:c5:1e:c7:97:74:9c:75:b4:ae:ec: 5c:82:38:95:71:c7:94:78:f4:1c:54:6c:fc:6c:31:0e:b2:70: cc:7b:ee:e0:cb:7d:43:39:7a:a3:44:b6:01:69:67:81:32:ab: 72:57:70:1f:2f:61:38:58:cd:1d:0e:fa:6b:5d:de:30:43:88: ae:c5:77:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSEiAZvbFk6zWGP+djEszNdXgGUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAwMDMxWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMWRhYzVjMTYwZjIxOGY0ODRiNzYwMThkOWYzZDU2ZmI1 YTIxYTNlNWY4ZjMwMDg4MmViZmZlYzdiM2VmMzA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtG1xM/LVk0lZl6MQa9oWmJb+pqtBC+7JZuLkwfbvvNzs4 yRP/pG/YeIlh26ANvv8aCmCw1WXpiCTaf3A8x+2Fg4zYCjlDKIkNT/+Lg7FM7/AC tQvNo0p/7LO228deF2fjtCWdER59JSwP4Te8IBnuyCNSib0epEQQJa0OEXrlYzxX mAfs5PhKnrDYMett1Igy0zFtO/nYGK9T/5a+PlQ1YWgI0Lb0NgOL/4hKwB6BsII9 DMHLOh9e6bL5Yq30h98bjcWNBS/xMM1+6JCG5yhYKH09ToH1fkQFYBbUPYlb+Qbc ksoXi3ufT1pJLGyi3W6Ixq650grnpWN8nABoYf/FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeatJgbZFNemQT4L9V5BchjnIhw8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0YWZiYTg0LThkNTEtNDQwZC1hNjUzLTAzN2M0YjdlYTU1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl2AwDQYJKoZIhvcNAQELBQADggEBAB4RLJcvlckjDutTmNv6uytOoeWy 7Tq+5vh8D8VdykMUjlgLeFdKC66cUo+JaeytwyR9LG3h/TJNVeS1ihBigjaoCHgD G8WT4S9AUp1P//eBnIWSPDb1PIdcKcBJVm5bJE5lXfpRy0n66NGk01QQ9PXNS3L9 dTXH+IqM4tvZJ+fp7QuNWTpCjtq0Bvq4n/9QSu6tdHP7kVhRQbHj68aMB6vBXPuG jDafgUd9/dE+1MFvcVk0H1IumdpxOChfxR7Hl3ScdbSu7FyCOJVxx5R49BxUbPxs MQ6ycMx77uDLfUM5eqNEtgFpZ4Eyq3JXcB8vYThYzR0O+mtd3jBDiK7FdxA= -----END CERTIFICATE-----Generated at Wed May 13 00:24:14 2026 by rpki-client