$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa File: 9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa (raw, json) Hash identifier: ceG3GznUf74zyz913w9zPs/TPZxxHymtqbrXEvdLrs4= Subject key identifier: 35:56:EC:ED:22:81:6D:9F:F7:D4:FA:86:45:50:A8:93:F3:05:1C:05 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 5C5E85333B56CF7399E3764727648EEF8898148D Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa Signing time: Tue 19 May 2026 00:50:11 +0000 ROA not before: Tue 19 May 2026 00:50:11 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5e:85:33:3b:56:cf:73:99:e3:76:47:27:64:8e:ef:88:98:14:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 19 00:50:11 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=9ca340b9ebb1e6572c53e9632a5a4fabe1136659815de3e208b2fd7a5ff5d76e, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:9e:48:b7:28:05:f7:c1:61:28:67:aa:51: 14:10:36:22:ac:5e:11:0a:ca:48:bd:7a:e8:6e:9b: ab:ce:d8:1d:ef:a4:00:9f:f5:32:1d:08:78:b5:26: 2e:46:23:91:f9:ff:5f:8e:97:f1:29:55:05:02:04: 8d:ca:85:08:07:e1:62:2e:9a:9e:6a:c0:aa:b2:2a: ed:af:91:c3:6a:62:95:e8:dd:f3:50:a3:d8:eb:be: c4:2d:a9:0a:17:e9:72:16:14:1b:5e:67:85:bd:45: 93:f3:c6:36:f8:2c:70:cb:92:c6:67:cb:d0:44:d4: c1:c2:f7:58:c3:4b:8d:11:70:9e:6a:b3:eb:d2:52: db:30:10:27:a5:ab:5c:0b:78:7b:ef:3f:44:65:4d: fa:8f:3d:12:59:70:b6:94:29:f3:b4:8f:be:9e:0d: 90:b5:02:8e:34:2f:c0:28:35:20:74:a6:0f:94:bf: 0e:78:e1:05:2d:e5:7f:f9:6c:e3:46:02:5d:2c:06: c1:c7:62:56:15:d4:f6:12:83:e5:05:29:25:38:ff: f9:4e:0a:77:e5:cb:3f:ac:c4:33:58:01:d5:67:1e: c4:6a:b0:16:62:59:83:55:f4:f5:0b:b7:45:96:e1: 72:c3:37:0a:41:c7:9e:8e:68:48:9d:38:28:02:53: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:56:EC:ED:22:81:6D:9F:F7:D4:FA:86:45:50:A8:93:F3:05:1C:05 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.8.0/21 Signature Algorithm: sha256WithRSAEncryption 64:31:7b:d3:ea:4c:50:f1:29:3c:81:38:7a:ed:39:82:9b:62: ef:da:2c:79:fc:46:15:61:37:94:81:85:90:49:9c:32:da:90: e2:98:0c:73:2f:5a:5f:6e:8c:dc:2b:7a:38:2d:19:1a:c0:a3: a8:93:df:d0:9e:52:0d:2f:49:2d:9e:66:00:2b:fb:e7:01:20: 83:77:a7:87:5e:84:eb:34:fd:55:93:52:a1:c2:0d:a4:04:2e: d2:39:45:74:18:d0:c6:dd:5f:1a:36:d0:91:56:f4:9a:07:a3: 4c:ec:68:95:8d:b6:f0:25:15:e7:2c:57:44:8d:65:ca:1d:61: 6e:71:e4:38:b6:d2:ce:21:84:06:04:19:b5:84:f8:5e:1f:57: b2:0c:f4:1e:e2:06:37:51:ea:97:8d:ac:9c:85:c5:81:33:35: b3:86:90:a1:37:31:75:37:ff:59:25:e8:b8:b8:5d:4e:59:f4: 72:4d:8d:25:ef:62:92:1d:4d:2d:4f:e5:54:99:73:a9:f3:d8: 6d:25:2b:95:86:bf:da:09:e7:28:fe:7d:93:4a:56:95:3e:78: c7:48:20:dc:50:6a:fa:35:21:f5:85:08:17:27:76:4f:77:66: a3:c7:90:54:c4:f7:ab:66:ea:76:ad:63:67:94:85:95:40:b4: d8:38:e9:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXF6FMztWz3OZ43ZHJ2SO74iYFI0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwNTE5MDA1MDExWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2EzNDBiOWViYjFlNjU3MmM1M2U5NjMyYTVhNGZhYmUx MTM2NjU5ODE1ZGUzZTIwOGIyZmQ3YTVmZjVkNzZlMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpsJ5ItygF98FhKGeqURQQNiKsXhEKyki9euhum6vO2B3v pACf9TIdCHi1Ji5GI5H5/1+Ol/EpVQUCBI3KhQgH4WIump5qwKqyKu2vkcNqYpXo 3fNQo9jrvsQtqQoX6XIWFBteZ4W9RZPzxjb4LHDLksZny9BE1MHC91jDS40RcJ5q s+vSUtswECelq1wLeHvvP0RlTfqPPRJZcLaUKfO0j76eDZC1Ao40L8AoNSB0pg+U vw544QUt5X/5bONGAl0sBsHHYlYV1PYSg+UFKSU4//lOCnflyz+sxDNYAdVnHsRq sBZiWYNV9PULt0WW4XLDNwpBx56OaEidOCgCU0ZvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNVbs7SKBbZ/31PqGRVCok/MFHAUwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzliZmRlOTRhLTFkOTUtNGRjZS1iMGIyLTcyNzE3MmY1ZTQ5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgfwgwDQYJKoZIhvcNAQELBQADggEBAGQxe9PqTFDxKTyBOHrtOYKbYu/a LHn8RhVhN5SBhZBJnDLakOKYDHMvWl9ujNwrejgtGRrAo6iT39CeUg0vSS2eZgAr ++cBIIN3p4dehOs0/VWTUqHCDaQELtI5RXQY0MbdXxo20JFW9JoHo0zsaJWNtvAl FecsV0SNZcodYW5x5Di20s4hhAYEGbWE+F4fV7IM9B7iBjdR6peNrJyFxYEzNbOG kKE3MXU3/1kl6Li4XU5Z9HJNjSXvYpIdTS1P5VSZc6nz2G0lK5WGv9oJ5yj+fZNK VpU+eMdIINxQavo1IfWFCBcndk93ZqPHkFTE96tm6natY2eUhZVAtNg46aI= -----END CERTIFICATE-----Generated at Fri May 22 13:54:29 2026 by rpki-client