$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa File: 458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa (raw, json) Hash identifier: lk2Blk7rG+8oYG8jgDW07f5+zZA7/sXQc9Wsifnx92g= Subject key identifier: F2:54:94:82:6F:75:51:A9:8C:18:07:08:1F:3B:7B:71:BB:E4:A1:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C39125A0E6F379093E4E52E9A8432C719904FFD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa Signing time: Sat 29 Aug 2026 00:00:05 +0000 ROA not before: Sat 29 Aug 2026 00:00:05 +0000 ROA not after: Fri 27 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 141.230.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:39:12:5a:0e:6f:37:90:93:e4:e5:2e:9a:84:32:c7:19:90:4f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:00:05 2026 GMT Not After : Nov 27 23:59:59 2026 GMT Subject: serialNumber=d28ac4876a4f16054e89628dfaac54c2f7a13ab40e254c82e84ef1b7037bb88e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:a6:b6:60:ae:e6:fb:12:cd:3f:b9:cf:23: 00:72:2d:f7:2c:41:e7:12:e9:fd:14:96:5a:6a:44: 55:65:c8:70:c9:11:f4:ed:0c:01:61:8b:72:d7:80: 61:2a:34:bc:bf:12:c3:c9:68:2f:75:d8:2a:b9:4e: 40:82:45:51:8c:44:8c:2f:07:33:d9:46:e7:e3:36: 0d:9a:fc:d6:16:8d:47:b9:c6:e9:22:a3:b5:4e:d1: ae:0f:b0:e3:b8:d9:c6:0f:7f:59:1f:56:8d:cd:aa: 8e:c0:33:4f:a3:20:76:5c:ea:e7:8f:0f:a7:c2:f1: 16:bd:10:ec:67:11:c6:74:5a:a5:84:6b:41:96:88: 45:2e:88:62:3e:75:7b:6b:9b:12:0d:2a:81:8c:1c: cd:68:58:6d:64:2d:1f:2f:ca:b0:83:91:04:78:75: a9:7c:fc:45:43:4c:70:a5:0c:65:a3:bd:7f:7f:bc: 91:32:69:c3:f2:dc:6a:79:56:84:c5:a2:df:bf:5d: 52:14:5f:86:d7:c8:fb:85:ff:a9:00:f9:f6:3d:cb: ad:24:f0:b0:11:f0:56:08:2e:0d:4f:a6:98:29:c5: eb:f6:b6:58:e7:be:30:89:93:df:be:54:19:be:94: d8:f8:c2:3d:cc:ae:c2:d4:4b:44:41:1f:ab:e3:aa: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:54:94:82:6F:75:51:A9:8C:18:07:08:1F:3B:7B:71:BB:E4:A1:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.230.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:ba:93:5b:19:2c:f6:49:8a:4f:0b:4b:91:9d:1e:1b:de:85: f7:03:59:91:b5:b3:0e:29:29:d3:ea:10:04:36:27:92:ca:ee: d0:61:e8:6d:6d:65:c5:ac:20:4f:95:7a:0c:bd:67:0a:99:6d: 56:23:ef:2c:03:c3:33:01:77:29:bc:08:46:9a:58:0d:3e:bb: 9d:5b:3e:9b:bd:be:39:f0:f3:80:e9:31:aa:a4:9b:82:b2:6f: 46:80:11:d4:40:2c:3c:61:8a:81:f8:c2:c8:70:13:e9:8b:e2: e7:e6:16:43:9f:06:03:76:c1:7b:2f:ad:0a:d3:4c:17:3f:1a: 8d:b3:a8:b5:3e:aa:1a:5b:8e:31:42:37:d6:44:9d:d8:79:78: e3:0e:b0:81:b3:b8:cc:06:16:5e:fb:69:e0:ea:86:f8:00:25: 5c:55:c7:86:80:50:85:2b:04:df:5a:39:1f:46:05:0b:b7:46: 3b:5d:ed:99:37:ad:15:1a:27:81:d4:db:d7:7b:02:98:d1:30: 43:0b:b8:76:a9:9c:bd:a1:32:51:1b:d2:3d:d5:e8:83:0b:40: c4:5b:71:c2:48:3e:38:66:fc:94:f2:77:05:2a:9c:10:9b:66: 47:40:e3:0f:67:f8:50:e0:18:30:b4:4c:aa:b3:77:02:0d:d8: ef:ec:cc:5a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDDkSWg5vN5CT5OUumoQyxxmQT/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI5MDAwMDA1WhcNMjYxMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjhhYzQ4NzZhNGYxNjA1NGU4OTYyOGRmYWFjNTRjMmY3 YTEzYWI0MGUyNTRjODJlODRlZjFiNzAzN2JiODhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC066a2YK7m+xLNP7nPIwByLfcsQecS6f0UllpqRFVlyHDJ EfTtDAFhi3LXgGEqNLy/EsPJaC912Cq5TkCCRVGMRIwvBzPZRufjNg2a/NYWjUe5 xukio7VO0a4PsOO42cYPf1kfVo3Nqo7AM0+jIHZc6uePD6fC8Ra9EOxnEcZ0WqWE a0GWiEUuiGI+dXtrmxINKoGMHM1oWG1kLR8vyrCDkQR4dal8/EVDTHClDGWjvX9/ vJEyacPy3Gp5VoTFot+/XVIUX4bXyPuF/6kA+fY9y60k8LAR8FYILg1Pppgpxev2 tljnvjCJk9++VBm+lNj4wj3MrsLUS0RBH6vjqoMLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8lSUgm91UamMGAcIHzt7cbvkoaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1ODg3MWFkLWU2NWEtNDdhMi04ZjZlLTA5N2FiM2QzYzgyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCN5jANBgkqhkiG9w0BAQsFAAOCAQEASLqTWxks9kmKTwtLkZ0eG96F9wNZ kbWzDikp0+oQBDYnksru0GHobW1lxawgT5V6DL1nCpltViPvLAPDMwF3KbwIRppY DT67nVs+m72+OfDzgOkxqqSbgrJvRoAR1EAsPGGKgfjCyHAT6Yvi5+YWQ58GA3bB ey+tCtNMFz8ajbOotT6qGluOMUI31kSd2Hl44w6wgbO4zAYWXvtp4OqG+AAlXFXH hoBQhSsE31o5H0YFC7dGO13tmTetFRongdTb13sCmNEwQwu4dqmcvaEyURvSPdXo gwtAxFtxwkg+OGb8lPJ3BSqcEJtmR0DjD2f4UOAYMLRMqrN3Ag3Y7+zMWg== -----END CERTIFICATE-----Generated at Thu Sep 17 17:51:32 2026 by rpki-client