$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/181b28b1-4ed2-4ee1-91b5-7ef9a0ee646d.roa File: 181b28b1-4ed2-4ee1-91b5-7ef9a0ee646d.roa (raw, json) Hash identifier: U3MQlTkLUE/nAkysaaR9ZI9B49icyCL+RkldPNO/3TU= Subject key identifier: 29:DF:74:4C:6C:5D:39:61:3B:3C:0A:CC:98:20:9F:DA:1B:26:CB:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C7E4C22F9249E64BE968F050C57E8BFF85DE158 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/181b28b1-4ed2-4ee1-91b5-7ef9a0ee646d.roa Signing time: Fri 07 Aug 2026 00:30:48 +0000 ROA not before: Fri 07 Aug 2026 00:30:48 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7e:4c:22:f9:24:9e:64:be:96:8f:05:0c:57:e8:bf:f8:5d:e1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:30:48 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=4023bfbc2b9de835a0f6692ae40a3aa54b04a9143cd4e21454c9c8d63177ff77, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:09:41:02:a6:99:9b:cc:5f:72:fd:66:d4: 85:48:48:57:fb:14:ca:e4:11:8c:c7:48:18:2a:80: 2b:ad:b3:ca:6b:e0:7f:5e:bd:6e:9b:07:90:65:c8: ca:14:f0:53:31:3a:d9:90:e6:02:42:4e:98:7b:a2: 23:fe:95:76:90:18:a9:c7:e5:2a:55:14:4a:f6:50: 3b:5e:02:e3:91:31:d2:bc:1a:5c:a5:19:62:01:fc: 2b:75:1c:33:ce:0b:ae:50:ed:3b:6e:cc:8d:3a:99: cf:fb:e2:fe:34:ed:06:4c:d1:e8:8a:3d:6f:f7:f1: 09:aa:d9:24:24:8f:7c:c7:f8:ee:11:b8:70:50:d0: 85:ea:53:c6:c2:86:22:92:f9:82:76:06:20:f0:b0: 25:fc:18:4c:d8:0d:30:e9:4c:bd:07:40:5d:8f:90: 33:3b:97:56:fc:b0:47:0c:e5:39:8d:67:ae:7f:29: 67:64:cb:f1:3e:51:03:24:77:f3:4f:48:7a:c5:40: 77:c4:14:83:c5:90:d9:59:4e:c2:69:2c:29:f0:d6: a5:75:26:14:5a:45:fd:cc:0b:86:91:78:85:8c:e2: ce:8e:76:93:d9:35:b0:3f:01:cf:c0:cc:aa:bc:18: 38:1f:5f:05:f3:f8:d7:7a:65:f6:cf:26:2e:df:77: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DF:74:4C:6C:5D:39:61:3B:3C:0A:CC:98:20:9F:DA:1B:26:CB:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/181b28b1-4ed2-4ee1-91b5-7ef9a0ee646d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.126.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:57:6e:45:4c:eb:cc:94:b0:21:8f:df:9f:07:25:95:79:e6: 1d:90:4b:dd:8f:21:2f:53:8d:c3:ed:00:3d:58:0f:dd:fe:dc: b1:7d:13:78:7a:d3:35:8b:2c:31:d4:42:57:b3:8a:71:47:19: 11:c3:33:ce:6d:5e:78:97:18:f3:51:b3:97:26:ec:2c:0d:2c: 91:99:85:0c:7d:58:5f:4b:4f:30:4e:92:9b:82:82:33:26:95: 53:5f:96:84:51:5b:3f:29:1f:f7:4e:03:61:2f:96:a7:14:b9: 55:b3:0b:b1:15:bd:33:d0:aa:e4:d6:2c:37:90:35:11:8e:a3: a6:b9:85:2f:84:c7:79:0e:a2:fe:1d:09:8a:d9:2d:8a:bd:a1: 88:77:cc:1e:9a:7e:72:c3:95:05:5e:13:84:6c:01:50:bb:12: 4f:be:28:74:42:34:f1:52:eb:06:db:09:f0:b4:51:5c:d9:dd: 8e:09:c4:7f:63:5f:f0:5f:28:78:b9:69:50:06:02:1a:1a:0c: 9a:13:6c:d1:35:7e:66:a7:ee:08:2a:46:65:34:39:c6:96:f6: e8:31:6a:f7:26:4d:db:e7:bf:8e:e7:00:1c:52:d9:12:55:36: 7c:35:ae:46:44:0a:37:58:99:5f:54:b4:16:f4:2c:64:8c:02: 84:50:23:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXH5MIvkknmS+lo8FDFfov/hd4VgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAzMDQ4WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDIzYmZiYzJiOWRlODM1YTBmNjY5MmFlNDBhM2FhNTRi MDRhOTE0M2NkNGUyMTQ1NGM5YzhkNjMxNzdmZjc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIIQlBAqaZm8xfcv1m1IVISFf7FMrkEYzHSBgqgCuts8pr 4H9evW6bB5BlyMoU8FMxOtmQ5gJCTph7oiP+lXaQGKnH5SpVFEr2UDteAuORMdK8 GlylGWIB/Ct1HDPOC65Q7TtuzI06mc/74v407QZM0eiKPW/38Qmq2SQkj3zH+O4R uHBQ0IXqU8bChiKS+YJ2BiDwsCX8GEzYDTDpTL0HQF2PkDM7l1b8sEcM5TmNZ65/ KWdky/E+UQMkd/NPSHrFQHfEFIPFkNlZTsJpLCnw1qV1JhRaRf3MC4aReIWM4s6O dpPZNbA/Ac/AzKq8GDgfXwXz+Nd6ZfbPJi7fd94dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKd90TGxdOWE7PArMmCCf2hsmy7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4MWIyOGIxLTRlZDItNGVlMS05MWI1LTdlZjlhMGVlNjQ2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/H4wDQYJKoZIhvcNAQELBQADggEBAI9XbkVM68yUsCGP358HJZV55h2Q S92PIS9TjcPtAD1YD93+3LF9E3h60zWLLDHUQlezinFHGRHDM85tXniXGPNRs5cm 7CwNLJGZhQx9WF9LTzBOkpuCgjMmlVNfloRRWz8pH/dOA2EvlqcUuVWzC7EVvTPQ quTWLDeQNRGOo6a5hS+Ex3kOov4dCYrZLYq9oYh3zB6afnLDlQVeE4RsAVC7Ek++ KHRCNPFS6wbbCfC0UVzZ3Y4JxH9jX/BfKHi5aVAGAhoaDJoTbNE1fman7ggqRmU0 OcaW9ugxavcmTdvnv47nABxS2RJVNnw1rkZECjdYmV9UtBb0LGSMAoRQI7o= -----END CERTIFICATE-----Generated at Thu Sep 17 16:54:24 2026 by rpki-client