$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa File: 5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa (raw, json) Hash identifier: 20ASa5YveqgrTfPPopZ/GQ+tPneUPTCzu4c2Wy51To8= Subject key identifier: CF:FE:03:71:B6:19:21:09:5B:71:A8:E5:03:49:A9:EF:BA:37:C8:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E93AB310FC14B159305079A60595DC85C7E15 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa Signing time: Fri 07 Aug 2026 00:40:04 +0000 ROA not before: Fri 07 Aug 2026 00:40:04 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 88.108.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:93:ab:31:0f:c1:4b:15:93:05:07:9a:60:59:5d:c8:5c:7e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:40:04 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=809169f150b71110a766cfd9983033e6f353fb45208f56fa0e1a1faefd441389, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:b5:36:79:c1:82:68:7f:a7:85:64:68:9d: f8:08:59:8a:30:48:0e:10:0d:a0:e7:24:9a:15:a0: e3:e7:56:da:2e:f4:46:9f:89:36:78:fb:b1:15:fb: d9:59:77:d2:1d:d5:2e:6e:c1:52:f3:2c:9f:02:68: 00:1e:49:49:eb:87:d1:77:b7:f4:ef:2b:6a:11:53: 19:92:a9:f6:5f:eb:04:e3:b4:bd:eb:49:9f:9f:38: bb:30:64:19:a6:52:f3:fe:df:68:72:60:2d:c4:6c: e6:b7:b9:c0:7c:d3:2e:e3:3c:c1:05:ff:65:cc:7d: 97:52:ac:08:6f:4d:da:b8:3d:42:53:98:17:0e:9e: 43:4a:d6:f3:a3:02:8a:26:ac:f0:33:d8:c7:21:0f: a0:ea:68:b0:e8:ee:25:4d:6d:41:cb:b0:df:1a:24: 52:d2:61:d2:e6:0b:9e:cb:36:0e:e7:13:9f:8e:50: 1b:23:3e:af:04:f6:05:78:8e:0f:e6:31:7c:64:9d: ce:d4:ff:9a:97:7a:74:87:58:ed:7a:84:9a:13:c7: 94:e5:03:fd:29:f8:d8:ad:50:7e:70:75:93:eb:00: ca:85:17:c2:c7:92:0f:b2:78:5e:1f:ca:75:08:1f: 89:43:f7:d0:85:33:0f:08:bc:5a:c6:bd:88:1c:0a: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FE:03:71:B6:19:21:09:5B:71:A8:E5:03:49:A9:EF:BA:37:C8:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.108.0.0/14 Signature Algorithm: sha256WithRSAEncryption ad:25:89:cc:d7:97:5c:f3:ae:75:5b:21:e8:7e:07:e5:ad:1c: d1:d0:1f:e4:0d:20:47:df:8e:b8:3e:1b:52:07:7a:d3:c8:67: 7a:66:5c:40:08:15:ca:92:ad:fa:b8:1b:aa:dc:e0:d4:f8:8f: 8a:15:7d:ae:82:93:f1:ce:df:45:ca:f6:95:b4:1b:18:f5:e3: f7:c1:81:18:9e:0b:da:ed:7b:7a:22:0d:34:6e:a9:7b:55:6e: 59:a4:fa:d4:5c:3c:b7:21:14:98:ad:ed:f1:ec:f9:9e:a4:6b: 0b:4e:1e:6d:08:a9:8e:63:18:d2:2e:2c:51:39:e0:fd:b5:83: fd:1a:55:bc:af:b7:86:a8:18:f8:a5:c8:b2:ad:85:f3:d5:ad: b8:03:3a:82:6a:eb:c4:b8:f4:c5:ea:8d:47:41:9d:96:c7:5b: 6b:60:53:ee:16:13:5d:8c:56:6a:40:ee:aa:c8:5d:aa:67:44: fb:c1:c5:64:09:79:1a:28:2e:0f:3c:75:65:3c:46:53:c1:25: d3:a7:f7:95:d7:f4:16:07:1b:6e:fb:fc:13:96:52:79:45:16: db:b6:d4:be:5b:5f:62:7d:95:21:d2:83:ae:dd:57:47:d3:97: 71:b5:b0:a8:bf:23:69:36:ea:4f:81:5d:58:b5:54:59:a6:2e: 01:a0:3b:5f -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITTpOrMQ/BSxWTBQeaYFldyFx+FTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA4MDcwMDQwMDRaFw0yNjExMDUyMzU5NTla MHoxSTBHBgNVBAUTQDgwOTE2OWYxNTBiNzExMTBhNzY2Y2ZkOTk4MzAzM2U2ZjM1 M2ZiNDUyMDhmNTZmYTBlMWExZmFlZmQ0NDEzODkxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKihtTZ5wYJof6eFZGid+AhZijBIDhANoOckmhWg4+dW2i70 Rp+JNnj7sRX72Vl30h3VLm7BUvMsnwJoAB5JSeuH0Xe39O8rahFTGZKp9l/rBOO0 vetJn584uzBkGaZS8/7faHJgLcRs5re5wHzTLuM8wQX/Zcx9l1KsCG9N2rg9QlOY Fw6eQ0rW86MCiias8DPYxyEPoOposOjuJU1tQcuw3xokUtJh0uYLnss2DucTn45Q GyM+rwT2BXiOD+YxfGSdztT/mpd6dIdY7XqEmhPHlOUD/Sn42K1QfnB1k+sAyoUX wseSD7J4Xh/KdQgfiUP30IUzDwi8Wsa9iBwKA9ECAwEAAaOCArAwggKsMB0GA1Ud DgQWBBTP/gNxthkhCVtxqOUDSanvujfIHDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNWJkMGZlMDItN2UyNC00ZmU1LTllZWMtZmFkZGVjN2ExODUyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAlhsMA0GCSqGSIb3DQEBCwUAA4IBAQCtJYnM15dc8651WyHofgflrRzR0B/k DSBH3464PhtSB3rTyGd6ZlxACBXKkq36uBuq3ODU+I+KFX2ugpPxzt9FyvaVtBsY 9eP3wYEYngva7Xt6Ig00bql7VW5ZpPrUXDy3IRSYre3x7PmepGsLTh5tCKmOYxjS LixROeD9tYP9GlW8r7eGqBj4pciyrYXz1a24AzqCauvEuPTF6o1HQZ2Wx1trYFPu FhNdjFZqQO6qyF2qZ0T7wcVkCXkaKC4PPHVlPEZTwSXTp/eV1/QWBxtu+/wTllJ5 RRbbttS+W19ifZUh0oOu3VdH05dxtbCovyNpNupPgV1YtVRZpi4BoDtf -----END CERTIFICATE-----Generated at Thu Sep 17 16:22:01 2026 by rpki-client