$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23a53446-cb7a-4e95-8459-59f35aa8088c.roa File: 23a53446-cb7a-4e95-8459-59f35aa8088c.roa (raw, json) Hash identifier: QKULJoauDcC4O0OFwXLHCvqKXBufsrtZ5q3CEpAGMbM= Subject key identifier: FB:E9:49:17:61:EE:E6:FD:2C:C7:F1:9D:72:8B:AC:13:72:37:D4:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B9E605AA8E3124609BE0C106A3D39EDECFF6310 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23a53446-cb7a-4e95-8459-59f35aa8088c.roa Signing time: Wed 05 Aug 2026 00:20:17 +0000 ROA not before: Wed 05 Aug 2026 00:20:17 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.0.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9e:60:5a:a8:e3:12:46:09:be:0c:10:6a:3d:39:ed:ec:ff:63:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:20:17 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=ab66a6517d54c1f0adf25dce9782f2ae857ce84dd7c516c00eed90e2185ab018, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:6b:85:ad:46:49:b1:29:62:64:ed:ee:40: 2a:2a:db:d6:92:19:c9:ce:81:de:6b:ee:a8:6d:c8: 6e:6f:ba:ea:41:3e:9e:a9:cf:8e:1c:10:3d:1c:4e: 00:7e:2b:19:7c:2a:0f:29:dd:e7:32:84:4f:fc:ea: 15:61:3d:d5:ec:15:12:a7:25:77:10:0c:62:3b:6e: b9:9c:21:35:98:b8:3b:a4:91:7a:39:b5:74:09:81: b4:fe:93:64:c2:db:cb:b0:07:e9:56:bd:3a:3d:2d: e6:2f:4f:e0:ef:cf:a1:81:36:9e:82:98:56:93:87: d7:14:92:f3:31:1f:72:c2:85:13:3d:f7:f1:90:b0: 29:ca:8e:9a:13:f4:23:89:0d:10:80:cc:00:c7:32: ef:77:0d:cf:35:57:1b:81:f6:46:34:6b:a6:32:56: 77:c4:4a:0a:5e:55:13:65:bd:1c:bb:15:16:31:29: 2b:67:ac:66:38:c9:76:a3:99:09:b3:64:9a:9b:24: ac:c2:01:10:98:16:93:b7:8a:a8:0e:07:c0:5b:87: ed:9d:ff:c9:8a:c5:4f:db:fc:66:5a:30:af:18:06: 80:9d:4b:37:63:3e:1f:68:8b:42:ca:68:d5:9c:8e: 8f:5b:90:54:55:d7:e1:b6:ff:a1:0a:4b:96:08:35: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E9:49:17:61:EE:E6:FD:2C:C7:F1:9D:72:8B:AC:13:72:37:D4:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23a53446-cb7a-4e95-8459-59f35aa8088c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.0.0.0/14 Signature Algorithm: sha256WithRSAEncryption 0b:1b:41:fc:d2:07:90:c0:5b:7d:52:e0:32:98:0a:a8:22:fd: 46:ea:5f:5d:f5:7d:5a:02:e8:b0:45:1a:83:32:ff:d3:dd:96: 06:4e:0e:d4:9d:74:44:b4:6d:64:81:a1:d3:af:48:d8:ad:97: f0:39:5e:fc:2c:14:20:7e:2a:b5:28:5a:cc:2b:3b:00:d7:12: 3f:1d:06:40:b7:17:ce:b6:98:6c:e7:31:fa:cd:68:6a:1c:36: cf:a9:87:55:d9:35:9a:73:3a:19:31:ff:aa:8b:39:28:ca:87: 94:96:cc:62:c9:61:e2:6b:dc:56:82:e7:cf:4d:a7:56:54:39: 35:32:76:36:42:83:ac:fd:a0:19:5f:09:ee:d9:fd:55:61:c3: 6b:7f:29:af:ba:f7:19:a1:2f:1f:bd:bb:17:1a:3c:2f:42:45: db:fa:ec:5e:73:5a:69:9a:6a:cb:15:eb:d9:8d:8a:4f:b7:a6: b0:af:3a:75:d8:30:f0:ef:92:e6:0c:23:ea:79:41:10:a7:fa: 6f:d4:f0:2c:74:2c:31:99:66:8c:7f:a5:4c:9d:be:0e:0e:b0: 90:9a:55:f2:6e:cc:51:95:63:84:dc:75:48:39:d9:64:1e:c3: a6:db:71:12:14:7a:41:03:eb:b4:e1:8d:fd:f7:30:eb:4c:79: ee:b3:9c:af -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW55gWqjjEkYJvgwQaj057ez/YxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAyMDE3WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjY2YTY1MTdkNTRjMWYwYWRmMjVkY2U5NzgyZjJhZTg1 N2NlODRkZDdjNTE2YzAwZWVkOTBlMjE4NWFiMDE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGl2uFrUZJsSliZO3uQCoq29aSGcnOgd5r7qhtyG5vuupB Pp6pz44cED0cTgB+Kxl8Kg8p3ecyhE/86hVhPdXsFRKnJXcQDGI7brmcITWYuDuk kXo5tXQJgbT+k2TC28uwB+lWvTo9LeYvT+Dvz6GBNp6CmFaTh9cUkvMxH3LChRM9 9/GQsCnKjpoT9COJDRCAzADHMu93Dc81VxuB9kY0a6YyVnfESgpeVRNlvRy7FRYx KStnrGY4yXajmQmzZJqbJKzCARCYFpO3iqgOB8Bbh+2d/8mKxU/b/GZaMK8YBoCd SzdjPh9oi0LKaNWcjo9bkFRV1+G2/6EKS5YINZBZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU++lJF2Hu5v0sx/GdcousE3I31NUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzYTUzNDQ2LWNiN2EtNGU5NS04NDU5LTU5ZjM1YWE4MDg4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJBADANBgkqhkiG9w0BAQsFAAOCAQEACxtB/NIHkMBbfVLgMpgKqCL9Rupf XfV9WgLosEUagzL/092WBk4O1J10RLRtZIGh069I2K2X8Dle/CwUIH4qtShazCs7 ANcSPx0GQLcXzraYbOcx+s1oahw2z6mHVdk1mnM6GTH/qos5KMqHlJbMYslh4mvc VoLnz02nVlQ5NTJ2NkKDrP2gGV8J7tn9VWHDa38pr7r3GaEvH727Fxo8L0JF2/rs XnNaaZpqyxXr2Y2KT7emsK86ddgw8O+S5gwj6nlBEKf6b9TwLHQsMZlmjH+lTJ2+ Dg6wkJpV8m7MUZVjhNx1SDnZZB7DpttxEhR6QQPrtOGN/fcw60x57rOcrw== -----END CERTIFICATE-----Generated at Thu Sep 17 17:05:33 2026 by rpki-client