$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa File: 06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa (raw, json) Hash identifier: 2n70gCpX7Y3vTMSeTB8IsyNvHMTDGY24rmAGV80fiDE= Subject key identifier: 66:A8:01:FD:42:4C:73:8B:1F:80:F9:81:B3:CD:EC:30:1E:0C:EA:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F892DDCF8314CA30C9DDA554239CEC540B0A6BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa Signing time: Fri 01 May 2026 00:40:54 +0000 ROA not before: Fri 01 May 2026 00:40:54 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:89:2d:dc:f8:31:4c:a3:0c:9d:da:55:42:39:ce:c5:40:b0:a6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:40:54 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=3687f6d895207c37f706ed23ef7aed175827882e73ab4b62e4eca4e6a1d2d4e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:e1:74:ac:3a:a4:0c:40:e6:27:d4:bb:4e: 8c:69:da:0d:5a:5b:82:0d:68:17:f0:e2:8c:bc:a1: 0d:e8:37:ae:12:17:be:3f:12:16:2f:60:80:bd:35: b2:07:b0:37:c6:21:0b:75:76:a0:39:da:c5:24:37: 2b:a9:68:18:c4:b5:67:55:0e:01:30:15:58:4a:1c: 92:6a:55:a7:bf:07:65:71:63:97:8e:66:8e:55:4c: 35:a7:4b:96:22:be:4d:c0:c1:50:d0:a5:36:ad:e5: 8d:f2:6a:fc:0f:14:dc:d7:79:15:36:fb:a3:79:a7: 7d:a8:6a:11:11:e1:a6:15:6f:c7:ad:cb:cc:57:fb: f3:d9:42:f4:40:78:9d:0b:18:8e:bd:f4:60:4d:51: ce:6d:84:2d:2e:a2:19:a1:84:75:3f:2a:f1:0e:f0: c9:b9:05:2d:2d:c5:03:a4:53:8c:7f:4e:70:a7:71: 68:43:64:c2:df:a9:c0:49:91:48:77:f1:d5:f5:26: 61:4c:db:df:ec:d2:47:a4:53:5f:89:31:a3:88:91: b5:35:af:30:b0:06:1e:bf:90:43:5c:9b:dd:cc:a5: f4:f6:2f:e7:60:d1:a1:34:18:90:2a:1c:2a:59:e5: 94:15:05:2a:45:9a:93:28:e7:64:13:ef:e7:3a:d9: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:01:FD:42:4C:73:8B:1F:80:F9:81:B3:CD:EC:30:1E:0C:EA:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.141.0/24 Signature Algorithm: sha256WithRSAEncryption 33:8b:40:36:7f:58:29:7b:7d:00:92:d5:7b:84:c1:87:cd:45: 3d:60:d2:8b:1a:2e:f2:d2:4a:ef:21:0d:6d:be:a6:0d:aa:db: 77:77:b6:51:96:9d:63:42:0b:b8:6c:86:35:35:78:5d:b9:5a: f8:2c:0a:2f:cf:8c:dc:92:32:35:67:9f:fd:40:66:48:19:ba: e7:ca:7f:4b:8c:c8:73:01:f2:17:4f:bf:6e:43:7e:4c:2d:69: fa:0a:fc:b7:52:ae:1f:36:3d:60:7d:b2:ae:ce:36:80:6a:c3: a8:c4:a4:9c:cd:40:a9:ac:46:f5:89:23:5d:6b:11:4b:b6:1a: 72:5d:fe:75:65:7d:cb:d2:72:5b:e0:a1:27:0a:ee:38:c2:c5: 84:1c:bf:6f:8e:ff:ae:2a:e4:fc:7d:d9:75:4f:2a:7a:39:61: a8:d2:3d:04:81:76:26:0a:90:eb:c2:ed:a4:d7:f6:85:d5:98: d0:9c:39:c4:c8:a8:e9:29:bb:ce:a2:48:f1:dc:e1:34:1a:8a: 22:76:ef:1d:2a:ab:2f:5a:8f:b5:f5:60:f7:c5:c8:fb:97:34: 94:c9:d2:7a:73:b8:ed:bd:58:b6:da:ec:e9:27:c7:72:fd:33: 71:c3:0e:37:1b:90:57:ea:f0:d1:1a:d6:a4:8b:66:63:ba:74: 27:af:c5:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD4kt3PgxTKMMndpVQjnOxUCwpr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA0MDU0WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjg3ZjZkODk1MjA3YzM3ZjcwNmVkMjNlZjdhZWQxNzU4 Mjc4ODJlNzNhYjRiNjJlNGVjYTRlNmExZDJkNGU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqb+F0rDqkDEDmJ9S7Toxp2g1aW4INaBfw4oy8oQ3oN64S F74/EhYvYIC9NbIHsDfGIQt1dqA52sUkNyupaBjEtWdVDgEwFVhKHJJqVae/B2Vx Y5eOZo5VTDWnS5Yivk3AwVDQpTat5Y3yavwPFNzXeRU2+6N5p32oahER4aYVb8et y8xX+/PZQvRAeJ0LGI699GBNUc5thC0uohmhhHU/KvEO8Mm5BS0txQOkU4x/TnCn cWhDZMLfqcBJkUh38dX1JmFM29/s0kekU1+JMaOIkbU1rzCwBh6/kENcm93MpfT2 L+dg0aE0GJAqHCpZ5ZQVBSpFmpMo52QT7+c62XpxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZqgB/UJMc4sfgPmBs83sMB4M6jkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2YzE0MmFlLTBlOGItNDkyNS05ZWE3LWU5ZDJlN2YzYmZiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTY0wDQYJKoZIhvcNAQELBQADggEBADOLQDZ/WCl7fQCS1XuEwYfNRT1g 0osaLvLSSu8hDW2+pg2q23d3tlGWnWNCC7hshjU1eF25WvgsCi/PjNySMjVnn/1A ZkgZuufKf0uMyHMB8hdPv25DfkwtafoK/LdSrh82PWB9sq7ONoBqw6jEpJzNQKms RvWJI11rEUu2GnJd/nVlfcvSclvgoScK7jjCxYQcv2+O/64q5Px92XVPKno5YajS PQSBdiYKkOvC7aTX9oXVmNCcOcTIqOkpu86iSPHc4TQaiiJ27x0qqy9aj7X1YPfF yPuXNJTJ0npzuO29WLba7Oknx3L9M3HDDjcbkFfq8NEa1qSLZmO6dCevxWM= -----END CERTIFICATE-----Generated at Mon May 4 22:21:47 2026 by rpki-client