$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa File: 424f8ace-0502-433d-b305-08ed3d55c9f5.roa (raw, json) Hash identifier: reKAhg0rQ25rtGEBuYlM87X8WxS0L4WJThYzBd7IrWs= Subject key identifier: 5D:5A:0A:2A:0A:1F:55:60:43:6F:CA:05:AE:0F:75:53:E7:21:56:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 073039B57B71FC7E87ED88CB044CDECB5F40DCAC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa Signing time: Wed 05 Aug 2026 00:20:52 +0000 ROA not before: Wed 05 Aug 2026 00:20:52 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:30:39:b5:7b:71:fc:7e:87:ed:88:cb:04:4c:de:cb:5f:40:dc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:20:52 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=00973a37fccc1be12d2cf97d94577dcf8ab9f4895482afd43de0443eb6d3f78f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:c7:d5:22:dd:93:ed:24:e2:3f:92:16:e1: f0:76:26:55:d1:2e:c8:71:28:6e:3e:dc:f3:de:6b: ae:8d:28:f4:5d:e6:46:93:ff:72:dc:b1:46:3a:bd: 12:32:b0:c4:f7:db:49:1b:46:47:ef:61:7d:0e:6a: be:c0:e0:8b:b2:24:b8:41:f6:8b:ad:94:84:b0:71: de:c0:0e:c1:17:09:0c:7e:c4:44:b6:b0:10:5f:f6: 4c:9f:be:a5:cb:74:d2:d6:09:cf:af:47:99:23:46: 54:f9:9f:d9:d5:cc:49:9e:4f:72:e1:3c:03:eb:94: 3f:19:e8:de:9e:90:6b:a4:93:4b:ec:b5:c5:ab:80: 62:54:bd:f0:11:b8:61:94:a9:e7:30:79:5d:7e:68: 66:b7:b0:ea:eb:2f:f3:cb:e9:10:6b:0d:ed:a2:e4: 63:ae:85:98:74:33:7c:2c:99:8e:b1:e9:c0:6a:03: 7f:55:9d:51:90:31:ad:12:09:ff:33:d4:4d:6f:ad: 0f:e0:6f:32:78:fa:00:cd:43:f6:9d:a6:13:9a:f2: a2:e5:e6:77:6f:8f:a6:1d:34:8b:53:c5:99:f4:b0: f1:cc:6f:62:2c:0a:ec:c9:0f:72:84:fc:d4:68:3d: 19:7d:02:10:10:79:29:b7:4f:5e:66:c6:53:ae:e2: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5A:0A:2A:0A:1F:55:60:43:6F:CA:05:AE:0F:75:53:E7:21:56:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.204.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:e2:f7:07:e4:76:f7:d5:9f:21:cc:53:db:14:5f:ec:7c:69: 7e:3f:4c:bb:dc:2e:f0:b7:b4:d2:61:dc:07:38:ae:d0:64:48: 28:35:2c:3a:ea:01:26:70:48:0e:5d:9f:7a:b2:24:81:e8:92: b8:51:ae:78:2f:79:be:eb:a3:16:7c:a3:26:a5:62:93:f5:16: 6b:5a:b4:a0:ef:b2:9a:ea:46:41:f3:22:b6:7d:26:99:ec:0e: 20:fb:ea:f8:4c:9f:13:fb:1b:28:6f:da:ca:8e:f3:4f:77:68: 2f:5a:ea:84:a5:41:b8:01:f0:89:1c:f0:b2:d5:85:a8:1c:ef: 0e:6f:6b:8a:b5:dc:45:9c:16:50:d0:2c:35:f1:78:66:4c:10: 3f:1f:98:cb:56:63:ed:ed:16:2b:94:b4:c0:0b:04:27:7c:91: 41:69:7c:f3:32:f0:8c:65:45:79:d4:78:f3:0d:a7:26:8a:03: 46:11:cb:90:2e:42:79:f3:8f:1e:43:88:93:a8:e4:28:c1:f6: 9e:1c:88:14:b9:f1:6e:7d:ec:1e:41:50:e7:c0:0d:45:51:a8: ef:1d:8f:9c:40:3d:9b:0d:6f:8a:15:24:20:4d:47:de:ad:d9: 5e:55:b7:47:10:15:80:f5:75:ae:76:11:f2:54:5e:e2:3f:3e: c9:ea:55:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBzA5tXtx/H6H7YjLBEzey19A3KwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAyMDUyWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDk3M2EzN2ZjY2MxYmUxMmQyY2Y5N2Q5NDU3N2RjZjhh YjlmNDg5NTQ4MmFmZDQzZGUwNDQzZWI2ZDNmNzhmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw28fVIt2T7STiP5IW4fB2JlXRLshxKG4+3PPea66NKPRd 5kaT/3LcsUY6vRIysMT320kbRkfvYX0Oar7A4IuyJLhB9outlISwcd7ADsEXCQx+ xES2sBBf9kyfvqXLdNLWCc+vR5kjRlT5n9nVzEmeT3LhPAPrlD8Z6N6ekGukk0vs tcWrgGJUvfARuGGUqecweV1+aGa3sOrrL/PL6RBrDe2i5GOuhZh0M3wsmY6x6cBq A39VnVGQMa0SCf8z1E1vrQ/gbzJ4+gDNQ/adphOa8qLl5ndvj6YdNItTxZn0sPHM b2IsCuzJD3KE/NRoPRl9AhAQeSm3T15mxlOu4oMLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXVoKKgofVWBDb8oFrg91U+chVpAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyNGY4YWNlLTA1MDItNDMzZC1iMzA1LTA4ZWQzZDU1YzlmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFcwwDQYJKoZIhvcNAQELBQADggEBAIri9wfkdvfVnyHMU9sUX+x8aX4/ TLvcLvC3tNJh3Ac4rtBkSCg1LDrqASZwSA5dn3qyJIHokrhRrngveb7roxZ8oyal YpP1FmtatKDvsprqRkHzIrZ9JpnsDiD76vhMnxP7Gyhv2sqO8093aC9a6oSlQbgB 8Ikc8LLVhagc7w5va4q13EWcFlDQLDXxeGZMED8fmMtWY+3tFiuUtMALBCd8kUFp fPMy8IxlRXnUePMNpyaKA0YRy5AuQnnzjx5DiJOo5CjB9p4ciBS58W597B5BUOfA DUVRqO8dj5xAPZsNb4oVJCBNR96t2V5Vt0cQFYD1da52EfJUXuI/PsnqVag= -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:55 2026 by rpki-client