$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63cb1e87-639b-487c-bdb6-3408ff537e1d.roa File: 63cb1e87-639b-487c-bdb6-3408ff537e1d.roa (raw, json) Hash identifier: LdMsdZ7sO5EJUPQzMVU4hn9U2ip7QYwlbGEQVC710qw= Subject key identifier: F1:85:5B:95:A4:81:67:31:E1:BE:8F:D8:CC:0F:2B:31:07:A7:EE:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 304696BD8D8727C4BC5E11CD126B62ED1FF39F4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63cb1e87-639b-487c-bdb6-3408ff537e1d.roa Signing time: Wed 05 Aug 2026 00:30:25 +0000 ROA not before: Wed 05 Aug 2026 00:30:25 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 148.94.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:46:96:bd:8d:87:27:c4:bc:5e:11:cd:12:6b:62:ed:1f:f3:9f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:30:25 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=97fc8f8f51a32741b462a2fd1cfd917d36db8de132bc8788813d8c9b1b4ba44e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:99:f8:a7:36:95:a0:c5:49:71:40:0e:71: 43:dd:98:6c:0e:bd:ab:07:59:28:3d:c1:bd:cd:e6: 93:d7:26:ec:37:4c:49:3d:9d:9b:dc:39:c4:57:cc: 36:8c:6e:da:2b:c1:9e:63:9f:67:18:fc:bc:1e:49: 17:b2:3a:c4:6f:0f:1d:48:83:0a:86:66:89:44:e0: 13:72:10:a6:34:70:bd:1c:5e:35:cc:43:cc:e4:77: 8e:37:7e:d4:44:2d:07:cd:ea:80:02:96:b4:f9:92: f3:d9:df:d2:5d:c6:13:d4:29:f9:37:e5:06:88:f3: cf:c1:d5:f8:cc:c4:5e:98:12:a0:a2:04:9c:ab:35: e4:87:47:01:3d:68:b7:2c:ba:44:4b:f1:a3:aa:d5: 65:f3:c0:b6:b4:43:a9:b3:ad:77:9c:ac:c5:51:3d: 8d:96:57:a8:46:b6:61:f4:8f:5a:02:a9:fa:2f:0c: 4a:f7:a1:14:42:56:6a:05:82:51:06:b5:53:fe:91: 5a:81:cb:97:5b:5c:af:34:ea:f7:6a:3f:89:70:2c: 70:50:1a:75:52:e4:79:65:1a:71:47:75:ce:6d:de: e5:04:09:76:82:bf:79:fe:9d:e7:6e:7e:b7:7c:65: 98:63:d1:5a:6f:ce:42:87:34:99:7e:e6:fa:f7:47: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:85:5B:95:A4:81:67:31:E1:BE:8F:D8:CC:0F:2B:31:07:A7:EE:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63cb1e87-639b-487c-bdb6-3408ff537e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.94.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:40:77:47:e7:7e:10:69:c7:11:c5:ce:3c:ee:6c:8c:7f:23: b6:e6:e8:d2:d3:74:a8:1e:15:e9:7b:d1:4b:f6:5a:93:24:5a: ef:f8:90:77:8c:7b:27:3a:72:88:3f:06:cb:0f:ab:c3:60:36: 4f:a8:d5:cc:42:93:6a:00:1d:3f:8a:a0:be:d5:92:bb:80:7e: 97:54:d6:7a:84:12:2c:c8:d7:d6:1b:0d:98:f0:b7:7a:7b:a5: f5:23:a8:9e:d7:dd:99:29:ec:c1:5a:3e:13:8e:7d:86:b6:1e: 75:e5:cf:23:55:d2:e0:51:ca:63:ec:79:d2:b6:75:bb:c3:da: 6d:4f:2a:26:cc:17:52:62:ab:51:84:c1:82:9b:68:74:ee:8f: d4:0b:1b:2e:e4:5b:4a:df:34:57:bf:43:84:86:e2:8a:ec:d6: b9:be:c8:c4:da:5a:0b:97:ad:60:59:7d:c9:ef:56:77:92:d5: 06:95:2b:d0:6a:4a:ca:8d:e8:e6:a3:53:af:e0:f6:58:33:c2: a4:dd:4d:0a:44:6a:6c:f1:66:14:03:ea:43:7a:db:5d:53:ee: aa:c7:02:d3:0f:9a:bf:40:70:15:1d:5a:95:a0:69:f8:00:d2: b2:3e:81:4a:77:36:39:76:5b:30:eb:c7:cc:b1:1e:e2:27:42: 5b:21:c2:26 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMEaWvY2HJ8S8XhHNEmti7R/zn04wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAzMDI1WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2ZjOGY4ZjUxYTMyNzQxYjQ2MmEyZmQxY2ZkOTE3ZDM2 ZGI4ZGUxMzJiYzg3ODg4MTNkOGM5YjFiNGJhNDRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxMpn4pzaVoMVJcUAOcUPdmGwOvasHWSg9wb3N5pPXJuw3 TEk9nZvcOcRXzDaMbtorwZ5jn2cY/LweSReyOsRvDx1IgwqGZolE4BNyEKY0cL0c XjXMQ8zkd443ftRELQfN6oAClrT5kvPZ39JdxhPUKfk35QaI88/B1fjMxF6YEqCi BJyrNeSHRwE9aLcsukRL8aOq1WXzwLa0Q6mzrXecrMVRPY2WV6hGtmH0j1oCqfov DEr3oRRCVmoFglEGtVP+kVqBy5dbXK806vdqP4lwLHBQGnVS5HllGnFHdc5t3uUE CXaCv3n+nedufrd8ZZhj0VpvzkKHNJl+5vr3R1WBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8YVblaSBZzHhvo/YzA8rMQen7n4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzY2IxZTg3LTYzOWItNDg3Yy1iZGI2LTM0MDhmZjUzN2UxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCUXjANBgkqhkiG9w0BAQsFAAOCAQEAXEB3R+d+EGnHEcXOPO5sjH8jtubo 0tN0qB4V6XvRS/ZakyRa7/iQd4x7JzpyiD8Gyw+rw2A2T6jVzEKTagAdP4qgvtWS u4B+l1TWeoQSLMjX1hsNmPC3enul9SOontfdmSnswVo+E459hrYedeXPI1XS4FHK Y+x50rZ1u8PabU8qJswXUmKrUYTBgptodO6P1AsbLuRbSt80V79DhIbiiuzWub7I xNpaC5etYFl9ye9Wd5LVBpUr0GpKyo3o5qNTr+D2WDPCpN1NCkRqbPFmFAPqQ3rb XVPuqscC0w+av0BwFR1alaBp+ADSsj6BSnc2OXZbMOvHzLEe4idCWyHCJg== -----END CERTIFICATE-----Generated at Thu Sep 17 17:09:14 2026 by rpki-client