$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5601cb67-a6ce-4d32-b15f-d288675b1ab8.roa File: 5601cb67-a6ce-4d32-b15f-d288675b1ab8.roa (raw, json) Hash identifier: rOAGdiDf4spn/OJHPu1DEFKCcJRuMjI0THcdRM8z6EY= Subject key identifier: 85:58:B3:C0:14:7A:58:CE:E5:6F:08:7D:EA:88:67:A6:DA:85:3B:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F77396573B4865583EBF72BD3BCF2817DA1768A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5601cb67-a6ce-4d32-b15f-d288675b1ab8.roa Signing time: Sat 01 Aug 2026 00:41:53 +0000 ROA not before: Sat 01 Aug 2026 00:41:53 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 208.118.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:77:39:65:73:b4:86:55:83:eb:f7:2b:d3:bc:f2:81:7d:a1:76:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 00:41:53 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=08b102b00e3d38571220897a9756da5461f96e5bb475df2361ba22b13b4446d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cb:89:a0:f1:bc:ec:e7:c3:9b:4b:cf:bd:38: f4:4e:9a:02:c3:67:00:6c:aa:ae:ae:a4:a1:45:58: 5e:c0:7c:77:12:11:79:2b:21:7e:7a:53:58:0f:73: a7:58:fa:73:f3:43:d0:e0:9a:b1:83:c9:77:22:41: 87:ce:42:9a:ae:56:8b:72:04:0e:53:e7:42:46:14: 4e:e5:e3:e3:1a:27:d6:65:f9:81:50:ae:e3:09:4d: a6:ac:fc:01:a7:7d:64:ed:49:2e:96:41:da:a2:5b: 6d:aa:63:29:c5:83:bc:d1:5c:57:b6:a6:fe:4b:bc: 0b:ea:bd:3a:ce:67:27:5f:0c:e4:4d:a9:72:e5:ad: 54:95:73:3b:b5:8f:4c:d9:23:c8:2d:48:74:1f:fe: 94:f1:85:e9:27:c6:ba:5b:1b:a4:60:c3:4f:64:53: ca:48:bd:13:ec:b5:4c:59:77:a0:0d:22:bf:b8:bd: 09:aa:03:20:10:e3:be:72:81:c7:40:ea:a3:49:95: a0:d8:f4:63:67:4a:2a:eb:c4:07:30:c0:c1:5a:68: 5a:a5:4f:25:00:ca:2e:af:55:8a:b3:d5:f0:25:1a: df:ce:6c:47:c2:ae:36:1b:c8:1f:59:fc:24:01:1b: 04:96:27:eb:6f:67:29:25:42:1e:19:ea:d7:41:b0: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:B3:C0:14:7A:58:CE:E5:6F:08:7D:EA:88:67:A6:DA:85:3B:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5601cb67-a6ce-4d32-b15f-d288675b1ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.118.32.0/20 Signature Algorithm: sha256WithRSAEncryption b4:6b:24:6d:45:ab:56:c9:1d:fe:84:29:6f:cc:a2:a7:0d:89: 73:dc:00:7e:3c:46:37:00:b8:c3:a8:0c:a5:54:85:73:e1:ed: 56:02:4f:f7:d6:13:44:de:8c:8b:a7:43:3a:d5:c1:46:17:b9: 31:fd:d1:6b:5f:98:ca:da:c8:5d:c9:ce:4b:38:42:35:22:88: 0b:43:01:1f:fe:ed:70:0d:dc:d7:30:52:57:98:c5:d8:c9:4b: f8:a3:c3:5d:4e:59:2f:1a:f5:2b:a4:cb:6b:bf:85:d0:f8:dc: c5:32:5c:57:86:7c:f8:91:6d:90:76:f4:20:48:e3:b0:7a:d7: b1:fd:ec:cf:26:82:13:cd:6c:dd:96:68:1c:bc:f4:3a:21:ba: 5b:a5:06:62:91:40:58:29:56:af:93:60:ae:eb:ee:fb:c3:10: 0d:b2:10:8b:c7:c9:28:66:08:dd:e4:88:b7:6d:a8:00:6c:8c: 67:9b:28:cf:aa:4f:c3:d2:2e:76:5e:55:45:8a:e7:98:e6:f7: 9d:f8:73:45:c2:b1:b9:45:1a:70:0d:9d:07:bb:88:f8:d5:44: 4a:d9:23:2b:86:ad:12:1c:70:ae:95:df:e6:9e:70:f4:64:32: 75:d6:df:53:f7:75:58:28:62:27:d9:f4:13:89:9f:9c:3d:cf: 87:8c:ce:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf3c5ZXO0hlWD6/cr07zygX2hdoowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAxMDA0MTUzWhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGIxMDJiMDBlM2QzODU3MTIyMDg5N2E5NzU2ZGE1NDYx Zjk2ZTViYjQ3NWRmMjM2MWJhMjJiMTNiNDQ0NmQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDry4mg8bzs58ObS8+9OPROmgLDZwBsqq6upKFFWF7AfHcS EXkrIX56U1gPc6dY+nPzQ9DgmrGDyXciQYfOQpquVotyBA5T50JGFE7l4+MaJ9Zl +YFQruMJTaas/AGnfWTtSS6WQdqiW22qYynFg7zRXFe2pv5LvAvqvTrOZydfDORN qXLlrVSVczu1j0zZI8gtSHQf/pTxheknxrpbG6Rgw09kU8pIvRPstUxZd6ANIr+4 vQmqAyAQ475ygcdA6qNJlaDY9GNnSirrxAcwwMFaaFqlTyUAyi6vVYqz1fAlGt/O bEfCrjYbyB9Z/CQBGwSWJ+tvZyklQh4Z6tdBsI5lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhVizwBR6WM7lbwh96ohnptqFOyQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2MDFjYjY3LWE2Y2UtNGQzMi1iMTVmLWQyODg2NzViMWFiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATQdiAwDQYJKoZIhvcNAQELBQADggEBALRrJG1Fq1bJHf6EKW/MoqcNiXPc AH48RjcAuMOoDKVUhXPh7VYCT/fWE0TejIunQzrVwUYXuTH90WtfmMrayF3Jzks4 QjUiiAtDAR/+7XAN3NcwUleYxdjJS/ijw11OWS8a9Suky2u/hdD43MUyXFeGfPiR bZB29CBI47B617H97M8mghPNbN2WaBy89DohululBmKRQFgpVq+TYK7r7vvDEA2y EIvHyShmCN3kiLdtqABsjGebKM+qT8PSLnZeVUWK55jm9534c0XCsblFGnANnQe7 iPjVRErZIyuGrRIccK6V3+aecPRkMnXW31P3dVgoYifZ9BOJn5w9z4eMzkw= -----END CERTIFICATE-----Generated at Tue Sep 15 11:38:46 2026 by rpki-client