$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893c9846-64f4-4ad9-91f1-273e570cab26.roa File: 893c9846-64f4-4ad9-91f1-273e570cab26.roa (raw, json) Hash identifier: 4aOZS5A0OpHa4D97m3qEKqo9gVg/LVHVA+BRBQFnrwg= Subject key identifier: 8A:D8:6F:E6:15:A6:EA:79:3D:B2:0D:8A:0D:12:AD:B4:1F:31:C3:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D15F54B944046EE5AE177948A42414A9DE735B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893c9846-64f4-4ad9-91f1-273e570cab26.roa Signing time: Tue 04 Aug 2026 01:20:07 +0000 ROA not before: Tue 04 Aug 2026 01:20:07 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:f5:4b:94:40:46:ee:5a:e1:77:94:8a:42:41:4a:9d:e7:35:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 01:20:07 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=6532a4a9c44a0b0fee3e856e13519d989aeeb12715388bf58d9304a10cb834db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:95:00:08:36:a7:15:25:ac:21:4f:09:dc: a0:f0:4a:d8:3c:04:56:70:4c:5b:cc:f9:db:c4:ce: af:ff:ff:57:3e:37:c3:9e:49:3e:f4:dd:a9:d8:a1: 7c:77:9a:8c:f0:55:ec:54:81:63:06:2d:99:2e:3e: 06:f3:3e:43:3b:c3:25:8c:bd:ad:6d:5d:0e:ed:78: 07:ce:92:98:6b:2f:9b:f6:4f:ac:72:1c:77:b6:c2: 83:f9:da:6a:08:7c:f2:6c:5b:74:41:b1:33:d5:46: fc:21:4c:4b:96:40:17:15:65:67:4e:ef:15:22:24: 1d:07:3b:ee:4a:da:56:ed:03:8c:74:2a:bb:3b:7f: 54:77:7d:0e:5f:bd:cb:60:60:ac:e7:1a:53:c5:d3: cc:8b:09:6d:2c:f0:90:1d:aa:9b:dc:47:55:32:1d: 4c:e0:cf:76:84:35:3e:87:f7:42:65:3f:ff:d1:ce: b2:fa:77:6b:fa:03:af:55:9e:7a:fa:72:1f:43:41: 38:9a:60:cc:0b:74:32:09:b7:9c:df:09:9e:60:8a: de:49:15:4a:eb:f9:2b:42:2c:25:c7:57:87:36:dc: e6:f2:fb:e7:5d:f4:1c:43:0d:02:4c:1f:2d:85:3e: cb:cd:72:ff:b7:6e:7d:ae:d7:a2:44:7c:c6:78:d3: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D8:6F:E6:15:A6:EA:79:3D:B2:0D:8A:0D:12:AD:B4:1F:31:C3:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893c9846-64f4-4ad9-91f1-273e570cab26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.140.0/22 Signature Algorithm: sha256WithRSAEncryption 62:ce:19:6b:8d:fe:a6:45:aa:ef:6c:89:2b:a5:6a:10:3d:53: c9:96:89:42:0c:eb:f4:83:4e:44:d4:79:eb:77:d1:6d:48:2c: d6:b2:a3:f4:14:c5:f8:57:ff:cc:ea:91:8d:b7:48:20:4c:52: 41:93:0d:cd:59:cc:d5:e1:e2:eb:90:21:0e:a4:10:4f:42:ed: 72:53:63:9c:f0:6b:dd:82:9a:d4:32:4e:13:28:71:0f:93:24: 46:9d:78:ec:69:59:aa:3a:1e:62:f8:93:83:ca:7b:4b:3d:98: 72:e4:52:71:b1:10:88:c9:b0:e7:22:59:9d:05:79:2b:60:26: 36:a4:ad:cd:1b:65:f7:74:83:2e:4c:d7:bf:31:de:ab:24:95: d0:4f:6c:41:60:33:e5:d6:79:f9:f6:74:88:a9:92:5a:63:b8: 50:fc:96:90:e7:3d:e9:40:4b:26:1e:28:af:f5:0f:35:f0:53: db:f9:de:98:5b:6f:7d:81:4a:49:b7:a1:c1:ba:a9:af:0a:eb: ba:8c:4c:57:81:ae:03:f6:f1:7c:9c:aa:5b:26:0f:16:7c:0b: ca:1b:2d:09:41:79:b6:d1:bc:e8:70:0d:e7:2e:f4:d9:8b:c6: 11:68:4f:75:1a:72:83:b6:cf:e8:93:11:39:97:2c:4f:8e:32: 11:a7:70:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULRX1S5RARu5a4XeUikJBSp3nNbkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEyMDA3WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTMyYTRhOWM0NGEwYjBmZWUzZTg1NmUxMzUxOWQ5ODlh ZWViMTI3MTUzODhiZjU4ZDkzMDRhMTBjYjgzNGRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEzJUACDanFSWsIU8J3KDwStg8BFZwTFvM+dvEzq///1c+ N8OeST703anYoXx3mozwVexUgWMGLZkuPgbzPkM7wyWMva1tXQ7teAfOkphrL5v2 T6xyHHe2woP52moIfPJsW3RBsTPVRvwhTEuWQBcVZWdO7xUiJB0HO+5K2lbtA4x0 Krs7f1R3fQ5fvctgYKznGlPF08yLCW0s8JAdqpvcR1UyHUzgz3aENT6H90JlP//R zrL6d2v6A69Vnnr6ch9DQTiaYMwLdDIJt5zfCZ5git5JFUrr+StCLCXHV4c23Oby ++dd9BxDDQJMHy2FPsvNcv+3bn2u16JEfMZ40+DLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUithv5hWm6nk9sg2KDRKttB8xwzkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5M2M5ODQ2LTY0ZjQtNGFkOS05MWYxLTI3M2U1NzBjYWIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJBCYwwDQYJKoZIhvcNAQELBQADggEBAGLOGWuN/qZFqu9siSulahA9U8mW iUIM6/SDTkTUeet30W1ILNayo/QUxfhX/8zqkY23SCBMUkGTDc1ZzNXh4uuQIQ6k EE9C7XJTY5zwa92CmtQyThMocQ+TJEadeOxpWao6HmL4k4PKe0s9mHLkUnGxEIjJ sOciWZ0FeStgJjakrc0bZfd0gy5M178x3qskldBPbEFgM+XWefn2dIipklpjuFD8 lpDnPelASyYeKK/1DzXwU9v53phbb32BSkm3ocG6qa8K67qMTFeBrgP28Xycqlsm DxZ8C8obLQlBebbRvOhwDecu9NmLxhFoT3UacoO2z+iTETmXLE+OMhGncEc= -----END CERTIFICATE-----Generated at Tue Sep 15 14:56:23 2026 by rpki-client