$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa File: f98c6682-15ea-4f71-9c0e-97127590dea1.roa (raw, json) Hash identifier: EAJGTRoJFtP8PVYPHwdpnjkBmeSg3PoVrw0vPcfNd0M= Subject key identifier: 24:B3:1E:58:67:D2:96:5D:A4:FE:5C:40:38:B2:15:99:03:C8:FC:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2548B7E35200098269276F5C6077FAF882C4D785 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa Signing time: Fri 01 May 2026 00:50:30 +0000 ROA not before: Fri 01 May 2026 00:50:30 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 63.176.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:48:b7:e3:52:00:09:82:69:27:6f:5c:60:77:fa:f8:82:c4:d7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:50:30 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=8497fd5c56d58d656d2306b3ec24eb66616324f76f57164a55a999057618e2e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:93:c7:1f:06:78:d9:95:ed:90:8f:20:07: cf:15:b7:5b:ce:2d:8d:fd:be:bb:ff:37:66:66:d5: 22:85:cf:1d:50:58:00:87:e4:87:63:08:0d:ce:ce: 72:c4:8e:d2:3d:2f:4a:ed:21:14:b3:10:dc:83:47: 85:1b:16:d0:8d:1e:16:bf:f3:60:de:d0:f6:cd:c7: 13:8c:57:49:90:1b:88:f2:8d:b0:5c:6d:1f:3f:b9: 35:8c:16:02:9b:45:d1:dd:d3:9f:dc:4e:7c:f5:9d: 22:df:60:6a:58:a5:ed:f8:eb:7c:81:f2:a1:2e:90: 01:e0:5d:df:c0:76:b3:ed:7d:e9:da:89:da:87:b2: 87:e8:8d:d2:4a:bf:b3:ef:c9:86:38:5e:18:cd:31: 4d:e4:b0:ab:e4:d4:ff:04:fa:0b:00:6c:ea:5d:3d: cc:18:b4:3a:d1:ca:ca:b3:02:0c:75:bb:0f:ba:08: d3:8b:b8:eb:37:e2:87:44:69:8a:ef:b7:a1:70:78: d2:e7:53:3d:9b:e7:5f:8a:04:27:2d:09:1b:8a:ca: 0c:e6:09:bb:cd:5a:ec:bf:5a:c3:34:3e:8d:7a:77: 4e:38:e1:b1:d3:c3:38:91:c4:21:7b:c2:79:5e:77: 36:14:3c:34:0e:0a:5d:f3:0f:dc:dd:a3:8b:cf:10: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B3:1E:58:67:D2:96:5D:A4:FE:5C:40:38:B2:15:99:03:C8:FC:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.176.0.0/14 Signature Algorithm: sha256WithRSAEncryption 74:b3:7a:d9:a0:9d:f4:13:71:af:92:34:fe:9e:df:13:7a:57: 3b:c6:85:47:ea:d2:13:f4:7d:8f:ec:0e:a2:16:c8:89:e4:f7: fe:74:a1:a2:97:a4:bf:48:dd:41:80:c0:ce:63:50:3a:03:7e: 65:6f:bd:aa:01:52:e1:fa:20:ed:92:5f:27:48:8f:99:89:eb: e0:4f:13:94:6a:fd:aa:5a:44:90:71:f3:6b:56:30:4f:a7:14: 22:cd:55:90:d6:1d:a1:1a:37:1a:68:a4:2e:3c:5c:2b:dd:1d: 79:c4:3d:17:22:96:5b:60:6e:92:56:29:35:af:71:8d:1a:1c: c9:a2:bc:01:16:bb:b9:ab:8c:c9:ce:27:5f:3e:b9:cd:30:55: 5c:f1:d6:04:1c:e3:6e:6c:4a:0d:db:02:db:fd:50:29:af:97: 36:d5:9f:c9:ca:6b:63:e7:ab:25:46:d4:24:4b:d2:e6:d7:2b: a1:54:c0:ca:0f:e2:34:7b:3f:10:8b:72:91:eb:70:b0:06:33: e7:68:13:76:46:de:2b:57:22:28:5d:38:68:5c:ae:1a:dc:c7: a6:65:01:84:5d:d3:92:4a:51:12:5d:89:45:2a:6e:b4:85:ac: c4:3d:de:c0:dc:77:d5:30:fd:af:dc:dc:27:9c:c5:c0:8e:1b: 0a:97:5d:70 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJUi341IACYJpJ29cYHf6+ILE14UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA1MDMwWhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDk3ZmQ1YzU2ZDU4ZDY1NmQyMzA2YjNlYzI0ZWI2NjYx NjMyNGY3NmY1NzE2NGE1NWE5OTkwNTc2MThlMmUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq6pPHHwZ42ZXtkI8gB88Vt1vOLY39vrv/N2Zm1SKFzx1Q WACH5IdjCA3OznLEjtI9L0rtIRSzENyDR4UbFtCNHha/82De0PbNxxOMV0mQG4jy jbBcbR8/uTWMFgKbRdHd05/cTnz1nSLfYGpYpe3463yB8qEukAHgXd/AdrPtfena idqHsofojdJKv7PvyYY4XhjNMU3ksKvk1P8E+gsAbOpdPcwYtDrRysqzAgx1uw+6 CNOLuOs34odEaYrvt6FweNLnUz2b51+KBCctCRuKygzmCbvNWuy/WsM0Po16d044 4bHTwziRxCF7wnledzYUPDQOCl3zD9zdo4vPEEc1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJLMeWGfSll2k/lxAOLIVmQPI/BIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5OGM2NjgyLTE1ZWEtNGY3MS05YzBlLTk3MTI3NTkwZGVhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI/sDANBgkqhkiG9w0BAQsFAAOCAQEAdLN62aCd9BNxr5I0/p7fE3pXO8aF R+rSE/R9j+wOohbIieT3/nShopekv0jdQYDAzmNQOgN+ZW+9qgFS4fog7ZJfJ0iP mYnr4E8TlGr9qlpEkHHza1YwT6cUIs1VkNYdoRo3GmikLjxcK90decQ9FyKWW2Bu klYpNa9xjRocyaK8ARa7uauMyc4nXz65zTBVXPHWBBzjbmxKDdsC2/1QKa+XNtWf ycprY+erJUbUJEvS5tcroVTAyg/iNHs/EItyketwsAYz52gTdkbeK1ciKF04aFyu GtzHpmUBhF3TkkpREl2JRSputIWsxD3ewNx31TD9r9zcJ5zFwI4bCpddcA== -----END CERTIFICATE-----Generated at Sun May 3 16:14:15 2026 by rpki-client