$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa File: 7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa (raw, json) Hash identifier: nA6+Hs6muxO+lKPGN3v6+L/zXip7r0XoNqP1IdsmpdI= Subject key identifier: 88:49:1D:4B:8C:91:8F:45:64:76:4F:2B:0E:B6:56:63:61:5C:6E:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 488D4B986419B1ECE8A5F8011F3E23BB3B5FABE6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa Signing time: Sat 08 Aug 2026 00:40:07 +0000 ROA not before: Sat 08 Aug 2026 00:40:07 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.168.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8d:4b:98:64:19:b1:ec:e8:a5:f8:01:1f:3e:23:bb:3b:5f:ab:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:40:07 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=247448d4727755974c899bf2e6e7dc853c20d4b21ab279cfd6ebc8af53732de9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:e2:ee:f3:96:75:4b:36:a8:0c:cb:86:1f: 00:8a:83:d5:c3:56:79:8c:50:2f:74:31:bb:25:3f: 7e:e0:b7:e6:af:f6:bb:7d:65:eb:dc:52:f9:cc:fe: 8e:a0:2e:bb:bc:8e:d8:29:5d:e1:ca:b0:78:8a:0b: 99:99:5b:82:c1:2f:cb:5d:ad:49:c4:15:e9:55:ba: cd:94:c8:b6:d4:9b:09:cf:83:bb:0e:4d:e6:20:dc: b1:f5:42:76:5c:e2:b4:06:7b:cd:81:61:a2:9f:44: f1:0b:b3:cf:5a:56:5a:73:27:ea:b1:02:dc:76:e1: 68:3f:4f:22:97:85:8d:65:e6:db:fc:27:3b:a4:2b: 62:ae:58:82:ea:51:54:fc:e4:c4:a6:3a:39:16:c1: d1:5e:e6:be:a2:aa:06:75:a5:da:72:93:7c:9a:36: 23:ba:3e:c8:22:9f:76:8e:95:eb:a5:7c:2a:70:9d: fc:ac:a4:f5:f9:1b:6e:9c:b0:2f:22:81:d0:eb:3b: 55:ac:62:19:33:6c:a0:91:ec:d2:e5:a1:9b:68:47: ae:38:fc:c2:ff:c4:79:18:d4:64:02:9e:3e:93:a3: df:19:06:e8:bd:1a:51:08:96:66:83:dc:0e:4e:a1: 73:84:43:c8:16:b2:b0:20:9a:b0:b6:b8:36:ac:52: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:1D:4B:8C:91:8F:45:64:76:4F:2B:0E:B6:56:63:61:5C:6E:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.168.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1b:7a:08:df:31:54:be:ac:13:85:55:73:4e:b9:eb:dd:25:20: 06:09:ed:fa:9f:18:32:4c:b6:d6:0d:01:80:9c:2e:56:d9:2f: c8:4b:41:a8:44:6f:7c:5a:4b:b9:6a:ea:ff:20:e5:08:1c:55: 70:21:11:6f:b2:f2:01:21:d1:e5:cc:04:e5:a4:e5:93:2a:cc: 07:4a:2c:e8:bf:3a:35:8f:81:1d:79:6a:50:9b:5b:d2:16:56: 67:47:c5:fb:99:67:5d:24:d6:22:aa:c4:df:02:f5:1d:d7:fb: 04:45:18:aa:1d:4f:ec:09:c1:cf:68:94:72:2c:72:c0:29:58: 7b:ee:cd:33:94:db:f9:38:79:0c:0b:e6:3d:62:72:74:18:ba: 18:36:70:b9:a7:ab:04:d8:55:3b:a3:2d:83:00:25:44:6a:3e: cc:38:85:02:08:e9:a7:c6:ce:f3:a9:ad:b4:75:d7:e3:1f:46: dd:68:ef:8b:7f:04:8b:a5:89:7f:a7:1c:b0:55:c6:9c:41:a7: 7d:5b:4d:fa:61:59:8b:39:e2:f8:ff:3a:b2:b6:c8:91:84:ad: 74:13:ac:6f:e6:f1:8c:09:bc:7d:64:96:45:20:7e:c8:2b:ec: 4c:18:ce:9f:3f:d7:f7:b2:e1:af:a2:5b:ee:87:71:18:5b:ca: 81:1d:52:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSI1LmGQZsezopfgBHz4juztfq+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDA0MDA3WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDc0NDhkNDcyNzc1NTk3NGM4OTliZjJlNmU3ZGM4NTNj MjBkNGIyMWFiMjc5Y2ZkNmViYzhhZjUzNzMyZGU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdveLu85Z1SzaoDMuGHwCKg9XDVnmMUC90MbslP37gt+av 9rt9ZevcUvnM/o6gLru8jtgpXeHKsHiKC5mZW4LBL8tdrUnEFelVus2UyLbUmwnP g7sOTeYg3LH1QnZc4rQGe82BYaKfRPELs89aVlpzJ+qxAtx24Wg/TyKXhY1l5tv8 JzukK2KuWILqUVT85MSmOjkWwdFe5r6iqgZ1pdpyk3yaNiO6Psgin3aOleulfCpw nfyspPX5G26csC8igdDrO1WsYhkzbKCR7NLloZtoR644/ML/xHkY1GQCnj6To98Z Bui9GlEIlmaD3A5OoXOEQ8gWsrAgmrC2uDasUnVpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiEkdS4yRj0Vkdk8rDrZWY2Fcbi0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdmMmMzN2M1LWVhYTAtNDI0YS1iYTFlLTVlYmQ5OWYzYjE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfMqAAwDQYJKoZIhvcNAQELBQADggEBABt6CN8xVL6sE4VVc065690lIAYJ 7fqfGDJMttYNAYCcLlbZL8hLQahEb3xaS7lq6v8g5QgcVXAhEW+y8gEh0eXMBOWk 5ZMqzAdKLOi/OjWPgR15alCbW9IWVmdHxfuZZ10k1iKqxN8C9R3X+wRFGKodT+wJ wc9olHIscsApWHvuzTOU2/k4eQwL5j1icnQYuhg2cLmnqwTYVTujLYMAJURqPsw4 hQII6afGzvOprbR11+MfRt1o74t/BIuliX+nHLBVxpxBp31bTfphWYs54vj/OrK2 yJGErXQTrG/m8YwJvH1klkUgfsgr7EwYzp8/1/ey4a+iW+6HcRhbyoEdUs0= -----END CERTIFICATE-----Generated at Thu Sep 17 15:34:45 2026 by rpki-client