$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcceae24-5ab4-4218-9b8b-6c16f66cecc6.roa File: dcceae24-5ab4-4218-9b8b-6c16f66cecc6.roa (raw, json) Hash identifier: 3hfW4CoSWGwnhwtIoBhYGSZSwNjAaSXwO931DPS7wzo= Subject key identifier: 12:54:85:0B:ED:88:AF:6E:CB:79:6F:15:4F:94:1E:97:02:D0:B0:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FCA1B0EC26D35B0A493A7C0F64371277E3898C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcceae24-5ab4-4218-9b8b-6c16f66cecc6.roa Signing time: Fri 01 May 2026 00:50:32 +0000 ROA not before: Fri 01 May 2026 00:50:32 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ca:1b:0e:c2:6d:35:b0:a4:93:a7:c0:f6:43:71:27:7e:38:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:50:32 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=22ad25ca4c9a5e823c15705367420bbfab8628ffac78bf4cb714305e9599d2ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:58:53:8b:97:5b:bc:49:9b:47:db:6f:8b: c7:42:4b:fc:2b:f1:ab:a8:9a:b8:6b:fe:fd:de:e3: ee:67:31:9c:f0:6c:27:c4:4b:50:62:92:aa:60:d3: cd:be:08:6e:ef:91:35:eb:f2:1f:c2:55:0f:4b:e4: 13:5e:89:6a:f8:54:8e:9f:37:5e:9a:d5:cd:48:e5: a4:1a:98:39:d5:e9:0d:bc:56:5b:d2:ec:3b:8a:a3: 4f:96:4f:f9:28:d7:36:27:35:ed:54:3d:c1:21:39: e1:b2:aa:85:95:bb:f4:e4:e0:7f:8d:a5:e8:36:5f: af:bc:90:05:28:db:a2:59:0d:c7:b2:e5:a2:ca:56: 8d:59:fc:33:ed:89:fb:ec:5f:dd:6e:3c:70:11:53: 52:13:02:a3:d0:44:0f:7f:87:49:d8:9e:79:da:75: 60:c3:12:42:32:20:b0:eb:aa:d8:89:37:28:86:46: 8f:e3:c1:c3:6c:0c:74:24:14:27:37:dd:85:85:ec: 87:87:b1:a4:14:5e:38:7c:34:01:d5:05:b3:63:b5: 1a:42:b1:51:7b:3a:ba:1d:00:ff:fa:9b:5f:9b:a7: a1:d3:74:23:22:f3:0e:c0:ec:79:2c:55:a8:c5:7d: 90:fd:a2:f7:7c:72:50:16:65:e9:8e:a4:6e:f2:53: 15:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:85:0B:ED:88:AF:6E:CB:79:6F:15:4F:94:1E:97:02:D0:B0:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcceae24-5ab4-4218-9b8b-6c16f66cecc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.235.0/24 Signature Algorithm: sha256WithRSAEncryption 11:0f:22:e8:6d:74:0b:43:78:20:a5:12:51:a3:da:24:fd:fc: d5:de:91:67:21:de:91:5f:b6:dc:20:6b:aa:b4:54:92:90:c1: d8:5a:e9:35:e6:f9:f9:7e:58:cf:8f:68:fe:af:8e:42:ea:5f: d5:c9:69:1d:3b:2b:56:4b:a4:59:b6:a4:fc:aa:ab:cf:91:e1: 5a:32:a7:65:28:64:d0:76:17:4b:3c:33:c3:42:c7:ea:6f:d0: 4f:f0:cc:40:6c:7c:ce:41:01:79:4f:43:43:10:e4:f6:73:6a: cb:c9:19:a9:13:54:67:0b:7e:b0:f1:91:fb:e9:c9:dd:62:03: 02:67:2b:44:74:ea:5e:ce:e9:b0:88:6e:a1:c9:96:89:72:e8: 15:87:7d:fb:97:a8:32:4d:5b:cb:66:70:48:3a:f1:4e:95:d4: 35:f4:9e:08:45:6e:89:b8:f5:7d:44:73:36:fd:4a:fe:41:88: 33:e7:df:87:02:16:e0:0b:c1:19:b7:01:02:47:95:c7:68:05: 93:aa:b0:47:eb:3d:de:fd:22:be:95:cf:af:c0:b0:38:51:1e: 8e:2b:ca:9c:a6:0c:ff:17:88:4d:4a:6d:2d:cf:ba:bf:14:1b: fa:fb:62:81:a6:b8:80:e8:5f:00:ed:c2:77:a1:9b:05:f8:c0: 4d:ba:3f:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf8obDsJtNbCkk6fA9kNxJ344mMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA1MDMyWhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMmFkMjVjYTRjOWE1ZTgyM2MxNTcwNTM2NzQyMGJiZmFi ODYyOGZmYWM3OGJmNGNiNzE0MzA1ZTk1OTlkMmNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCddFhTi5dbvEmbR9tvi8dCS/wr8auomrhr/v3e4+5nMZzw bCfES1Bikqpg082+CG7vkTXr8h/CVQ9L5BNeiWr4VI6fN16a1c1I5aQamDnV6Q28 VlvS7DuKo0+WT/ko1zYnNe1UPcEhOeGyqoWVu/Tk4H+Npeg2X6+8kAUo26JZDcey 5aLKVo1Z/DPtifvsX91uPHARU1ITAqPQRA9/h0nYnnnadWDDEkIyILDrqtiJNyiG Ro/jwcNsDHQkFCc33YWF7IeHsaQUXjh8NAHVBbNjtRpCsVF7OrodAP/6m1+bp6HT dCMi8w7A7HksVajFfZD9ovd8clAWZemOpG7yUxV/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUElSFC+2Ir27LeW8VT5QelwLQsLwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjY2VhZTI0LTVhYjQtNDIxOC05YjhiLTZjMTZmNjZjZWNjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTeswDQYJKoZIhvcNAQELBQADggEBABEPIuhtdAtDeCClElGj2iT9/NXe kWch3pFfttwga6q0VJKQwdha6TXm+fl+WM+PaP6vjkLqX9XJaR07K1ZLpFm2pPyq q8+R4Voyp2UoZNB2F0s8M8NCx+pv0E/wzEBsfM5BAXlPQ0MQ5PZzasvJGakTVGcL frDxkfvpyd1iAwJnK0R06l7O6bCIbqHJloly6BWHffuXqDJNW8tmcEg68U6V1DX0 nghFbom49X1Eczb9Sv5BiDPn34cCFuALwRm3AQJHlcdoBZOqsEfrPd79Ir6Vz6/A sDhRHo4rypymDP8XiE1KbS3Pur8UG/r7YoGmuIDoXwDtwnehmwX4wE26P6g= -----END CERTIFICATE-----Generated at Tue May 5 14:23:42 2026 by rpki-client