$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f022ac8e-599b-4aa9-912a-27c43599f62a.roa File: f022ac8e-599b-4aa9-912a-27c43599f62a.roa (raw, json) Hash identifier: /cehIrWURPJbpjVImPr3djzx5BXfi2E2d+kJ7eBxogc= Subject key identifier: 8C:DE:05:F7:09:A0:1E:27:E3:72:64:19:F8:1A:B3:7A:7B:32:7C:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15AF360F3DA8871026C8E39766A94E00C3464626 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f022ac8e-599b-4aa9-912a-27c43599f62a.roa Signing time: Tue 21 Apr 2026 21:02:48 +0000 ROA not before: Tue 21 Apr 2026 21:02:48 +0000 ROA not after: Mon 20 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 1.179.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:af:36:0f:3d:a8:87:10:26:c8:e3:97:66:a9:4e:00:c3:46:46:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 21:02:48 2026 GMT Not After : Jul 20 23:59:59 2026 GMT Subject: serialNumber=60f5dc9b3f53ba2232f3077122f2f94e4dc268c58e05466306b770affe2385c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:89:06:4b:93:16:92:18:88:d7:25:70:9d: b9:d6:b0:47:e7:9a:6b:63:5a:c8:51:eb:c8:4d:86: 15:78:12:65:aa:60:aa:af:d4:a2:f9:a5:d4:fb:4a: 3b:dc:2f:3d:e7:d3:91:4f:3e:99:69:3e:ba:b7:56: ca:8b:c7:ee:45:fe:7f:ce:45:ea:f9:e5:0b:be:c4: 27:fc:a6:59:d1:6a:ab:0e:b4:90:ba:21:92:1e:f1: ed:92:f3:30:8e:00:17:06:ea:c8:15:2b:0c:2a:bf: 79:5f:35:7c:7c:e0:5f:2b:4d:49:6e:4b:22:74:09: 31:83:dc:f4:08:52:fc:71:28:a8:11:20:a5:fc:32: 19:f0:9b:63:83:1f:b9:91:cf:84:f0:ce:69:74:3c: 22:6a:3d:7f:66:8c:f6:05:3b:32:94:78:0f:0c:cc: 6a:c9:86:c2:5d:38:99:10:c9:7a:3a:c0:c2:89:5d: 1e:f6:8b:19:41:d7:91:17:20:a8:47:1b:17:3e:2b: c9:88:04:25:7a:c3:fb:cb:21:6a:d9:d9:42:38:3d: f4:8e:34:22:00:23:d7:d1:e8:9d:1d:92:6e:f7:84: 13:ac:4d:fe:bb:8d:ba:e7:98:6b:27:5a:d0:f4:6f: f2:ce:cd:55:6f:bd:07:11:2c:82:1c:90:c0:47:83: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:05:F7:09:A0:1E:27:E3:72:64:19:F8:1A:B3:7A:7B:32:7C:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f022ac8e-599b-4aa9-912a-27c43599f62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.60.0/23 Signature Algorithm: sha256WithRSAEncryption bd:88:bb:0c:0e:47:13:23:98:64:d2:7b:27:08:d8:b2:1e:d6: 79:51:5f:3a:f3:6c:5a:f5:a8:97:51:0d:7f:29:8f:be:8d:b3: ac:af:5a:c6:69:4b:a8:98:b2:a2:07:14:30:1d:1e:40:94:0b: b7:b5:4b:d0:30:be:a0:88:a4:76:25:7c:59:25:7f:2d:f9:99: 52:95:de:f2:74:1b:2d:a8:55:5e:cd:5e:5f:b4:56:eb:37:21: 0f:dd:00:e6:b1:f6:bc:94:10:3b:45:ad:ba:0a:fe:14:70:09: c5:5f:2e:b9:51:7c:4c:37:62:5e:fc:03:1b:4a:a9:6f:a9:17: 89:6c:ca:79:6d:bc:ef:cc:17:ec:8f:3f:de:9e:97:e3:72:a5: c3:16:f6:24:2c:94:59:45:2b:66:94:76:7e:ba:5f:5e:64:ef: 44:df:03:ef:83:f0:24:e1:7b:77:43:92:31:a5:01:35:4a:d4: ee:9f:f5:92:cf:cc:69:c1:3a:9a:95:66:82:f0:8d:13:be:a6: b8:91:b8:b6:0c:ea:5c:da:85:26:0d:07:69:00:64:a9:e7:d4: a1:af:1c:a7:94:65:61:0f:79:73:35:7f:5b:d0:ee:b3:a3:37: 41:4c:81:5e:f7:8d:f1:e6:fd:55:93:02:9c:f0:b9:02:e1:74: d2:4c:1b:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFa82Dz2ohxAmyOOXZqlOAMNGRiYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDIxMjEwMjQ4WhcNMjYwNzIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGY1ZGM5YjNmNTNiYTIyMzJmMzA3NzEyMmYyZjk0ZTRk YzI2OGM1OGUwNTQ2NjMwNmI3NzBhZmZlMjM4NWM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQgYkGS5MWkhiI1yVwnbnWsEfnmmtjWshR68hNhhV4EmWq YKqv1KL5pdT7SjvcLz3n05FPPplpPrq3VsqLx+5F/n/ORer55Qu+xCf8plnRaqsO tJC6IZIe8e2S8zCOABcG6sgVKwwqv3lfNXx84F8rTUluSyJ0CTGD3PQIUvxxKKgR IKX8Mhnwm2ODH7mRz4Twzml0PCJqPX9mjPYFOzKUeA8MzGrJhsJdOJkQyXo6wMKJ XR72ixlB15EXIKhHGxc+K8mIBCV6w/vLIWrZ2UI4PfSONCIAI9fR6J0dkm73hBOs Tf67jbrnmGsnWtD0b/LOzVVvvQcRLIIckMBHg97lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjN4F9wmgHifjcmQZ+BqzensyfNgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwMjJhYzhlLTU5OWItNGFhOS05MTJhLTI3YzQzNTk5ZjYyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBszwwDQYJKoZIhvcNAQELBQADggEBAL2IuwwORxMjmGTSeycI2LIe1nlR XzrzbFr1qJdRDX8pj76Ns6yvWsZpS6iYsqIHFDAdHkCUC7e1S9AwvqCIpHYlfFkl fy35mVKV3vJ0Gy2oVV7NXl+0Vus3IQ/dAOax9ryUEDtFrboK/hRwCcVfLrlRfEw3 Yl78AxtKqW+pF4lsynltvO/MF+yPP96el+NypcMW9iQslFlFK2aUdn66X15k70Tf A++D8CThe3dDkjGlATVK1O6f9ZLPzGnBOpqVZoLwjRO+priRuLYM6lzahSYNB2kA ZKnn1KGvHKeUZWEPeXM1f1vQ7rOjN0FMgV73jfHm/VWTApzwuQLhdNJMG6o= -----END CERTIFICATE-----Generated at Mon May 4 21:37:01 2026 by rpki-client