$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3589350f-7992-407d-b32f-3238cdd65087.roa File: 3589350f-7992-407d-b32f-3238cdd65087.roa (raw, json) Hash identifier: Xzd5KfoWgNsprcUfjUXB0ZAvs6Zs/qeUSuW19Ad5pfE= Subject key identifier: 8A:36:0F:A2:30:73:CF:2A:63:2B:D5:89:C8:B0:C7:46:83:DB:43:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11D2D9604360FD2C8575F1E0B0F225B9562806 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3589350f-7992-407d-b32f-3238cdd65087.roa Signing time: Wed 05 Aug 2026 00:21:16 +0000 ROA not before: Wed 05 Aug 2026 00:21:16 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 72.44.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d2:d9:60:43:60:fd:2c:85:75:f1:e0:b0:f2:25:b9:56:28:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:21:16 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=13d881c2448ce8ec450c718ba2f32b5a4b833ca530a93dd9f31c4a6f2d860908, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:bd:cf:76:9a:a7:5f:ad:9d:1f:5c:78:23: 66:fa:86:fb:d0:a0:7c:43:bb:a7:2c:9a:06:80:dc: bf:cc:7d:10:92:04:a6:35:90:52:9c:fd:41:f2:f0: 45:ea:17:53:ed:df:5e:a3:3d:c1:09:b5:eb:dd:b9: 2a:f6:05:3e:b7:41:52:5d:d9:9f:09:75:36:e7:88: 00:ab:ca:70:7f:70:44:70:78:bc:24:5c:92:6d:21: 7c:64:ad:a2:7b:d2:ee:b2:47:58:6a:b9:4e:9f:b2: 3a:3c:4f:5f:72:40:34:20:7d:a9:b8:70:ae:fc:2f: ed:fc:92:2a:95:c0:fd:ea:5b:4f:63:a8:c1:a3:3e: f1:d6:24:bd:2f:a8:c4:7e:56:66:7e:cb:19:15:a7: 29:a7:5b:60:36:a5:fa:f2:2f:1e:c7:51:a7:8f:0c: 86:5a:bd:d6:ac:b3:4f:d0:8e:88:d7:96:83:00:cb: c4:85:16:d2:47:89:05:90:6e:47:18:48:28:ef:67: 3f:47:0f:f0:c6:eb:5f:79:83:bd:50:be:20:62:00: 0f:0f:2e:81:cb:c7:ca:be:8e:7a:a3:ef:73:99:c7: 40:9c:a9:91:b5:6b:ee:f1:c4:36:8a:21:3c:7b:15: 31:81:2d:70:4c:f7:03:93:f4:6d:fc:09:37:34:ce: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:0F:A2:30:73:CF:2A:63:2B:D5:89:C8:B0:C7:46:83:DB:43:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3589350f-7992-407d-b32f-3238cdd65087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.40.0/21 Signature Algorithm: sha256WithRSAEncryption af:5c:11:07:00:b8:b3:94:63:c3:d0:aa:af:df:af:53:1f:b7: d8:a2:27:3b:cf:64:07:da:b2:a4:4a:30:15:7b:d4:80:1b:d6: d9:f3:a0:0f:d4:97:76:1f:90:a6:1e:91:5b:f6:76:27:a8:c5: 24:de:20:a9:55:75:51:28:b8:8e:84:5e:29:e8:41:6e:26:f2: 03:17:17:4c:a7:e2:68:5f:c8:47:c6:38:35:7e:35:b7:e7:9e: e9:d0:57:a4:3d:77:3d:15:d2:fc:39:1f:d4:18:41:58:04:b2: 5b:db:ba:08:65:4a:ae:02:26:0e:38:80:bc:18:f9:de:22:e6: 8c:db:29:35:ab:63:d8:88:80:b9:32:59:bb:21:04:cb:fe:b9: 1e:8f:49:c6:49:ea:fa:7c:1f:5d:5d:8e:5f:b5:71:ab:be:73: ac:ec:16:d1:69:2b:ce:ed:04:8d:f8:60:67:7b:81:82:10:7c: a3:2c:0f:46:01:b5:27:54:6e:bb:56:9e:bb:8d:81:7a:ee:32: 4d:cf:9f:5b:89:d6:95:e0:b3:cd:43:6c:ef:02:de:fe:23:ac: ce:d8:09:39:8e:d9:e1:ec:4d:c3:3d:dd:e6:88:78:3c:be:33: 8a:ea:3f:f0:3a:ea:dc:11:1d:7f:d7:d1:4e:96:ae:29:95:2d: c6:6a:7e:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITEdLZYENg/SyFdfHgsPIluVYoBjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA4MDUwMDIxMTZaFw0yNjExMDMyMzU5NTla MHoxSTBHBgNVBAUTQDEzZDg4MWMyNDQ4Y2U4ZWM0NTBjNzE4YmEyZjMyYjVhNGI4 MzNjYTUzMGE5M2RkOWYzMWM0YTZmMmQ4NjA5MDgxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKylvc92mqdfrZ0fXHgjZvqG+9CgfEO7pyyaBoDcv8x9EJIE pjWQUpz9QfLwReoXU+3fXqM9wQm16925KvYFPrdBUl3Znwl1NueIAKvKcH9wRHB4 vCRckm0hfGStonvS7rJHWGq5Tp+yOjxPX3JANCB9qbhwrvwv7fySKpXA/epbT2Oo waM+8dYkvS+oxH5WZn7LGRWnKadbYDal+vIvHsdRp48Mhlq91qyzT9COiNeWgwDL xIUW0keJBZBuRxhIKO9nP0cP8MbrX3mDvVC+IGIADw8ugcvHyr6OeqPvc5nHQJyp kbVr7vHENoohPHsVMYEtcEz3A5P0bfwJNzTOVDkCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSKNg+iMHPPKmMr1YnIsMdGg9tDATAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMzU4OTM1MGYtNzk5Mi00MDdkLWIzMmYtMzIzOGNkZDY1MDg3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA0gsKDANBgkqhkiG9w0BAQsFAAOCAQEAr1wRBwC4s5Rjw9Cqr9+vUx+32KIn O89kB9qypEowFXvUgBvW2fOgD9SXdh+Qph6RW/Z2J6jFJN4gqVV1USi4joReKehB bibyAxcXTKfiaF/IR8Y4NX41t+ee6dBXpD13PRXS/Dkf1BhBWASyW9u6CGVKrgIm DjiAvBj53iLmjNspNatj2IiAuTJZuyEEy/65Ho9Jxknq+nwfXV2OX7Vxq75zrOwW 0Wkrzu0EjfhgZ3uBghB8oywPRgG1J1Ruu1aeu42Beu4yTc+fW4nWleCzzUNs7wLe /iOsztgJOY7Z4exNwz3d5oh4PL4ziuo/8Drq3BEdf9fRTpauKZUtxmp+/w== -----END CERTIFICATE-----Generated at Thu Sep 17 17:58:18 2026 by rpki-client