$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a65165a-7d2e-48ce-a1b5-ba82dcc89d14.roa File: 4a65165a-7d2e-48ce-a1b5-ba82dcc89d14.roa (raw, json) Hash identifier: BBNCs4cy66ymnr9sxKegpHVOsHXbpaS+9ZFU+RYAPNQ= Subject key identifier: 95:DA:1E:EB:4E:50:CD:91:7C:78:52:E7:4D:BF:2A:87:B0:86:55:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42D57C9BCADFE30242B733BEEF77AD1AD20CED5C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a65165a-7d2e-48ce-a1b5-ba82dcc89d14.roa Signing time: Sat 08 Aug 2026 00:00:12 +0000 ROA not before: Sat 08 Aug 2026 00:00:12 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d5:7c:9b:ca:df:e3:02:42:b7:33:be:ef:77:ad:1a:d2:0c:ed:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:12 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=9d1331b792775b09e98cebad9f5816a70e5d0ddea584fd505f2c0f5cf2d7ae16, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:2e:46:d1:55:0a:41:45:67:db:8b:7f:3a: f8:95:06:a9:fc:da:4f:b0:24:9a:27:df:18:63:f9: 3a:8e:6c:11:2c:37:87:24:54:aa:09:5b:d7:96:0a: ff:9f:e4:d8:64:7d:37:8f:75:2a:7d:ec:fe:a9:46: d4:f3:1e:24:78:31:53:91:a4:54:57:c7:45:37:ea: aa:a0:4a:f7:a0:bc:8f:37:f2:eb:a1:3e:70:51:18: 09:4f:2e:0c:40:8d:20:62:17:e6:95:f7:dc:7d:8b: 17:f6:50:92:fd:32:1d:62:df:02:20:32:8b:ba:8c: 32:b6:7c:1a:4c:76:eb:25:13:59:bc:5f:2d:eb:e4: d7:ad:a8:f6:48:2f:cd:dd:c2:bf:70:63:ed:0e:a6: df:7d:49:51:2c:1f:81:d2:5b:c1:9a:74:b8:e6:e5: dc:fd:bd:68:27:52:1b:4e:c2:22:20:b2:7b:66:a3: 8d:60:b3:40:63:6e:8b:b7:d0:72:ba:8e:64:60:36: 38:ea:56:f1:8c:43:4f:40:49:7a:3b:b3:da:32:1b: 73:7c:54:7f:c2:85:3c:70:65:bb:72:1c:65:3a:d6: e6:4b:ed:ad:af:a1:85:2b:da:07:06:d5:38:34:70: 42:bb:37:de:b1:a3:64:18:f7:99:7c:8a:ab:4a:0a: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DA:1E:EB:4E:50:CD:91:7C:78:52:E7:4D:BF:2A:87:B0:86:55:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a65165a-7d2e-48ce-a1b5-ba82dcc89d14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.144.0/21 Signature Algorithm: sha256WithRSAEncryption 64:22:ad:89:bc:11:58:1a:4a:82:02:bb:dd:a0:40:e1:12:d5: c0:f2:66:a0:e0:52:22:3a:96:09:bd:a6:2b:48:e2:ee:74:69: 29:43:64:bf:f2:82:1a:88:2b:1f:d8:20:7e:5a:18:6c:f6:2d: 0f:85:33:a7:0b:56:38:de:d8:2c:51:31:86:49:ea:d1:81:1c: f5:0d:4a:94:c8:f5:4f:b3:2a:a4:52:54:4f:3d:91:e6:18:c8: 86:5d:cc:b6:fc:a8:35:62:e9:51:70:17:7f:48:fc:9e:eb:6e: a1:14:ab:9a:f2:a0:c7:13:4c:33:d4:70:93:54:32:a3:6f:79: 4a:38:fc:73:80:67:3b:77:27:6e:22:0e:22:d3:68:04:b7:0c: 3e:75:36:db:d2:aa:e3:d0:55:84:21:57:c7:2a:19:39:44:9f: 5f:13:b3:e0:5c:3d:ac:5d:53:46:31:59:60:82:36:d8:b0:a4: 2f:72:31:16:7e:df:ed:c5:f7:d6:43:5b:8d:ac:a3:9b:82:48: 49:2b:66:1d:ed:a1:9f:28:88:64:85:54:64:10:67:38:35:7e: fa:b2:43:11:de:80:56:00:a5:c2:3f:a2:92:cf:84:a6:e0:fa: 4e:09:7f:52:a5:84:57:a5:ca:74:ab:3f:15:51:05:7e:cc:61: 1e:63:08:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQtV8m8rf4wJCtzO+73etGtIM7VwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMDEyWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDEzMzFiNzkyNzc1YjA5ZTk4Y2ViYWQ5ZjU4MTZhNzBl NWQwZGRlYTU4NGZkNTA1ZjJjMGY1Y2YyZDdhZTE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFwy5G0VUKQUVn24t/OviVBqn82k+wJJon3xhj+TqObBEs N4ckVKoJW9eWCv+f5NhkfTePdSp97P6pRtTzHiR4MVORpFRXx0U36qqgSvegvI83 8uuhPnBRGAlPLgxAjSBiF+aV99x9ixf2UJL9Mh1i3wIgMou6jDK2fBpMduslE1m8 Xy3r5NetqPZIL83dwr9wY+0Opt99SVEsH4HSW8GadLjm5dz9vWgnUhtOwiIgsntm o41gs0Bjbou30HK6jmRgNjjqVvGMQ09ASXo7s9oyG3N8VH/ChTxwZbtyHGU61uZL 7a2voYUr2gcG1Tg0cEK7N96xo2QY95l8iqtKCndVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUldoe605QzZF8eFLnTb8qh7CGVTEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhNjUxNjVhLTdkMmUtNDhjZS1hMWI1LWJhODJkY2M4OWQxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPKrpAwDQYJKoZIhvcNAQELBQADggEBAGQirYm8EVgaSoICu92gQOES1cDy ZqDgUiI6lgm9pitI4u50aSlDZL/yghqIKx/YIH5aGGz2LQ+FM6cLVjje2CxRMYZJ 6tGBHPUNSpTI9U+zKqRSVE89keYYyIZdzLb8qDVi6VFwF39I/J7rbqEUq5ryoMcT TDPUcJNUMqNveUo4/HOAZzt3J24iDiLTaAS3DD51NtvSquPQVYQhV8cqGTlEn18T s+BcPaxdU0YxWWCCNtiwpC9yMRZ+3+3F99ZDW42so5uCSEkrZh3toZ8oiGSFVGQQ Zzg1fvqyQxHegFYApcI/opLPhKbg+k4Jf1KlhFelynSrPxVRBX7MYR5jCAo= -----END CERTIFICATE-----Generated at Thu Sep 17 16:49:01 2026 by rpki-client