$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa File: 987ee270-8da2-44b1-b542-2a58beb5c981.roa (raw, json) Hash identifier: Y5wR7h9e0fxXKE9sXHCiTH+BMPlVYFVLL5KO+/SVZaQ= Subject key identifier: 68:0A:66:BA:1E:29:5F:93:68:7B:67:E3:BC:AC:AA:01:87:7E:A1:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 640694F3000ED05BDAB70AD78EBC929B20633552 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa Signing time: Mon 04 May 2026 00:11:43 +0000 ROA not before: Mon 04 May 2026 00:11:43 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:06:94:f3:00:0e:d0:5b:da:b7:0a:d7:8e:bc:92:9b:20:63:35:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:11:43 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=d5ab35323eb8599370e82037717b788a14ac199dff80aa3af448d65ebf441bf7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:64:fe:50:35:aa:ab:d7:a4:db:76:ba:7b: 80:ab:6a:fe:a2:67:f3:1f:ff:ec:80:96:6b:2e:57: 84:e9:73:eb:c7:41:b4:10:22:f2:d6:3d:25:1d:af: 88:84:c7:c2:e4:94:a8:8f:26:6c:6e:85:47:0d:4a: 1e:16:9c:26:b3:94:f7:34:1c:c3:2b:b9:ee:b4:96: 3b:68:98:46:43:9d:aa:1b:9d:25:1f:0b:04:6a:33: 80:fd:a3:9f:0e:58:66:0f:33:e2:7e:d0:49:29:f9: ce:15:02:f5:cc:93:2a:d5:ff:b7:03:51:e6:8b:2a: 5b:40:ac:00:ee:54:34:42:57:70:6b:30:82:c5:ae: 13:c8:40:12:98:4a:3a:9b:a3:1c:14:14:3e:e8:fa: 88:a0:05:30:c2:21:bc:4d:48:d2:5a:9e:4a:a6:69: e3:84:83:9c:81:9f:51:71:b3:84:b7:1c:15:35:c3: 06:c2:69:b2:5a:1c:de:d2:3d:3d:f7:1f:de:fc:36: 9a:dd:1c:32:b3:85:7d:de:d3:a9:3b:bf:2f:e3:6d: ba:e2:e0:31:e4:4d:1d:fa:7d:1c:35:f5:59:85:f0: 0d:e6:5c:64:99:95:40:d7:88:27:f3:ac:62:02:ca: d7:df:54:62:6a:bd:b9:63:b7:b4:25:d6:80:4d:09: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:66:BA:1E:29:5F:93:68:7B:67:E3:BC:AC:AA:01:87:7E:A1:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.96.0/20 Signature Algorithm: sha256WithRSAEncryption af:a2:35:7c:30:63:b2:ad:d5:4e:72:ec:86:ec:2d:e0:cd:e8: 9a:02:4a:bd:33:64:da:90:b6:29:02:c3:46:25:95:73:94:fa: a8:63:a9:ec:6d:be:65:0e:9b:6d:d7:a2:c2:fa:5f:3e:c0:f4: e7:b4:be:62:26:c4:26:da:d7:aa:55:56:d1:3e:6a:88:83:fd: 7f:37:c5:cd:7d:c3:df:c3:ec:dd:0e:17:0a:89:95:32:11:ea: 2b:43:fc:63:0b:05:27:d1:5d:fc:a5:10:9c:2e:6f:dc:83:a2: 7a:36:53:b0:13:7b:e9:47:0d:3e:8a:7c:fa:bc:3a:d4:16:d2: d4:5a:99:4e:27:6e:f5:86:4e:2d:91:2b:81:73:08:23:0b:d0: cf:6c:04:a8:99:fe:85:ba:bd:5b:f5:a8:d5:8d:0b:fe:75:28: 69:dd:73:80:87:4b:6a:b2:6d:32:f2:72:b9:7d:6f:d6:c4:b8: 09:e5:e9:de:f3:d5:b0:a9:0e:35:ab:9f:a0:43:37:7e:8c:04: d2:b7:3e:ae:b6:de:f6:0d:81:11:03:b9:33:60:c3:7d:2d:9f: 3c:78:a5:2f:29:e7:7a:be:9a:d8:58:e8:e6:53:90:b3:61:3c: 34:d3:76:14:e2:d3:c6:f5:0b:dd:ef:cd:4d:cd:41:f9:67:8f: 46:9a:56:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZAaU8wAO0FvatwrXjrySmyBjNVIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAxMTQzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWFiMzUzMjNlYjg1OTkzNzBlODIwMzc3MTdiNzg4YTE0 YWMxOTlkZmY4MGFhM2FmNDQ4ZDY1ZWJmNDQxYmY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+h2T+UDWqq9ek23a6e4Crav6iZ/Mf/+yAlmsuV4Tpc+vH QbQQIvLWPSUdr4iEx8LklKiPJmxuhUcNSh4WnCazlPc0HMMrue60ljtomEZDnaob nSUfCwRqM4D9o58OWGYPM+J+0Ekp+c4VAvXMkyrV/7cDUeaLKltArADuVDRCV3Br MILFrhPIQBKYSjqboxwUFD7o+oigBTDCIbxNSNJankqmaeOEg5yBn1Fxs4S3HBU1 wwbCabJaHN7SPT33H978NprdHDKzhX3e06k7vy/jbbri4DHkTR36fRw19VmF8A3m XGSZlUDXiCfzrGICytffVGJqvbljt7Ql1oBNCYSnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaApmuh4pX5Noe2fjvKyqAYd+obAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4N2VlMjcwLThkYTItNDRiMS1iNTQyLTJhNThiZWI1Yzk4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgGAwDQYJKoZIhvcNAQELBQADggEBAK+iNXwwY7Kt1U5y7IbsLeDN6JoC Sr0zZNqQtikCw0YllXOU+qhjqextvmUOm23XosL6Xz7A9Oe0vmImxCba16pVVtE+ aoiD/X83xc19w9/D7N0OFwqJlTIR6itD/GMLBSfRXfylEJwub9yDono2U7ATe+lH DT6KfPq8OtQW0tRamU4nbvWGTi2RK4FzCCML0M9sBKiZ/oW6vVv1qNWNC/51KGnd c4CHS2qybTLycrl9b9bEuAnl6d7z1bCpDjWrn6BDN36MBNK3Pq623vYNgREDuTNg w30tnzx4pS8p53q+mthY6OZTkLNhPDTTdhTi08b1C93vzU3NQflnj0aaVuA= -----END CERTIFICATE-----Generated at Mon May 4 22:26:24 2026 by rpki-client