$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d9499c0-c507-4e26-9055-7e0de6b69d27.roa File: 4d9499c0-c507-4e26-9055-7e0de6b69d27.roa (raw, json) Hash identifier: POtlnYS6dlhpMiiTxYTbBU50GxfYrxRnTHvdRlNm6qI= Subject key identifier: 77:52:AA:08:4E:C3:C6:24:F3:70:3F:BE:ED:9F:4B:3B:E2:68:A9:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68038CD38D3173B4232F1FCC7FAD2457D91263D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d9499c0-c507-4e26-9055-7e0de6b69d27.roa Signing time: Fri 07 Aug 2026 00:00:14 +0000 ROA not before: Fri 07 Aug 2026 00:00:14 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:03:8c:d3:8d:31:73:b4:23:2f:1f:cc:7f:ad:24:57:d9:12:63:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:00:14 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=02cdc702759e5a0ac182abff63ca6f51bbdeee917cddb14e18ef408ed7714fba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:89:6f:17:33:d6:89:9d:65:05:73:f1:e6: a7:e3:8b:b8:f6:98:2a:d1:4a:49:57:0b:1c:c4:3f: 5d:ab:93:7c:08:bc:a6:c2:1e:49:8d:4a:d5:fa:c0: 4d:a5:1a:8a:b9:16:f5:4d:04:38:40:d0:30:16:ad: b9:6e:e1:ed:e5:bf:d6:de:b2:b4:9e:45:ed:b6:24: 23:e2:58:bb:62:48:f2:69:16:ce:bf:c6:8d:09:db: 96:8d:58:c6:f7:bd:6b:1c:aa:b5:9e:98:05:67:fd: 18:36:92:cc:f3:01:76:f8:f5:46:25:c6:f4:a1:4f: 95:49:ff:c3:3a:91:a2:c7:db:df:0b:0b:dd:b9:e1: 6f:d6:ce:62:0e:a8:0e:a8:c6:6b:7c:f4:2c:7d:db: 9e:18:fd:f4:db:6a:0a:2a:b2:48:99:62:64:99:ab: dc:13:09:ef:0c:f2:47:f2:40:f0:e6:0f:12:6c:ae: 72:d1:4b:dc:99:c4:a6:9d:dc:f9:dd:c3:1c:02:98: cc:b4:19:28:26:fd:34:89:df:c2:78:d9:29:e1:f5: c8:b2:df:41:d2:47:7b:21:c1:a4:a8:6c:17:89:7b: 38:4f:76:f5:a7:53:fb:a6:ce:99:fa:06:84:0c:83: 26:fa:ce:f6:f9:60:a8:30:fc:53:35:36:8d:2b:80: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:52:AA:08:4E:C3:C6:24:F3:70:3F:BE:ED:9F:4B:3B:E2:68:A9:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d9499c0-c507-4e26-9055-7e0de6b69d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.102.0/24 Signature Algorithm: sha256WithRSAEncryption 29:61:34:41:77:7b:e3:e1:bf:09:23:2e:f7:d0:91:8a:85:ff: 23:83:19:6f:aa:55:9e:72:54:88:c1:1a:f3:a2:3c:4c:80:24: 7c:74:d1:05:a8:31:1c:1a:48:7e:e8:ab:ee:64:36:51:11:ed: 53:07:13:0c:39:54:7e:aa:f6:87:88:15:fd:47:5d:0b:ad:07: 0d:6a:b7:0c:c8:61:b3:59:d4:70:46:77:1f:26:91:06:da:60: 3b:7a:40:7e:cc:6a:24:f5:4f:71:3a:b2:52:a1:cd:4c:d6:46: 6e:65:6f:38:f8:d4:63:ab:07:21:4c:c1:3c:64:78:6e:fc:e4: de:c6:1d:3f:71:8b:ac:31:81:32:e8:17:cc:7f:53:ed:ea:33: 89:36:79:45:ef:01:86:b7:0f:86:c2:2b:cc:2f:b8:f5:f0:fa: d6:d9:f0:1b:10:9e:69:2c:b8:ce:2b:bb:f9:4b:5c:fb:51:16: b6:06:48:6a:a9:58:5e:a3:e6:6a:30:79:ee:1c:6f:9c:d2:98: 25:60:95:3c:ab:6d:c6:b7:33:1c:8d:8c:fb:8c:f1:49:15:2b: ac:0d:7e:5c:71:08:9d:89:5a:e5:02:55:de:6e:ca:ba:7b:28: ff:8e:f2:5e:80:45:84:24:cf:7b:13:a0:ee:42:4e:40:44:2d: 61:00:50:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaAOM040xc7QjLx/Mf60kV9kSY9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAwMDE0WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmNkYzcwMjc1OWU1YTBhYzE4MmFiZmY2M2NhNmY1MWJi ZGVlZTkxN2NkZGIxNGUxOGVmNDA4ZWQ3NzE0ZmJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFpolvFzPWiZ1lBXPx5qfji7j2mCrRSklXCxzEP12rk3wI vKbCHkmNStX6wE2lGoq5FvVNBDhA0DAWrblu4e3lv9besrSeRe22JCPiWLtiSPJp Fs6/xo0J25aNWMb3vWscqrWemAVn/Rg2kszzAXb49UYlxvShT5VJ/8M6kaLH298L C9254W/WzmIOqA6oxmt89Cx9254Y/fTbagoqskiZYmSZq9wTCe8M8kfyQPDmDxJs rnLRS9yZxKad3PndwxwCmMy0GSgm/TSJ38J42Snh9ciy30HSR3shwaSobBeJezhP dvWnU/umzpn6BoQMgyb6zvb5YKgw/FM1No0rgBsPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUd1KqCE7DxiTzcD++7Z9LO+JoqegwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkOTQ5OWMwLWM1MDctNGUyNi05MDU1LTdlMGRlNmI2OWQyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GYwDQYJKoZIhvcNAQELBQADggEBAClhNEF3e+PhvwkjLvfQkYqF/yOD GW+qVZ5yVIjBGvOiPEyAJHx00QWoMRwaSH7oq+5kNlER7VMHEww5VH6q9oeIFf1H XQutBw1qtwzIYbNZ1HBGdx8mkQbaYDt6QH7MaiT1T3E6slKhzUzWRm5lbzj41GOr ByFMwTxkeG785N7GHT9xi6wxgTLoF8x/U+3qM4k2eUXvAYa3D4bCK8wvuPXw+tbZ 8BsQnmksuM4ru/lLXPtRFrYGSGqpWF6j5mowee4cb5zSmCVglTyrbca3MxyNjPuM 8UkVK6wNflxxCJ2JWuUCVd5uyrp7KP+O8l6ARYQkz3sToO5CTkBELWEAUKU= -----END CERTIFICATE-----Generated at Mon Aug 31 03:48:00 2026 by rpki-client