$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa File: 5238a6c5-a106-4b94-9f46-2c619db863c6.roa (raw, json) Hash identifier: NIG5BVGfjenoXJwsW4yyCeZ/pQB4EL08U2lcS/BhjGY= Subject key identifier: D1:76:D8:CA:CE:29:19:81:0D:DB:7F:B4:3D:3D:AB:E1:19:81:08:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 564E0327C8306ED97F1943CA83F6B712D3D4DFA9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa Signing time: Tue 04 Aug 2026 00:20:38 +0000 ROA not before: Tue 04 Aug 2026 00:20:38 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.150.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4e:03:27:c8:30:6e:d9:7f:19:43:ca:83:f6:b7:12:d3:d4:df:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:20:38 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=8b710024a3811cb4a6cdc6df80336a93abb2efa11f9ed05a3080ba9c54ffc6be, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:54:ff:a6:94:f1:80:05:47:41:2c:3a:aa: 8a:3f:bf:ed:70:0a:8f:82:95:b8:80:dc:84:c2:e4: 60:a8:6d:41:14:d5:89:69:c3:60:1c:64:91:29:5e: 3c:66:d4:38:f1:c8:40:c8:c3:b0:d7:18:ad:a2:34: e7:9a:56:10:c4:7e:a3:7e:43:e9:8d:e1:6a:49:d5: 7c:6a:3a:50:9a:24:e0:69:87:fc:12:e2:1d:20:dc: a2:ab:5b:e9:e9:0f:33:90:af:d3:10:ca:f3:09:8a: 21:86:e8:52:a7:b4:ee:90:84:4c:e6:28:4c:01:25: 3e:2a:38:06:7a:d3:db:56:0f:eb:83:30:0c:e5:b8: 29:ad:fe:0c:10:29:ae:97:99:ed:39:53:b4:e4:b4: f3:39:21:52:30:a5:0d:6b:9f:a4:80:54:21:1c:a4: cc:70:70:5e:e5:18:a0:b6:e0:61:74:ad:91:34:e0: 19:0b:ea:b4:86:c2:91:db:86:c0:a8:c6:dc:fa:e4: 63:f8:2f:fc:e3:e0:0d:47:0a:89:94:3c:72:eb:2e: 76:5f:9f:0f:b2:76:1a:9c:07:09:76:d7:26:1d:9c: f9:a1:d2:b6:3a:70:40:92:3e:90:6c:bf:75:f0:38: 46:bf:4d:34:6f:bb:e1:70:8c:1b:38:91:2d:3d:ab: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:76:D8:CA:CE:29:19:81:0D:DB:7F:B4:3D:3D:AB:E1:19:81:08:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.150.192.0/19 Signature Algorithm: sha256WithRSAEncryption 0d:bd:fe:cf:e7:0d:ce:57:41:eb:ce:db:16:c1:ce:75:1f:1b: 92:a2:24:c3:ec:9e:53:1c:cc:ef:24:4c:e3:b4:ee:15:15:2e: 62:91:ad:62:15:25:17:f0:5b:c4:db:bc:d5:70:ca:f4:cb:28: 95:bf:ad:1e:ec:a5:fb:f8:f7:4c:14:73:3d:8e:4b:08:a5:01: 1e:51:af:88:4a:5f:2a:40:c9:d1:85:b5:09:15:2b:ff:fa:2d: 30:15:5c:1b:97:6f:c9:16:d0:5a:8c:90:2b:56:15:7c:86:02: 40:82:8d:41:05:81:ef:e8:62:0a:c0:54:8c:e6:bc:0f:50:ef: 11:a1:fb:f4:a1:94:79:15:12:45:fe:9c:a4:e3:2c:f5:cf:cb: 8d:e4:fc:aa:17:b1:23:75:52:52:82:94:21:4c:14:5d:59:7e: 71:32:02:63:db:14:dc:d5:97:d7:b3:c8:e9:b3:7f:c9:3b:85: 3b:17:01:af:46:f2:8c:60:05:19:70:81:8a:59:42:35:f3:56: 00:d2:0c:7c:10:dc:63:37:03:bf:52:08:38:2c:ba:dc:7f:8e: c8:9e:50:e2:f3:9d:6e:d3:f2:ca:1e:40:26:b1:fd:fb:88:b8: 79:2b:f4:63:41:d0:cf:d1:80:af:2e:a5:69:41:ed:09:c2:78: 63:ce:c6:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVk4DJ8gwbtl/GUPKg/a3EtPU36kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAyMDM4WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjcxMDAyNGEzODExY2I0YTZjZGM2ZGY4MDMzNmE5M2Fi YjJlZmExMWY5ZWQwNWEzMDgwYmE5YzU0ZmZjNmJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCAFT/ppTxgAVHQSw6qoo/v+1wCo+ClbiA3ITC5GCobUEU 1Ylpw2AcZJEpXjxm1DjxyEDIw7DXGK2iNOeaVhDEfqN+Q+mN4WpJ1XxqOlCaJOBp h/wS4h0g3KKrW+npDzOQr9MQyvMJiiGG6FKntO6QhEzmKEwBJT4qOAZ609tWD+uD MAzluCmt/gwQKa6Xme05U7TktPM5IVIwpQ1rn6SAVCEcpMxwcF7lGKC24GF0rZE0 4BkL6rSGwpHbhsCoxtz65GP4L/zj4A1HComUPHLrLnZfnw+ydhqcBwl21yYdnPmh 0rY6cECSPpBsv3XwOEa/TTRvu+FwjBs4kS09q4NzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0XbYys4pGYEN23+0PT2r4RmBCMMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyMzhhNmM1LWExMDYtNGI5NC05ZjQ2LTJjNjE5ZGI4NjNjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVrlsAwDQYJKoZIhvcNAQELBQADggEBAA29/s/nDc5XQevO2xbBznUfG5Ki JMPsnlMczO8kTOO07hUVLmKRrWIVJRfwW8TbvNVwyvTLKJW/rR7spfv490wUcz2O SwilAR5Rr4hKXypAydGFtQkVK//6LTAVXBuXb8kW0FqMkCtWFXyGAkCCjUEFge/o YgrAVIzmvA9Q7xGh+/ShlHkVEkX+nKTjLPXPy43k/KoXsSN1UlKClCFMFF1ZfnEy AmPbFNzVl9ezyOmzf8k7hTsXAa9G8oxgBRlwgYpZQjXzVgDSDHwQ3GM3A79SCDgs utx/jsieUOLznW7T8soeQCax/fuIuHkr9GNB0M/RgK8upWlB7QnCeGPOxgg= -----END CERTIFICATE-----Generated at Thu Sep 17 18:52:18 2026 by rpki-client