$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa File: 8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa (raw, json) Hash identifier: R7gbZvuBMo+EzONQbIPIQHghDXOPkHRSidL9/Tp13mA= Subject key identifier: E2:C5:30:4B:DD:04:A2:05:31:7B:EA:41:AF:A5:BA:BE:00:2A:08:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 567B172BC2BE3403C3720B632E91D5945556408D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa Signing time: Wed 05 Aug 2026 00:20:50 +0000 ROA not before: Wed 05 Aug 2026 00:20:50 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.87.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7b:17:2b:c2:be:34:03:c3:72:0b:63:2e:91:d5:94:55:56:40:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:20:50 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=d70278c79e22cb805b1e94c36db672aee62dc35d569993544253dc1e02e5faa3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:37:ed:c1:96:12:94:f3:7c:64:38:0d:39: 88:67:19:78:51:4c:5a:d8:dd:88:8f:a8:68:aa:56: c4:3d:da:d8:e4:9b:80:55:0b:3e:b4:83:bc:97:8e: 85:03:c3:f9:48:ce:10:4f:3c:cf:2d:b6:76:4a:0e: d3:83:d1:d6:9e:48:fa:ac:8b:ef:05:d9:c1:3b:8b: 2e:20:4b:ef:cb:d5:01:6c:3b:9c:3f:1b:cd:34:c3: 42:5c:f3:d0:51:f5:92:ff:a2:3b:4e:21:f1:5f:e3: 1b:7e:f6:ee:af:d5:70:ba:28:4e:68:f5:7d:7d:20: 51:cd:ea:52:23:f7:f2:86:7f:d0:c7:d5:ac:2f:1b: d8:dd:cd:12:d5:b5:92:79:7d:1f:1c:20:83:a9:c2: 75:86:cc:ca:0c:0f:06:d1:12:24:e4:eb:48:c5:07: a8:e6:34:bf:11:86:c3:ff:76:f7:81:a9:0b:52:68: 52:05:e0:92:73:fb:73:e4:a8:c8:dc:32:50:34:b9: 59:fd:d6:4d:a0:ad:14:0d:46:17:85:d2:58:ec:9b: c8:d0:36:a5:89:af:a9:0a:d2:32:91:14:fd:ed:0d: 56:21:82:a9:36:68:3f:cd:bd:d0:73:d1:53:c8:88: 61:04:bf:51:ee:8c:95:02:aa:a4:5e:75:a3:50:60: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C5:30:4B:DD:04:A2:05:31:7B:EA:41:AF:A5:BA:BE:00:2A:08:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.87.29.0/24 Signature Algorithm: sha256WithRSAEncryption a7:61:0f:a4:40:bf:7c:a5:f4:e8:c8:be:3a:00:7c:12:69:28: 21:ec:91:96:a2:76:b8:23:90:c4:19:65:aa:8d:14:5c:d7:d7: f6:bf:63:94:7e:8b:3d:c3:de:f8:eb:28:27:d9:57:74:ea:68: 54:36:10:04:7b:94:d7:e9:d1:df:33:5a:5c:b7:ad:de:83:18: 57:19:93:16:da:b0:f0:77:6d:d3:56:39:0d:b5:a6:c2:7d:cd: 7e:fd:c5:ab:52:b8:49:2c:06:3d:b1:9b:a5:1f:96:9c:90:8f: 80:ee:79:d7:e9:dc:ce:da:81:97:d2:32:c0:cf:ad:71:ad:28: 24:89:39:90:d9:71:fe:51:b4:9a:07:88:fa:a4:d2:96:75:bb: ce:97:6b:f3:5f:3c:f6:dc:70:e5:13:64:2d:36:9d:f1:3e:77: 81:00:0c:70:47:30:96:e8:2a:33:24:15:f8:dc:42:b4:78:5c: 7f:18:78:22:a4:bc:ca:d4:71:6f:49:44:fe:eb:64:e2:c7:5d: d3:dd:6b:f9:f3:c8:af:c7:a0:f7:b4:99:21:35:1a:fd:eb:a3: d3:fd:04:76:66:6b:77:31:2b:4b:8c:a4:ad:91:eb:8d:47:86: 7e:52:6f:6e:75:a5:a9:81:ca:ef:71:e0:c6:0f:12:26:06:da: 1e:6b:43:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVnsXK8K+NAPDcgtjLpHVlFVWQI0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAyMDUwWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzAyNzhjNzllMjJjYjgwNWIxZTk0YzM2ZGI2NzJhZWU2 MmRjMzVkNTY5OTkzNTQ0MjUzZGMxZTAyZTVmYWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4HTftwZYSlPN8ZDgNOYhnGXhRTFrY3YiPqGiqVsQ92tjk m4BVCz60g7yXjoUDw/lIzhBPPM8ttnZKDtOD0daeSPqsi+8F2cE7iy4gS+/L1QFs O5w/G800w0Jc89BR9ZL/ojtOIfFf4xt+9u6v1XC6KE5o9X19IFHN6lIj9/KGf9DH 1awvG9jdzRLVtZJ5fR8cIIOpwnWGzMoMDwbREiTk60jFB6jmNL8RhsP/dveBqQtS aFIF4JJz+3PkqMjcMlA0uVn91k2grRQNRheF0ljsm8jQNqWJr6kK0jKRFP3tDVYh gqk2aD/NvdBz0VPIiGEEv1HujJUCqqRedaNQYE6lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4sUwS90EogUxe+pBr6W6vgAqCCIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhZGViZWE1LTQzZjQtNGI5Yi04YjEzLWYzOWY2ZTk4YTNhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYVx0wDQYJKoZIhvcNAQELBQADggEBAKdhD6RAv3yl9OjIvjoAfBJpKCHs kZaidrgjkMQZZaqNFFzX1/a/Y5R+iz3D3vjrKCfZV3TqaFQ2EAR7lNfp0d8zWly3 rd6DGFcZkxbasPB3bdNWOQ21psJ9zX79xatSuEksBj2xm6UflpyQj4Duedfp3M7a gZfSMsDPrXGtKCSJOZDZcf5RtJoHiPqk0pZ1u86Xa/NfPPbccOUTZC02nfE+d4EA DHBHMJboKjMkFfjcQrR4XH8YeCKkvMrUcW9JRP7rZOLHXdPda/nzyK/HoPe0mSE1 Gv3ro9P9BHZma3cxK0uMpK2R641Hhn5Sb251pamByu9x4MYPEiYG2h5rQ5w= -----END CERTIFICATE-----Generated at Tue Sep 15 13:25:12 2026 by rpki-client