$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/c55a290b-41d8-45d1-92c7-f62f4c5b237d.roa File: c55a290b-41d8-45d1-92c7-f62f4c5b237d.roa (raw, json) Hash identifier: 5+PTnn3WDEbHAB1e4+Vo/m5gbfb57Hx/k+zxtET2S3g= Subject key identifier: BF:CE:00:05:B7:98:F5:95:4A:A8:50:DC:7E:60:17:36:AE:D3:F4:B0 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 4DD41115E6BE025B2BECD370407EDE8011A2265A Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/c55a290b-41d8-45d1-92c7-f62f4c5b237d.roa Signing time: Thu 30 Apr 2026 00:00:06 +0000 ROA not before: Thu 30 Apr 2026 00:00:06 +0000 ROA not after: Wed 29 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d4:11:15:e6:be:02:5b:2b:ec:d3:70:40:7e:de:80:11:a2:26:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Apr 30 00:00:06 2026 GMT Not After : Jul 29 23:59:59 2026 GMT Subject: serialNumber=aa401c7ad8304035c6fc92714f3522658d3481bdbd4f2f9131701079e2a5e018, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:20:26:b7:08:d2:e1:ce:5d:56:88:5e:fb: db:94:64:7b:9e:8e:a3:e2:78:87:b6:46:44:cd:0a: de:49:30:52:42:4e:44:1f:6b:a5:1f:ff:c1:3a:00: 6c:05:c3:95:25:35:6a:4b:57:4c:98:05:fe:da:9e: 61:b2:86:d1:34:d1:61:69:55:cc:e6:ca:a9:da:39: e1:7b:93:b8:0d:c3:ec:c8:50:83:ec:f2:92:30:d1: fc:25:06:e7:f6:22:02:3e:fa:ac:0a:94:6b:c1:92: 53:76:4b:93:65:9e:a5:82:4c:6c:7c:72:f0:39:00: 4e:37:c9:d5:a6:95:7b:29:24:8e:3f:05:ba:98:69: 87:86:e8:a0:eb:d4:c6:25:90:9f:4a:c9:2e:85:22: 3b:a0:fe:26:99:24:d1:50:68:67:87:97:39:81:36: 62:a1:ee:da:dd:79:8e:45:49:db:e6:ac:ea:5c:78: 52:a4:35:74:95:d6:35:12:31:ae:d6:61:42:f8:af: f5:f7:46:41:7a:47:c2:49:93:ef:51:9d:fa:de:d8: 99:f8:7a:10:94:74:e0:2f:05:27:38:4c:47:3e:05: 0a:cc:ad:12:0c:9b:98:f3:a6:e5:8e:00:f3:4f:cd: d0:69:14:2e:4d:9f:cb:a8:78:b5:9e:5a:8f:7f:c1: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:00:05:B7:98:F5:95:4A:A8:50:DC:7E:60:17:36:AE:D3:F4:B0 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/c55a290b-41d8-45d1-92c7-f62f4c5b237d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.116.0/23 Signature Algorithm: sha256WithRSAEncryption 27:fb:5a:7f:9a:9b:9c:10:bc:2a:72:5e:ed:98:1b:12:94:f9: 75:3a:d9:a7:6c:c8:4b:6f:93:c8:44:73:5a:f1:40:ec:d4:f1: 9b:87:8a:e5:4e:73:99:70:97:34:52:b0:1d:62:d5:a5:f9:39: eb:c2:11:a4:b8:bb:88:1c:37:aa:39:3b:74:f9:d6:f5:5f:a1: 04:51:43:64:16:be:c0:fa:5a:90:94:ff:a3:7d:50:da:94:06: c4:75:ae:bb:0a:15:81:6b:2f:20:cb:79:28:d9:74:c6:79:5f: 8f:d4:16:a3:a5:34:d0:b7:f6:6b:de:b9:f6:5a:0c:f9:7c:5b: f1:1f:2e:c4:1d:ec:2e:25:2a:e4:31:53:05:89:5c:01:1f:81: e5:f6:60:42:e4:09:a3:ef:a7:e3:37:9f:34:af:c2:43:a5:ee: e4:d1:b9:d1:8c:ab:69:5b:43:d1:f8:08:13:ed:46:4d:52:66: 65:81:34:4a:4c:ee:cd:99:e2:85:1d:e4:79:50:b4:75:6b:49: 4e:85:94:95:5c:d5:9f:df:4a:e6:f0:c4:70:08:3d:3a:a0:4e: 42:13:e8:c3:d2:a4:8b:eb:49:82:53:f0:56:2f:7a:aa:d7:64: 77:92:b3:39:39:ac:d6:f8:b8:f3:7c:ec:4f:22:c5:77:e2:ce: 55:45:d6:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTdQRFea+Alsr7NNwQH7egBGiJlowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwNDMwMDAwMDA2WhcNMjYwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTQwMWM3YWQ4MzA0MDM1YzZmYzkyNzE0ZjM1MjI2NThk MzQ4MWJkYmQ0ZjJmOTEzMTcwMTA3OWUyYTVlMDE4MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUnSAmtwjS4c5dVohe+9uUZHuejqPieIe2RkTNCt5JMFJC TkQfa6Uf/8E6AGwFw5UlNWpLV0yYBf7anmGyhtE00WFpVczmyqnaOeF7k7gNw+zI UIPs8pIw0fwlBuf2IgI++qwKlGvBklN2S5NlnqWCTGx8cvA5AE43ydWmlXspJI4/ BbqYaYeG6KDr1MYlkJ9KyS6FIjug/iaZJNFQaGeHlzmBNmKh7trdeY5FSdvmrOpc eFKkNXSV1jUSMa7WYUL4r/X3RkF6R8JJk+9Rnfre2Jn4ehCUdOAvBSc4TEc+BQrM rRIMm5jzpuWOAPNPzdBpFC5Nn8uoeLWeWo9/wRdhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv84ABbeY9ZVKqFDcfmAXNq7T9LAwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2M1NWEyOTBiLTQxZDgtNDVkMS05MmM3LWY2MmY0YzViMjM3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgf3QwDQYJKoZIhvcNAQELBQADggEBACf7Wn+am5wQvCpyXu2YGxKU+XU6 2adsyEtvk8hEc1rxQOzU8ZuHiuVOc5lwlzRSsB1i1aX5OevCEaS4u4gcN6o5O3T5 1vVfoQRRQ2QWvsD6WpCU/6N9UNqUBsR1rrsKFYFrLyDLeSjZdMZ5X4/UFqOlNNC3 9mveufZaDPl8W/EfLsQd7C4lKuQxUwWJXAEfgeX2YELkCaPvp+M3nzSvwkOl7uTR udGMq2lbQ9H4CBPtRk1SZmWBNEpM7s2Z4oUd5HlQtHVrSU6FlJVc1Z/fSubwxHAI PTqgTkIT6MPSpIvrSYJT8FYveqrXZHeSszk5rNb4uPN87E8ixXfizlVF1ko= -----END CERTIFICATE-----Generated at Sun May 3 15:23:46 2026 by rpki-client