$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa File: 375a6ca2-770f-45e1-a8af-10c7303818a0.roa (raw, json) Hash identifier: 9LRycPd3xQSMXaUredyQVD/Ap0EbmLAGeEfAzzwsBHI= Subject key identifier: 4D:F8:5C:31:A3:FC:AD:53:79:1D:D2:D1:AD:B9:5D:96:56:4B:2F:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F7AC9BB5454B10C47212050CA79CCEEDD501AF5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa Signing time: Fri 01 May 2026 00:11:14 +0000 ROA not before: Fri 01 May 2026 00:11:14 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 163.119.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7a:c9:bb:54:54:b1:0c:47:21:20:50:ca:79:cc:ee:dd:50:1a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:11:14 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=6d2503e186385797dac025f6f2f4606a45bee76d3585515ac9fc38d687d1379a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:09:a5:9c:c7:22:a3:2d:75:87:ea:47:70: 16:ca:f5:b0:cd:18:c3:68:fb:56:58:2d:40:f2:b4: f5:91:27:ee:0f:79:ef:0d:4c:29:a9:86:04:ac:64: 48:0e:32:04:93:ee:12:0b:c7:ff:71:0e:0e:d0:c4: 3c:9a:cb:6e:86:fd:ed:ed:6b:36:f0:79:70:a2:1b: 75:f2:2e:a7:fd:9c:84:44:e9:32:4d:6a:75:02:80: f6:69:03:38:d9:b9:b8:6d:82:fb:b8:ea:86:03:21: ab:72:50:81:d2:08:1a:c9:9f:40:5c:8e:ae:77:76: 52:ba:62:7b:ea:fd:01:71:37:89:1f:6d:8f:7b:86: f4:2b:26:f3:19:db:d2:34:3c:9b:4a:8a:7e:0b:bf: 79:2b:3f:22:6c:f7:4a:a5:8c:e9:84:1b:4a:ac:89: d7:44:72:18:18:aa:60:07:89:a8:09:e9:fe:24:85: 46:6a:d7:e9:64:bb:6d:30:5c:4b:c8:09:20:2f:87: 14:a9:cb:5e:8b:66:02:eb:e2:30:86:89:fc:f6:82: ae:84:20:53:15:9a:32:c1:4d:17:d4:ba:4a:9d:d7: 79:3b:19:12:ca:4b:a2:eb:7b:8b:13:3d:e4:08:5a: 8f:2c:18:7d:df:24:f0:98:8d:7a:4d:a0:e4:eb:cf: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F8:5C:31:A3:FC:AD:53:79:1D:D2:D1:AD:B9:5D:96:56:4B:2F:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.119.128.0/17 Signature Algorithm: sha256WithRSAEncryption 27:51:f0:ca:67:9a:27:e5:87:c1:25:b5:23:33:d8:f8:45:8b: 23:64:40:45:1f:50:f0:d0:5a:cc:69:37:f1:01:43:0c:f1:89: 5f:be:e5:d8:1d:e3:7e:9e:ea:b6:89:ac:6e:8f:67:c0:8f:7b: 23:ff:05:61:a9:8c:61:32:39:e3:c6:6e:a6:a6:38:37:70:e3: 5d:59:f6:34:70:45:44:31:ee:53:d6:6f:52:9b:02:11:ef:0a: 0a:4d:95:b4:81:ba:98:2e:3d:b4:8d:d1:58:72:4a:92:7f:01: 8a:df:66:1c:8e:92:83:ed:00:99:a7:2a:bb:39:04:12:78:5a: bb:a8:a7:fe:54:da:a0:ab:ca:a8:bc:87:8f:3d:71:1b:9f:1e: 43:ea:e9:36:36:01:a4:6a:47:ec:77:ad:ff:2c:ab:d6:4a:e1: 41:c7:7e:d0:58:9e:75:e9:f8:a2:38:eb:1a:c5:67:84:12:39: 37:01:dc:e3:63:cd:8b:fd:c2:9d:7a:60:ef:37:97:bb:3a:eb: 23:8c:81:cb:be:2e:c3:bd:4c:47:21:f7:53:af:76:12:c5:e7: 79:d0:86:30:a6:4f:92:51:44:52:fd:f0:a2:a7:fe:71:09:81: 5e:5b:9c:42:86:84:ed:81:d7:00:9e:45:63:f8:42:8e:dc:6c: c8:d6:fa:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT3rJu1RUsQxHISBQynnM7t1QGvUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAxMTE0WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDI1MDNlMTg2Mzg1Nzk3ZGFjMDI1ZjZmMmY0NjA2YTQ1 YmVlNzZkMzU4NTUxNWFjOWZjMzhkNjg3ZDEzNzlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPwgmlnMcioy11h+pHcBbK9bDNGMNo+1ZYLUDytPWRJ+4P ee8NTCmphgSsZEgOMgST7hILx/9xDg7QxDyay26G/e3tazbweXCiG3XyLqf9nIRE 6TJNanUCgPZpAzjZubhtgvu46oYDIatyUIHSCBrJn0Bcjq53dlK6Ynvq/QFxN4kf bY97hvQrJvMZ29I0PJtKin4Lv3krPyJs90qljOmEG0qsiddEchgYqmAHiagJ6f4k hUZq1+lku20wXEvICSAvhxSpy16LZgLr4jCGifz2gq6EIFMVmjLBTRfUukqd13k7 GRLKS6Lre4sTPeQIWo8sGH3fJPCYjXpNoOTrzyg5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTfhcMaP8rVN5HdLRrbldllZLLxYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3NWE2Y2EyLTc3MGYtNDVlMS1hOGFmLTEwYzczMDM4MThhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAejd4AwDQYJKoZIhvcNAQELBQADggEBACdR8Mpnmiflh8EltSMz2PhFiyNk QEUfUPDQWsxpN/EBQwzxiV++5dgd436e6raJrG6PZ8CPeyP/BWGpjGEyOePGbqam ODdw411Z9jRwRUQx7lPWb1KbAhHvCgpNlbSBupguPbSN0VhySpJ/AYrfZhyOkoPt AJmnKrs5BBJ4Wruop/5U2qCryqi8h489cRufHkPq6TY2AaRqR+x3rf8sq9ZK4UHH ftBYnnXp+KI46xrFZ4QSOTcB3ONjzYv9wp16YO83l7s66yOMgcu+LsO9TEch91Ov dhLF53nQhjCmT5JRRFL98KKn/nEJgV5bnEKGhO2B1wCeRWP4Qo7cbMjW+hM= -----END CERTIFICATE-----Generated at Sun May 3 14:46:29 2026 by rpki-client