$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f2d17b-bc00-4f7a-b7e8-788558dd25ae.roa File: 87f2d17b-bc00-4f7a-b7e8-788558dd25ae.roa (raw, json) Hash identifier: j23tXYnQnPnTx+wAC1giFbmraWTXkh6lpi1Pp6SXK3A= Subject key identifier: 09:57:6E:18:58:E0:69:C5:77:1A:D9:9F:C9:C6:0C:4C:ED:1F:C5:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3726CB43A397C49D9D195BC55256116D5E80470A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f2d17b-bc00-4f7a-b7e8-788558dd25ae.roa Signing time: Wed 05 Aug 2026 00:50:12 +0000 ROA not before: Wed 05 Aug 2026 00:50:12 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 149.44.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:26:cb:43:a3:97:c4:9d:9d:19:5b:c5:52:56:11:6d:5e:80:47:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:50:12 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=0fe096efe542d41257884c1a932542038f23c12bcd433f5d2be4adf2d506fc7c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:59:c3:31:c8:b8:95:c8:6e:43:93:49:94:e3: 30:7d:3a:9b:f5:65:5e:ed:f3:6d:db:6f:fd:87:9c: 3d:9b:f8:7d:35:b7:33:67:2e:b1:44:6d:3b:03:12: f5:d7:c1:87:2c:5f:c1:e1:a4:4f:70:67:e4:d6:49: d0:df:b3:d8:6a:85:32:4f:9e:31:e1:38:bf:e9:f2: c4:ac:63:bd:36:f1:16:85:72:06:66:da:b0:28:0f: 62:ae:6c:72:59:47:27:93:cc:18:02:da:26:11:26: a9:8b:c9:cd:ed:93:75:2b:6a:16:3b:03:4f:60:12: 4e:f5:7d:08:4c:d1:11:fc:bf:92:03:b7:ac:26:2d: d3:89:10:9b:a2:9d:04:3c:96:1a:74:8c:6e:9d:8e: d6:68:2b:6c:d0:53:b3:45:95:b9:60:e7:06:20:65: d5:c8:07:88:92:0c:7f:f2:92:9d:6e:75:11:6a:96: a4:99:53:7f:f7:40:06:5f:14:4d:c5:10:a6:c5:a2: 27:e4:90:57:82:1c:21:cf:a4:61:d5:31:c6:e0:8c: 33:21:be:b0:8e:36:a4:0a:05:91:94:c5:c2:47:92: 52:a9:37:26:ea:ba:d0:a4:cd:ad:d4:48:a4:3f:80: 5f:11:b7:04:d6:22:58:b8:be:ae:39:88:88:6f:10: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:6E:18:58:E0:69:C5:77:1A:D9:9F:C9:C6:0C:4C:ED:1F:C5:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f2d17b-bc00-4f7a-b7e8-788558dd25ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.44.0.0/16 Signature Algorithm: sha256WithRSAEncryption ce:0a:76:28:c4:75:c3:29:f0:f1:3e:cf:c9:46:cc:ee:6c:52: 9f:21:50:84:b1:78:a0:1e:3e:41:97:a3:14:5d:0b:84:29:cd: 16:71:3b:38:a3:f4:7d:9e:c0:69:ed:01:b5:36:8f:47:9c:fc: 56:f5:64:82:de:f0:2a:0c:b8:f7:2f:36:ba:cd:30:77:49:6c: 65:8b:91:2e:63:e9:d3:75:1d:eb:f0:a6:dc:e8:18:26:78:0c: 1b:d8:92:81:35:a4:ad:c1:0b:58:52:b3:9d:36:4f:bb:97:4e: 56:45:95:c9:bb:46:8b:d2:11:64:42:4b:a3:64:f6:83:85:84: 5f:36:d5:75:66:ff:6f:4c:51:b6:a1:81:c0:43:84:31:ad:d0: 05:71:37:b7:22:40:f4:80:ea:a1:b3:5d:96:0c:a0:54:89:2d: 52:bf:ee:71:8c:2f:1e:7b:2e:6b:0c:33:33:2c:cc:58:61:68: 5c:05:cd:b4:ea:98:9a:7e:46:0b:f2:7e:26:36:a6:de:ea:f7: 7f:af:21:9b:21:43:a5:a8:e9:8b:16:3c:34:2f:19:49:ff:86: f3:e6:96:bf:ec:cf:7d:b5:85:01:87:fb:9f:73:a7:bc:d1:b5: 7b:90:3c:59:1c:77:13:ee:4f:2d:db:3e:00:81:83:40:32:6a: 8b:d3:34:4f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNybLQ6OXxJ2dGVvFUlYRbV6ARwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDA1MDEyWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmUwOTZlZmU1NDJkNDEyNTc4ODRjMWE5MzI1NDIwMzhm MjNjMTJiY2Q0MzNmNWQyYmU0YWRmMmQ1MDZmYzdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRWcMxyLiVyG5Dk0mU4zB9Opv1ZV7t823bb/2HnD2b+H01 tzNnLrFEbTsDEvXXwYcsX8HhpE9wZ+TWSdDfs9hqhTJPnjHhOL/p8sSsY7028RaF cgZm2rAoD2KubHJZRyeTzBgC2iYRJqmLyc3tk3UrahY7A09gEk71fQhM0RH8v5ID t6wmLdOJEJuinQQ8lhp0jG6djtZoK2zQU7NFlblg5wYgZdXIB4iSDH/ykp1udRFq lqSZU3/3QAZfFE3FEKbFoifkkFeCHCHPpGHVMcbgjDMhvrCONqQKBZGUxcJHklKp NybqutCkza3USKQ/gF8RtwTWIli4vq45iIhvEP/jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCVduGFjgacV3GtmfycYMTO0fxYUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3ZjJkMTdiLWJjMDAtNGY3YS1iN2U4LTc4ODU1OGRkMjVhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVLDANBgkqhkiG9w0BAQsFAAOCAQEAzgp2KMR1wynw8T7PyUbM7mxSnyFQ hLF4oB4+QZejFF0LhCnNFnE7OKP0fZ7Aae0BtTaPR5z8VvVkgt7wKgy49y82us0w d0lsZYuRLmPp03Ud6/Cm3OgYJngMG9iSgTWkrcELWFKznTZPu5dOVkWVybtGi9IR ZEJLo2T2g4WEXzbVdWb/b0xRtqGBwEOEMa3QBXE3tyJA9IDqobNdlgygVIktUr/u cYwvHnsuawwzMyzMWGFoXAXNtOqYmn5GC/J+Jjam3ur3f68hmyFDpajpixY8NC8Z Sf+G8+aWv+zPfbWFAYf7n3OnvNG1e5A8WRx3E+5PLds+AIGDQDJqi9M0Tw== -----END CERTIFICATE-----Generated at Tue Sep 8 01:51:38 2026 by rpki-client