$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa File: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json) Hash identifier: No5tLsHPkDOfjcyerB/oN90Sl01KZ7JZlCkjZIOul1Y= Subject key identifier: 14:B2:65:BF:AA:A3:6D:F0:FF:28:A2:73:37:E0:5F:3D:7D:3A:31:B9 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 632097C4D07D7C52FCF6332E81D3F0DCFC7C7969 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa Signing time: Tue 19 May 2026 00:50:09 +0000 ROA not before: Tue 19 May 2026 00:50:09 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:20:97:c4:d0:7d:7c:52:fc:f6:33:2e:81:d3:f0:dc:fc:7c:79:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 19 00:50:09 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=228ccf71abf44755c11be2fa0873fdd587359490c7e94674403411f638ceb237, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:d9:80:36:05:be:9e:e7:4f:fd:26:4a:20: 84:5e:cd:84:c8:4e:d3:b9:22:37:7e:c5:ac:59:61: 5c:d3:56:95:e3:bd:15:f3:5c:1b:f4:9b:91:22:cb: 6f:66:d7:14:81:a2:18:63:5d:cd:1c:58:6d:63:46: 0b:bd:1b:e5:a7:49:80:a4:a2:47:ef:18:e4:4f:9c: 41:05:18:59:ca:54:e8:15:04:b2:78:1e:75:a3:5c: 59:de:79:cd:25:f8:85:e7:e9:93:05:5d:2c:e4:54: 47:07:34:16:ab:8c:1e:fe:af:37:f0:48:c2:dc:d0: 47:77:8f:4d:0c:ed:a3:49:1e:22:d5:1c:87:2b:fb: 35:aa:ae:36:2f:39:11:d2:05:a1:cf:2a:bf:16:e8: fd:d7:fe:1c:70:ff:4e:30:aa:50:b7:29:63:59:2f: 26:c4:10:4f:e5:45:c9:b8:39:d5:67:0c:ee:14:87: f4:aa:a3:d6:23:fa:d1:b6:cd:30:08:c2:8c:18:71: 57:7b:5d:c3:4b:ac:5f:2a:42:33:51:60:ba:34:85: ed:4f:44:64:7e:a2:ed:5b:a9:e9:5a:19:2d:20:55: e3:c8:32:c0:2f:1c:0f:b9:41:e6:9e:e1:f4:c8:6d: 39:e2:04:8c:c0:b2:02:e0:c1:e2:81:d9:18:d0:b2: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B2:65:BF:AA:A3:6D:F0:FF:28:A2:73:37:E0:5F:3D:7D:3A:31:B9 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 63:3a:4c:a5:c9:45:51:9b:01:b9:96:57:d0:7e:fd:73:4c:e6: 75:43:25:89:48:03:7e:06:f7:5d:13:4b:69:3b:78:62:4e:6e: 54:62:7b:7c:47:d2:fd:80:1b:72:20:44:73:99:5a:15:4e:1f: 9d:b8:d3:ec:35:c0:5d:29:ac:bd:fe:fc:86:a2:3e:f6:dc:46: fd:c2:7e:31:98:98:41:16:17:e1:16:f0:b0:81:3a:d1:8d:44: d3:5f:19:11:10:41:d1:18:72:e5:eb:df:ac:ca:5e:87:40:89: f6:2b:4c:4c:7d:f6:4f:34:85:1f:7e:e3:fc:c3:9c:de:14:20: 56:55:49:f7:fb:11:b2:39:08:aa:94:6f:7d:88:54:55:4b:4f: da:cb:71:72:58:c1:38:d5:9c:ba:35:b1:f2:00:28:d5:d4:ba: 47:83:53:d3:b1:bb:b9:a0:4e:dc:4b:da:a7:4d:8e:71:ef:3f: cf:d4:85:3b:e8:62:1b:b5:95:95:44:f8:80:0e:8e:46:c1:f6: 45:5a:44:b1:e8:ed:6a:91:db:30:b7:dd:32:ff:d5:fe:09:d0: 1b:46:2a:1a:98:47:8a:0f:9b:21:88:e9:8e:b9:32:f9:28:fb: 09:19:2c:ce:21:e4:a0:ad:32:73:5c:54:c9:1b:86:7d:5a:02: c3:f3:c2:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYyCXxNB9fFL89jMugdPw3Px8eWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwNTE5MDA1MDA5WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjhjY2Y3MWFiZjQ0NzU1YzExYmUyZmEwODczZmRkNTg3 MzU5NDkwYzdlOTQ2NzQ0MDM0MTFmNjM4Y2ViMjM3MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfxNmANgW+nudP/SZKIIRezYTITtO5Ijd+xaxZYVzTVpXj vRXzXBv0m5Eiy29m1xSBohhjXc0cWG1jRgu9G+WnSYCkokfvGORPnEEFGFnKVOgV BLJ4HnWjXFneec0l+IXn6ZMFXSzkVEcHNBarjB7+rzfwSMLc0Ed3j00M7aNJHiLV HIcr+zWqrjYvORHSBaHPKr8W6P3X/hxw/04wqlC3KWNZLybEEE/lRcm4OdVnDO4U h/Sqo9Yj+tG2zTAIwowYcVd7XcNLrF8qQjNRYLo0he1PRGR+ou1bqelaGS0gVePI MsAvHA+5Qeae4fTIbTniBIzAsgLgweKB2RjQsnLTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFLJlv6qjbfD/KKJzN+BfPX06MbkwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzAxZjkzNmUxLTYwYTItNGQ3Zi1hOTQ5LTc4NmZhMzQzMDE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAGM6TKXJRVGbAbmWV9B+/XNM5nVD JYlIA34G910TS2k7eGJOblRie3xH0v2AG3IgRHOZWhVOH5240+w1wF0prL3+/Iai PvbcRv3CfjGYmEEWF+EW8LCBOtGNRNNfGREQQdEYcuXr36zKXodAifYrTEx99k80 hR9+4/zDnN4UIFZVSff7EbI5CKqUb32IVFVLT9rLcXJYwTjVnLo1sfIAKNXUukeD U9Oxu7mgTtxL2qdNjnHvP8/UhTvoYhu1lZVE+IAOjkbB9kVaRLHo7WqR2zC33TL/ 1f4J0BtGKhqYR4oPmyGI6Y65Mvko+wkZLM4h5KCtMnNcVMkbhn1aAsPzwqk= -----END CERTIFICATE-----Generated at Fri May 22 13:55:18 2026 by rpki-client