$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa File: 01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa (raw, json) Hash identifier: xomGANKXu+RESEKJ9C8VgXcydefNlOKEUFxyw+w0bp8= Subject key identifier: 14:39:C1:6C:BF:B1:82:E6:16:47:4A:76:B5:83:BC:0D:48:E6:AF:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19EDECA97E695384EA9F26F54122171FDB76818B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa Signing time: Tue 04 Aug 2026 00:21:18 +0000 ROA not before: Tue 04 Aug 2026 00:21:18 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 204.236.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ed:ec:a9:7e:69:53:84:ea:9f:26:f5:41:22:17:1f:db:76:81:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:21:18 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=3e1e666f127a01034317217d2caea6fc69447525f104c54e8115c388f3f54679, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:c1:3c:f5:95:ce:1f:3f:b2:9e:89:49:ac: 1c:a1:6a:47:2a:01:cb:e0:2e:94:22:f0:b6:be:ed: f8:1f:1b:0d:0a:5c:8f:86:49:d4:d3:16:dc:ea:5c: 1f:82:bc:0f:1b:93:ee:4b:fe:62:b2:70:11:29:5e: 28:d1:d6:bf:f5:b5:35:ee:2f:80:8d:e6:a2:e7:62: 4b:7d:89:ef:19:04:d6:0c:0d:18:4a:4a:f6:82:51: 62:20:10:4c:82:7c:43:ca:69:b4:e8:fe:68:f0:ca: fe:e1:40:ec:23:83:a7:18:ef:fa:a4:58:29:49:1c: 9a:09:8f:30:cb:dc:13:5f:80:96:7f:49:62:a0:f3: 6c:c6:43:45:c0:32:03:d7:37:fe:16:bb:ce:3e:08: 4c:90:b5:6c:4d:bb:b8:ff:84:a5:0c:fc:82:f4:d3: 64:c0:5a:44:93:ca:7d:09:07:8d:76:3d:ef:74:dd: 53:ed:ea:7a:24:6f:b4:76:61:9e:f5:08:d8:22:8f: 3a:12:ce:79:30:bf:b8:74:e1:2c:bc:87:6c:57:d1: da:38:ac:a6:94:be:4d:20:95:eb:d7:ac:65:53:ac: 03:d7:68:05:8f:82:55:4e:8e:8d:24:2e:51:61:43: 3c:84:91:51:09:88:a5:42:47:98:1f:2b:b0:89:8a: df:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:39:C1:6C:BF:B1:82:E6:16:47:4A:76:B5:83:BC:0D:48:E6:AF:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.192.0/18 Signature Algorithm: sha256WithRSAEncryption 95:1d:b4:d2:0e:a7:bd:3d:fb:72:0a:3d:06:56:63:87:e6:7d: 8c:78:fd:e2:28:fb:16:eb:03:5f:43:6f:76:6d:ba:31:17:3b: 04:47:7e:c6:d0:43:13:a0:0f:f3:4a:77:dd:bd:62:52:b3:1d: 36:42:49:3a:98:35:c8:f3:5f:e4:57:ce:3f:6a:86:64:57:d3: 20:91:e1:76:85:cd:cb:5d:c4:52:ba:8a:62:66:e7:20:65:e8: d4:1d:52:b7:75:09:cf:bc:1b:d6:a7:ea:46:74:a1:9e:73:b6: 62:1a:f8:d2:b4:e4:9d:31:2b:a3:79:9c:fd:09:57:8c:ba:b3: 12:1d:03:4f:b4:e6:6b:08:92:6f:7f:3d:05:4a:41:6f:7b:67: 68:c9:ab:56:e3:37:2e:bd:33:16:39:e6:d3:30:6c:cf:ae:7d: 26:76:f4:7e:20:8c:0b:43:28:2e:7c:2e:96:af:0d:45:85:4b: 15:ef:65:98:74:48:57:03:22:4e:6b:a1:84:76:cf:12:ae:7d: b0:d0:91:6e:10:c2:f0:ef:da:7f:13:3f:3a:42:e6:d0:a9:28: b0:51:d2:c2:61:ce:00:c8:00:21:10:7c:e2:26:13:46:df:b5: d0:5c:c6:47:7c:dc:0e:b0:b4:3a:39:f9:c6:d5:be:76:98:94: 00:15:58:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGe3sqX5pU4Tqnyb1QSIXH9t2gYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAyMTE4WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTFlNjY2ZjEyN2EwMTAzNDMxNzIxN2QyY2FlYTZmYzY5 NDQ3NTI1ZjEwNGM1NGU4MTE1YzM4OGYzZjU0Njc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlAsE89ZXOHz+ynolJrByhakcqAcvgLpQi8La+7fgfGw0K XI+GSdTTFtzqXB+CvA8bk+5L/mKycBEpXijR1r/1tTXuL4CN5qLnYkt9ie8ZBNYM DRhKSvaCUWIgEEyCfEPKabTo/mjwyv7hQOwjg6cY7/qkWClJHJoJjzDL3BNfgJZ/ SWKg82zGQ0XAMgPXN/4Wu84+CEyQtWxNu7j/hKUM/IL002TAWkSTyn0JB412Pe90 3VPt6nokb7R2YZ71CNgijzoSznkwv7h04Sy8h2xX0do4rKaUvk0glevXrGVTrAPX aAWPglVOjo0kLlFhQzyEkVEJiKVCR5gfK7CJit+DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFDnBbL+xguYWR0p2tYO8DUjmrxIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxZmY5YzhmLThkYTktNDRhZS05YjY0LTExNWFkZDBkYjFmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbM7MAwDQYJKoZIhvcNAQELBQADggEBAJUdtNIOp709+3IKPQZWY4fmfYx4 /eIo+xbrA19Db3ZtujEXOwRHfsbQQxOgD/NKd929YlKzHTZCSTqYNcjzX+RXzj9q hmRX0yCR4XaFzctdxFK6imJm5yBl6NQdUrd1Cc+8G9an6kZ0oZ5ztmIa+NK05J0x K6N5nP0JV4y6sxIdA0+05msIkm9/PQVKQW97Z2jJq1bjNy69MxY55tMwbM+ufSZ2 9H4gjAtDKC58LpavDUWFSxXvZZh0SFcDIk5roYR2zxKufbDQkW4QwvDv2n8TPzpC 5tCpKLBR0sJhzgDIACEQfOImE0bftdBcxkd83A6wtDo5+cbVvnaYlAAVWLc= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:32 2026 by rpki-client