$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa File: 3505df96-b443-43ec-8e8c-f0de340b6cc2.roa (raw, json) Hash identifier: DNhEl9WF88h0v/gpipzMdGVEMT4uWA8EaS+lOzemcYI= Subject key identifier: D1:AE:25:F2:2A:2A:E9:4E:1B:0B:CD:13:AC:3A:ED:1E:A3:08:23:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BC82DAEE5656596B3BDBEC4FA7DFD35616A2003 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa Signing time: Wed 05 Aug 2026 01:00:09 +0000 ROA not before: Wed 05 Aug 2026 01:00:09 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 134.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c8:2d:ae:e5:65:65:96:b3:bd:be:c4:fa:7d:fd:35:61:6a:20:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 01:00:09 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=447280568a3714d33e9092c4ef664cec3f71f0cc8020c0e1291ca6fbf43aa49b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d3:87:cf:3f:89:53:09:ec:3f:44:51:f6:06: a1:4a:08:27:63:73:2f:57:bf:bb:1a:b2:7a:f2:5a: 2d:7c:ad:43:b9:58:14:16:8f:75:fc:26:98:44:7a: 20:56:b5:b1:3b:93:45:5b:15:fa:fa:d6:e7:73:92: 30:82:58:97:58:6f:4e:bd:19:6e:d4:56:c5:bc:8b: 20:69:39:51:51:00:73:b0:c9:f1:74:d1:ba:e1:52: 8b:83:44:09:94:cb:08:a9:76:7e:6c:e0:c8:6d:0c: 3d:7e:36:ed:f1:21:46:e9:f7:50:90:bf:e5:4c:43: 0c:98:f7:df:55:7a:51:74:50:92:37:02:c8:d7:65: fb:94:12:d2:25:e4:23:e8:b8:d4:34:4d:54:3c:01: fe:8a:81:24:55:10:56:fd:03:f3:cb:de:28:a6:f9: 03:82:1b:83:21:cc:70:25:84:79:08:dd:71:23:ef: 27:39:58:94:a2:6f:25:fa:9e:d7:39:dc:34:4b:54: 16:d2:08:0b:ba:93:3a:b7:1e:89:cb:11:2f:7a:e1: 33:80:8c:e5:2f:6c:07:6f:1f:1c:46:02:d9:74:22: 2e:08:ab:0f:26:2f:df:df:a4:3f:47:23:f2:c0:77: a0:3e:10:2b:ce:e9:f3:8e:4e:95:60:e6:78:25:ee: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:25:F2:2A:2A:E9:4E:1B:0B:CD:13:AC:3A:ED:1E:A3:08:23:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:7f:46:b7:73:90:e3:62:50:26:d9:26:06:71:16:50:75:40: 14:7c:19:17:f0:7f:b2:1e:0d:8d:9b:54:bb:1b:db:7e:4e:4c: 6f:60:a7:c1:27:44:24:41:bb:68:8d:b8:5c:6e:10:51:24:25: 7a:a7:43:4e:b8:a4:1c:43:ba:12:ab:c2:7b:cc:bd:b3:91:be: 7a:db:df:3f:22:3a:1e:df:8a:c8:48:7b:5c:4a:37:18:f3:3c: 24:17:07:d4:e5:80:48:a8:02:fd:fe:ac:60:ca:96:83:e3:53: b8:52:f8:05:4f:71:49:6b:6a:67:3d:19:41:a9:c8:11:60:bf: fa:be:25:0b:a2:74:b7:69:20:31:6f:d8:f3:d3:7a:fc:e6:bb: 84:05:b5:c9:0e:39:a4:61:8a:fb:7e:1a:01:20:2b:c2:92:ef: 0f:9b:4f:d8:77:bf:27:92:f9:62:96:ad:c3:29:1b:e0:e3:16: bf:f9:24:7e:9d:53:74:6b:14:7c:c6:a3:9f:73:5c:6d:6b:35: 96:e2:a4:f0:aa:55:fe:a3:34:6b:63:af:ce:b5:0a:f6:f1:3e: d7:94:aa:42:c5:cd:6d:28:47:e3:1d:59:7d:56:37:72:e6:b9: 69:c4:01:0d:f8:f7:34:9a:61:6b:cc:dd:e6:9d:a3:b4:60:89: e0:e8:5c:51 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW8gtruVlZZazvb7E+n39NWFqIAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDEwMDA5WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDcyODA1NjhhMzcxNGQzM2U5MDkyYzRlZjY2NGNlYzNm NzFmMGNjODAyMGMwZTEyOTFjYTZmYmY0M2FhNDliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD604fPP4lTCew/RFH2BqFKCCdjcy9Xv7sasnryWi18rUO5 WBQWj3X8JphEeiBWtbE7k0VbFfr61udzkjCCWJdYb069GW7UVsW8iyBpOVFRAHOw yfF00brhUouDRAmUywipdn5s4MhtDD1+Nu3xIUbp91CQv+VMQwyY999VelF0UJI3 AsjXZfuUEtIl5CPouNQ0TVQ8Af6KgSRVEFb9A/PL3iim+QOCG4MhzHAlhHkI3XEj 7yc5WJSibyX6ntc53DRLVBbSCAu6kzq3HonLES964TOAjOUvbAdvHxxGAtl0Ii4I qw8mL9/fpD9HI/LAd6A+ECvO6fOOTpVg5ngl7gHVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0a4l8ioq6U4bC80TrDrtHqMII0MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1MDVkZjk2LWI0NDMtNDNlYy04ZThjLWYwZGUzNDBiNmNjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCGJjANBgkqhkiG9w0BAQsFAAOCAQEAJn9Gt3OQ42JQJtkmBnEWUHVAFHwZ F/B/sh4NjZtUuxvbfk5Mb2CnwSdEJEG7aI24XG4QUSQleqdDTrikHEO6EqvCe8y9 s5G+etvfPyI6Ht+KyEh7XEo3GPM8JBcH1OWASKgC/f6sYMqWg+NTuFL4BU9xSWtq Zz0ZQanIEWC/+r4lC6J0t2kgMW/Y89N6/Oa7hAW1yQ45pGGK+34aASArwpLvD5tP 2He/J5L5Ypatwykb4OMWv/kkfp1TdGsUfMajn3NcbWs1luKk8KpV/qM0a2OvzrUK 9vE+15SqQsXNbShH4x1ZfVY3cua5acQBDfj3NJpha8zd5p2jtGCJ4OhcUQ== -----END CERTIFICATE-----Generated at Tue Sep 15 13:25:30 2026 by rpki-client