$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa File: ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa (raw, json) Hash identifier: tQkXiMkbzN+26Zz7+1BLwDOSdvzkfu1asl0GQPaDy6o= Subject key identifier: 8D:D7:D0:CB:99:71:0F:D3:AA:32:DE:86:E3:4A:6B:15:32:CF:15:87 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 12E148E5422A16CEE06310919BDB94188BB28EFE Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa Signing time: Tue 19 May 2026 00:50:04 +0000 ROA not before: Tue 19 May 2026 00:50:04 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:48:e5:42:2a:16:ce:e0:63:10:91:9b:db:94:18:8b:b2:8e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 19 00:50:04 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=866b509d87cdf537091642f14f388ca7d4b6c39003005b53157a8ba4dbfdafb1, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:ea:4a:30:65:70:ff:fd:03:f4:cb:8f:53: 74:74:93:08:c6:75:d5:25:26:21:c2:7f:05:26:89: 8c:21:61:72:95:98:31:47:ac:85:9c:af:6e:9a:1c: e8:e5:9b:0b:0f:f0:c9:a1:a2:44:09:3b:f1:bf:73: ab:a2:31:76:3b:6c:3f:91:9e:b4:5b:fa:7a:c0:fb: b4:2a:31:85:e7:45:7c:2f:f8:48:e2:33:d3:9a:e2: 47:83:2b:fd:27:17:7e:92:5d:83:52:ab:f9:07:15: f3:60:bd:61:5f:90:a9:46:db:35:c8:e7:2f:f8:a4: 39:18:f9:b3:09:7e:d6:96:55:d5:d6:b4:48:bb:38: 4c:16:44:0a:b7:4e:e5:45:96:d8:d2:b6:5b:2b:ba: 8a:09:6b:3d:18:a2:bf:62:f9:2a:7c:ef:79:ee:ef: 90:00:41:af:99:ab:e7:f9:d8:3e:f3:fa:06:0b:6b: 8b:90:75:9e:a8:63:64:3d:c2:c3:fd:83:fb:37:4b: 99:4e:c8:96:27:ea:bb:79:0b:3c:33:0b:7b:36:8e: df:e7:11:89:fe:31:e8:66:c7:1c:b2:12:07:94:e6: 68:e5:8b:5a:f6:57:0d:85:0b:ce:5e:72:99:7b:91: 4e:ae:67:27:3d:05:7d:e2:dc:6f:59:1f:ff:33:36: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D7:D0:CB:99:71:0F:D3:AA:32:DE:86:E3:4A:6B:15:32:CF:15:87 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/24 Signature Algorithm: sha256WithRSAEncryption 21:8f:4a:fc:54:cc:1e:6b:bb:f0:e7:09:41:cf:43:70:f7:87: 23:f4:99:74:93:e9:7b:b3:68:65:34:d4:e7:f2:9d:9b:a7:a1: 9d:89:67:f2:cb:27:be:28:38:67:9b:92:87:8d:38:fa:12:f4: 05:d9:da:69:eb:e8:44:f6:dc:dd:34:f8:04:76:8d:3c:8a:ea: 2b:bf:ff:da:0a:90:b4:b7:25:ad:6f:1e:7d:74:14:84:9d:11: 4e:e1:9a:74:6b:f4:1a:3a:94:81:8d:17:d5:03:bb:27:bc:b7: 49:ee:1f:ff:3b:49:a8:07:eb:c1:37:aa:f8:8a:15:a2:3b:6e: ce:57:5f:8d:77:9d:ac:3f:a2:79:32:f4:6f:94:95:98:02:07: 47:2a:92:92:19:c3:d5:91:45:12:5e:9e:87:c3:54:d7:a9:2f: 43:26:66:b7:a0:0b:8e:d1:23:33:67:b4:84:07:1e:12:19:19: af:b2:63:38:44:e7:6c:fd:2c:77:94:d8:3c:03:34:c5:dd:f0: 60:9c:ac:7f:7d:17:60:be:2d:2b:8a:3f:ed:21:79:91:ee:91: a6:a5:99:9a:83:8a:3c:ca:3d:fd:e0:74:08:24:35:af:8b:b0: 1c:f8:71:c4:de:cf:91:94:9a:8d:b6:a2:4c:bc:88:db:b8:e6: 5c:50:b9:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEuFI5UIqFs7gYxCRm9uUGIuyjv4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwNTE5MDA1MDA0WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjZiNTA5ZDg3Y2RmNTM3MDkxNjQyZjE0ZjM4OGNhN2Q0 YjZjMzkwMDMwMDViNTMxNTdhOGJhNGRiZmRhZmIxMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCamupKMGVw//0D9MuPU3R0kwjGddUlJiHCfwUmiYwhYXKV mDFHrIWcr26aHOjlmwsP8MmhokQJO/G/c6uiMXY7bD+RnrRb+nrA+7QqMYXnRXwv +EjiM9Oa4keDK/0nF36SXYNSq/kHFfNgvWFfkKlG2zXI5y/4pDkY+bMJftaWVdXW tEi7OEwWRAq3TuVFltjStlsruooJaz0Yor9i+Sp873nu75AAQa+Zq+f52D7z+gYL a4uQdZ6oY2Q9wsP9g/s3S5lOyJYn6rt5CzwzC3s2jt/nEYn+MehmxxyyEgeU5mjl i1r2Vw2FC85ecpl7kU6uZyc9BX3i3G9ZH/8zNs5lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjdfQy5lxD9OqMt6G40prFTLPFYcwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2VjMGUzYjcwLTY2YmUtNGNiNS1iYzE0LTk1M2Y0ZDJmNWZjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwAwDQYJKoZIhvcNAQELBQADggEBACGPSvxUzB5ru/DnCUHPQ3D3hyP0 mXST6XuzaGU01OfynZunoZ2JZ/LLJ74oOGebkoeNOPoS9AXZ2mnr6ET23N00+AR2 jTyK6iu//9oKkLS3Ja1vHn10FISdEU7hmnRr9Bo6lIGNF9UDuye8t0nuH/87SagH 68E3qviKFaI7bs5XX413naw/onky9G+UlZgCB0cqkpIZw9WRRRJenofDVNepL0Mm ZregC47RIzNntIQHHhIZGa+yYzhE52z9LHeU2DwDNMXd8GCcrH99F2C+LSuKP+0h eZHukaalmZqDijzKPf3gdAgkNa+LsBz4ccTez5GUmo22oky8iNu45lxQuXY= -----END CERTIFICATE-----Generated at Thu May 28 03:32:13 2026 by rpki-client