$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c13c8f1-d8ec-4137-9534-28b108c27b3e.roa File: 3c13c8f1-d8ec-4137-9534-28b108c27b3e.roa (raw, json) Hash identifier: LyizuNV3wFcu43Le1XZgkWidAKePFqJbyEHSzKtqixE= Subject key identifier: 44:2D:69:BD:1D:53:9C:C7:77:CC:56:7E:73:EA:AB:1C:4B:27:39:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F4C48E1FD42407A3C0CDC1A0FE4D25E0D3FC817 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c13c8f1-d8ec-4137-9534-28b108c27b3e.roa Signing time: Tue 25 Aug 2026 18:44:25 +0000 ROA not before: Tue 25 Aug 2026 18:44:25 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4c:48:e1:fd:42:40:7a:3c:0c:dc:1a:0f:e4:d2:5e:0d:3f:c8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 18:44:25 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=0fc1582c4d88959a4371e2030382539264f73dbc2d28d8eec3a22071f4f93ddb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:2a:3d:6b:e6:6a:52:97:42:37:07:68:6a: f5:ea:28:73:2f:d3:68:d9:da:33:18:a9:ba:9c:3d: fa:3b:94:99:b2:c1:be:5b:ef:0f:0f:f6:d7:b9:dd: 69:17:00:4a:08:c6:71:83:4a:cf:78:89:0d:27:de: cb:30:1b:31:b2:10:51:2a:a4:1e:0b:4b:5a:19:ed: aa:f3:89:65:82:4f:73:74:b1:98:d9:ce:9f:11:7a: 89:b4:77:79:d0:ab:2f:d0:90:07:5a:91:dc:ee:d7: 34:96:aa:fd:0a:70:d2:5a:bd:40:51:c3:af:2f:28: 47:1f:a0:16:06:7d:14:3b:29:e8:35:5c:9c:31:02: c9:8c:f9:ee:73:92:26:db:23:16:f2:4b:68:fd:dd: 96:24:aa:f9:e7:8c:9b:81:a8:e3:ff:13:86:21:09: fd:65:64:94:af:73:a4:26:77:70:fd:60:b3:6d:83: 70:38:8f:5f:66:53:e4:62:c5:6d:05:5f:4c:b1:4c: 82:de:05:e9:33:d8:a2:7b:8d:24:13:97:4f:99:7b: ed:d2:eb:2b:d9:b1:bd:92:0b:a6:93:1b:29:fb:5b: 24:48:ac:fe:f3:9a:c4:a4:68:6c:53:cd:d5:70:f3: 19:07:06:a8:01:2c:0c:d6:55:c9:08:9e:b5:11:3f: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2D:69:BD:1D:53:9C:C7:77:CC:56:7E:73:EA:AB:1C:4B:27:39:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c13c8f1-d8ec-4137-9534-28b108c27b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:35:a5:8a:2f:bc:cd:66:ac:0e:f9:28:b3:05:07:08:a3:c1: d2:15:18:92:11:95:d2:da:bf:45:f5:99:96:77:29:cd:c3:a7: 02:43:38:06:89:95:ae:e1:14:a6:9b:17:41:19:f4:21:91:fd: 90:b8:d8:3a:03:62:06:28:44:2b:e5:de:22:15:49:9b:a4:5f: 43:af:0b:20:95:ce:79:14:2b:e1:e9:f7:19:19:57:94:1b:e7: b1:3a:0c:fc:16:b7:24:8a:13:18:90:c5:a2:65:8d:2d:e6:0d: 02:a0:08:43:ad:69:25:71:ec:ab:d5:6d:90:d0:a0:b7:e8:19: b1:4e:53:8a:82:d5:1e:1f:50:ab:9a:2c:e0:0c:e7:b6:8f:fb: 79:94:53:0b:e6:d7:d2:12:a1:cc:34:89:1b:45:2c:ea:53:30: c8:71:db:ca:78:a6:ec:0d:1a:7c:ee:d2:42:32:96:1e:c0:7a: b5:70:c7:02:4c:36:35:2f:86:f7:ce:2d:0e:15:ce:a1:77:d1: b9:c8:2f:76:d3:6f:23:44:55:6d:42:1b:3e:b2:a1:bc:22:3e: fe:31:a8:91:fc:9c:40:7e:8a:69:a3:d4:f8:0e:de:41:53:6c: c5:d2:ac:dd:ba:68:b4:c7:69:b5:61:d9:c3:e3:f4:07:a2:1d: 74:94:a6:6b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUX0xI4f1CQHo8DNwaD+TSXg0/yBcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MTg0NDI1WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmMxNTgyYzRkODg5NTlhNDM3MWUyMDMwMzgyNTM5MjY0 ZjczZGJjMmQyOGQ4ZWVjM2EyMjA3MWY0ZjkzZGRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC02Co9a+ZqUpdCNwdoavXqKHMv02jZ2jMYqbqcPfo7lJmy wb5b7w8P9te53WkXAEoIxnGDSs94iQ0n3sswGzGyEFEqpB4LS1oZ7arziWWCT3N0 sZjZzp8Reom0d3nQqy/QkAdakdzu1zSWqv0KcNJavUBRw68vKEcfoBYGfRQ7Keg1 XJwxAsmM+e5zkibbIxbyS2j93ZYkqvnnjJuBqOP/E4YhCf1lZJSvc6Qmd3D9YLNt g3A4j19mU+RixW0FX0yxTILeBekz2KJ7jSQTl0+Ze+3S6yvZsb2SC6aTGyn7WyRI rP7zmsSkaGxTzdVw8xkHBqgBLAzWVckInrURP2xrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURC1pvR1TnMd3zFZ+c+qrHEsnOfUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjMTNjOGYxLWQ4ZWMtNDEzNy05NTM0LTI4YjEwOGMyN2IzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2OzANBgkqhkiG9w0BAQsFAAOCAQEADDWlii+8zWasDvkoswUHCKPB0hUY khGV0tq/RfWZlncpzcOnAkM4BomVruEUppsXQRn0IZH9kLjYOgNiBihEK+XeIhVJ m6RfQ68LIJXOeRQr4en3GRlXlBvnsToM/Ba3JIoTGJDFomWNLeYNAqAIQ61pJXHs q9VtkNCgt+gZsU5TioLVHh9Qq5os4Aznto/7eZRTC+bX0hKhzDSJG0Us6lMwyHHb ynim7A0afO7SQjKWHsB6tXDHAkw2NS+G984tDhXOoXfRucgvdtNvI0RVbUIbPrKh vCI+/jGokfycQH6KaaPU+A7eQVNsxdKs3bpotMdptWHZw+P0B6IddJSmaw== -----END CERTIFICATE-----Generated at Tue Sep 15 13:17:02 2026 by rpki-client