$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa File: 0b205a6d-48aa-4da0-bceb-029957973791.roa (raw, json) Hash identifier: SgiYH3TXMTHyk0c3LTpsOnS3kuCzD3Mm/tgS7RcJTEs= Subject key identifier: 33:ED:BF:3C:96:D2:1F:27:37:4E:79:D1:87:8B:A0:F9:43:7B:1E:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62326427CD85A4587D4BEEA0B371545D389B44AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa Signing time: Tue 04 Aug 2026 00:51:15 +0000 ROA not before: Tue 04 Aug 2026 00:51:15 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.118.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:32:64:27:cd:85:a4:58:7d:4b:ee:a0:b3:71:54:5d:38:9b:44:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:51:15 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=947e6cd3848016b910323d03d672f4db42e97cd5954af390c44619a8261db9bd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:23:85:04:7a:79:8a:8d:9d:e6:ed:f0:8f: 75:d4:ec:ad:ba:db:be:7b:dc:40:2c:9d:03:c5:28: 6f:68:9d:04:31:77:41:e0:a9:25:b7:39:75:a7:13: 0b:da:09:71:72:1b:b1:1b:e0:45:e2:71:e0:02:f0: 61:78:95:15:10:43:0d:23:c0:b8:ba:32:91:98:df: 9c:5d:6c:d3:4a:02:ad:6e:e5:5e:1f:f7:4e:86:01: 9f:ea:36:d2:4e:e4:b2:cc:46:48:79:cc:24:9b:d3: 6f:67:26:3c:ab:5a:98:b8:52:df:17:73:7f:0a:af: b8:13:b8:69:97:44:a8:b5:19:7e:ef:f5:df:e7:ab: f8:a0:c1:0a:ab:91:65:29:76:63:d9:92:e1:fc:1b: 1f:b3:4c:1e:0d:49:c8:a3:02:da:32:d7:ee:42:81: b9:d2:93:92:73:a1:dd:d8:a9:12:80:54:33:fa:46: 7a:eb:d0:96:bc:cd:2a:64:0f:34:06:8a:7a:46:4b: e9:4e:15:d6:cc:57:5b:c6:64:30:3b:f5:27:db:dc: 44:0e:e0:a2:f6:0e:a9:c5:18:cd:b4:3d:37:32:a2: bb:8a:4b:0e:eb:47:72:82:0e:7e:36:41:ee:77:11: 6c:28:15:8a:56:9d:23:5c:c9:3d:63:dd:96:88:2e: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:ED:BF:3C:96:D2:1F:27:37:4E:79:D1:87:8B:A0:F9:43:7B:1E:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.118.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3e:21:84:5d:32:17:d6:fe:28:96:da:1f:57:17:39:6d:26:9e: d7:90:d7:37:24:5b:71:cc:7c:9d:9b:9a:03:ab:09:47:35:9f: 61:fe:6e:c0:b9:0a:a0:ec:a7:65:5a:39:92:b2:50:ae:12:71: 46:d6:33:24:81:b9:95:07:2a:c1:df:0d:3f:99:b8:6a:01:9a: b9:50:d9:38:ac:9f:6f:46:5f:65:c8:47:f7:42:a3:4d:3d:41: 1f:76:e7:44:be:33:57:b0:e6:c3:d0:66:93:9f:48:aa:47:b9: 92:a7:27:fb:a7:7b:69:a7:1d:ca:01:cb:10:66:92:75:24:05: d2:d3:4a:5a:56:76:f3:fe:c7:b9:94:2d:24:04:81:a7:22:49: 11:4f:c8:75:dc:93:35:fb:67:da:5c:86:12:0e:10:04:6a:c2: 9e:87:1a:a3:51:b2:aa:38:59:ac:ab:27:5d:dd:5a:a5:2a:47: 6c:09:93:86:87:ad:b4:24:2d:ab:1f:75:2f:ab:3b:a9:9a:74: 55:3d:b8:1e:20:79:e5:3f:b3:1a:09:ef:5c:c2:e2:7a:60:2a: 14:99:e2:ca:14:a9:b9:54:da:c5:a4:15:01:0b:2e:b7:00:55: e3:9e:ce:c4:75:37:28:66:47:5c:d5:d7:2a:f1:ef:20:5c:46: 21:98:38:c7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYjJkJ82FpFh9S+6gs3FUXTibRKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDA1MTE1WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDdlNmNkMzg0ODAxNmI5MTAzMjNkMDNkNjcyZjRkYjQy ZTk3Y2Q1OTU0YWYzOTBjNDQ2MTlhODI2MWRiOWJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUICOFBHp5io2d5u3wj3XU7K2627573EAsnQPFKG9onQQx d0HgqSW3OXWnEwvaCXFyG7Eb4EXiceAC8GF4lRUQQw0jwLi6MpGY35xdbNNKAq1u 5V4f906GAZ/qNtJO5LLMRkh5zCSb029nJjyrWpi4Ut8Xc38Kr7gTuGmXRKi1GX7v 9d/nq/igwQqrkWUpdmPZkuH8Gx+zTB4NScijAtoy1+5CgbnSk5Jzod3YqRKAVDP6 Rnrr0Ja8zSpkDzQGinpGS+lOFdbMV1vGZDA79Sfb3EQO4KL2DqnFGM20PTcyoruK Sw7rR3KCDn42Qe53EWwoFYpWnSNcyT1j3ZaILu2ZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM+2/PJbSHyc3TnnRh4ug+UN7HjQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiMjA1YTZkLTQ4YWEtNGRhMC1iY2ViLTAyOTk1Nzk3Mzc5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4djANBgkqhkiG9w0BAQsFAAOCAQEAPiGEXTIX1v4oltofVxc5bSae15DX NyRbccx8nZuaA6sJRzWfYf5uwLkKoOynZVo5krJQrhJxRtYzJIG5lQcqwd8NP5m4 agGauVDZOKyfb0ZfZchH90KjTT1BH3bnRL4zV7Dmw9Bmk59Iqke5kqcn+6d7aacd ygHLEGaSdSQF0tNKWlZ28/7HuZQtJASBpyJJEU/IddyTNftn2lyGEg4QBGrCnoca o1GyqjhZrKsnXd1apSpHbAmThoettCQtqx91L6s7qZp0VT24HiB55T+zGgnvXMLi emAqFJniyhSpuVTaxaQVAQsutwBV457OxHU3KGZHXNXXKvHvIFxGIZg4xw== -----END CERTIFICATE-----Generated at Thu Sep 17 17:11:55 2026 by rpki-client