$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d5b3ad-a4ee-4382-9820-7c95a057c27a.roa File: 46d5b3ad-a4ee-4382-9820-7c95a057c27a.roa (raw, json) Hash identifier: 1Us6RfsLrcznDAqg+92V35NfR+jryOkfEzMJ4B0YCSc= Subject key identifier: 40:B1:C3:B7:1B:ED:F3:12:FB:8E:A9:68:1E:71:3C:D8:47:27:8B:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7334A58A82136B94E65A80D80A84EF990500D00A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d5b3ad-a4ee-4382-9820-7c95a057c27a.roa Signing time: Fri 11 Sep 2026 08:33:19 +0000 ROA not before: Fri 11 Sep 2026 08:33:19 +0000 ROA not after: Thu 10 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.73.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:34:a5:8a:82:13:6b:94:e6:5a:80:d8:0a:84:ef:99:05:00:d0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 11 08:33:19 2026 GMT Not After : Dec 10 23:59:59 2026 GMT Subject: serialNumber=b13ed69c201670e55a72e27e8aedb2337c5f31447ccc18673489f7fa8f22a96a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:15:63:f7:24:ec:cf:2c:09:47:3c:17:c3: c9:3c:fd:25:f3:3b:d8:a0:27:72:af:03:0e:2d:07: 7c:27:ca:de:06:17:0b:da:38:83:2e:67:8d:ee:89: ac:df:11:6f:42:aa:45:4b:c4:67:73:e9:86:ff:88: 78:6e:3f:b1:07:a7:29:07:b9:4e:8f:ec:1b:44:eb: 18:e6:61:b0:32:79:fc:01:cd:5e:16:76:45:e4:51: 32:99:aa:88:61:59:24:e3:0a:d7:00:83:7e:c3:f8: b8:fd:2c:e5:42:90:79:94:c4:ee:00:58:26:b8:a1: 30:22:a2:48:0c:6d:92:df:d7:9a:f8:28:36:26:23: b0:e8:c1:ea:c4:05:36:d4:dc:1b:5b:64:6a:5b:76: b3:8d:e8:71:5b:fa:ca:05:c6:aa:94:01:50:cb:2b: 45:d0:8b:3f:d6:d1:0f:7b:a8:02:10:df:7e:ea:f6: 41:b1:2f:a9:14:e2:ba:a8:bb:d9:c8:c4:75:bc:37: c4:ae:bc:6b:99:6a:ca:2c:e4:77:98:34:98:12:9a: 40:fd:1a:cd:db:78:bc:a8:67:0b:06:42:97:f0:ab: 2b:dd:f3:0c:63:db:04:20:17:d7:4c:54:17:3c:83: 55:f7:f1:89:7e:13:fc:84:c6:ab:fa:ed:09:19:c1: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B1:C3:B7:1B:ED:F3:12:FB:8E:A9:68:1E:71:3C:D8:47:27:8B:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d5b3ad-a4ee-4382-9820-7c95a057c27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.73.214.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:36:29:3f:0c:ca:18:34:0f:14:2b:9f:22:da:0e:ad:bb:e1: 4a:ce:e7:1d:ec:99:c7:ec:c7:48:90:90:d0:fa:2f:20:48:4c: 24:3d:ca:6d:af:3e:c9:37:d0:51:7e:a8:1f:0c:8b:6c:06:d4: 17:e6:68:92:46:ce:c0:68:a8:cb:33:61:1a:4e:86:21:77:26: bd:3e:57:7b:0b:e3:50:a0:ca:ac:23:1d:af:6a:b9:02:ef:f0: f9:4f:fc:c2:3d:de:48:cd:9a:af:17:c0:ab:16:54:35:c2:6c: 1d:04:71:af:72:9e:e6:f7:b2:96:70:f5:d0:a2:b9:d3:5f:cf: fd:fb:52:21:a8:59:39:09:c0:f1:28:0e:5a:8f:89:7c:d1:30: 92:5b:8d:51:aa:32:2c:64:d4:b3:ac:18:cb:ca:a7:0b:72:82: ee:e3:47:4e:dc:d8:34:26:08:88:fb:06:9a:56:21:00:03:e8: 1c:04:2b:3f:33:09:20:a1:15:7b:0c:a7:de:1b:ec:ac:74:94: 33:0f:6b:61:11:5b:4b:98:25:d6:9a:08:65:fb:36:0b:59:b2: 8f:cc:6f:e5:c1:11:18:99:63:cd:2b:84:39:7a:a9:81:eb:3f: 09:c9:f3:68:57:53:96:6c:e2:db:89:8e:3f:52:a0:67:44:9d: 67:97:62:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUczSlioITa5TmWoDYCoTvmQUA0AowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTExMDgzMzE5WhcNMjYxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTNlZDY5YzIwMTY3MGU1NWE3MmUyN2U4YWVkYjIzMzdj NWYzMTQ0N2NjYzE4NjczNDg5ZjdmYThmMjJhOTZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5DhVj9yTszywJRzwXw8k8/SXzO9igJ3KvAw4tB3wnyt4G FwvaOIMuZ43uiazfEW9CqkVLxGdz6Yb/iHhuP7EHpykHuU6P7BtE6xjmYbAyefwB zV4WdkXkUTKZqohhWSTjCtcAg37D+Lj9LOVCkHmUxO4AWCa4oTAiokgMbZLf15r4 KDYmI7DowerEBTbU3BtbZGpbdrON6HFb+soFxqqUAVDLK0XQiz/W0Q97qAIQ337q 9kGxL6kU4rqou9nIxHW8N8SuvGuZasos5HeYNJgSmkD9Gs3beLyoZwsGQpfwqyvd 8wxj2wQgF9dMVBc8g1X38Yl+E/yExqv67QkZwdFTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQLHDtxvt8xL7jqloHnE82Ecni2cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2ZDViM2FkLWE0ZWUtNDM4Mi05ODIwLTdjOTVhMDU3YzI3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABASdYwDQYJKoZIhvcNAQELBQADggEBAG82KT8Myhg0DxQrnyLaDq274UrO 5x3smcfsx0iQkND6LyBITCQ9ym2vPsk30FF+qB8Mi2wG1BfmaJJGzsBoqMszYRpO hiF3Jr0+V3sL41CgyqwjHa9quQLv8PlP/MI93kjNmq8XwKsWVDXCbB0Eca9ynub3 spZw9dCiudNfz/37UiGoWTkJwPEoDlqPiXzRMJJbjVGqMixk1LOsGMvKpwtygu7j R07c2DQmCIj7BppWIQAD6BwEKz8zCSChFXsMp94b7Kx0lDMPa2ERW0uYJdaaCGX7 NgtZso/Mb+XBERiZY80rhDl6qYHrPwnJ82hXU5Zs4tuJjj9SoGdEnWeXYhE= -----END CERTIFICATE-----Generated at Tue Sep 15 13:17:08 2026 by rpki-client