$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/099bc0c3-9e50-4506-994e-1f8eabf3c434.roa File: 099bc0c3-9e50-4506-994e-1f8eabf3c434.roa (raw, json) Hash identifier: fZBuTZSey57L6qplPSlGD5T1S1Wdu3f/gCwRBRkcizI= Subject key identifier: 31:93:D0:34:6B:FD:A0:68:41:12:6D:9C:A5:A9:2A:26:E3:AD:9F:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EC408781ABB5CE28A50D4BC636FB63B436309B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/099bc0c3-9e50-4506-994e-1f8eabf3c434.roa Signing time: Fri 11 Sep 2026 00:00:09 +0000 ROA not before: Fri 11 Sep 2026 00:00:09 +0000 ROA not after: Thu 10 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 40.39.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c4:08:78:1a:bb:5c:e2:8a:50:d4:bc:63:6f:b6:3b:43:63:09:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 11 00:00:09 2026 GMT Not After : Dec 10 23:59:59 2026 GMT Subject: serialNumber=073861a19f28cb4166cc4af4c09f1acef1685442c1aa9653702b1f1ab450d265, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:e8:d6:d0:b3:48:ad:c5:06:8d:5b:77:65: ec:5a:f2:df:7f:0c:7e:aa:c1:bc:a8:30:ff:dc:62: 5f:0a:8d:bb:68:04:a3:e9:c3:dc:b1:cc:80:ba:a5: e2:56:1a:5b:a1:a5:7f:1d:9b:07:de:f2:41:62:fe: f1:f5:c1:3c:7d:ac:7b:36:b2:4f:f9:21:31:19:dd: ad:df:d3:bb:50:f3:dd:54:a2:22:a8:1b:48:cf:70: d8:39:3c:c4:1f:e7:ee:4f:7c:00:d5:7e:61:97:1b: 0f:a0:85:8d:8c:6c:e8:c6:ec:00:f1:40:00:f9:c7: 0c:9c:52:2f:bb:f7:29:24:b2:46:c8:c3:2b:8d:67: 77:54:5a:5c:84:46:f2:02:20:07:27:2a:70:29:87: 88:f4:94:0c:11:0f:6b:47:cf:f2:e1:50:6c:b5:1a: 22:67:b5:e4:4b:74:b0:09:5c:06:0e:61:9a:a3:42: 66:72:e8:4c:ca:72:17:48:be:ad:09:c8:50:86:2e: e0:9a:fa:a9:fe:66:a7:5f:ed:41:1d:1b:7c:5c:8e: ab:12:9e:52:3d:08:e8:f3:64:91:5d:fd:6d:15:ae: 49:5d:fa:f9:4e:c8:1b:c8:fa:9b:f8:db:42:ca:87: 14:26:05:b7:a4:1b:1f:4c:26:bc:40:06:c3:55:6d: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:93:D0:34:6B:FD:A0:68:41:12:6D:9C:A5:A9:2A:26:E3:AD:9F:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/099bc0c3-9e50-4506-994e-1f8eabf3c434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.39.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:08:61:52:38:55:e3:49:be:ca:d8:80:9a:97:f6:e0:0b:4b: b9:69:ae:c0:79:79:2a:73:07:8d:3b:33:e8:b6:49:aa:19:af: eb:de:3f:88:e4:4e:72:1c:aa:0c:87:c7:3e:51:ff:81:c4:57: a3:10:9b:80:29:9a:79:60:70:72:eb:a7:d3:a5:16:18:53:b8: 07:4c:13:cd:f1:30:87:dc:37:41:ff:23:92:74:0d:a3:b3:d1: 44:ee:fc:53:36:74:a7:01:79:dd:e2:5c:84:be:23:7b:8b:af: 3e:e6:f1:73:8a:0e:cb:97:61:94:46:13:18:f8:c4:8b:2e:54: ca:cf:33:4a:30:86:56:ac:5f:ac:9e:df:84:09:83:91:05:76: 61:1f:64:66:9c:b1:16:9d:63:8a:7b:aa:10:c5:23:5f:03:c1: 5d:7d:b1:58:95:24:26:b8:45:96:62:e9:83:f4:3c:1a:1e:dc: 1a:b5:35:2a:38:7e:a2:1e:3a:60:4d:9d:63:11:ba:ed:e7:27: e8:75:17:5e:42:0b:2c:b9:2f:03:de:1b:03:8a:ed:72:f0:f4: d2:88:16:04:56:57:b7:e7:8a:76:4c:92:b0:42:86:00:1b:55: 11:9e:84:c7:fb:99:c3:01:0c:93:24:6f:8a:91:8c:ac:ce:3a: 6d:3e:9a:0e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULsQIeBq7XOKKUNS8Y2+2O0NjCbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTExMDAwMDA5WhcNMjYxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzM4NjFhMTlmMjhjYjQxNjZjYzRhZjRjMDlmMWFjZWYx Njg1NDQyYzFhYTk2NTM3MDJiMWYxYWI0NTBkMjY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC16ejW0LNIrcUGjVt3Zexa8t9/DH6qwbyoMP/cYl8Kjbto BKPpw9yxzIC6peJWGluhpX8dmwfe8kFi/vH1wTx9rHs2sk/5ITEZ3a3f07tQ891U oiKoG0jPcNg5PMQf5+5PfADVfmGXGw+ghY2MbOjG7ADxQAD5xwycUi+79ykkskbI wyuNZ3dUWlyERvICIAcnKnAph4j0lAwRD2tHz/LhUGy1GiJnteRLdLAJXAYOYZqj QmZy6EzKchdIvq0JyFCGLuCa+qn+Zqdf7UEdG3xcjqsSnlI9COjzZJFd/W0Vrkld +vlOyBvI+pv420LKhxQmBbekGx9MJrxABsNVbUe1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMZPQNGv9oGhBEm2cpakqJuOtn8AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5OWJjMGMzLTllNTAtNDUwNi05OTRlLTFmOGVhYmYzYzQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoJzANBgkqhkiG9w0BAQsFAAOCAQEAIAhhUjhV40m+ytiAmpf24AtLuWmu wHl5KnMHjTsz6LZJqhmv694/iOROchyqDIfHPlH/gcRXoxCbgCmaeWBwcuun06UW GFO4B0wTzfEwh9w3Qf8jknQNo7PRRO78UzZ0pwF53eJchL4je4uvPubxc4oOy5dh lEYTGPjEiy5Uys8zSjCGVqxfrJ7fhAmDkQV2YR9kZpyxFp1jinuqEMUjXwPBXX2x WJUkJrhFlmLpg/Q8Gh7cGrU1Kjh+oh46YE2dYxG67ecn6HUXXkILLLkvA94bA4rt cvD00ogWBFZXt+eKdkySsEKGABtVEZ6Ex/uZwwEMkyRvipGMrM46bT6aDg== -----END CERTIFICATE-----Generated at Thu Sep 17 16:53:28 2026 by rpki-client