$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a33f34-eeff-4ec0-b12d-bac4dfa79fea.roa File: 33a33f34-eeff-4ec0-b12d-bac4dfa79fea.roa (raw, json) Hash identifier: RVDfmuw+y09y4moUWLDk5t9kn4r7k70Z7GdmbDA9jEQ= Subject key identifier: 80:E1:2C:84:22:41:D0:7C:63:DB:6A:7B:D7:2E:AB:7A:82:76:F1:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3263E7D72B636147E67CF23009E5BAE72A328391 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a33f34-eeff-4ec0-b12d-bac4dfa79fea.roa Signing time: Tue 04 Aug 2026 01:30:34 +0000 ROA not before: Tue 04 Aug 2026 01:30:34 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 139.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:63:e7:d7:2b:63:61:47:e6:7c:f2:30:09:e5:ba:e7:2a:32:83:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 01:30:34 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=eaa8e7d069e32652081296f37c999748b1f00b1860348e8ce7c178728fd54fd7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:75:e2:a2:b0:7b:87:dd:0d:9c:64:77:03: e0:35:65:bc:b1:db:5a:fb:36:f3:1b:f7:8a:b6:6d: 03:9b:53:6e:3d:6d:32:a2:a7:bb:48:a3:c9:8d:ba: 2e:a5:53:2e:56:5f:b7:dc:91:c5:68:70:b5:11:8a: b2:fd:ce:d9:4a:f3:f2:6d:58:b9:24:98:a5:f2:8b: 3f:f6:81:ac:72:6a:36:26:24:b9:6e:3b:e2:c2:8e: 65:df:43:09:ab:de:27:33:4d:44:3d:fa:dd:61:ba: cc:eb:7a:b9:bc:d9:9f:cc:0f:7a:3b:eb:ee:d2:7c: 27:cc:e7:35:fa:d7:3e:0e:79:e9:bd:3e:59:48:06: 9c:9a:d0:f6:81:ca:6c:de:64:8a:b1:6f:62:30:7e: 91:5b:c0:1c:bb:67:d0:b8:59:66:f6:15:ae:12:19: 6f:df:63:af:af:67:3a:fb:87:ae:2b:c3:60:c1:8a: 3c:7a:89:ce:01:03:71:99:91:37:13:7e:da:8d:2f: 60:f6:00:25:68:bd:f5:73:05:e3:d5:62:e1:f5:f2: 11:d1:78:bd:a6:24:b4:64:36:7c:de:9d:d5:e3:b0: c5:42:31:cb:5a:e1:5e:44:aa:d1:0a:60:e2:2c:c3: bd:a8:30:5f:3f:45:33:72:12:91:8f:c2:3a:43:1d: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E1:2C:84:22:41:D0:7C:63:DB:6A:7B:D7:2E:AB:7A:82:76:F1:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a33f34-eeff-4ec0-b12d-bac4dfa79fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:9e:70:7c:d3:7a:8b:7f:0f:cd:58:db:3e:16:5f:a0:fb:c2: 1a:77:95:2e:20:9c:47:dd:48:85:69:a6:20:5e:a5:de:23:54: f4:5c:9f:43:34:c8:f6:43:61:45:c4:02:65:4a:19:aa:67:e3: 21:bd:4e:5c:be:9f:7c:51:12:79:f0:f3:6e:64:73:19:d0:c5: 56:a4:90:d0:7d:cd:d7:8b:96:4f:a0:46:52:97:3f:25:78:9f: 9c:20:45:ad:a5:0a:e2:57:a7:ec:94:da:e0:84:71:00:74:00: 72:8e:94:93:33:1f:39:0d:a1:e9:50:39:87:0e:84:ce:2c:fd: b2:25:2d:34:34:ba:0f:5e:31:1f:d4:94:3b:b5:85:0b:b3:18: 42:de:33:99:a9:9d:08:d7:e3:1e:7d:83:94:64:67:50:7a:fa: 3b:88:b6:47:44:bd:90:ac:84:00:04:d8:75:c4:be:86:63:c7: 55:36:50:3a:11:b0:73:5d:a6:b0:1f:94:de:03:e0:58:85:f4: 09:40:8b:1a:d4:8b:59:46:c9:f2:de:6a:17:66:e3:14:8e:7b: 00:54:b5:1f:7c:28:3d:09:12:cb:c7:16:8f:51:9a:e6:7e:41: f1:48:6d:02:9d:9d:83:35:d8:a0:2e:65:16:86:17:29:9a:09: e1:e4:3e:91 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMmPn1ytjYUfmfPIwCeW65yoyg5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEzMDM0WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWE4ZTdkMDY5ZTMyNjUyMDgxMjk2ZjM3Yzk5OTc0OGIx ZjAwYjE4NjAzNDhlOGNlN2MxNzg3MjhmZDU0ZmQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeWnXiorB7h90NnGR3A+A1Zbyx21r7NvMb94q2bQObU249 bTKip7tIo8mNui6lUy5WX7fckcVocLURirL9ztlK8/JtWLkkmKXyiz/2gaxyajYm JLluO+LCjmXfQwmr3iczTUQ9+t1huszrerm82Z/MD3o76+7SfCfM5zX61z4Oeem9 PllIBpya0PaBymzeZIqxb2IwfpFbwBy7Z9C4WWb2Fa4SGW/fY6+vZzr7h64rw2DB ijx6ic4BA3GZkTcTftqNL2D2ACVovfVzBePVYuH18hHReL2mJLRkNnzendXjsMVC Mcta4V5EqtEKYOIsw72oMF8/RTNyEpGPwjpDHRNfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgOEshCJB0Hxj22p71y6reoJ28X4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzYTMzZjM0LWVlZmYtNGVjMC1iMTJkLWJhYzRkZmE3OWZlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCLWTANBgkqhkiG9w0BAQsFAAOCAQEAiJ5wfNN6i38PzVjbPhZfoPvCGneV LiCcR91IhWmmIF6l3iNU9FyfQzTI9kNhRcQCZUoZqmfjIb1OXL6ffFESefDzbmRz GdDFVqSQ0H3N14uWT6BGUpc/JXifnCBFraUK4len7JTa4IRxAHQAco6UkzMfOQ2h 6VA5hw6Eziz9siUtNDS6D14xH9SUO7WFC7MYQt4zmamdCNfjHn2DlGRnUHr6O4i2 R0S9kKyEAATYdcS+hmPHVTZQOhGwc12msB+U3gPgWIX0CUCLGtSLWUbJ8t5qF2bj FI57AFS1H3woPQkSy8cWj1Ga5n5B8UhtAp2dgzXYoC5lFoYXKZoJ4eQ+kQ== -----END CERTIFICATE-----Generated at Thu Sep 17 18:21:34 2026 by rpki-client