$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/814a1304-f90c-4e23-82d9-6fe21bfdb541.roa File: 814a1304-f90c-4e23-82d9-6fe21bfdb541.roa (raw, json) Hash identifier: /01RMyjicwOwrBng7yG/ndDEAIO2VEX8sxWvTPsOQCY= Subject key identifier: 72:06:C4:F1:20:D4:FE:38:09:06:EA:F3:58:5F:28:68:C1:E4:2D:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6564210C24582577D03E4A5B1A8AE40B80AEDFBC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/814a1304-f90c-4e23-82d9-6fe21bfdb541.roa Signing time: Wed 05 Aug 2026 00:10:07 +0000 ROA not before: Wed 05 Aug 2026 00:10:07 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 104.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:64:21:0c:24:58:25:77:d0:3e:4a:5b:1a:8a:e4:0b:80:ae:df:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:10:07 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=50717e293aa1b0b0d463684de9ae24f5c3a452b4cc5cb1d5d334d8df12ac3555, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:dc:0f:44:fa:fe:08:3a:1f:ad:ea:3a:7e:93: c6:20:9f:6b:81:2e:f0:c0:8a:db:3f:34:c9:f3:af: 84:ac:f5:0f:01:20:f5:f7:04:42:55:23:3f:8f:30: 2b:10:fb:d5:4a:e7:5c:34:9b:88:c1:6c:2c:61:fc: f5:a2:2f:68:29:39:28:4e:7c:b2:9e:4b:25:54:b1: a9:c8:50:d7:0e:75:f0:86:fe:35:1e:03:3e:c3:f6: 91:78:d6:93:f4:50:f8:e2:41:5b:41:62:76:52:fe: 85:e4:bf:c6:5e:df:25:db:ef:7a:6a:28:0f:9b:f2: 39:78:c4:5f:4c:48:90:f3:d3:0d:67:78:8c:3f:43: 3d:a7:f5:40:dd:f0:90:21:13:13:0b:51:f1:c4:54: 3f:c0:06:5a:d0:ea:f7:0e:86:3e:99:79:f7:61:1b: ab:cf:d4:36:f5:ef:4e:d1:4a:0d:af:4b:7b:89:fb: 9a:2c:bf:44:77:6f:33:d0:c4:97:96:6b:f1:dd:e8: 01:37:ae:9d:94:84:94:b4:f5:38:5d:96:95:e1:0d: c9:fa:32:50:91:8d:5e:64:46:25:13:05:0c:28:8b: 53:41:63:cb:d6:f8:5e:79:b4:92:05:70:6d:2a:b0: c3:81:30:d6:bc:ea:fd:23:1f:e5:3e:ea:a3:63:76: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:C4:F1:20:D4:FE:38:09:06:EA:F3:58:5F:28:68:C1:E4:2D:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/814a1304-f90c-4e23-82d9-6fe21bfdb541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:94:08:69:91:e0:fe:97:47:81:b2:ac:35:d8:ec:a4:e2:32: 03:79:00:4a:40:11:87:d0:ea:ec:da:8c:85:66:b4:b8:f5:b0: df:d7:3f:b0:1c:7c:64:d2:45:cc:02:7f:56:42:4f:16:d7:b4: 9d:ee:54:8d:03:ef:d0:35:66:f3:d9:5c:72:7d:45:96:2c:7a: 2d:bc:e4:04:e7:16:45:79:7f:76:58:eb:71:42:5c:d8:31:98: be:2e:46:58:cb:11:0e:95:d7:fe:d4:5b:6f:c9:c6:96:a9:b6: 0c:44:50:ee:9b:44:4e:12:ef:10:35:d5:31:7c:37:9b:24:c9: b4:94:d4:af:83:b0:9d:38:45:b4:8d:4a:01:72:95:17:75:2b: 3c:74:a5:4e:27:69:d7:32:ab:9a:d1:d0:bc:6b:e8:f0:66:de: 75:ef:8b:61:82:97:f6:0e:1a:3c:4a:cc:03:cc:db:22:00:d0: b9:23:5d:c1:96:e5:c5:d8:78:7a:6b:2b:8b:6f:67:93:21:e3: ae:73:15:70:3c:d5:0c:e9:c4:1a:e9:71:c0:2a:c6:49:9e:f4: 2d:77:17:db:6a:b9:83:a9:96:23:a9:84:44:ba:b8:9b:ad:86: 94:bc:22:74:ba:b7:6d:a6:00:29:ac:c9:96:9e:f3:ca:e5:32: 52:49:42:f5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZWQhDCRYJXfQPkpbGorkC4Cu37wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAxMDA3WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDcxN2UyOTNhYTFiMGIwZDQ2MzY4NGRlOWFlMjRmNWMz YTQ1MmI0Y2M1Y2IxZDVkMzM0ZDhkZjEyYWMzNTU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD63A9E+v4IOh+t6jp+k8Ygn2uBLvDAits/NMnzr4Ss9Q8B IPX3BEJVIz+PMCsQ+9VK51w0m4jBbCxh/PWiL2gpOShOfLKeSyVUsanIUNcOdfCG /jUeAz7D9pF41pP0UPjiQVtBYnZS/oXkv8Ze3yXb73pqKA+b8jl4xF9MSJDz0w1n eIw/Qz2n9UDd8JAhExMLUfHEVD/ABlrQ6vcOhj6ZefdhG6vP1Db1707RSg2vS3uJ +5osv0R3bzPQxJeWa/Hd6AE3rp2UhJS09ThdlpXhDcn6MlCRjV5kRiUTBQwoi1NB Y8vW+F55tJIFcG0qsMOBMNa86v0jH+U+6qNjdn9rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcgbE8SDU/jgJBurzWF8oaMHkLQEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxNGExMzA0LWY5MGMtNGUyMy04MmQ5LTZmZTIxYmZkYjU0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBokDANBgkqhkiG9w0BAQsFAAOCAQEAPJQIaZHg/pdHgbKsNdjspOIyA3kA SkARh9Dq7NqMhWa0uPWw39c/sBx8ZNJFzAJ/VkJPFte0ne5UjQPv0DVm89lccn1F lix6LbzkBOcWRXl/dljrcUJc2DGYvi5GWMsRDpXX/tRbb8nGlqm2DERQ7ptEThLv EDXVMXw3myTJtJTUr4OwnThFtI1KAXKVF3UrPHSlTidp1zKrmtHQvGvo8Gbede+L YYKX9g4aPErMA8zbIgDQuSNdwZblxdh4emsri29nkyHjrnMVcDzVDOnEGulxwCrG SZ70LXcX22q5g6mWI6mERLq4m62GlLwidLq3baYAKazJlp7zyuUyUklC9Q== -----END CERTIFICATE-----Generated at Thu Sep 17 20:44:01 2026 by rpki-client