$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2304bbf7-aaad-4af6-85cf-ac713779380e.roa File: 2304bbf7-aaad-4af6-85cf-ac713779380e.roa (raw, json) Hash identifier: 3Fm+9nac6MP85me/HylCLIYB8NLxvJeAt8EYlBkxgDE= Subject key identifier: A1:E8:7B:23:DA:2D:50:E6:1A:84:21:A0:18:D7:82:09:85:44:CA:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 570CF6CEAC5AA22280E70664CF816C2AC12BB71E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2304bbf7-aaad-4af6-85cf-ac713779380e.roa Signing time: Tue 04 Aug 2026 02:21:25 +0000 ROA not before: Tue 04 Aug 2026 02:21:25 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0c:f6:ce:ac:5a:a2:22:80:e7:06:64:cf:81:6c:2a:c1:2b:b7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:21:25 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=f20ebed36609e35d361cc4af83787d86f5c783e0b6739dc554c3a7b2ad10cdb9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:8b:c2:28:97:e7:cc:5b:db:65:27:23:72: a8:35:c3:43:d5:21:84:ca:e0:82:b1:46:92:a9:b1: 64:a2:df:53:07:11:53:83:ba:59:d0:78:16:94:98: e2:11:a5:50:63:75:c4:dc:41:3a:b7:12:33:ba:2a: 59:58:65:0b:88:35:a6:8d:f7:07:7e:dd:70:a6:a0: c9:13:70:62:13:f1:63:e5:37:8c:53:60:cd:fa:87: 6e:0e:d1:f4:17:6d:6b:90:12:24:c0:a1:59:1e:73: 66:40:22:ab:87:aa:f8:da:be:ab:a4:ab:17:4b:9f: 54:4b:3c:9a:49:bb:cb:ba:73:29:57:f8:2f:7f:bd: 0d:c5:98:78:6e:b6:8a:0f:23:53:88:63:a9:09:b5: 92:9c:cc:e6:e7:10:d0:9a:9a:be:72:18:fc:1f:d7: 06:49:7d:16:13:e9:06:1d:29:22:b7:f5:73:a6:44: a1:34:e2:38:ac:38:bb:bd:f3:fd:0a:62:e4:12:38: 1a:5c:72:db:92:aa:a9:8f:b0:ac:d2:9c:c5:14:bd: d7:5d:ef:a4:82:69:96:b4:58:5c:00:0e:2f:6e:b2: 87:5e:2f:e6:88:a5:c0:d5:53:2c:91:1e:f6:32:b4: 6e:fb:da:5c:ea:3e:6b:26:3f:bf:87:75:92:3c:85: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:7B:23:DA:2D:50:E6:1A:84:21:A0:18:D7:82:09:85:44:CA:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2304bbf7-aaad-4af6-85cf-ac713779380e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.68.0/22 Signature Algorithm: sha256WithRSAEncryption 45:81:8d:3c:c6:f8:d3:47:b6:95:c5:8b:fe:65:c0:a3:eb:04: 2f:60:e0:8b:fc:09:34:e0:ba:4b:d9:92:90:6e:2f:22:03:88: 63:f2:2f:91:b1:62:8d:0c:35:6f:97:29:98:c4:1b:e9:4a:a9: 85:5b:55:b2:5c:0f:6f:64:1c:ed:8e:87:34:d1:c0:b4:58:0e: d1:c0:39:6a:1b:13:ee:52:a2:c4:50:74:2b:21:4c:bd:ad:9e: 25:4e:1b:93:ff:73:2f:28:c1:c0:5a:6a:27:22:91:c9:f4:51: f9:b1:a9:7c:8f:9e:93:b8:83:cf:c5:64:29:ad:55:ac:22:c6: 5f:e7:3f:1c:fa:81:3a:fe:aa:ec:c4:e9:65:43:f7:7e:2e:06: 45:9e:7b:97:11:99:ca:cf:77:ef:3a:ce:2e:0c:92:3c:bb:b4: 2b:a9:7a:3d:9e:06:bb:79:82:7c:41:17:65:0d:69:83:d6:00: a4:98:ab:4c:d2:f6:52:ef:4c:95:d6:99:79:fc:ed:7f:d7:b0: 4e:69:df:e4:08:a3:c5:7e:c4:b4:db:6a:61:df:42:38:5d:97: 3d:80:e4:4a:42:d8:b4:41:6f:2c:a7:7e:d2:f4:ae:bb:e8:e3: c7:95:54:71:90:3e:eb:35:4a:65:06:15:aa:02:5c:c6:c0:cf: e5:52:d3:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVwz2zqxaoiKA5wZkz4FsKsErtx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIyMTI1WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjBlYmVkMzY2MDllMzVkMzYxY2M0YWY4Mzc4N2Q4NmY1 Yzc4M2UwYjY3MzlkYzU1NGMzYTdiMmFkMTBjZGI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+f4vCKJfnzFvbZScjcqg1w0PVIYTK4IKxRpKpsWSi31MH EVODulnQeBaUmOIRpVBjdcTcQTq3EjO6KllYZQuINaaN9wd+3XCmoMkTcGIT8WPl N4xTYM36h24O0fQXbWuQEiTAoVkec2ZAIquHqvjavqukqxdLn1RLPJpJu8u6cylX +C9/vQ3FmHhutooPI1OIY6kJtZKczObnENCamr5yGPwf1wZJfRYT6QYdKSK39XOm RKE04jisOLu98/0KYuQSOBpcctuSqqmPsKzSnMUUvddd76SCaZa0WFwADi9usode L+aIpcDVUyyRHvYytG772lzqPmsmP7+HdZI8hR/VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoeh7I9otUOYahCGgGNeCCYVEygowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzMDRiYmY3LWFhYWQtNGFmNi04NWNmLWFjNzEzNzc5MzgwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBskQwDQYJKoZIhvcNAQELBQADggEBAEWBjTzG+NNHtpXFi/5lwKPrBC9g 4Iv8CTTgukvZkpBuLyIDiGPyL5GxYo0MNW+XKZjEG+lKqYVbVbJcD29kHO2OhzTR wLRYDtHAOWobE+5SosRQdCshTL2tniVOG5P/cy8owcBaaicikcn0UfmxqXyPnpO4 g8/FZCmtVawixl/nPxz6gTr+quzE6WVD934uBkWee5cRmcrPd+86zi4Mkjy7tCup ej2eBrt5gnxBF2UNaYPWAKSYq0zS9lLvTJXWmXn87X/XsE5p3+QIo8V+xLTbamHf Qjhdlz2A5EpC2LRBbyynftL0rrvo48eVVHGQPus1SmUGFaoCXMbAz+VS03Y= -----END CERTIFICATE-----Generated at Thu Sep 17 15:35:28 2026 by rpki-client