$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa File: 535de5eb-7a03-4839-a5ea-cf50f810b149.roa (raw, json) Hash identifier: JOpg3D4rVtU9J6z7gz2bzSsorMwKYVj5+AuJ6hkyy7M= Subject key identifier: 6A:6A:45:5E:6C:47:FC:B2:E7:8C:91:8C:88:E3:4A:A6:1A:C7:EF:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C07F2592A6A618CF4568142C895B1ED854F81 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa Signing time: Sat 08 Aug 2026 00:21:57 +0000 ROA not before: Sat 08 Aug 2026 00:21:57 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 203.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:07:f2:59:2a:6a:61:8c:f4:56:81:42:c8:95:b1:ed:85:4f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:21:57 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=594fd07d3c464e02e2a6d8887b9fdaad71ff1a3f29a6eeec4c391ac6e6a5a41b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:ae:27:a5:63:c1:38:0c:9a:76:2c:50:c1: 6f:65:52:b1:cf:d2:7e:6f:25:da:1e:cb:f0:96:b1: 9a:b3:7d:97:46:0d:25:77:10:aa:a1:c2:19:a9:c3: 29:82:92:28:c1:3a:62:24:87:da:2d:af:37:27:62: b5:ec:f2:64:01:22:84:ee:57:7f:0c:e8:b6:0b:55: 24:98:5e:c4:f4:19:f6:da:0c:cf:33:2e:10:86:49: c6:74:b0:43:e1:6a:fc:27:d8:eb:ad:c5:69:83:d5: ac:55:ce:90:f2:da:b3:08:23:58:65:61:15:e8:00: 55:24:ad:6f:6a:2a:7a:0d:78:0c:11:5e:26:ce:b0: fd:4d:22:17:63:c8:1b:62:70:dc:a7:30:79:a7:74: 18:1a:c7:f4:fe:ec:94:47:77:b7:fd:dd:aa:d7:f3: c3:5f:09:2b:23:05:d6:24:13:ef:44:22:69:da:19: 07:c3:28:fd:dd:87:fe:d0:0d:77:af:4c:f2:d7:8d: 89:10:71:8c:11:f6:65:71:45:ca:91:ad:33:a9:fe: 8f:8f:e8:05:39:58:a6:dd:1c:c6:08:af:5c:8e:fa: 70:71:9b:81:6f:e2:8c:67:c0:5d:58:15:7d:ab:0c: 26:ac:d8:7a:17:50:7d:c7:36:40:9a:85:c4:e0:e6: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6A:45:5E:6C:47:FC:B2:E7:8C:91:8C:88:E3:4A:A6:1A:C7:EF:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.88.83.0/24 Signature Algorithm: sha256WithRSAEncryption 43:68:d3:90:81:18:d2:15:a0:f1:ac:20:42:9a:3f:42:fc:fe: ec:28:05:56:0c:d4:f5:b7:4c:42:72:3e:49:63:0d:69:03:f1: bd:ea:82:bd:1a:12:18:ca:d8:31:29:61:e8:f1:f1:64:61:20: 3b:4d:22:57:99:b6:96:53:9e:b5:e8:a3:77:2c:5d:c4:6e:48: aa:29:d2:83:ce:73:08:2e:ef:f4:7f:de:67:6e:d4:54:93:cf: cd:2b:08:4d:c5:2d:3d:f3:a6:dc:f0:25:ae:44:fb:3b:1d:46: d2:85:e2:2f:83:5e:53:0f:5d:b9:8b:42:2a:c7:4b:dc:cd:c3: c2:56:26:ea:ce:41:7e:e1:cf:75:3f:a8:b7:4f:e2:b3:06:2e: 83:66:13:73:b0:14:73:78:4f:b7:10:92:29:58:30:cc:2b:d4: 36:16:e2:76:73:69:e7:0e:f9:50:e8:b0:1c:3a:c7:17:46:d9: a5:12:53:13:f9:b4:2c:9d:d7:87:82:f3:d1:27:3f:19:2d:89: b4:90:39:49:40:29:b3:e1:0c:8c:c1:4a:55:78:3c:9a:aa:27: 3b:fc:e2:43:80:a6:5c:27:df:8e:99:42:83:6f:f7:4e:b9:8f: e4:9f:8b:1d:ff:fb:ae:90:e1:0d:72:30:14:ed:ed:97:d0:82: 89:21:a0:ed -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITbAfyWSpqYYz0VoFCyJWx7YVPgTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA4MDgwMDIxNTdaFw0yNjExMDYyMzU5NTla MHoxSTBHBgNVBAUTQDU5NGZkMDdkM2M0NjRlMDJlMmE2ZDg4ODdiOWZkYWFkNzFm ZjFhM2YyOWE2ZWVlYzRjMzkxYWM2ZTZhNWE0MWIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJjIrielY8E4DJp2LFDBb2VSsc/Sfm8l2h7L8JaxmrN9l0YN JXcQqqHCGanDKYKSKME6YiSH2i2vNyditezyZAEihO5XfwzotgtVJJhexPQZ9toM zzMuEIZJxnSwQ+Fq/CfY663FaYPVrFXOkPLaswgjWGVhFegAVSStb2oqeg14DBFe Js6w/U0iF2PIG2Jw3Kcwead0GBrH9P7slEd3t/3dqtfzw18JKyMF1iQT70QiadoZ B8Mo/d2H/tANd69M8teNiRBxjBH2ZXFFypGtM6n+j4/oBTlYpt0cxgivXI76cHGb gW/ijGfAXVgVfasMJqzYehdQfcc2QJqFxODmLZ0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRqakVebEf8sueMkYyI40qmGsfvLjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNTM1ZGU1ZWItN2EwMy00ODM5LWE1ZWEtY2Y1MGY4MTBiMTQ5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtYUzANBgkqhkiG9w0BAQsFAAOCAQEAQ2jTkIEY0hWg8awgQpo/Qvz+7CgF VgzU9bdMQnI+SWMNaQPxveqCvRoSGMrYMSlh6PHxZGEgO00iV5m2llOeteijdyxd xG5IqinSg85zCC7v9H/eZ27UVJPPzSsITcUtPfOm3PAlrkT7Ox1G0oXiL4NeUw9d uYtCKsdL3M3DwlYm6s5BfuHPdT+ot0/iswYug2YTc7AUc3hPtxCSKVgwzCvUNhbi dnNp5w75UOiwHDrHF0bZpRJTE/m0LJ3Xh4Lz0Sc/GS2JtJA5SUAps+EMjMFKVXg8 mqonO/ziQ4CmXCffjplCg2/3TrmP5J+LHf/7rpDhDXIwFO3tl9CCiSGg7Q== -----END CERTIFICATE-----Generated at Thu Sep 17 16:55:46 2026 by rpki-client