$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c0017-54d6-40e5-a9bf-c433c1f49900.roa File: f72c0017-54d6-40e5-a9bf-c433c1f49900.roa (raw, json) Hash identifier: sTOBxvSrUmd873Rymg9SE2n/7NTFUjGFCGIIW+OTA28= Subject key identifier: 1C:55:45:94:55:15:4F:5D:A0:3A:9C:E5:52:7A:93:F0:9E:99:DE:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35A9150B65182A41FDBF9854F1B4EA25897D13BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c0017-54d6-40e5-a9bf-c433c1f49900.roa Signing time: Mon 22 Jun 2026 00:20:06 +0000 ROA not before: Mon 22 Jun 2026 00:20:06 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 199.183.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a9:15:0b:65:18:2a:41:fd:bf:98:54:f1:b4:ea:25:89:7d:13:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 22 00:20:06 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=97c37931ef9094b9310ff7c8ffeaf0aaec922c4ebdc1fe43510b2c13439802f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:47:9d:5f:bc:1b:c1:dc:32:97:a9:d9:fe: f6:7a:af:9e:5d:8a:18:a3:b3:f2:12:7b:77:26:55: b8:db:b6:d9:f9:ee:e7:a0:d2:1d:0c:ad:d0:f9:a5: 2f:2d:97:b3:8f:5d:23:bf:d0:63:2f:d8:76:5b:ca: 40:6b:a5:77:20:08:da:6f:ab:1c:99:33:bd:c8:da: 39:17:92:a6:89:1c:da:d7:2a:d7:0f:e8:42:75:a3: 2f:15:f6:4b:c1:7c:33:c5:0e:e2:2b:b5:b8:dc:0c: 74:bb:ea:d1:8e:15:27:0b:4a:de:d0:f3:b1:59:d3: f4:a7:cf:20:54:af:f0:f3:46:c0:5b:7f:98:f5:1a: c4:33:20:ed:1b:37:1a:33:53:1b:81:a7:e0:af:5b: 9a:87:28:1b:fe:dc:38:1d:fc:9d:30:1c:41:49:32: c6:ed:41:6f:e8:21:4b:5f:0e:f4:a7:73:7c:82:fa: a3:e4:bc:8e:3d:45:85:4f:dc:56:a4:95:ec:1e:eb: cb:f1:ed:9d:5f:d0:fd:d7:10:b9:ca:84:7c:cb:de: 5d:e8:3d:1a:f9:ff:2a:1b:b2:a9:d2:2d:80:35:c6: fe:ee:22:7e:31:23:aa:18:a6:21:31:cb:ba:4e:21: ad:2d:cd:d6:a0:b9:17:df:ea:11:1e:a9:f1:99:78: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:55:45:94:55:15:4F:5D:A0:3A:9C:E5:52:7A:93:F0:9E:99:DE:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c0017-54d6-40e5-a9bf-c433c1f49900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.183.0.0/20 Signature Algorithm: sha256WithRSAEncryption 23:e1:fb:d0:6f:fc:46:3f:9a:e1:70:8b:e6:c7:57:e9:06:af: c9:38:f7:20:c4:4c:b0:b3:15:cc:74:59:fd:b0:21:23:2b:ac: 81:f9:8e:12:d6:b7:7a:16:2a:ea:13:16:94:49:16:3f:3e:ef: c7:f7:27:9d:25:e2:fa:dd:2b:46:24:04:48:3b:b6:84:05:7a: be:75:9d:83:5e:ed:90:28:41:80:fd:0c:0d:48:08:f3:21:f6: eb:a6:77:d7:84:09:a2:2f:95:02:4f:76:7b:4e:35:9c:2a:51: e7:4e:ce:f2:e1:23:96:5d:30:9a:c2:92:64:49:ab:8a:67:96: 54:b2:4a:9e:8a:61:83:4e:09:8e:f3:8a:85:3f:8c:ab:36:4a: 32:00:21:c5:68:ef:fa:2e:b4:3f:ce:10:0f:2b:fb:4e:fb:44: 8c:61:d2:1c:fd:3e:74:1e:97:88:1d:02:16:f7:dc:a1:ce:2d: ef:3e:37:4f:49:70:7e:74:a7:99:a5:61:5c:0a:e3:b4:34:3e: 5f:f5:32:b2:bb:fb:5a:e8:2e:f2:86:7e:52:c4:95:05:66:ed: 52:f6:55:46:47:86:e6:c0:66:88:01:c4:d2:23:b1:2b:3f:a8: ab:93:ae:fb:c9:ed:05:b2:dd:88:f3:7a:71:df:67:f3:e9:c6: 1d:e7:e7:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNakVC2UYKkH9v5hU8bTqJYl9E74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjIyMDAyMDA2WhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2MzNzkzMWVmOTA5NGI5MzEwZmY3YzhmZmVhZjBhYWVj OTIyYzRlYmRjMWZlNDM1MTBiMmMxMzQzOTgwMmYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkDEedX7wbwdwyl6nZ/vZ6r55dihijs/ISe3cmVbjbttn5 7ueg0h0MrdD5pS8tl7OPXSO/0GMv2HZbykBrpXcgCNpvqxyZM73I2jkXkqaJHNrX KtcP6EJ1oy8V9kvBfDPFDuIrtbjcDHS76tGOFScLSt7Q87FZ0/SnzyBUr/DzRsBb f5j1GsQzIO0bNxozUxuBp+CvW5qHKBv+3Dgd/J0wHEFJMsbtQW/oIUtfDvSnc3yC +qPkvI49RYVP3Faklewe68vx7Z1f0P3XELnKhHzL3l3oPRr5/yobsqnSLYA1xv7u In4xI6oYpiExy7pOIa0tzdaguRff6hEeqfGZeGNtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHFVFlFUVT12gOpzlUnqT8J6Z3mkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3MmMwMDE3LTU0ZDYtNDBlNS1hOWJmLWM0MzNjMWY0OTkwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATHtwAwDQYJKoZIhvcNAQELBQADggEBACPh+9Bv/EY/muFwi+bHV+kGr8k4 9yDETLCzFcx0Wf2wISMrrIH5jhLWt3oWKuoTFpRJFj8+78f3J50l4vrdK0YkBEg7 toQFer51nYNe7ZAoQYD9DA1ICPMh9uumd9eECaIvlQJPdntONZwqUedOzvLhI5Zd MJrCkmRJq4pnllSySp6KYYNOCY7zioU/jKs2SjIAIcVo7/outD/OEA8r+077RIxh 0hz9PnQel4gdAhb33KHOLe8+N09JcH50p5mlYVwK47Q0Pl/1MrK7+1roLvKGflLE lQVm7VL2VUZHhubAZogBxNIjsSs/qKuTrvvJ7QWy3YjzenHfZ/Ppxh3n570= -----END CERTIFICATE-----Generated at Wed Jul 1 06:26:29 2026 by rpki-client