$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa File: f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa (raw, json) Hash identifier: ztC2W8V99rGgfKBdihrQMk6lgYoO/YPXqM3NK7Vd4KA= Subject key identifier: 13:47:EC:52:43:7F:65:75:0E:12:B3:46:32:13:7B:D9:E7:05:0C:38 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 7E2B34B11E7132D57878E521B89700F864434206 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa Signing time: Tue 19 May 2026 00:50:27 +0000 ROA not before: Tue 19 May 2026 00:50:27 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2b:34:b1:1e:71:32:d5:78:78:e5:21:b8:97:00:f8:64:43:42:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 19 00:50:27 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=fb398666074b67bf96f69ed63e707b701c626c90eba955b6707e57fcb9b76b01, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3b:95:7b:2e:a0:c1:f3:2a:97:d8:7d:fc:a3: ae:17:52:7a:76:cc:85:19:b5:a0:f7:cd:54:90:cc: 15:0b:8f:97:e8:04:42:2c:04:96:2a:c1:5a:af:ef: b2:25:64:85:aa:04:aa:6f:e7:1f:ea:d3:14:84:d5: 89:dd:ef:40:bd:5b:fc:a7:ad:dd:b8:47:6c:97:79: 93:87:55:77:8a:dd:f9:7a:77:86:cd:5f:14:cf:80: 13:14:c2:c8:d8:12:3c:08:af:b7:ee:ba:88:6a:3d: 6e:fc:6d:e3:ce:69:d4:d3:b9:79:13:d9:ce:77:aa: f6:c3:e9:78:bb:12:b8:db:48:19:20:4a:8a:08:16: 02:85:00:8e:1f:72:d4:46:91:da:f2:50:fe:6c:3c: b3:33:0a:9d:b3:d5:fd:c2:f9:a7:10:f9:76:8c:b9: 2f:36:b8:df:3b:44:64:91:62:ec:11:e9:c4:ad:6d: 2a:a0:7f:f4:72:cd:45:ea:15:a5:d7:39:59:9f:90: aa:44:34:ba:7e:b5:d6:c3:dc:90:ca:be:c0:16:55: d9:d7:f6:28:6e:7b:e8:71:f1:70:ef:2f:50:12:a8: ca:4b:11:5e:55:2d:db:9d:77:4c:45:f9:20:7d:6d: 83:a7:14:41:69:af:b3:9d:a9:0e:af:50:3b:51:72: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:47:EC:52:43:7F:65:75:0E:12:B3:46:32:13:7B:D9:E7:05:0C:38 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0f:7e:54:5e:cb:cc:ca:96:3e:31:64:e9:dd:ee:b8:c9:2f:5e: 09:31:81:e0:ec:a5:0b:ba:37:29:35:a8:2f:76:3e:03:e5:84: 22:ab:82:3a:61:8d:3d:e5:a1:5e:bf:a8:0c:37:6f:11:8f:5b: 59:bf:a0:1f:41:e5:bd:60:4a:57:92:68:0a:4b:3c:70:1b:c9: 08:41:52:97:d3:f1:2f:08:cf:f5:95:ce:48:9c:17:ee:0e:1b: eb:ba:93:2c:ec:0d:d6:61:d5:1b:e7:5d:ee:61:9d:f6:17:78: 30:3e:9b:e3:6a:b7:e9:87:5c:25:e8:d4:70:c3:8a:71:34:d5: b9:fa:b6:d7:c6:2c:b3:6f:17:80:16:08:c4:c9:1c:1d:f8:f2: d5:1e:52:9b:ab:01:70:85:fb:33:e7:ad:19:36:e7:31:30:f0: f7:29:d7:bc:11:60:e3:e1:2a:bd:10:0c:03:e0:e8:8c:b8:f8: e5:97:fc:a4:5a:f3:0a:19:ff:fc:9b:4b:9a:ab:0f:31:1c:41: 83:40:dc:55:1d:70:b3:d4:e6:2c:e2:7a:ae:15:ea:36:2f:e0: bf:b8:6a:bb:c5:e9:95:8f:17:3a:f9:cb:0a:99:6c:e8:84:c7: 58:90:2f:52:5d:fd:f4:e5:2a:39:38:e5:de:55:f9:47:87:4b: ed:c1:e3:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfis0sR5xMtV4eOUhuJcA+GRDQgYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwNTE5MDA1MDI3WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjM5ODY2NjA3NGI2N2JmOTZmNjllZDYzZTcwN2I3MDFj NjI2YzkwZWJhOTU1YjY3MDdlNTdmY2I5Yjc2YjAxMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlO5V7LqDB8yqX2H38o64XUnp2zIUZtaD3zVSQzBULj5fo BEIsBJYqwVqv77IlZIWqBKpv5x/q0xSE1Ynd70C9W/ynrd24R2yXeZOHVXeK3fl6 d4bNXxTPgBMUwsjYEjwIr7fuuohqPW78bePOadTTuXkT2c53qvbD6Xi7ErjbSBkg SooIFgKFAI4fctRGkdryUP5sPLMzCp2z1f3C+acQ+XaMuS82uN87RGSRYuwR6cSt bSqgf/RyzUXqFaXXOVmfkKpENLp+tdbD3JDKvsAWVdnX9ihue+hx8XDvL1ASqMpL EV5VLdudd0xF+SB9bYOnFEFpr7OdqQ6vUDtRcghNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE0fsUkN/ZXUOErNGMhN72ecFDDgwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2YyZTVlMTFjLWY0ZTAtNGY5MS04ZWQxLWE2Y2JhNmM1ZTI4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdgfwAwDQYJKoZIhvcNAQELBQADggEBAA9+VF7LzMqWPjFk6d3uuMkvXgkx geDspQu6Nyk1qC92PgPlhCKrgjphjT3loV6/qAw3bxGPW1m/oB9B5b1gSleSaApL PHAbyQhBUpfT8S8Iz/WVzkicF+4OG+u6kyzsDdZh1RvnXe5hnfYXeDA+m+Nqt+mH XCXo1HDDinE01bn6ttfGLLNvF4AWCMTJHB348tUeUpurAXCF+zPnrRk25zEw8Pcp 17wRYOPhKr0QDAPg6Iy4+OWX/KRa8woZ//ybS5qrDzEcQYNA3FUdcLPU5izieq4V 6jYv4L+4arvF6ZWPFzr5ywqZbOiEx1iQL1Jd/fTlKjk45d5V+UeHS+3B48c= -----END CERTIFICATE-----Generated at Fri May 22 13:55:32 2026 by rpki-client