$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49aa87dd-f113-4ee0-999b-a2a249e6cffb.roa File: 49aa87dd-f113-4ee0-999b-a2a249e6cffb.roa (raw, json) Hash identifier: VZS8cDMv/IVYUynSJa93gDotzMASRFr74QJOnHYCG1g= Subject key identifier: 92:CF:37:05:2D:1E:8C:E9:AA:36:D4:C7:00:10:B8:FE:2E:2C:DF:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70BB4B86935DA757A5C72B768DCF2613115C2F2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49aa87dd-f113-4ee0-999b-a2a249e6cffb.roa Signing time: Tue 25 Aug 2026 22:13:45 +0000 ROA not before: Tue 25 Aug 2026 22:13:45 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.179.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bb:4b:86:93:5d:a7:57:a5:c7:2b:76:8d:cf:26:13:11:5c:2f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 22:13:45 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=f35b8d8f98cb23f87f65a97b2a0c5fbe345341fdcfc675976ddd2a1cfc719a62, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8c:05:c3:88:7d:6c:9c:be:75:8c:3a:01:e5: 1a:23:d3:ac:27:37:80:e5:53:6b:6a:f5:dd:37:03: 86:c2:17:99:ce:c1:ee:35:46:ad:26:4e:63:e7:69: 3a:25:71:ce:b8:86:3f:f8:45:c7:b1:6b:7e:b8:9f: 9e:02:5d:db:0c:d1:41:b9:8a:86:d1:80:a6:4b:fd: c0:ee:57:51:4d:96:23:e7:b7:0e:c8:f3:40:3e:bb: 44:7b:23:af:63:0d:4a:9b:7c:0d:c3:11:b4:e7:18: a0:1c:4b:c8:b9:41:e5:f9:51:ab:5c:c7:6a:ed:37: dd:0a:db:f8:15:1e:fb:e6:79:df:ff:80:66:71:23: f0:d0:86:39:bb:81:94:08:df:19:89:a2:ee:69:ee: d1:75:1a:1d:0f:10:93:ad:7c:cb:ed:98:40:d9:ae: d0:1d:06:09:c6:bf:cc:e9:92:c0:48:b9:0f:19:22: 49:8f:30:86:3e:71:2c:27:f5:ff:c7:a7:72:22:73: a7:d1:00:be:52:fc:46:20:a0:95:47:21:17:50:76: 64:8f:a3:5c:c2:b9:07:e8:c5:0e:08:49:b4:4b:10: 5d:8a:43:29:b0:83:e6:64:2f:96:e3:96:96:fa:e0: 6c:37:96:19:47:b4:49:71:63:41:19:9b:42:c5:de: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CF:37:05:2D:1E:8C:E9:AA:36:D4:C7:00:10:B8:FE:2E:2C:DF:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49aa87dd-f113-4ee0-999b-a2a249e6cffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.179.0.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:85:49:d6:fd:51:8c:2b:93:82:c9:53:88:1d:46:0a:3e:8c: 26:40:de:a3:3a:25:bc:a9:7e:8f:8a:6e:91:c5:f3:6d:c1:99: 73:88:d9:14:3a:35:10:36:bd:4a:81:bf:28:46:37:08:8c:ee: 5d:83:7e:5f:fd:25:f8:bc:47:34:35:dd:d8:4c:76:7c:d9:45: 42:ff:f5:8f:8b:dd:c5:54:fc:d1:a4:f8:d7:a6:2c:c4:dc:b4: b5:6c:1a:2a:4d:ea:0d:7b:e2:34:65:17:b5:4a:c1:36:f3:3f: 40:64:40:05:bc:19:ed:8c:4d:2c:46:94:57:4a:20:03:91:e0: 3c:fa:00:6f:06:94:19:bb:18:74:55:6b:7f:c3:d6:f1:26:e0: 15:93:87:cd:7e:3e:6b:df:b0:4f:ac:13:b1:0c:57:82:db:f4: 1c:a2:3d:a9:e7:1d:f7:d6:17:5e:92:01:d1:59:b5:4f:df:e7: 9d:1d:25:6d:55:2c:44:4d:e2:df:92:60:07:c4:5b:53:3b:ac: 53:09:c0:5b:7c:fe:d7:f0:b6:a4:42:b8:90:cb:95:e1:ff:8d: f0:fe:cb:10:d2:74:be:4a:9f:d8:de:1e:fb:34:e2:6c:89:fb: 66:30:b7:d4:0a:ca:9a:d1:bd:51:3e:e2:b0:a5:66:5c:49:13: 2f:1e:e8:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcLtLhpNdp1elxyt2jc8mExFcLyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MjIxMzQ1WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzViOGQ4Zjk4Y2IyM2Y4N2Y2NWE5N2IyYTBjNWZiZTM0 NTM0MWZkY2ZjNjc1OTc2ZGRkMmExY2ZjNzE5YTYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKjAXDiH1snL51jDoB5Roj06wnN4DlU2tq9d03A4bCF5nO we41Rq0mTmPnaTolcc64hj/4Rcexa364n54CXdsM0UG5iobRgKZL/cDuV1FNliPn tw7I80A+u0R7I69jDUqbfA3DEbTnGKAcS8i5QeX5Uatcx2rtN90K2/gVHvvmed// gGZxI/DQhjm7gZQI3xmJou5p7tF1Gh0PEJOtfMvtmEDZrtAdBgnGv8zpksBIuQ8Z IkmPMIY+cSwn9f/Hp3Iic6fRAL5S/EYgoJVHIRdQdmSPo1zCuQfoxQ4ISbRLEF2K Qymwg+ZkL5bjlpb64Gw3lhlHtElxY0EZm0LF3m07AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUks83BS0ejOmqNtTHABC4/i4s3y4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5YWE4N2RkLWYxMTMtNGVlMC05OTliLWEyYTI0OWU2Y2ZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANCswAwDQYJKoZIhvcNAQELBQADggEBAEuFSdb9UYwrk4LJU4gdRgo+jCZA 3qM6Jbypfo+KbpHF823BmXOI2RQ6NRA2vUqBvyhGNwiM7l2Dfl/9Jfi8RzQ13dhM dnzZRUL/9Y+L3cVU/NGk+NemLMTctLVsGipN6g174jRlF7VKwTbzP0BkQAW8Ge2M TSxGlFdKIAOR4Dz6AG8GlBm7GHRVa3/D1vEm4BWTh81+PmvfsE+sE7EMV4Lb9Byi PannHffWF16SAdFZtU/f550dJW1VLERN4t+SYAfEW1M7rFMJwFt8/tfwtqRCuJDL leH/jfD+yxDSdL5Kn9jeHvs04myJ+2Ywt9QKyprRvVE+4rClZlxJEy8e6G0= -----END CERTIFICATE-----Generated at Tue Sep 15 12:09:42 2026 by rpki-client