$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86854fd8-2d2b-4d47-96ba-9c104a4b28a8.roa File: 86854fd8-2d2b-4d47-96ba-9c104a4b28a8.roa (raw, json) Hash identifier: O4jDFEe7vAczzv00TwiYp3fKNRbHS8MCA8qrK0i6hGw= Subject key identifier: 67:B3:4B:E5:4A:41:8C:7C:C6:12:7F:17:1F:7D:FB:3B:43:70:86:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A687F03A1AEC8BE1A94B1C74140A7B1393BC346 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86854fd8-2d2b-4d47-96ba-9c104a4b28a8.roa Signing time: Tue 04 Aug 2026 00:31:09 +0000 ROA not before: Tue 04 Aug 2026 00:31:09 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:68:7f:03:a1:ae:c8:be:1a:94:b1:c7:41:40:a7:b1:39:3b:c3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:31:09 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=47887f1b5760a01231a38ae4a96dc828d1c6dc0e3597546b2c66a1a85614be76, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:ba:73:b5:ef:bf:c4:af:88:db:26:8c:e9: 0f:19:80:3c:83:ba:8b:9d:7c:eb:ca:af:4e:8b:fc: c2:5e:5c:d7:da:f5:f3:08:c1:eb:bc:ef:20:bb:ce: 58:00:95:77:68:5f:67:e6:dd:11:2a:c3:62:ca:eb: 05:39:a5:7d:8d:c8:78:10:55:27:6a:dc:19:97:1a: 3b:68:83:4e:da:bf:f2:8e:1c:61:56:ca:8a:a9:d9: 03:6a:15:67:a0:af:00:dd:f3:45:bb:0c:ac:f0:69: 14:14:86:08:c2:ef:2a:06:99:57:f2:0e:86:54:61: 86:38:28:bf:55:be:6c:cd:66:1a:67:f0:63:72:ee: db:98:d9:f1:b7:ad:fd:5e:ff:20:3e:63:4b:30:04: 46:a6:03:5f:6d:ef:7d:cd:b4:93:42:31:f1:4a:33: 40:dd:76:bb:39:ab:f6:3b:ed:1c:d8:20:3a:b7:8a: d4:9b:ba:67:8f:1b:8e:84:93:89:81:c6:29:40:06: 1b:88:ef:6b:a8:3f:e5:29:e4:15:4e:a5:b5:60:23: e5:98:a5:77:c2:51:23:26:74:11:08:be:e7:11:92: 76:f1:57:26:fc:2e:30:4a:31:61:72:ab:b1:a7:08: 0b:83:28:85:36:cf:27:bc:19:45:ca:de:6d:82:98: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:4B:E5:4A:41:8C:7C:C6:12:7F:17:1F:7D:FB:3B:43:70:86:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86854fd8-2d2b-4d47-96ba-9c104a4b28a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.64.0/18 Signature Algorithm: sha256WithRSAEncryption c2:c6:43:d3:c9:9a:d9:1b:81:1c:17:60:f7:70:d6:48:1c:c0: c0:89:f2:aa:09:97:f1:91:d0:57:4c:71:e4:8f:b5:16:60:5f: 1e:86:d0:eb:5b:37:76:e1:18:c3:ef:40:96:a5:b0:49:8d:3d: 7a:e8:3a:27:88:7e:a0:e2:10:ec:c0:2b:dc:93:f2:cd:0e:12: 23:ee:d9:9a:9c:69:fe:d6:b8:60:29:24:1c:11:ed:38:f2:8a: 82:cd:06:73:fb:f7:89:e5:bd:f4:7b:59:c3:fe:3f:ad:81:fe: 34:bb:f4:85:7b:5c:e3:ad:78:60:4a:e2:9a:27:cd:45:73:fd: 89:dd:34:2c:8b:4c:9e:3a:45:b5:40:b4:9b:59:c1:1b:82:bb: f3:26:be:41:7d:9b:fc:dc:17:cf:da:90:32:16:70:10:27:62: aa:02:db:a1:49:ba:fd:4b:47:b7:c0:61:fa:cf:44:98:e2:d3: 66:f6:ce:0f:1f:02:c7:03:8f:c5:59:fa:40:e9:82:92:30:02: 43:87:a0:45:6d:e6:e8:fa:9a:a0:4f:ba:57:e0:e4:99:65:bb: 01:d2:f3:0a:a2:01:df:f8:d2:e2:20:e4:84:34:08:1a:01:e2: d8:c7:a0:58:ca:21:48:80:bb:ab:ed:fd:a7:06:b6:1d:15:9b: da:0f:d8:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKmh/A6GuyL4alLHHQUCnsTk7w0YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAzMTA5WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Nzg4N2YxYjU3NjBhMDEyMzFhMzhhZTRhOTZkYzgyOGQx YzZkYzBlMzU5NzU0NmIyYzY2YTFhODU2MTRiZTc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfibpzte+/xK+I2yaM6Q8ZgDyDuoudfOvKr06L/MJeXNfa 9fMIweu87yC7zlgAlXdoX2fm3REqw2LK6wU5pX2NyHgQVSdq3BmXGjtog07av/KO HGFWyoqp2QNqFWegrwDd80W7DKzwaRQUhgjC7yoGmVfyDoZUYYY4KL9VvmzNZhpn 8GNy7tuY2fG3rf1e/yA+Y0swBEamA19t733NtJNCMfFKM0Dddrs5q/Y77RzYIDq3 itSbumePG46Ek4mBxilABhuI72uoP+Up5BVOpbVgI+WYpXfCUSMmdBEIvucRknbx Vyb8LjBKMWFyq7GnCAuDKIU2zye8GUXK3m2CmJDDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ7NL5UpBjHzGEn8XH337O0NwhsgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2ODU0ZmQ4LTJkMmItNGQ0Ny05NmJhLTljMTA0YTRiMjhhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYXFUAwDQYJKoZIhvcNAQELBQADggEBAMLGQ9PJmtkbgRwXYPdw1kgcwMCJ 8qoJl/GR0FdMceSPtRZgXx6G0OtbN3bhGMPvQJalsEmNPXroOieIfqDiEOzAK9yT 8s0OEiPu2Zqcaf7WuGApJBwR7TjyioLNBnP794nlvfR7WcP+P62B/jS79IV7XOOt eGBK4ponzUVz/YndNCyLTJ46RbVAtJtZwRuCu/MmvkF9m/zcF8/akDIWcBAnYqoC 26FJuv1LR7fAYfrPRJji02b2zg8fAscDj8VZ+kDpgpIwAkOHoEVt5uj6mqBPulfg 5JlluwHS8wqiAd/40uIg5IQ0CBoB4tjHoFjKIUiAu6vt/acGth0Vm9oP2LM= -----END CERTIFICATE-----Generated at Thu Sep 17 16:16:11 2026 by rpki-client