$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa File: 199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa (raw, json) Hash identifier: RmslsxebNaAgzxN4nFISXUo8nDQz3RLBCVyDX6Ufp6w= Subject key identifier: 15:72:90:F7:F6:7D:63:AD:CF:EC:C5:57:A3:20:EB:0F:36:AB:F2:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71780DCC94DF0861CEB7196F3983BD5B711E789B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa Signing time: Sat 02 May 2026 00:51:22 +0000 ROA not before: Sat 02 May 2026 00:51:22 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.149.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:78:0d:cc:94:df:08:61:ce:b7:19:6f:39:83:bd:5b:71:1e:78:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:51:22 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=110db32e1a4695f9a0f13306cc7c41b1108e029cda4aed2e8822ec24d6b6312e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:20:87:76:8f:8d:ba:91:18:ea:ac:01:48: 89:fa:fb:58:d4:89:e6:00:02:89:6c:17:9c:48:39: de:71:60:a0:07:77:9d:6f:9a:a9:73:6c:21:f6:01: 6f:92:dc:fe:38:90:02:3c:e3:06:16:41:ef:09:f6: 00:99:00:ac:3d:7b:f2:fc:5e:4e:1a:6e:38:c7:c5: 2c:f2:b8:c1:31:3c:8e:87:b7:40:2a:29:e3:29:73: 85:fa:fe:22:ae:b7:d7:c7:8e:90:ed:02:c5:fe:9c: 94:1b:70:97:d7:83:da:ed:c3:5b:9f:d0:6a:ba:13: 5f:a3:5a:30:e5:e5:58:33:65:14:5a:e4:5d:31:3b: d1:46:66:31:0e:30:e6:8d:83:98:3d:bb:04:ff:8c: a2:05:11:3b:b7:56:84:2f:9e:0d:a3:ed:83:89:2c: b2:68:9f:a4:1a:6d:0b:1a:6c:e1:72:d5:00:1d:0f: d5:4e:fe:27:f1:f4:82:4f:30:4a:7d:9f:a2:d5:05: d8:20:c6:e6:c0:3e:09:bb:dd:e3:48:38:69:f6:60: c0:e0:99:01:14:c4:c2:1c:a5:22:bf:0b:da:82:31: 13:b1:7c:4f:fd:a9:8d:d4:6c:eb:16:ec:eb:90:af: 06:0e:a0:93:b0:8a:8c:ed:a2:ad:c9:f7:ca:f4:73: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:72:90:F7:F6:7D:63:AD:CF:EC:C5:57:A3:20:EB:0F:36:AB:F2:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.149.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:a2:8f:42:57:3c:aa:f6:69:ca:62:98:09:ce:4e:da:fb:b6: b9:52:f4:3e:f3:1f:cd:cb:52:57:19:89:4b:e4:d4:b1:18:4f: ff:74:d9:39:aa:23:b3:49:e4:20:8e:d7:19:c3:cd:c8:29:a2: 28:dd:b8:ab:f1:8a:86:75:fb:17:c8:bb:05:52:46:ed:8c:e4: fd:72:65:0d:2a:25:fb:d7:f2:3a:38:cd:f5:77:62:11:4d:f2: 0e:e8:30:a9:9f:37:af:d6:01:5e:35:39:a4:61:64:5d:01:88: d2:25:fd:74:fa:ab:c9:6d:34:6b:5a:6b:07:67:f5:ba:62:97: b4:f7:b4:53:dc:a9:27:38:41:0b:c8:ac:e7:54:5a:3e:27:de: 26:fd:22:d9:1b:42:83:64:10:b1:37:b3:36:09:fd:74:05:bb: c4:e3:67:60:cb:5b:68:59:b7:94:ca:c5:e7:52:e3:2a:5e:15: c8:7e:63:38:03:0c:7e:a5:72:68:f8:b5:5f:bb:d2:0c:89:49: af:a7:a2:4d:2a:ba:db:86:dd:42:cc:46:c2:39:77:40:12:38: 62:d8:cb:83:0e:aa:d0:20:40:ef:68:56:d3:88:ba:a3:d5:6b: 01:e1:e8:81:2d:ff:8f:00:33:69:a8:91:23:f2:43:82:c5:e2: b7:61:bb:5c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcXgNzJTfCGHOtxlvOYO9W3EeeJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDA1MTIyWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTBkYjMyZTFhNDY5NWY5YTBmMTMzMDZjYzdjNDFiMTEw OGUwMjljZGE0YWVkMmU4ODIyZWMyNGQ2YjYzMTJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpkyCHdo+NupEY6qwBSIn6+1jUieYAAolsF5xIOd5xYKAH d51vmqlzbCH2AW+S3P44kAI84wYWQe8J9gCZAKw9e/L8Xk4abjjHxSzyuMExPI6H t0AqKeMpc4X6/iKut9fHjpDtAsX+nJQbcJfXg9rtw1uf0Gq6E1+jWjDl5VgzZRRa 5F0xO9FGZjEOMOaNg5g9uwT/jKIFETu3VoQvng2j7YOJLLJon6QabQsabOFy1QAd D9VO/ifx9IJPMEp9n6LVBdggxubAPgm73eNIOGn2YMDgmQEUxMIcpSK/C9qCMROx fE/9qY3UbOsW7OuQrwYOoJOwioztoq3J98r0cx/xAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFXKQ9/Z9Y63P7MVXoyDrDzar8gowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5OWE2ZmUzLTM4NjMtNDdkOS04MDkyLTJiOGI1NTE2YjBjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQlTANBgkqhkiG9w0BAQsFAAOCAQEAFqKPQlc8qvZpymKYCc5O2vu2uVL0 PvMfzctSVxmJS+TUsRhP/3TZOaojs0nkII7XGcPNyCmiKN24q/GKhnX7F8i7BVJG 7Yzk/XJlDSol+9fyOjjN9XdiEU3yDugwqZ83r9YBXjU5pGFkXQGI0iX9dPqryW00 a1prB2f1umKXtPe0U9ypJzhBC8is51RaPifeJv0i2RtCg2QQsTezNgn9dAW7xONn YMtbaFm3lMrF51LjKl4VyH5jOAMMfqVyaPi1X7vSDIlJr6eiTSq624bdQsxGwjl3 QBI4YtjLgw6q0CBA72hW04i6o9VrAeHogS3/jwAzaaiRI/JDgsXit2G7XA== -----END CERTIFICATE-----Generated at Sun May 3 14:47:22 2026 by rpki-client