$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa File: 13aae7f4-cc38-450a-8fe2-e98223497aef.roa (raw, json) Hash identifier: dKn4/IMIHcX8M7KC7Y56rnvNqaQ8tb1hx6b5CHcYbSE= Subject key identifier: 10:76:DC:44:BF:85:12:7F:9D:49:D8:3A:0F:73:03:A3:BB:9B:17:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03B9A4DFB2DCA12E36710D2322390B528ACF40E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa Signing time: Sat 08 Aug 2026 00:00:51 +0000 ROA not before: Sat 08 Aug 2026 00:00:51 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.6.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b9:a4:df:b2:dc:a1:2e:36:71:0d:23:22:39:0b:52:8a:cf:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:51 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=5e209e591f87a1a6d41fb8896cb6b8ceb1c6d3e826b5f03a6b609c0e25c73d8d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:89:72:1f:50:fe:5d:37:b7:22:9d:24:54: 5e:aa:fe:50:54:ba:4a:a6:f9:5a:a0:a4:a5:b1:bf: 88:3e:5d:a5:65:8f:60:f9:f6:f3:0d:3b:81:d2:b1: 98:3d:b7:f6:ad:57:17:5d:0f:41:22:13:e7:09:bd: 8f:43:a1:0b:89:4c:df:2d:c9:58:33:73:4e:13:be: 4a:b9:b5:f0:41:4d:6f:1f:d6:7b:1b:4d:16:3e:46: 14:6d:3b:4d:7b:54:dd:a6:c5:60:3a:51:84:c9:d1: d7:4d:a5:48:8a:c0:3a:71:8c:3c:8b:3f:65:68:f4: 02:25:62:d5:8d:76:b9:60:e0:c5:73:61:55:ae:c7: 81:d7:49:7e:93:12:84:fe:4d:68:a3:04:6e:dd:1b: 4f:29:36:ac:52:ff:8e:97:77:57:33:76:d5:12:c0: 3c:02:b9:95:56:4d:3e:55:a3:70:f7:4e:9c:f6:fd: 46:65:45:09:9c:aa:7d:4f:ee:2e:83:56:ea:5e:cf: 10:70:af:81:52:80:c0:1d:19:70:b6:5c:c7:be:28: e7:f8:7f:bb:af:4a:e2:c7:5a:50:32:c1:e3:29:e1: ba:9f:91:6a:11:6a:36:e3:19:aa:70:ec:b3:2c:2d: 06:9e:82:0e:54:d4:df:32:e6:51:e9:6e:d0:fd:58: 0c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:76:DC:44:BF:85:12:7F:9D:49:D8:3A:0F:73:03:A3:BB:9B:17:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.6.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:73:84:a9:09:f8:5d:72:3d:49:f7:d5:e6:2e:a1:76:17:9b: f2:9c:99:02:24:65:f8:72:fd:77:4e:db:be:57:b2:23:3f:5f: 4c:fc:bc:18:c3:30:13:54:8a:86:08:17:a8:4b:b7:a3:3b:fe: 58:30:b3:ba:f2:a2:a1:b1:23:c9:87:a5:e7:38:51:0e:64:97: a5:88:9b:b2:d2:36:1a:f8:29:fc:10:cd:00:85:72:30:90:cb: c8:ca:88:2f:7f:9f:e5:17:93:9a:38:d8:f7:8f:06:2c:79:7a: 7c:bf:7f:1f:d4:5f:93:c1:79:5b:06:c1:c1:b7:64:c4:c4:ed: 07:6d:a3:98:09:27:ff:a7:9b:f6:56:c4:f6:e6:65:44:8c:45: 86:28:37:1d:aa:cc:b0:f5:52:29:fe:ca:5b:94:f9:99:46:de: f8:fc:cc:3d:1e:ea:71:1c:b2:45:d3:00:be:de:8d:9d:94:d3: a6:5a:20:40:99:83:06:9f:a0:ed:3f:bc:a8:8b:17:cb:65:f6: eb:4d:59:a6:cd:82:5e:cf:6a:61:d3:a9:7b:92:35:5b:3e:5c: 65:5c:68:ec:d6:d0:e3:9c:45:de:e4:e4:ad:71:11:77:10:ad: 39:3c:fc:d1:8c:f0:7f:9f:60:fc:58:a4:40:9b:e7:5e:63:41: e9:51:64:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUA7mk37LcoS42cQ0jIjkLUorPQOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMDUxWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTIwOWU1OTFmODdhMWE2ZDQxZmI4ODk2Y2I2YjhjZWIx YzZkM2U4MjZiNWYwM2E2YjYwOWMwZTI1YzczZDhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxV4lyH1D+XTe3Ip0kVF6q/lBUukqm+VqgpKWxv4g+XaVl j2D59vMNO4HSsZg9t/atVxddD0EiE+cJvY9DoQuJTN8tyVgzc04Tvkq5tfBBTW8f 1nsbTRY+RhRtO017VN2mxWA6UYTJ0ddNpUiKwDpxjDyLP2Vo9AIlYtWNdrlg4MVz YVWux4HXSX6TEoT+TWijBG7dG08pNqxS/46Xd1czdtUSwDwCuZVWTT5Vo3D3Tpz2 /UZlRQmcqn1P7i6DVupezxBwr4FSgMAdGXC2XMe+KOf4f7uvSuLHWlAyweMp4bqf kWoRajbjGapw7LMsLQaegg5U1N8y5lHpbtD9WAxzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEHbcRL+FEn+dSdg6D3MDo7ubF1cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzYWFlN2Y0LWNjMzgtNDUwYS04ZmUyLWU5ODIyMzQ5N2FlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2BjANBgkqhkiG9w0BAQsFAAOCAQEArnOEqQn4XXI9SffV5i6hdheb8pyZ AiRl+HL9d07bvleyIz9fTPy8GMMwE1SKhggXqEu3ozv+WDCzuvKiobEjyYel5zhR DmSXpYibstI2Gvgp/BDNAIVyMJDLyMqIL3+f5ReTmjjY948GLHl6fL9/H9Rfk8F5 WwbBwbdkxMTtB22jmAkn/6eb9lbE9uZlRIxFhig3HarMsPVSKf7KW5T5mUbe+PzM PR7qcRyyRdMAvt6NnZTTplogQJmDBp+g7T+8qIsXy2X2601Zps2CXs9qYdOpe5I1 Wz5cZVxo7NbQ45xF3uTkrXERdxCtOTz80Yzwf59g/FikQJvnXmNB6VFkCg== -----END CERTIFICATE-----Generated at Fri Sep 4 20:31:35 2026 by rpki-client