$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531fe09f-1047-43db-91cb-8b46c0209270.roa File: 531fe09f-1047-43db-91cb-8b46c0209270.roa (raw, json) Hash identifier: VAyf46yuyUhdfEz/eleIFYkWccSpYNNVrdCLGmO1M3s= Subject key identifier: EA:0E:53:64:9B:AA:66:A9:CE:A0:15:66:8E:5A:67:85:18:54:2D:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C7327D84F63B20317C47D34D694FE62894EDB0C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531fe09f-1047-43db-91cb-8b46c0209270.roa Signing time: Fri 07 Aug 2026 00:30:43 +0000 ROA not before: Fri 07 Aug 2026 00:30:43 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 98.82.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:73:27:d8:4f:63:b2:03:17:c4:7d:34:d6:94:fe:62:89:4e:db:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:30:43 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=a4cc5a398623971b8015b8533c8b462a8751b092a1b51608836431c431090ad0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:ca:16:fb:0a:c9:4d:cf:43:14:a4:22:7e: 01:42:9b:2b:cf:59:8d:a4:ec:eb:aa:41:e2:89:e3: 85:ae:b7:2e:ef:bd:b2:99:d8:1c:2a:8a:b9:2d:3e: b6:16:7c:ea:db:78:14:68:01:a4:82:73:64:d0:d1: 58:cf:a0:08:5d:30:67:d6:11:d9:4f:92:2f:1d:d4: 72:60:16:00:cc:0a:da:7f:3d:7c:b3:aa:8e:ec:67: 04:92:88:65:22:59:e4:0a:e7:21:35:3a:15:34:4a: e9:92:b5:1f:14:ee:95:11:89:53:c2:21:84:02:7b: f6:c4:bb:30:98:5c:d5:82:c1:aa:55:cf:3b:60:7c: f7:d3:31:be:03:17:52:03:60:55:d5:62:0e:e6:dc: 50:2a:35:d7:ae:d7:0a:1c:91:7f:78:af:c0:15:d2: bd:c6:ad:4b:be:af:1a:42:54:75:52:bb:2d:e2:6f: 6b:6b:7a:2e:c2:48:4e:76:c4:ef:4d:98:55:fb:a7: a1:7c:07:d1:27:a7:cc:06:99:2a:ef:5d:19:97:a4: ea:de:e8:07:f9:ae:03:17:26:a6:42:4f:2c:5f:cf: 22:56:be:51:78:ca:52:91:79:63:eb:e5:f3:0f:5d: 05:ed:ef:e8:7b:52:7b:81:74:ed:b8:52:4f:fa:5e: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0E:53:64:9B:AA:66:A9:CE:A0:15:66:8E:5A:67:85:18:54:2D:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531fe09f-1047-43db-91cb-8b46c0209270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.160.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:2b:79:97:30:dd:b3:be:6b:01:70:c1:8e:08:49:5e:ac:af: 7e:12:0a:c5:82:d6:0a:38:65:5d:06:80:1d:b5:0a:4d:b3:1a: 0e:17:01:e4:50:e1:c8:91:79:4e:59:87:6e:71:33:01:d9:2e: 95:23:c2:1c:b7:3b:32:e7:5c:52:9d:de:21:8b:62:b3:d2:f0: f8:48:c4:7f:63:dd:50:4d:06:1b:35:a6:d7:cb:1b:ef:f5:f5: 97:c6:68:81:dc:be:b9:a1:64:0d:7f:60:e2:68:e5:6d:4a:d3: 1a:d7:ef:a0:a1:d8:6d:4b:be:ad:6f:84:7f:07:8c:da:7e:1d: 77:17:0d:d2:78:9d:95:88:ff:5b:cb:02:f2:91:2b:af:da:53: 08:57:51:6a:0c:82:64:bf:2e:f3:62:a7:27:c2:68:bb:74:c0: 80:88:da:96:1b:2c:8d:1f:06:64:e2:92:82:ea:68:5a:58:4b: f2:9b:f7:b0:b3:9d:2a:fa:3f:14:3b:f4:28:43:94:35:a6:3e: 22:e8:45:03:ef:ae:12:71:f4:17:09:38:ea:4a:ff:e8:a6:9b: 77:28:7c:cd:65:54:5c:e2:e5:50:80:3d:64:48:d9:c7:8c:b4: 4d:56:13:fe:ee:24:98:f4:b3:b8:6e:fd:cd:34:9d:68:54:34: 95:f7:59:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPHMn2E9jsgMXxH001pT+YolO2wwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAzMDQzWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGNjNWEzOTg2MjM5NzFiODAxNWI4NTMzYzhiNDYyYTg3 NTFiMDkyYTFiNTE2MDg4MzY0MzFjNDMxMDkwYWQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSQ8oW+wrJTc9DFKQifgFCmyvPWY2k7OuqQeKJ44Wuty7v vbKZ2BwqirktPrYWfOrbeBRoAaSCc2TQ0VjPoAhdMGfWEdlPki8d1HJgFgDMCtp/ PXyzqo7sZwSSiGUiWeQK5yE1OhU0SumStR8U7pURiVPCIYQCe/bEuzCYXNWCwapV zztgfPfTMb4DF1IDYFXVYg7m3FAqNdeu1wockX94r8AV0r3GrUu+rxpCVHVSuy3i b2trei7CSE52xO9NmFX7p6F8B9Enp8wGmSrvXRmXpOre6Af5rgMXJqZCTyxfzyJW vlF4ylKReWPr5fMPXQXt7+h7UnuBdO24Uk/6XhJpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6g5TZJuqZqnOoBVmjlpnhRhULbwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzMWZlMDlmLTEwNDctNDNkYi05MWNiLThiNDZjMDIwOTI3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUqAwDQYJKoZIhvcNAQELBQADggEBAD0reZcw3bO+awFwwY4ISV6sr34S CsWC1go4ZV0GgB21Ck2zGg4XAeRQ4ciReU5Zh25xMwHZLpUjwhy3OzLnXFKd3iGL YrPS8PhIxH9j3VBNBhs1ptfLG+/19ZfGaIHcvrmhZA1/YOJo5W1K0xrX76Ch2G1L vq1vhH8HjNp+HXcXDdJ4nZWI/1vLAvKRK6/aUwhXUWoMgmS/LvNipyfCaLt0wICI 2pYbLI0fBmTikoLqaFpYS/Kb97CznSr6PxQ79ChDlDWmPiLoRQPvrhJx9BcJOOpK /+imm3cofM1lVFzi5VCAPWRI2ceMtE1WE/7uJJj0s7hu/c00nWhUNJX3We0= -----END CERTIFICATE-----Generated at Thu Sep 17 16:22:28 2026 by rpki-client