$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa File: 1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa (raw, json) Hash identifier: lMOYo49s+1p1YQyZAwIHfYaRsk8zi/EME6prPLMRp+A= Subject key identifier: 4C:EB:28:29:D8:90:34:43:BF:2E:02:44:63:F2:80:06:93:C1:6A:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38F3F663C3C961B0641B4BB268EB5F5B1B6D08A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa Signing time: Tue 04 Aug 2026 02:00:12 +0000 ROA not before: Tue 04 Aug 2026 02:00:12 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 56.128.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f3:f6:63:c3:c9:61:b0:64:1b:4b:b2:68:eb:5f:5b:1b:6d:08:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:00:12 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=79687792724120c61834934d78c39b9790d60ed87d56fd97c1d3532ee1af7d58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:8f:0e:93:98:a5:a3:59:98:fe:60:8d:56: 47:83:fa:5e:43:85:d2:f0:92:d2:6d:d3:35:e6:12: 4f:c1:b7:ab:d5:90:56:df:4b:5f:54:0f:34:0a:62: 5c:c1:66:43:2c:70:5d:75:67:53:91:78:b9:51:f6: 7d:6f:1f:a5:99:54:45:b5:7d:2a:89:19:35:55:22: c4:83:fd:a2:6d:91:96:7c:f5:25:94:5d:53:7f:99: d0:2e:2e:f0:f4:71:7e:1c:61:f2:05:67:90:ac:c5: 00:83:01:1d:c7:c9:1d:43:82:72:51:59:b0:1f:28: 61:6a:ba:1a:0a:87:f5:d1:c6:4e:75:09:93:c2:32: c3:d3:3e:ba:9f:6b:ed:2f:c4:a6:38:e3:d8:c8:79: 77:ed:d5:96:bf:30:f2:6f:a3:06:37:8e:a0:a5:9d: ee:21:05:17:3c:ef:6d:c8:a4:a9:8b:74:a3:ac:40: ff:5c:03:c0:0d:e1:50:f0:9f:0e:df:fa:b9:78:7d: 61:93:30:eb:6d:81:44:54:5c:0b:25:5b:84:9a:bc: ad:03:cf:27:0d:6d:c0:1c:21:0d:36:a4:60:83:6b: 7b:9c:0d:21:7c:6a:22:cf:13:92:ad:30:d8:06:5d: 33:da:db:4b:6c:4e:8a:e4:1a:c9:d9:0b:da:38:e7: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EB:28:29:D8:90:34:43:BF:2E:02:44:63:F2:80:06:93:C1:6A:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption c4:0c:47:17:73:90:d6:18:cd:82:ca:69:17:b9:6b:f2:2f:85: fa:4d:82:4b:72:5f:14:ef:b1:1c:a7:4a:63:a8:5e:06:61:6e: 9b:29:31:18:40:96:e2:0e:eb:57:d6:c3:26:14:52:d6:d2:b2: 8f:cc:26:ce:8f:d8:5d:71:21:68:71:ea:19:3f:9a:37:65:15: 7d:28:6d:d1:26:02:41:4a:91:4f:ec:1e:ab:38:62:80:b0:ff: 4f:85:1f:de:b5:11:b4:bc:39:d1:5b:6c:30:ff:ba:60:2f:13: ff:99:16:52:51:c0:c5:6e:36:03:9a:50:2d:af:f6:a7:8f:2f: f8:fe:0c:84:31:6e:dc:22:06:a7:e7:3a:5c:0b:a7:3b:cc:a1: 81:fd:4f:8b:89:d5:9d:96:86:5d:5b:03:d7:79:53:7f:98:1c: d9:34:88:66:12:b3:07:43:8a:b7:4b:f6:4a:78:94:71:d2:5c: 67:6d:b3:41:1e:5e:66:67:34:f1:a5:f0:75:02:a0:f6:cd:51: 4f:99:f8:8c:2d:6c:24:1c:f7:19:2f:69:74:16:16:2e:7f:6f: 1e:89:e0:d4:d7:d6:f1:fd:e1:59:78:8d:ce:2e:4d:24:d9:74: 71:84:81:0f:d6:91:1e:bc:21:d1:7b:bd:d2:19:bf:aa:d8:07: 7c:f7:8b:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOPP2Y8PJYbBkG0uyaOtfWxttCKUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIwMDEyWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTY4Nzc5MjcyNDEyMGM2MTgzNDkzNGQ3OGMzOWI5Nzkw ZDYwZWQ4N2Q1NmZkOTdjMWQzNTMyZWUxYWY3ZDU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgtI8Ok5ilo1mY/mCNVkeD+l5DhdLwktJt0zXmEk/Bt6vV kFbfS19UDzQKYlzBZkMscF11Z1OReLlR9n1vH6WZVEW1fSqJGTVVIsSD/aJtkZZ8 9SWUXVN/mdAuLvD0cX4cYfIFZ5CsxQCDAR3HyR1DgnJRWbAfKGFquhoKh/XRxk51 CZPCMsPTPrqfa+0vxKY449jIeXft1Za/MPJvowY3jqClne4hBRc8723IpKmLdKOs QP9cA8AN4VDwnw7f+rl4fWGTMOttgURUXAslW4SavK0DzycNbcAcIQ02pGCDa3uc DSF8aiLPE5KtMNgGXTPa20tsTorkGsnZC9o458XbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTOsoKdiQNEO/LgJEY/KABpPBauAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmOTIwOGRiLTkxYTAtNDJkOS1hMWQ0LTRiY2JkNWE3NDA3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4gDANBgkqhkiG9w0BAQsFAAOCAQEAxAxHF3OQ1hjNgsppF7lr8i+F+k2C S3JfFO+xHKdKY6heBmFumykxGECW4g7rV9bDJhRS1tKyj8wmzo/YXXEhaHHqGT+a N2UVfSht0SYCQUqRT+weqzhigLD/T4Uf3rURtLw50VtsMP+6YC8T/5kWUlHAxW42 A5pQLa/2p48v+P4MhDFu3CIGp+c6XAunO8yhgf1Pi4nVnZaGXVsD13lTf5gc2TSI ZhKzB0OKt0v2SniUcdJcZ22zQR5eZmc08aXwdQKg9s1RT5n4jC1sJBz3GS9pdBYW Ln9vHong1NfW8f3hWXiNzi5NJNl0cYSBD9aRHrwh0Xu90hm/qtgHfPeLeQ== -----END CERTIFICATE-----Generated at Thu Sep 17 16:57:29 2026 by rpki-client