$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa File: 9155fb8e-4b88-4b5d-acc6-999e583f0281.roa (raw, json) Hash identifier: KYmXjapF/0EiHD9GHp8VvQqwaQB1qjLUY72WnytKRDY= Subject key identifier: 0A:55:B6:03:F4:83:F3:0F:07:B7:EA:43:D5:A6:32:E8:BE:33:11:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32EFBB2AF30E22E2EFF24C0528BB1704C2734A33 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa Signing time: Fri 07 Aug 2026 00:40:04 +0000 ROA not before: Fri 07 Aug 2026 00:40:04 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 79.73.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ef:bb:2a:f3:0e:22:e2:ef:f2:4c:05:28:bb:17:04:c2:73:4a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:40:04 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=6227102189a7dab23ab61d4a815bea258e2e57537dc03dec6350787d38faad08, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:64:f5:1e:b8:d1:af:5c:d5:82:a1:fd:45: a1:ca:1f:e7:01:1e:64:98:bb:a9:59:9d:d8:ab:4c: fc:98:e0:c2:50:20:3a:fc:2d:0b:95:45:2d:1d:e9: b9:f2:89:29:e8:15:9c:9c:2c:02:8c:a2:c5:19:24: 6b:8a:73:09:4e:fe:42:5c:c9:db:1c:82:76:37:54: 9e:37:9b:a7:c6:02:c9:2f:0f:05:ea:73:52:cf:35: f0:b7:c9:d3:75:03:3e:87:b6:ed:d3:29:86:ad:be: 57:dc:2f:18:34:d8:b3:ea:ef:cc:c9:12:1a:1a:e7: e3:ec:dc:69:ff:f0:15:f5:92:29:a5:11:8d:25:12: a8:cc:b1:c6:36:7b:ce:bc:0c:4b:8c:33:f9:f1:10: bd:59:06:9a:1b:6f:91:7b:b9:ac:c2:01:dd:84:d0: 40:66:e4:e7:41:9b:c7:cf:2f:6e:9a:da:29:52:ec: 5a:88:ef:01:83:40:e1:92:43:92:22:64:ec:ee:7d: 93:38:40:cb:18:d9:f3:32:60:93:27:eb:ce:57:9b: e2:15:af:c9:c9:7a:2f:7f:81:16:fc:d8:d3:83:b0: 87:aa:54:11:b7:17:ac:dc:99:60:80:a1:5d:7c:fd: eb:0b:b0:68:d1:c3:cf:5f:ea:5e:e5:3c:3f:58:df: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:55:B6:03:F4:83:F3:0F:07:B7:EA:43:D5:A6:32:E8:BE:33:11:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.73.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6d:36:45:a8:e3:d4:5e:d9:81:0f:41:7c:db:85:20:fa:ef:6b: 6f:0f:b3:6b:db:31:aa:5b:b3:a8:1a:77:48:61:47:8e:9a:57: 2f:f4:d9:ee:66:0a:f6:50:f5:7e:e6:bc:15:38:08:be:ca:55: 7d:fe:6d:7c:0b:6c:ee:ee:44:5d:93:94:36:5a:02:d0:2f:b5: 06:a2:bb:e1:7f:b5:7f:9d:2d:92:5f:1a:b7:60:61:87:d7:06: 5c:e1:89:77:d3:4f:8c:f8:eb:35:d4:a4:dc:d1:32:24:e5:cb: e3:d6:f1:6a:1b:b4:22:40:62:a4:00:59:c5:81:02:90:95:9a: 04:cf:ae:60:e9:e0:17:c6:37:0e:2f:34:40:d6:fb:29:8a:5c: 6b:1b:e5:e4:8e:5b:70:3e:2e:6c:7a:85:e8:68:72:ab:ed:3b: af:2d:15:a4:6c:ec:88:ff:a7:8c:d5:5e:6f:a3:0e:b8:0c:22: bc:b7:33:24:2c:9b:bf:93:0f:13:8b:53:29:e2:9b:e9:57:aa: 59:a0:79:58:7a:03:95:f6:d4:90:af:e2:7e:f3:c9:2a:b6:48: cb:9b:cd:8c:9a:89:d3:e5:bf:da:46:14:d9:fc:bd:c5:a7:d8: 89:21:22:8d:df:58:86:5e:21:c3:a7:a4:33:6e:74:c8:61:08: 06:97:49:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMu+7KvMOIuLv8kwFKLsXBMJzSjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDA0WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjI3MTAyMTg5YTdkYWIyM2FiNjFkNGE4MTViZWEyNThl MmU1NzUzN2RjMDNkZWM2MzUwNzg3ZDM4ZmFhZDA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMxmT1HrjRr1zVgqH9RaHKH+cBHmSYu6lZndirTPyY4MJQ IDr8LQuVRS0d6bnyiSnoFZycLAKMosUZJGuKcwlO/kJcydscgnY3VJ43m6fGAskv DwXqc1LPNfC3ydN1Az6Htu3TKYatvlfcLxg02LPq78zJEhoa5+Ps3Gn/8BX1kiml EY0lEqjMscY2e868DEuMM/nxEL1ZBpobb5F7uazCAd2E0EBm5OdBm8fPL26a2ilS 7FqI7wGDQOGSQ5IiZOzufZM4QMsY2fMyYJMn685Xm+IVr8nJei9/gRb82NODsIeq VBG3F6zcmWCAoV18/esLsGjRw89f6l7lPD9Y39ATAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUClW2A/SD8w8Ht+pD1aYy6L4zEQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxNTVmYjhlLTRiODgtNGI1ZC1hY2M2LTk5OWU1ODNmMDI4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdPSYAwDQYJKoZIhvcNAQELBQADggEBAG02Rajj1F7ZgQ9BfNuFIPrva28P s2vbMapbs6gad0hhR46aVy/02e5mCvZQ9X7mvBU4CL7KVX3+bXwLbO7uRF2TlDZa AtAvtQaiu+F/tX+dLZJfGrdgYYfXBlzhiXfTT4z46zXUpNzRMiTly+PW8WobtCJA YqQAWcWBApCVmgTPrmDp4BfGNw4vNEDW+ymKXGsb5eSOW3A+Lmx6hehocqvtO68t FaRs7Ij/p4zVXm+jDrgMIry3MyQsm7+TDxOLUynim+lXqlmgeVh6A5X21JCv4n7z ySq2SMubzYyaidPlv9pGFNn8vcWn2IkhIo3fWIZeIcOnpDNudMhhCAaXSYc= -----END CERTIFICATE-----Generated at Thu Sep 17 16:20:19 2026 by rpki-client