$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa File: 6ba4f922-5b17-4233-add8-fdd64b141cce.roa (raw, json) Hash identifier: daWdwMWOOwcRMTjmevFH0EQLeTZ4Vu2W74jDc3CPT/c= Subject key identifier: 52:A4:07:6B:32:BE:F4:B2:AA:04:8C:0A:93:72:C7:41:DF:CE:74:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 623D516E9918CDEC5EDB7B7661A24372F69F597E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa Signing time: Mon 03 Aug 2026 00:31:26 +0000 ROA not before: Mon 03 Aug 2026 00:31:26 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 194.21.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3d:51:6e:99:18:cd:ec:5e:db:7b:76:61:a2:43:72:f6:9f:59:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:31:26 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=0c6ec81640f8e7d4e15d5d6bfbe57f51e75057aae8631cd1534999526c330d76, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:4e:aa:ee:85:02:37:a4:60:1b:68:84:15: 61:a7:33:f5:c9:0f:47:d2:11:5c:9f:21:42:14:43: bd:52:9a:51:3b:f3:ed:a1:67:99:cf:63:8b:e6:c4: 4c:de:16:0d:ec:9e:a2:c9:cd:9b:ee:a5:10:d5:98: eb:eb:dd:db:fa:47:29:9d:51:40:52:be:6c:06:83: 7c:b2:89:a5:7c:9e:3b:f0:06:23:93:57:f5:35:1a: 10:c3:64:32:bd:d9:70:d4:29:5a:69:80:af:56:1a: 0f:e6:88:f0:03:a3:0f:4b:e8:3f:44:b2:8f:20:9c: a6:e6:d5:83:3e:73:72:05:71:da:09:79:9e:51:96: 4d:06:62:e0:89:4f:f1:76:03:27:1c:15:95:34:3c: de:19:f1:74:50:e8:c3:3f:4e:d9:60:9f:9d:02:00: ee:29:86:3e:41:a9:d7:a4:30:40:b0:31:5d:11:f4: 57:86:8c:f7:90:f3:d5:98:45:8f:21:8f:36:be:1d: 8d:30:07:b5:9c:d6:20:04:3b:a2:bd:ea:83:6b:3c: 96:4e:de:d8:7f:5f:de:dc:07:28:15:1d:6c:03:29: 68:31:0c:03:b3:ad:90:4a:31:0f:62:e6:81:f5:3a: 51:fb:70:e3:41:7b:ea:09:94:03:a9:4c:34:08:c5: fc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A4:07:6B:32:BE:F4:B2:AA:04:8C:0A:93:72:C7:41:DF:CE:74:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.21.128.0/18 Signature Algorithm: sha256WithRSAEncryption 48:30:78:08:fd:6e:c8:bd:82:fe:68:3c:ca:5a:d3:1f:69:37: 54:2f:74:55:1b:69:92:70:7c:0a:bd:48:0a:c5:4c:9e:d9:a3: 7a:a3:f2:07:76:ea:0b:32:ce:ab:73:9a:0e:83:b8:21:e4:92: 20:3a:e4:09:ca:9d:92:b6:83:29:49:88:96:54:35:3b:eb:6e: cd:b8:59:60:7c:f8:bf:48:60:59:a8:2e:6c:a6:7b:87:1a:b3: 7e:b4:ba:f7:2f:69:1b:5b:29:61:f6:2e:eb:53:b6:d9:60:87: dc:a3:3b:da:2d:0d:fa:dc:cf:ec:4b:55:a8:69:1c:d1:63:87: 63:65:98:dc:49:cc:b1:ad:6f:74:9b:f5:1d:12:09:af:80:a3: 2a:e2:45:f0:e6:56:36:94:a5:90:4c:95:61:a8:74:62:b1:4f: ec:e1:77:e5:f1:3c:92:ee:10:bd:d5:ca:5f:fd:ae:1a:f2:62: 5d:74:fc:c1:0f:18:d5:f2:9e:06:1d:75:a2:ee:57:ee:4b:a5: 10:0d:2d:d7:d4:1b:be:d6:95:eb:65:eb:ad:37:04:28:66:90: 37:e2:a5:5c:d4:bb:c5:80:61:e6:ef:f7:51:d8:d1:3f:4c:28: 20:84:86:b4:5e:07:3d:a7:40:e0:d8:52:70:11:f0:13:63:fb: fd:f4:bb:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYj1RbpkYzexe23t2YaJDcvafWX4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDAzMTI2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzZlYzgxNjQwZjhlN2Q0ZTE1ZDVkNmJmYmU1N2Y1MWU3 NTA1N2FhZTg2MzFjZDE1MzQ5OTk1MjZjMzMwZDc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDixE6q7oUCN6RgG2iEFWGnM/XJD0fSEVyfIUIUQ71SmlE7 8+2hZ5nPY4vmxEzeFg3snqLJzZvupRDVmOvr3dv6RymdUUBSvmwGg3yyiaV8njvw BiOTV/U1GhDDZDK92XDUKVppgK9WGg/miPADow9L6D9Eso8gnKbm1YM+c3IFcdoJ eZ5Rlk0GYuCJT/F2AyccFZU0PN4Z8XRQ6MM/Ttlgn50CAO4phj5BqdekMECwMV0R 9FeGjPeQ89WYRY8hjza+HY0wB7Wc1iAEO6K96oNrPJZO3th/X97cBygVHWwDKWgx DAOzrZBKMQ9i5oH1OlH7cONBe+oJlAOpTDQIxfyrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUqQHazK+9LKqBIwKk3LHQd/OdEswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiYTRmOTIyLTViMTctNDIzMy1hZGQ4LWZkZDY0YjE0MWNjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbCFYAwDQYJKoZIhvcNAQELBQADggEBAEgweAj9bsi9gv5oPMpa0x9pN1Qv dFUbaZJwfAq9SArFTJ7Zo3qj8gd26gsyzqtzmg6DuCHkkiA65AnKnZK2gylJiJZU NTvrbs24WWB8+L9IYFmoLmyme4cas360uvcvaRtbKWH2LutTttlgh9yjO9otDfrc z+xLVahpHNFjh2NlmNxJzLGtb3Sb9R0SCa+AoyriRfDmVjaUpZBMlWGodGKxT+zh d+XxPJLuEL3Vyl/9rhryYl10/MEPGNXyngYddaLuV+5LpRANLdfUG77Wletl6603 BChmkDfipVzUu8WAYebv91HY0T9MKCCEhrReBz2nQODYUnAR8BNj+/30u04= -----END CERTIFICATE-----Generated at Tue Sep 15 13:27:42 2026 by rpki-client