$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13e614-6bdd-4faa-ae46-c21f67633577.roa File: 7d13e614-6bdd-4faa-ae46-c21f67633577.roa (raw, json) Hash identifier: QneK+lwtC0yxFTpVWgTtesBCMoN3ut7SUoY1uStyMJ8= Subject key identifier: 29:93:AC:6E:B2:C6:87:8E:C6:A5:D4:4E:46:BA:AE:C4:06:9A:46:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E3A5B9FE2D1253CF7A06ABDDB3E5E908DE68D90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13e614-6bdd-4faa-ae46-c21f67633577.roa Signing time: Fri 31 Jul 2026 00:50:03 +0000 ROA not before: Fri 31 Jul 2026 00:50:03 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3a:5b:9f:e2:d1:25:3c:f7:a0:6a:bd:db:3e:5e:90:8d:e6:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 00:50:03 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=e6afdc090819f10530486596b623e3c1a9bff734da933097faca80290e39574a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:37:d8:ac:c8:7c:66:a4:87:60:85:50:f0: 42:7b:d9:8e:6e:53:c5:ef:4e:79:0c:f2:49:ec:b0: 85:89:fe:17:04:7b:5d:66:8a:9a:72:8f:39:26:50: 46:01:51:f8:82:59:1e:36:cb:19:59:4d:95:b1:42: bc:ce:fd:e6:29:8a:80:bf:9b:94:ed:6a:f0:11:ac: ec:5f:21:9c:9a:44:b4:57:0b:ff:19:45:fa:38:05: 07:ca:a4:b2:11:d1:a3:e8:94:f9:74:4b:b4:c0:92: 75:26:6d:0e:e3:5e:bf:e0:9f:5b:5a:a0:48:f6:e5: f0:e7:01:8b:4c:71:f2:02:29:be:85:37:b7:f8:be: 33:1d:94:d8:b5:34:77:13:fe:a5:71:70:d8:c7:61: a4:66:d1:5b:9f:3f:9d:d1:83:05:ca:57:3c:d9:8d: 14:ae:d6:e2:58:cf:2b:47:01:af:6f:f1:fc:f5:d2: c9:b9:bc:f7:dc:02:91:da:32:b1:74:57:8f:77:2e: 2a:84:c8:6a:6a:9b:87:b3:da:18:24:22:30:f0:78: 6d:dd:0c:7d:b3:88:cc:81:1c:22:cd:d9:77:e3:e4: 7e:fb:d4:44:d3:c8:5d:9a:0d:59:78:74:78:1e:7c: e7:34:ae:89:94:53:3e:fb:13:be:c5:b3:71:12:c7: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:AC:6E:B2:C6:87:8E:C6:A5:D4:4E:46:BA:AE:C4:06:9A:46:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13e614-6bdd-4faa-ae46-c21f67633577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.38.0/24 Signature Algorithm: sha256WithRSAEncryption d8:dd:b8:eb:2d:f2:6b:5f:f0:6c:fe:6b:76:7c:84:46:b8:30: 75:f5:42:ba:04:2f:9e:b0:16:57:1e:48:18:dd:2c:36:8f:4c: 2e:85:8b:93:e8:64:1f:93:62:27:b9:e1:88:a6:7b:1d:99:24: d7:0e:c7:8a:7f:fb:86:d9:d5:7f:87:38:e0:87:47:fc:7a:91: 10:c9:7b:18:f8:10:62:de:c3:cb:43:22:11:b3:d1:b3:cc:3d: 3d:c9:80:af:89:0e:01:b3:88:3d:5f:01:4e:2b:cf:1e:73:6c: f3:fc:66:0f:e6:38:e5:42:db:30:cd:06:76:55:b9:ee:48:a0: 6a:6c:7b:fd:8e:32:e7:ae:23:91:5e:58:87:e9:c8:af:bd:76: 64:66:1e:98:66:fe:64:09:f2:72:dd:f8:de:1e:15:7c:a7:ed: e9:45:78:c1:3e:5f:05:b8:b1:97:a3:c6:92:05:6d:93:59:89: 4d:5e:8b:04:a3:ef:35:25:cb:7b:63:4b:1e:a8:5e:05:6f:3a: 0c:6c:19:64:b1:58:12:a9:64:d4:da:0d:7b:14:e3:2d:00:24: 27:07:5b:60:c1:24:5b:ed:16:2a:e4:c9:29:92:83:52:8c:d0: ad:9e:62:3c:de:67:1d:3b:15:ff:db:bb:d7:d6:47:34:5e:84: 3b:a4:cd:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbjpbn+LRJTz3oGq92z5ekI3mjZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDA1MDAzWhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmFmZGMwOTA4MTlmMTA1MzA0ODY1OTZiNjIzZTNjMWE5 YmZmNzM0ZGE5MzMwOTdmYWNhODAyOTBlMzk1NzRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyNzfYrMh8ZqSHYIVQ8EJ72Y5uU8XvTnkM8knssIWJ/hcE e11mippyjzkmUEYBUfiCWR42yxlZTZWxQrzO/eYpioC/m5TtavARrOxfIZyaRLRX C/8ZRfo4BQfKpLIR0aPolPl0S7TAknUmbQ7jXr/gn1taoEj25fDnAYtMcfICKb6F N7f4vjMdlNi1NHcT/qVxcNjHYaRm0VufP53RgwXKVzzZjRSu1uJYzytHAa9v8fz1 0sm5vPfcApHaMrF0V493LiqEyGpqm4ez2hgkIjDweG3dDH2ziMyBHCLN2Xfj5H77 1ETTyF2aDVl4dHgefOc0romUUz77E77Fs3ESx+JrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKZOsbrLGh47GpdRORrquxAaaRlMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMTNlNjE0LTZiZGQtNGZhYS1hZTQ2LWMyMWY2NzYzMzU3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmCYwDQYJKoZIhvcNAQELBQADggEBANjduOst8mtf8Gz+a3Z8hEa4MHX1 QroEL56wFlceSBjdLDaPTC6Fi5PoZB+TYie54Yimex2ZJNcOx4p/+4bZ1X+HOOCH R/x6kRDJexj4EGLew8tDIhGz0bPMPT3JgK+JDgGziD1fAU4rzx5zbPP8Zg/mOOVC 2zDNBnZVue5IoGpse/2OMueuI5FeWIfpyK+9dmRmHphm/mQJ8nLd+N4eFXyn7elF eME+XwW4sZejxpIFbZNZiU1eiwSj7zUly3tjSx6oXgVvOgxsGWSxWBKpZNTaDXsU 4y0AJCcHW2DBJFvtFirkySmSg1KM0K2eYjzeZx07Ff/bu9fWRzRehDukzYM= -----END CERTIFICATE-----Generated at Tue Sep 15 12:46:30 2026 by rpki-client