$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71f17d70-39ce-4e36-ab82-115560d236c7.roa File: 71f17d70-39ce-4e36-ab82-115560d236c7.roa (raw, json) Hash identifier: XMRD0Aa9nLTKjrpcViK4zMHnFh09UEM9gwtPrlyg43A= Subject key identifier: 85:FD:03:5F:3C:D3:29:12:77:E3:E2:70:59:B5:17:3A:D8:DC:AF:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 175CD5973886E4766A2B753AC9BF72918666F7D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71f17d70-39ce-4e36-ab82-115560d236c7.roa Signing time: Wed 05 Aug 2026 01:01:15 +0000 ROA not before: Wed 05 Aug 2026 01:01:15 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.4.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5c:d5:97:38:86:e4:76:6a:2b:75:3a:c9:bf:72:91:86:66:f7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 01:01:15 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=1ca1e8ec529f1f6d902cc5c3b36cc4e5e30f1a18514cb335d4711133fe174060, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:8e:12:3b:ec:f4:7b:ed:5a:02:d3:ee:4c: 78:a4:3e:b0:5f:b7:77:71:35:ee:87:b2:94:4d:87: 25:b6:8d:21:d9:32:37:86:92:94:e9:30:52:c0:a2: 54:4f:07:e6:25:55:b9:36:c7:5e:92:81:66:f1:76: 83:4b:23:d4:c5:eb:f8:03:b2:30:81:ed:14:6c:d8: 5a:f4:a5:e3:b5:09:63:68:1c:00:37:e1:86:36:93: 91:87:c3:fa:77:ef:38:c0:92:8d:76:f4:96:8b:45: af:34:3d:c5:11:c6:10:03:00:68:cc:17:14:27:59: be:b6:c7:c8:e4:b7:ae:ee:cb:8a:3d:a2:11:7d:3e: 35:cc:cd:49:aa:f2:70:6c:1c:d4:0f:cc:04:9a:26: c8:d6:05:41:17:c2:40:6a:41:36:02:7b:07:b5:40: 85:f8:8c:56:d4:c3:a2:f4:1a:6a:35:b8:9a:d9:ee: 2a:5c:16:4f:1c:8f:be:dd:36:b8:91:52:e3:80:b1: fb:4b:61:0f:c8:12:47:f0:7d:c2:5b:96:80:80:30: e1:21:7f:5d:d0:2f:42:35:f0:01:ba:c8:fb:69:06: 5f:c0:97:75:e6:b2:28:30:a9:b1:4e:08:96:ea:66: f6:cf:c1:e5:40:f1:76:6c:1c:61:8c:ae:bd:82:2f: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FD:03:5F:3C:D3:29:12:77:E3:E2:70:59:B5:17:3A:D8:DC:AF:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71f17d70-39ce-4e36-ab82-115560d236c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.4.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2c:b1:7f:ce:08:82:35:98:e3:28:b5:4b:37:7c:f5:19:e6:75: 5d:38:0c:06:1e:ee:90:fe:a2:2f:0b:6f:4d:e6:20:3b:1d:20: 0f:5d:3a:42:72:41:60:5d:4d:7a:36:45:5a:9e:e1:28:2b:45: e8:0e:f3:81:29:2a:2a:42:c4:5b:73:5c:13:80:97:30:0d:10: 7e:57:c2:94:a9:9e:ef:a7:ea:99:aa:11:b1:c4:fb:a4:66:a2: 3f:a6:f0:e4:63:79:e1:08:43:0d:fb:2c:af:5c:3d:46:58:a6: 21:50:ef:8d:97:44:34:50:e7:ec:c4:46:d7:29:3d:af:55:2e: 11:6f:71:f3:7d:11:70:3c:cf:3e:19:61:aa:88:92:d9:b9:75: fe:35:fe:af:0b:c6:23:5e:38:65:c2:e5:b9:e4:3c:01:ee:f3: a8:67:d8:2f:71:32:10:a9:44:ad:6e:c9:60:b4:fe:20:0b:60: c2:da:6d:0f:59:c7:e7:51:e3:7a:a8:ce:85:aa:1f:48:86:21: 5a:e2:19:b9:5f:64:71:34:f3:76:d2:9c:5a:8e:df:47:00:ca: 7c:21:be:a9:2f:42:3a:ef:25:f5:78:ad:d2:7c:a2:5c:98:ff: 6a:f8:bd:76:ca:03:45:35:62:f3:61:56:1e:98:58:cf:49:75: d9:03:cb:34 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF1zVlziG5HZqK3U6yb9ykYZm99MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDEwMTE1WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2ExZThlYzUyOWYxZjZkOTAyY2M1YzNiMzZjYzRlNWUz MGYxYTE4NTE0Y2IzMzVkNDcxMTEzM2ZlMTc0MDYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq8o4SO+z0e+1aAtPuTHikPrBft3dxNe6HspRNhyW2jSHZ MjeGkpTpMFLAolRPB+YlVbk2x16SgWbxdoNLI9TF6/gDsjCB7RRs2Fr0peO1CWNo HAA34YY2k5GHw/p37zjAko129JaLRa80PcURxhADAGjMFxQnWb62x8jkt67uy4o9 ohF9PjXMzUmq8nBsHNQPzASaJsjWBUEXwkBqQTYCewe1QIX4jFbUw6L0Gmo1uJrZ 7ipcFk8cj77dNriRUuOAsftLYQ/IEkfwfcJbloCAMOEhf13QL0I18AG6yPtpBl/A l3XmsigwqbFOCJbqZvbPweVA8XZsHGGMrr2CL2QRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhf0DXzzTKRJ34+JwWbUXOtjcr+MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxZjE3ZDcwLTM5Y2UtNGUzNi1hYjgyLTExNTU2MGQyMzZjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4BDANBgkqhkiG9w0BAQsFAAOCAQEALLF/zgiCNZjjKLVLN3z1GeZ1XTgM Bh7ukP6iLwtvTeYgOx0gD106QnJBYF1NejZFWp7hKCtF6A7zgSkqKkLEW3NcE4CX MA0QflfClKme76fqmaoRscT7pGaiP6bw5GN54QhDDfssr1w9RlimIVDvjZdENFDn 7MRG1yk9r1UuEW9x830RcDzPPhlhqoiS2bl1/jX+rwvGI144ZcLlueQ8Ae7zqGfY L3EyEKlErW7JYLT+IAtgwtptD1nH51HjeqjOhaofSIYhWuIZuV9kcTTzdtKcWo7f RwDKfCG+qS9COu8l9Xit0nyiXJj/avi9dsoDRTVi82FWHphYz0l12QPLNA== -----END CERTIFICATE-----Generated at Thu Sep 17 16:54:53 2026 by rpki-client