$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/724da4da-7e86-44ea-bdf9-488765943f29.roa File: 724da4da-7e86-44ea-bdf9-488765943f29.roa (raw, json) Hash identifier: qI7Qp2ZUeAldZbRSr3C8roPZk3VwJGckXz8EiRQSUr0= Subject key identifier: F0:46:2E:06:61:73:92:CC:AB:C1:33:70:7E:E2:44:6A:FF:0B:57:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 065D99D7FFD9AF9B6698516CE557D94DD6EDD32B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/724da4da-7e86-44ea-bdf9-488765943f29.roa Signing time: Wed 05 Aug 2026 01:00:09 +0000 ROA not before: Wed 05 Aug 2026 01:00:09 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 160.223.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5d:99:d7:ff:d9:af:9b:66:98:51:6c:e5:57:d9:4d:d6:ed:d3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 01:00:09 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=16d10a2afd5f7e6cec594fa87c4f8f3186bb790079392b8a71c8fa951fd3e991, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:f9:45:ce:0c:b1:78:27:2c:67:03:e3:e5: 4b:3b:2f:94:99:e3:98:5c:a6:77:69:e7:ff:9f:23: c3:0f:4a:19:ff:79:ff:da:fd:d2:00:af:92:99:6e: 32:29:e8:c2:5b:73:de:fc:88:cc:48:87:5c:9c:22: f4:6f:56:cf:79:de:fe:dc:3f:20:0a:06:8f:da:7a: ef:6f:db:ea:d2:74:40:be:d1:02:13:b6:d3:fe:f9: 25:7b:c1:01:9f:33:d1:93:70:cd:97:73:70:bc:d8: 0c:bd:04:28:15:e3:0e:38:ad:d6:fc:4d:c3:fb:bb: be:0e:ca:e1:da:4a:af:94:bc:1c:8f:ad:79:61:30: 8b:68:b9:b0:8c:5a:b1:7d:73:29:8a:2a:50:2a:bd: fb:08:b1:ea:89:02:0c:81:eb:36:bd:4e:f8:d8:97: 69:f3:75:49:a7:9a:dc:15:2f:bc:74:40:b2:bd:b7: 20:7d:be:ff:2a:40:04:0e:4f:0d:50:21:5f:ea:5f: 61:ba:3f:dc:ea:bb:20:93:c6:cc:a3:e3:a0:2c:0b: 0d:6a:fe:cf:1d:f8:da:7c:32:76:33:dd:a1:16:99: c7:4d:99:f3:bd:02:b5:c8:3d:99:53:b6:3f:be:2a: f0:ab:32:99:1f:e2:05:a2:dc:86:f9:36:84:58:82: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:46:2E:06:61:73:92:CC:AB:C1:33:70:7E:E2:44:6A:FF:0B:57:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/724da4da-7e86-44ea-bdf9-488765943f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.223.224.0/19 Signature Algorithm: sha256WithRSAEncryption 50:88:42:29:09:0b:d6:5b:6c:ce:a1:d3:cc:61:f8:8f:a4:51: aa:d5:8b:bc:62:78:1a:bb:2a:02:e2:52:b4:00:31:7a:55:fa: 89:a3:73:d3:1f:29:3d:47:cb:38:42:6d:70:79:67:9a:05:27: 96:3c:c7:83:6e:31:75:3a:24:ce:4f:2c:64:57:43:f4:df:25: b8:d7:98:2e:2a:5a:1f:da:e9:ff:1b:1a:47:d3:de:23:aa:b2: 3b:13:0b:40:96:5e:52:73:82:f8:c0:d5:3b:a2:ec:70:9c:cf: f3:77:9d:73:ee:f1:bc:69:b6:b6:d0:4a:95:08:4b:b5:ad:39: b6:fd:e5:24:a9:bb:36:7c:14:c5:fc:0f:21:ee:3f:45:b2:05: d6:ee:10:57:45:6c:47:d6:5e:1e:3a:f3:ae:02:a4:c6:65:5a: e2:10:98:2b:24:f3:6e:f5:f9:2d:47:83:ab:b2:a9:9d:1c:43: 04:4e:15:4c:66:8e:18:db:75:f1:b2:61:30:7b:9a:28:11:f0: ab:68:4a:29:92:02:65:35:74:d2:6e:18:ed:25:24:61:27:d8: fa:75:7b:70:01:21:8e:96:f3:95:b2:4e:c7:e2:5f:29:ee:a2: 66:aa:2b:c2:3e:cf:1d:5a:31:da:bd:2f:13:76:1d:31:81:47: 54:44:4e:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBl2Z1//Zr5tmmFFs5VfZTdbt0yswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDEwMDA5WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmQxMGEyYWZkNWY3ZTZjZWM1OTRmYTg3YzRmOGYzMTg2 YmI3OTAwNzkzOTJiOGE3MWM4ZmE5NTFmZDNlOTkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ0PlFzgyxeCcsZwPj5Us7L5SZ45hcpndp5/+fI8MPShn/ ef/a/dIAr5KZbjIp6MJbc978iMxIh1ycIvRvVs953v7cPyAKBo/aeu9v2+rSdEC+ 0QITttP++SV7wQGfM9GTcM2Xc3C82Ay9BCgV4w44rdb8TcP7u74OyuHaSq+UvByP rXlhMItoubCMWrF9cymKKlAqvfsIseqJAgyB6za9TvjYl2nzdUmnmtwVL7x0QLK9 tyB9vv8qQAQOTw1QIV/qX2G6P9zquyCTxsyj46AsCw1q/s8d+Np8MnYz3aEWmcdN mfO9ArXIPZlTtj++KvCrMpkf4gWi3Ib5NoRYgpJvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8EYuBmFzksyrwTNwfuJEav8LVxYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyNGRhNGRhLTdlODYtNDRlYS1iZGY5LTQ4ODc2NTk0M2YyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWg3+AwDQYJKoZIhvcNAQELBQADggEBAFCIQikJC9ZbbM6h08xh+I+kUarV i7xieBq7KgLiUrQAMXpV+omjc9MfKT1HyzhCbXB5Z5oFJ5Y8x4NuMXU6JM5PLGRX Q/TfJbjXmC4qWh/a6f8bGkfT3iOqsjsTC0CWXlJzgvjA1Tui7HCcz/N3nXPu8bxp trbQSpUIS7WtObb95SSpuzZ8FMX8DyHuP0WyBdbuEFdFbEfWXh46864CpMZlWuIQ mCsk8271+S1Hg6uyqZ0cQwROFUxmjhjbdfGyYTB7migR8KtoSimSAmU1dNJuGO0l JGEn2Pp1e3ABIY6W85WyTsfiXynuomaqK8I+zx1aMdq9LxN2HTGBR1RETvc= -----END CERTIFICATE-----Generated at Thu Sep 17 16:15:54 2026 by rpki-client