$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa File: 03003920-cbea-43f1-870c-84e084be150a.roa (raw, json) Hash identifier: 45/RlTpUlRfB0gVQNc4/QMKRy8wdbot6SHtdbCFh7ao= Subject key identifier: C4:83:CB:14:0D:09:3E:4B:0C:C2:2A:B8:AE:C4:1D:31:7E:15:27:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F66981F878A16F9AC6DB508CDE1A43586A6EE99 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa Signing time: Sat 08 Aug 2026 00:00:43 +0000 ROA not before: Sat 08 Aug 2026 00:00:43 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:66:98:1f:87:8a:16:f9:ac:6d:b5:08:cd:e1:a4:35:86:a6:ee:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:43 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=7352cb1f61e96c4c3f75364e24baef64980354d90661aad21e711132030cd5bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:6a:1b:56:67:46:6c:f0:fe:f1:f4:c6:50:c2: d6:7b:8f:6f:42:04:a9:78:19:9a:80:5b:6f:64:d3: 55:48:3b:45:e3:3e:6e:45:19:d3:0f:6d:05:a5:2d: b0:9b:b0:23:ea:88:0c:0d:36:87:43:39:c6:30:7c: 16:be:33:42:15:9a:e6:42:4e:ef:f5:93:95:6a:ff: 40:b1:7b:cd:c8:7e:2e:58:8b:99:26:3a:77:ec:01: 20:ac:5a:b8:e2:28:e4:f1:8b:b2:6b:e0:30:66:99: a2:fd:4c:d3:30:64:03:6e:e0:d5:4d:cd:7c:e6:cd: 69:3d:63:89:13:57:c5:fe:52:da:20:ec:e8:c2:67: 9e:0c:02:92:02:77:e2:bc:c0:b9:69:44:f0:9c:7e: dc:76:e2:ef:27:21:e3:14:f1:da:f9:27:fb:ed:8e: ab:86:32:cf:06:56:69:b6:6e:c0:e2:de:da:1d:98: 7b:e3:ef:da:86:10:68:cb:2d:62:99:08:cf:a8:24: 3f:36:7c:03:fc:27:70:9f:bf:f9:55:b1:de:c8:3b: 72:5d:0b:d4:50:f9:b4:64:02:7c:57:7c:d8:ea:24: d6:db:c1:32:3b:ba:da:61:95:5f:c7:df:80:a0:bb: 9a:a3:f6:dd:98:95:d3:09:ad:4b:af:3d:e2:66:79: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:83:CB:14:0D:09:3E:4B:0C:C2:2A:B8:AE:C4:1D:31:7E:15:27:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.101.0/24 Signature Algorithm: sha256WithRSAEncryption ac:35:bb:b6:0b:81:6d:d7:e2:60:e0:a4:15:75:67:4f:31:c3: 8e:1b:de:4e:f4:3a:c2:0d:4a:5b:d2:89:a5:9c:90:66:d6:56: 5a:14:7b:67:67:50:62:d9:b1:14:9c:eb:b2:a8:00:2c:f5:54: 07:cb:e9:e6:51:93:c0:b6:ea:73:19:e8:c1:4a:f0:5f:0f:d2: 5f:00:b0:5f:4c:6e:ea:eb:44:85:64:3f:8b:4c:b3:2c:7d:09: 1f:19:da:a5:bb:49:5d:10:44:03:86:b2:c9:a2:75:b4:3d:22: 24:46:d9:0c:d4:21:69:f4:f4:99:7a:5a:30:b2:20:8e:3b:f8: 4e:f2:27:89:65:42:2d:47:d1:39:52:16:db:13:36:61:4c:8c: cb:d3:7b:7b:c6:87:69:24:e6:ce:86:c7:13:58:cb:f0:5c:92: 6a:d7:17:43:24:18:f6:0f:25:c3:23:ae:3b:b8:77:98:cc:94: 83:33:f8:88:ed:da:82:1a:73:b7:fa:25:2e:00:a4:b0:15:9a: 70:8d:d9:95:20:36:d5:cd:db:35:12:de:4a:2d:36:fa:06:36: e6:16:d0:77:55:79:d9:13:63:e7:41:1c:9b:f8:91:7f:6d:90: 27:58:0c:e2:25:84:68:71:73:0e:36:2c:83:d1:6f:50:22:7d: 36:16:5e:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP2aYH4eKFvmsbbUIzeGkNYam7pkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMDQzWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzUyY2IxZjYxZTk2YzRjM2Y3NTM2NGUyNGJhZWY2NDk4 MDM1NGQ5MDY2MWFhZDIxZTcxMTEzMjAzMGNkNWJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD8ahtWZ0Zs8P7x9MZQwtZ7j29CBKl4GZqAW29k01VIO0Xj Pm5FGdMPbQWlLbCbsCPqiAwNNodDOcYwfBa+M0IVmuZCTu/1k5Vq/0Cxe83Ifi5Y i5kmOnfsASCsWrjiKOTxi7Jr4DBmmaL9TNMwZANu4NVNzXzmzWk9Y4kTV8X+Utog 7OjCZ54MApICd+K8wLlpRPCcftx24u8nIeMU8dr5J/vtjquGMs8GVmm2bsDi3tod mHvj79qGEGjLLWKZCM+oJD82fAP8J3Cfv/lVsd7IO3JdC9RQ+bRkAnxXfNjqJNbb wTI7utphlV/H34Cgu5qj9t2YldMJrUuvPeJmeQcXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxIPLFA0JPksMwiq4rsQdMX4VJ5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzMDAzOTIwLWNiZWEtNDNmMS04NzBjLTg0ZTA4NGJlMTUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GUwDQYJKoZIhvcNAQELBQADggEBAKw1u7YLgW3X4mDgpBV1Z08xw44b 3k70OsINSlvSiaWckGbWVloUe2dnUGLZsRSc67KoACz1VAfL6eZRk8C26nMZ6MFK 8F8P0l8AsF9MburrRIVkP4tMsyx9CR8Z2qW7SV0QRAOGssmidbQ9IiRG2QzUIWn0 9Jl6WjCyII47+E7yJ4llQi1H0TlSFtsTNmFMjMvTe3vGh2kk5s6GxxNYy/BckmrX F0MkGPYPJcMjrju4d5jMlIMz+Ijt2oIac7f6JS4ApLAVmnCN2ZUgNtXN2zUS3kot NvoGNuYW0HdVedkTY+dBHJv4kX9tkCdYDOIlhGhxcw42LIPRb1AifTYWXqU= -----END CERTIFICATE-----Generated at Thu Sep 17 16:22:49 2026 by rpki-client