$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/190c6cc9-734c-41a5-9706-dba1a7420b77.roa File: 190c6cc9-734c-41a5-9706-dba1a7420b77.roa (raw, json) Hash identifier: 1NiwC6nHmkiAd+LMHUE4ZIWnlVhIgE+NhdGSAd1eStA= Subject key identifier: 51:10:70:B1:8A:D6:2B:0A:50:02:2F:B0:CB:24:B2:09:B4:B8:7C:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1921723D211FD325D40FA236B63228DD995934BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/190c6cc9-734c-41a5-9706-dba1a7420b77.roa Signing time: Tue 21 Apr 2026 20:49:43 +0000 ROA not before: Tue 21 Apr 2026 20:49:43 +0000 ROA not after: Mon 20 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 1.179.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:21:72:3d:21:1f:d3:25:d4:0f:a2:36:b6:32:28:dd:99:59:34:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 20:49:43 2026 GMT Not After : Jul 20 23:59:59 2026 GMT Subject: serialNumber=b2cb452a981ad007266b2453fe89c12bf0ba5507cbe694aded22960ff81eef68, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:ee:8b:23:25:77:ff:a5:82:28:4e:8d:f8: a8:67:e4:52:ec:df:a0:64:e8:9f:69:d8:a8:91:b7: f7:a7:5c:c1:89:ca:3f:fb:68:d1:b9:9f:b8:2a:d8: 7e:fa:dd:13:3b:1f:0a:aa:0f:8e:14:c9:4f:ed:44: d8:e7:6a:ea:2b:e3:e2:3f:1b:b4:d8:10:c5:0e:04: cd:07:59:0d:2a:90:71:ee:bd:32:14:e4:07:60:50: 97:d2:48:36:0d:bc:52:5a:2a:dd:8f:66:e6:da:e9: e2:2c:0d:65:94:ce:5b:95:a7:f5:7e:54:08:57:da: 06:4c:75:d7:11:ec:d2:2d:af:3a:1d:dd:03:d2:cf: f5:31:5c:15:cc:1e:8e:7a:a6:63:b2:63:33:68:69: 24:13:00:1e:5b:52:c0:57:7a:01:a5:bc:28:c4:31: 86:c1:e2:46:b3:c9:78:49:4e:d0:de:88:b9:80:c2: 56:3b:0c:e2:35:c3:77:18:f9:6d:67:70:cf:6f:d2: ca:64:bf:de:4d:2c:10:f4:84:e4:07:de:57:d7:9d: ff:78:08:f4:cc:2f:cb:ea:4b:43:84:8d:a6:d5:d8: 22:10:56:24:05:41:01:67:a8:ab:3b:4b:cb:0f:67: b7:89:4c:dc:18:c4:d4:14:cf:9c:ab:83:7f:38:13: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:10:70:B1:8A:D6:2B:0A:50:02:2F:B0:CB:24:B2:09:B4:B8:7C:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/190c6cc9-734c-41a5-9706-dba1a7420b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.14.0/23 Signature Algorithm: sha256WithRSAEncryption 10:1a:0b:30:27:0d:6d:f4:40:95:cb:c2:d9:95:6f:bd:7a:20: 9e:63:63:1a:e4:05:c6:b8:d9:7e:d1:e1:7f:4a:1f:52:85:56: ec:ce:1a:6b:68:29:ea:0f:ab:c7:b2:88:f8:cd:63:ad:83:71: c0:4c:dc:88:db:45:9b:b5:5a:e7:71:69:11:dc:33:d4:da:c9: 23:9f:22:c0:ba:22:a2:fd:0e:c2:10:fb:c4:87:10:e9:5f:16: 2a:85:f2:91:2d:c7:c2:24:5f:8a:15:05:c1:69:50:9d:42:e0: 4a:2c:fd:d0:f2:07:b7:ac:00:1f:1d:2e:69:2a:a5:1d:a1:72: 67:27:62:90:50:47:91:d9:92:37:6c:1b:86:0c:87:4e:f8:26: 8d:4c:cd:3d:81:e8:a8:15:5e:0d:ff:e9:a3:dd:65:0e:8a:3c: 34:ff:f3:1a:d5:f5:03:3c:02:f7:cd:a8:c0:17:ee:f9:13:5d: 30:8a:d3:0a:c2:02:1c:82:61:ef:17:51:43:21:ae:12:09:61: 50:c2:d2:a3:29:7d:0d:e6:05:75:9e:88:94:84:56:43:57:25: fa:70:34:ac:97:6f:e0:66:87:33:7a:79:14:4a:b7:10:b6:ea: 7a:06:93:af:3c:d3:9e:36:e5:37:a0:03:ed:f6:f6:6c:e7:35: 18:34:5f:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGSFyPSEf0yXUD6I2tjIo3ZlZNL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDIxMjA0OTQzWhcNMjYwNzIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmNiNDUyYTk4MWFkMDA3MjY2YjI0NTNmZTg5YzEyYmYw YmE1NTA3Y2JlNjk0YWRlZDIyOTYwZmY4MWVlZjY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtju6LIyV3/6WCKE6N+Khn5FLs36Bk6J9p2KiRt/enXMGJ yj/7aNG5n7gq2H763RM7HwqqD44UyU/tRNjnauor4+I/G7TYEMUOBM0HWQ0qkHHu vTIU5AdgUJfSSDYNvFJaKt2PZuba6eIsDWWUzluVp/V+VAhX2gZMddcR7NItrzod 3QPSz/UxXBXMHo56pmOyYzNoaSQTAB5bUsBXegGlvCjEMYbB4kazyXhJTtDeiLmA wlY7DOI1w3cY+W1ncM9v0spkv95NLBD0hOQH3lfXnf94CPTML8vqS0OEjabV2CIQ ViQFQQFnqKs7S8sPZ7eJTNwYxNQUz5yrg384E7H9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUURBwsYrWKwpQAi+wyySyCbS4fIowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5MGM2Y2M5LTczNGMtNDFhNS05NzA2LWRiYTFhNzQyMGI3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBsw4wDQYJKoZIhvcNAQELBQADggEBABAaCzAnDW30QJXLwtmVb716IJ5j YxrkBca42X7R4X9KH1KFVuzOGmtoKeoPq8eyiPjNY62DccBM3IjbRZu1WudxaRHc M9TaySOfIsC6IqL9DsIQ+8SHEOlfFiqF8pEtx8IkX4oVBcFpUJ1C4Eos/dDyB7es AB8dLmkqpR2hcmcnYpBQR5HZkjdsG4YMh074Jo1MzT2B6KgVXg3/6aPdZQ6KPDT/ 8xrV9QM8AvfNqMAX7vkTXTCK0wrCAhyCYe8XUUMhrhIJYVDC0qMpfQ3mBXWeiJSE VkNXJfpwNKyXb+BmhzN6eRRKtxC26noGk68805425TegA+329mznNRg0X5c= -----END CERTIFICATE-----Generated at Mon May 4 21:36:59 2026 by rpki-client