$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa File: 2a99f94c-8b10-4779-851f-4ee9c8051796.roa (raw, json) Hash identifier: T20+GwgYhPtSLDdYI9/TgDe7Mvs68YCCMyT/kNRHRt4= Subject key identifier: 61:F1:F7:68:58:FD:7B:4F:1D:F6:5F:33:11:17:74:EF:CC:32:BA:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43E8753D8EF2A52770623100568DB8DE5C326106 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa Signing time: Wed 05 Aug 2026 00:31:29 +0000 ROA not before: Wed 05 Aug 2026 00:31:29 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.11.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e8:75:3d:8e:f2:a5:27:70:62:31:00:56:8d:b8:de:5c:32:61:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:31:29 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=9e87620245fb4d76eea72a7cc2dc029c3cf74d26d0b2b5bad550bd7dcd0e8562, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:10:52:0e:5a:a1:4a:5d:63:47:c1:71:fd: 20:d7:85:c1:ae:a3:60:2a:7f:dc:66:4d:c0:5d:59: 9c:ac:bf:61:99:61:d9:23:01:99:12:e7:14:64:b5: 41:6c:80:e2:fb:d0:e3:e8:9b:3c:6d:61:9d:d1:45: 74:88:dd:5c:9b:77:92:28:9a:8b:7f:13:26:47:f7: 00:6a:32:a7:5d:31:7f:ea:f2:a7:2d:27:d3:78:b4: 94:b9:d2:a1:a8:89:1c:18:54:fa:25:cd:d3:3b:9e: 72:17:bc:28:24:39:b0:c6:5f:bd:38:20:59:94:06: a8:99:97:1a:38:43:38:64:27:14:ef:34:2c:87:91: d4:d6:68:0b:3d:58:bc:aa:63:05:33:9c:36:59:3b: 34:a2:d4:4d:c8:29:e1:98:b5:b3:e7:eb:9b:10:35: 33:6f:2c:7f:03:08:87:a2:e8:cb:e8:24:57:b1:26: a0:41:7f:90:a9:88:f3:6f:6a:fb:5c:77:fa:e6:41: e7:a0:ec:92:be:6c:b2:ff:3e:8e:68:db:97:b7:b2: 5d:64:02:af:3b:ae:18:e3:da:aa:29:48:9e:6d:2d: 98:05:93:ab:89:f8:04:db:c9:40:84:a5:61:04:a9: 5e:60:e6:20:58:5a:d0:86:0c:99:4e:e8:77:42:5a: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F1:F7:68:58:FD:7B:4F:1D:F6:5F:33:11:17:74:EF:CC:32:BA:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.11.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9b:41:1c:f7:d4:f8:95:38:38:cb:09:cf:06:2b:2c:57:ec:95: 9b:80:c2:3b:7c:14:61:ad:89:f3:fc:0e:0d:8b:58:97:45:4e: 28:df:12:ea:be:52:67:ad:49:fb:aa:6e:8c:a5:9c:ed:6d:13: b4:1f:1d:22:9f:86:ca:00:5f:2b:80:f7:5c:7d:47:c4:c9:91: ad:c9:2d:98:79:2d:c9:d7:45:75:0a:eb:1c:cf:b8:8d:07:83: 3b:04:20:12:65:5a:90:e5:f3:1b:aa:91:db:59:4e:e6:41:e7: 03:e9:9a:77:33:f4:78:59:42:f0:97:14:98:63:c2:53:ba:95: f8:01:88:2b:ae:f6:d5:41:d1:c7:cc:83:4d:1a:5f:a3:d5:95: bf:65:39:2d:a9:f1:70:c9:2d:58:31:ad:66:03:87:57:3e:2b: 58:88:19:9c:53:56:37:d8:2b:92:89:06:d9:b1:8e:23:1a:af: 09:56:df:13:a8:17:37:b1:a3:34:71:73:71:7a:29:9f:6a:8b: 8c:78:00:8d:4d:3e:13:a8:63:0f:5d:f5:2c:98:44:4b:83:74: af:54:02:57:68:10:eb:99:4e:6e:0b:8c:d6:b1:45:0d:8f:a6: f0:78:27:04:87:24:f2:f2:10:0b:e3:e4:fa:9c:07:c9:fe:7b: 89:70:d9:b1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQ+h1PY7ypSdwYjEAVo243lwyYQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAzMTI5WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTg3NjIwMjQ1ZmI0ZDc2ZWVhNzJhN2NjMmRjMDI5YzNj Zjc0ZDI2ZDBiMmI1YmFkNTUwYmQ3ZGNkMGU4NTYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGixBSDlqhSl1jR8Fx/SDXhcGuo2Aqf9xmTcBdWZysv2GZ YdkjAZkS5xRktUFsgOL70OPomzxtYZ3RRXSI3Vybd5Iomot/EyZH9wBqMqddMX/q 8qctJ9N4tJS50qGoiRwYVPolzdM7nnIXvCgkObDGX704IFmUBqiZlxo4QzhkJxTv NCyHkdTWaAs9WLyqYwUznDZZOzSi1E3IKeGYtbPn65sQNTNvLH8DCIei6MvoJFex JqBBf5CpiPNvavtcd/rmQeeg7JK+bLL/Po5o25e3sl1kAq87rhjj2qopSJ5tLZgF k6uJ+ATbyUCEpWEEqV5g5iBYWtCGDJlO6HdCWgCHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYfH3aFj9e08d9l8zERd078wyuiEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhOTlmOTRjLThiMTAtNDc3OS04NTFmLTRlZTljODA1MTc5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCfCzANBgkqhkiG9w0BAQsFAAOCAQEAm0Ec99T4lTg4ywnPBissV+yVm4DC O3wUYa2J8/wODYtYl0VOKN8S6r5SZ61J+6pujKWc7W0TtB8dIp+GygBfK4D3XH1H xMmRrcktmHktyddFdQrrHM+4jQeDOwQgEmVakOXzG6qR21lO5kHnA+madzP0eFlC 8JcUmGPCU7qV+AGIK6721UHRx8yDTRpfo9WVv2U5LanxcMktWDGtZgOHVz4rWIgZ nFNWN9grkokG2bGOIxqvCVbfE6gXN7GjNHFzcXopn2qLjHgAjU0+E6hjD131LJhE S4N0r1QCV2gQ65lObguM1rFFDY+m8HgnBIck8vIQC+Pk+pwHyf57iXDZsQ== -----END CERTIFICATE-----Generated at Thu Sep 17 18:52:02 2026 by rpki-client