$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa File: 7538292c-9697-4822-8500-3088da3cb9a2.roa (raw, json) Hash identifier: zaNGZifdTSdlGevnsIvIJ+Q5K6OWfozlbZUV2HpasmA= Subject key identifier: 6F:BE:27:20:78:67:D7:D6:6C:FD:2D:CB:71:5E:94:8C:B0:05:CF:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39369364ABA21E73093C7C4DB2671E4FF0BFBEA3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa Signing time: Mon 03 Aug 2026 02:30:11 +0000 ROA not before: Mon 03 Aug 2026 02:30:11 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:36:93:64:ab:a2:1e:73:09:3c:7c:4d:b2:67:1e:4f:f0:bf:be:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:30:11 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=29d4696ef6ebabc5b8bc986ef754860c8152d70845213bb0a9a3ed37e1e71d1c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:dd:04:b6:89:ce:43:82:d6:fb:80:29:f6: 33:b7:3a:e4:90:4d:ad:47:28:4b:e9:ae:e2:d7:38: 92:0a:70:6b:5b:83:37:76:6c:1e:c8:25:8a:8a:95: 13:fb:9a:bd:9b:70:a6:7e:68:2e:99:5c:2a:29:df: 3b:9e:47:67:9f:1d:7d:5a:18:ee:90:cd:be:5e:79: f2:94:b8:f2:b2:db:96:45:c7:53:27:e2:3b:6c:2b: 4c:59:e6:50:a5:92:0b:5d:ee:b5:af:c2:cd:46:f4: b6:bf:85:75:0a:e8:61:3b:04:01:34:90:3d:e9:10: fe:62:f4:1b:cb:18:07:a5:e9:5d:a3:a4:8a:df:e6: b5:e1:3f:e0:8c:aa:48:d0:41:31:33:cc:c4:32:34: 72:a1:cf:c3:76:6a:c0:68:5f:03:ca:c4:59:12:0e: 46:3d:0c:14:57:93:ac:89:a4:2d:16:60:34:cb:45: df:cc:2a:ff:fb:38:d3:b3:60:fb:f2:86:eb:94:fb: b8:5e:83:80:4a:37:73:26:f1:c5:27:83:6b:af:c3: 25:59:8c:64:ed:08:88:e9:e3:2e:b5:8b:db:75:7e: 65:c0:f4:04:51:da:d7:a2:8e:d5:93:36:62:f6:ae: 6f:36:a2:6a:95:fb:88:84:43:46:19:0b:ea:2a:6a: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BE:27:20:78:67:D7:D6:6C:FD:2D:CB:71:5E:94:8C:B0:05:CF:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:10:df:ef:ce:eb:98:ae:3e:47:5e:87:2a:c0:e5:a5:6d:74: a1:c5:88:42:5a:f0:eb:37:a0:a1:57:14:25:3d:b4:c6:3f:7a: 2e:35:05:de:5d:05:82:0c:91:5e:ac:32:8c:8a:a3:83:06:98: ee:33:c7:f3:d4:21:63:7f:89:bf:05:f1:6d:49:b9:22:6e:cf: ac:6e:d6:c5:ee:c1:ed:65:bd:7c:9f:5b:4c:0a:ff:b9:f6:1e: ec:f3:49:a8:03:d5:2f:73:35:b9:87:bb:48:a0:3b:ef:9a:60: bb:0a:0c:c7:c4:7c:bc:8f:97:0b:3d:3a:e9:7b:2d:c0:38:89: a2:2e:ef:c1:fd:89:db:6d:9b:70:ca:37:9d:52:86:e1:81:0d: 90:7a:55:8d:ad:1b:25:60:c9:68:57:e4:aa:2d:96:d5:cc:95: 9d:93:c4:1c:e5:3d:30:21:a3:3f:8c:1a:91:b0:70:92:da:e1: 59:5e:0e:92:e3:af:97:57:e0:e8:cb:47:23:9c:f1:35:70:32: 1a:12:b1:96:8b:5e:dd:42:b1:98:95:1f:31:3a:1b:83:93:f9: 61:9b:8c:42:44:1d:c9:9c:f0:ac:69:b8:c0:82:d7:62:fe:36: 04:88:89:d1:1a:45:4a:25:37:22:37:d9:47:8e:63:31:53:aa: 0d:44:6d:68 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOTaTZKuiHnMJPHxNsmceT/C/vqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIzMDExWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWQ0Njk2ZWY2ZWJhYmM1YjhiYzk4NmVmNzU0ODYwYzgx NTJkNzA4NDUyMTNiYjBhOWEzZWQzN2UxZTcxZDFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGmd0EtonOQ4LW+4Ap9jO3OuSQTa1HKEvpruLXOJIKcGtb gzd2bB7IJYqKlRP7mr2bcKZ+aC6ZXCop3zueR2efHX1aGO6Qzb5eefKUuPKy25ZF x1Mn4jtsK0xZ5lClkgtd7rWvws1G9La/hXUK6GE7BAE0kD3pEP5i9BvLGAel6V2j pIrf5rXhP+CMqkjQQTEzzMQyNHKhz8N2asBoXwPKxFkSDkY9DBRXk6yJpC0WYDTL Rd/MKv/7ONOzYPvyhuuU+7heg4BKN3Mm8cUng2uvwyVZjGTtCIjp4y61i9t1fmXA 9ARR2teijtWTNmL2rm82omqV+4iEQ0YZC+oqalt/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUb74nIHhn19Zs/S3LcV6UjLAFz4gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MzgyOTJjLTk2OTctNDgyMi04NTAwLTMwODhkYTNjYjlhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRWDANBgkqhkiG9w0BAQsFAAOCAQEAHxDf787rmK4+R16HKsDlpW10ocWI Qlrw6zegoVcUJT20xj96LjUF3l0FggyRXqwyjIqjgwaY7jPH89QhY3+JvwXxbUm5 Im7PrG7Wxe7B7WW9fJ9bTAr/ufYe7PNJqAPVL3M1uYe7SKA775pguwoMx8R8vI+X Cz066XstwDiJoi7vwf2J222bcMo3nVKG4YENkHpVja0bJWDJaFfkqi2W1cyVnZPE HOU9MCGjP4wakbBwktrhWV4OkuOvl1fg6MtHI5zxNXAyGhKxlote3UKxmJUfMTob g5P5YZuMQkQdyZzwrGm4wILXYv42BIiJ0RpFSiU3IjfZR45jMVOqDURtaA== -----END CERTIFICATE-----Generated at Tue Sep 15 13:28:04 2026 by rpki-client