$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa File: 67b9adc9-cd45-4063-bd3b-110c018322fe.roa (raw, json) Hash identifier: 66dRdp5s2ICiqs5G9MB3YdEUDYfLTz0FJgJR6R8NRX4= Subject key identifier: 04:1A:0E:E2:DE:75:52:C1:9E:EF:95:2C:32:B6:AC:F2:16:C8:B9:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37A275E45ADE55ED4592A03BA6D883587FCF30A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa Signing time: Tue 04 Aug 2026 00:20:07 +0000 ROA not before: Tue 04 Aug 2026 00:20:07 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a2:75:e4:5a:de:55:ed:45:92:a0:3b:a6:d8:83:58:7f:cf:30:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:20:07 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=2aaad3e6fbdf0f641ad4b12b3e0cc5ece8369d93ee8326053407ce4ae5c5fcdd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:44:4f:bd:a0:fb:15:df:c2:b4:2a:bd:c1: d4:3b:84:f6:88:08:32:d6:24:b4:48:35:10:84:60: 98:34:7a:74:84:4a:15:b2:fb:7a:a6:04:26:5c:70: 7c:b6:e1:90:84:76:b1:19:5b:6e:20:76:7e:9c:9f: 8d:49:bd:cc:a8:5d:97:6d:6e:96:9d:b8:d5:be:54: d3:fb:0d:57:ca:da:b8:cc:53:6c:af:f3:aa:df:8b: 74:4b:d8:cb:15:df:af:3e:85:1f:a9:80:e7:45:1c: 74:bd:47:92:ba:4e:75:f8:d3:dc:20:72:80:74:f5: d9:38:68:14:9d:13:88:ad:e3:10:df:31:0e:b3:d9: 10:12:42:95:45:7a:2f:e4:3c:b2:e2:25:6d:05:65: a5:df:f2:11:71:8c:6d:35:89:2d:c7:58:7e:6e:66: ee:be:5e:d2:22:93:49:0a:0d:f9:6d:28:dd:5d:ed: b6:73:f5:82:a8:03:79:2b:e8:83:9a:f4:1a:67:6e: 70:6d:30:e5:31:bf:a8:21:06:be:00:70:68:ba:06: d7:ea:89:a4:94:ad:ce:d2:9c:e4:db:2a:5f:8b:c6: f2:13:4a:60:5e:59:47:60:4a:9f:d6:96:a6:0c:31: 42:a2:a4:8c:b8:53:f8:c9:f4:06:74:2b:18:b3:71: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1A:0E:E2:DE:75:52:C1:9E:EF:95:2C:32:B6:AC:F2:16:C8:B9:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.40.0/21 Signature Algorithm: sha256WithRSAEncryption 37:14:3e:80:45:25:14:58:3d:22:10:f1:e4:e2:ff:50:91:69: 8e:7c:6b:5c:0f:4d:f9:bc:8e:15:c8:3e:fc:bf:21:49:05:8c: 2f:f9:6a:28:01:fd:03:c0:10:87:79:32:3a:87:17:6e:7c:69: c8:b0:44:71:29:a1:65:83:5d:89:20:68:1f:fc:1f:62:e5:9f: 7e:74:86:d7:9b:ac:fc:6f:dd:22:24:5f:2d:ca:2f:3d:ee:64: 66:dc:2f:be:3a:ae:18:1f:86:39:08:51:c9:76:75:c9:7c:e9: 13:2d:bd:96:2e:75:81:82:19:d9:c5:ae:fb:50:73:54:61:74: c3:f3:b4:da:cb:76:08:ed:bd:6b:0b:88:1b:56:e3:35:c6:97: 1c:12:78:e0:4b:73:f7:36:f4:30:91:8f:a7:1e:2a:58:8b:a9: ea:aa:8b:43:7a:f3:ad:c5:da:7e:ee:f7:46:8f:23:04:d1:ec: 9f:77:a8:62:c5:b5:ad:5a:ce:b9:7f:bc:62:85:5f:70:5a:13: 1b:2c:df:10:b8:dd:3c:ee:a9:ba:43:78:80:bb:61:6e:96:52: c7:3c:b3:c6:19:1e:c3:b4:85:fd:29:b2:4e:8c:cd:35:88:25: dd:d8:b2:5d:af:7f:4a:2f:f8:92:bc:9e:ee:b6:84:a8:f9:aa: 83:49:85:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN6J15FreVe1FkqA7ptiDWH/PMKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAyMDA3WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWFhZDNlNmZiZGYwZjY0MWFkNGIxMmIzZTBjYzVlY2U4 MzY5ZDkzZWU4MzI2MDUzNDA3Y2U0YWU1YzVmY2RkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUY0RPvaD7Fd/CtCq9wdQ7hPaICDLWJLRINRCEYJg0enSE ShWy+3qmBCZccHy24ZCEdrEZW24gdn6cn41JvcyoXZdtbpaduNW+VNP7DVfK2rjM U2yv86rfi3RL2MsV368+hR+pgOdFHHS9R5K6TnX409wgcoB09dk4aBSdE4it4xDf MQ6z2RASQpVFei/kPLLiJW0FZaXf8hFxjG01iS3HWH5uZu6+XtIik0kKDfltKN1d 7bZz9YKoA3kr6IOa9BpnbnBtMOUxv6ghBr4AcGi6BtfqiaSUrc7SnOTbKl+LxvIT SmBeWUdgSp/WlqYMMUKipIy4U/jJ9AZ0KxizcSpVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBBoO4t51UsGe75UsMras8hbIudIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3YjlhZGM5LWNkNDUtNDA2My1iZDNiLTExMGMwMTgzMjJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMXFSgwDQYJKoZIhvcNAQELBQADggEBADcUPoBFJRRYPSIQ8eTi/1CRaY58 a1wPTfm8jhXIPvy/IUkFjC/5aigB/QPAEId5MjqHF258aciwRHEpoWWDXYkgaB/8 H2Lln350htebrPxv3SIkXy3KLz3uZGbcL746rhgfhjkIUcl2dcl86RMtvZYudYGC GdnFrvtQc1RhdMPztNrLdgjtvWsLiBtW4zXGlxwSeOBLc/c29DCRj6ceKliLqeqq i0N6863F2n7u90aPIwTR7J93qGLFta1azrl/vGKFX3BaExss3xC43TzuqbpDeIC7 YW6WUsc8s8YZHsO0hf0psk6MzTWIJd3Ysl2vf0ov+JK8nu62hKj5qoNJheQ= -----END CERTIFICATE-----Generated at Thu Sep 17 16:59:35 2026 by rpki-client