$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa File: 59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa (raw, json) Hash identifier: wMTcrZqnneHrFRrb/Ca1h4Pu+HBrN6ZnSc7PFsLNnQs= Subject key identifier: 55:2C:98:25:1C:93:E2:32:E1:A3:D1:6B:E8:98:F0:A1:94:44:A5:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CB483CB7238378925CBF7BA8CFA364CF7356ED1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa Signing time: Fri 07 Aug 2026 00:40:07 +0000 ROA not before: Fri 07 Aug 2026 00:40:07 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.13.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b4:83:cb:72:38:37:89:25:cb:f7:ba:8c:fa:36:4c:f7:35:6e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:40:07 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=ae7a153e59e1f808be5305447379074975b1923b8130c23848f5ab86a30bcc6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:26:d3:ab:e7:1b:3c:5e:99:71:7b:75:64: b1:79:25:d3:23:0f:0e:cf:84:eb:1f:99:3c:3d:3b: 69:6c:fa:16:f0:88:5a:e7:c8:e9:ff:a3:78:1f:7c: 50:80:7f:6b:6c:36:d9:63:f9:5c:2d:f8:bb:c2:18: 4e:5b:18:70:de:96:23:e8:0c:f8:06:ca:ad:5d:ff: d1:67:f0:24:7e:cd:6a:2f:a9:2e:05:b5:1e:bb:68: 5c:bd:dd:3e:5d:eb:7f:11:c2:7c:45:d0:1b:c6:6b: f5:33:f1:a8:d1:c7:b4:91:2c:95:6c:ae:e8:19:d3: aa:10:a5:10:7a:47:df:69:c9:28:a8:ae:62:0c:60: 0d:e5:8e:bb:53:e8:58:ff:03:aa:61:9c:91:c6:ac: 6c:85:6d:05:27:9d:a3:1c:b9:1c:50:15:b0:5b:ce: fb:e3:4a:7b:87:a8:cd:17:9c:18:50:3a:5b:e6:b7: fc:30:96:28:87:09:85:8b:75:e4:a2:ec:40:3b:3a: 77:0d:e0:dd:fe:f3:01:f9:e9:35:fa:df:c5:ae:b3: 36:80:04:25:25:7b:bd:10:fb:e9:18:39:55:fb:bd: 53:2f:e3:f2:82:35:ce:26:b2:95:99:ba:3e:fd:23: ee:99:48:33:7c:d8:86:cf:12:2e:82:35:1e:42:8f: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2C:98:25:1C:93:E2:32:E1:A3:D1:6B:E8:98:F0:A1:94:44:A5:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59d16c9b-cf90-430d-b831-1aafba4ba7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.190.0/24 Signature Algorithm: sha256WithRSAEncryption 68:3c:6c:b3:5b:bb:4a:ca:36:5f:cd:06:c3:70:2b:42:a4:e8: b6:c5:43:b9:a7:4a:36:55:33:3d:1a:19:0c:1e:ec:01:48:c7: a2:df:3d:30:c1:17:eb:7b:15:ac:da:65:fc:31:b1:0e:66:f3: 83:13:26:df:08:ce:b5:66:44:78:86:31:76:cc:e4:c3:e7:71: b4:b9:e7:2d:98:62:30:f9:aa:7a:ed:4b:bb:6d:61:a1:15:06: f1:d2:6b:69:e0:59:16:0d:e2:76:7e:dc:ca:b9:0a:34:55:30: ab:ff:9f:86:6e:c3:e1:30:f8:48:1d:e2:6e:eb:ea:0a:d9:26: 10:14:dd:d3:3a:41:e7:5a:6e:42:41:27:42:43:88:50:29:58: 70:0c:d1:46:a7:79:70:7f:76:98:88:e3:76:43:39:02:68:6f: 08:19:19:16:b8:1b:0f:52:f3:d9:2a:80:92:85:dd:18:3a:67: ea:1a:76:62:ba:b7:96:cb:55:6f:86:05:df:95:bf:c3:d5:21: 33:23:76:62:14:0d:18:3d:97:4d:dd:bb:37:56:49:5b:27:c4: cc:67:e3:4b:af:50:51:73:ed:0f:f9:0d:92:29:a2:05:40:5b: 73:43:f4:03:b8:fb:d7:66:ea:df:60:fd:94:8c:1a:08:ab:ef: 23:89:31:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfLSDy3I4N4kly/e6jPo2TPc1btEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDA3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTdhMTUzZTU5ZTFmODA4YmU1MzA1NDQ3Mzc5MDc0OTc1 YjE5MjNiODEzMGMyMzg0OGY1YWI4NmEzMGJjYzZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAuybTq+cbPF6ZcXt1ZLF5JdMjDw7PhOsfmTw9O2ls+hbw iFrnyOn/o3gffFCAf2tsNtlj+Vwt+LvCGE5bGHDeliPoDPgGyq1d/9Fn8CR+zWov qS4FtR67aFy93T5d638RwnxF0BvGa/Uz8ajRx7SRLJVsrugZ06oQpRB6R99pySio rmIMYA3ljrtT6Fj/A6phnJHGrGyFbQUnnaMcuRxQFbBbzvvjSnuHqM0XnBhQOlvm t/wwliiHCYWLdeSi7EA7OncN4N3+8wH56TX638WuszaABCUle70Q++kYOVX7vVMv 4/KCNc4mspWZuj79I+6ZSDN82IbPEi6CNR5Cj+lPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVSyYJRyT4jLho9Fr6JjwoZREpbcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ZDE2YzliLWNmOTAtNDMwZC1iODMxLTFhYWZiYTRiYTdhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnDb4wDQYJKoZIhvcNAQELBQADggEBAGg8bLNbu0rKNl/NBsNwK0Kk6LbF Q7mnSjZVMz0aGQwe7AFIx6LfPTDBF+t7FazaZfwxsQ5m84MTJt8IzrVmRHiGMXbM 5MPncbS55y2YYjD5qnrtS7ttYaEVBvHSa2ngWRYN4nZ+3Mq5CjRVMKv/n4Zuw+Ew +Egd4m7r6grZJhAU3dM6QedabkJBJ0JDiFApWHAM0UaneXB/dpiI43ZDOQJobwgZ GRa4Gw9S89kqgJKF3Rg6Z+oadmK6t5bLVW+GBd+Vv8PVITMjdmIUDRg9l03duzdW SVsnxMxn40uvUFFz7Q/5DZIpogVAW3ND9AO4+9dm6t9g/ZSMGgir7yOJMVM= -----END CERTIFICATE-----Generated at Tue Sep 15 13:24:01 2026 by rpki-client