$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99418b2e-3804-4a45-927e-4d3930db7aa8.roa File: 99418b2e-3804-4a45-927e-4d3930db7aa8.roa (raw, json) Hash identifier: 4h4bMXiRXtKbBuPDk/1Bzr4qZHMqqb8Rl9n4LP8d0yg= Subject key identifier: F4:E4:BA:59:74:10:FC:78:D6:04:A0:DB:63:A1:9B:E1:79:90:9D:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D2DE0FC95E8CAB9D38227768CD12F6C098B8F32 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99418b2e-3804-4a45-927e-4d3930db7aa8.roa Signing time: Fri 11 Sep 2026 08:33:13 +0000 ROA not before: Fri 11 Sep 2026 08:33:13 +0000 ROA not after: Thu 10 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.73.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2d:e0:fc:95:e8:ca:b9:d3:82:27:76:8c:d1:2f:6c:09:8b:8f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 11 08:33:13 2026 GMT Not After : Dec 10 23:59:59 2026 GMT Subject: serialNumber=f0ba84f9fb320791bc8313e51a9f52a547a574571158f90778e81964c02cebaa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:e4:c7:bc:c2:15:13:59:c6:fc:6f:23:17: e3:a3:70:b1:85:5e:08:be:0e:0f:3b:1b:91:91:03: 22:08:c7:96:2b:ac:5e:54:b6:38:f1:32:e6:ef:7d: d1:f6:ac:d5:ea:6c:42:d0:b8:6c:b7:0f:47:dc:19: bd:db:d1:5f:90:2e:98:5f:d0:27:2e:f9:ec:36:76: e1:4a:c1:df:31:d4:a9:89:09:34:6d:f3:6d:dd:a8: e7:88:b6:fe:f5:f3:0d:e4:f4:e7:2f:1e:c2:2c:21: 0e:89:67:77:40:c7:ff:aa:34:8e:9b:43:e4:ea:47: f2:8c:cb:27:1a:d9:be:2b:dd:64:06:4c:ed:fd:32: 2d:4b:1a:67:51:29:c8:7f:62:d0:2c:cc:7d:71:d3: 27:0e:79:f7:a6:fc:f4:06:fd:bd:86:30:f6:4a:94: c9:b4:51:df:94:26:a1:8a:5a:fd:20:1b:e8:58:83: b3:94:80:fd:3e:f7:67:bb:94:fb:9e:b2:d6:35:ef: 3f:10:0c:ef:08:9a:ce:4c:c3:2b:5e:62:cd:a2:69: 15:83:ac:fc:63:6a:29:2a:65:ea:83:63:d6:e4:a7: 50:b2:8a:5e:91:0a:dc:b4:62:02:43:96:c1:40:f0: 3d:85:c9:50:82:f2:e7:a2:43:a4:83:02:87:ae:c3: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E4:BA:59:74:10:FC:78:D6:04:A0:DB:63:A1:9B:E1:79:90:9D:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99418b2e-3804-4a45-927e-4d3930db7aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.73.205.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:cc:d7:75:f8:17:60:64:1c:4e:70:ff:1f:7d:bb:18:26:1f: f9:bf:0b:76:ab:98:8a:e7:24:33:bf:f2:4f:85:7a:07:c1:c5: 8a:32:fb:02:35:98:fb:f6:2c:0a:96:50:b1:5c:a2:12:c6:8e: 74:b9:d8:c2:be:7f:bf:e1:de:30:ad:b4:3e:17:d7:ab:79:6c: e2:5e:f8:51:4c:8a:39:f6:90:15:76:f8:0f:33:32:09:9a:d7: 0c:01:ae:37:1b:8b:ae:26:a9:dc:95:0a:97:1f:14:86:cd:60: 61:36:b4:72:70:bb:40:88:75:61:47:37:53:83:ff:b2:75:fb: 05:04:d9:bf:0a:98:3c:52:66:12:53:c6:71:a8:1e:5f:0c:39: 5f:d2:fc:20:9e:84:43:fa:95:7a:12:bd:29:79:48:11:65:51: 3a:5a:b3:b0:26:71:2b:2e:2f:ec:ec:2d:11:c6:78:f4:ec:96: 51:04:f1:26:45:64:f0:ff:90:70:ff:27:07:de:a2:75:e3:19: 1d:66:31:c2:7a:df:67:19:0d:aa:a6:69:a3:3e:22:a7:33:33: 20:63:ce:38:40:f8:56:1d:10:ee:99:9b:f3:0e:8e:80:8a:56: 45:80:70:d2:38:4f:dd:9a:b7:bf:53:14:b1:ae:de:78:31:c7: 64:5f:9b:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfS3g/JXoyrnTgid2jNEvbAmLjzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTExMDgzMzEzWhcNMjYxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGJhODRmOWZiMzIwNzkxYmM4MzEzZTUxYTlmNTJhNTQ3 YTU3NDU3MTE1OGY5MDc3OGU4MTk2NGMwMmNlYmFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUIuTHvMIVE1nG/G8jF+OjcLGFXgi+Dg87G5GRAyIIx5Yr rF5UtjjxMubvfdH2rNXqbELQuGy3D0fcGb3b0V+QLphf0Ccu+ew2duFKwd8x1KmJ CTRt823dqOeItv718w3k9OcvHsIsIQ6JZ3dAx/+qNI6bQ+TqR/KMyyca2b4r3WQG TO39Mi1LGmdRKch/YtAszH1x0ycOefem/PQG/b2GMPZKlMm0Ud+UJqGKWv0gG+hY g7OUgP0+92e7lPuestY17z8QDO8Ims5MwyteYs2iaRWDrPxjaikqZeqDY9bkp1Cy il6RCty0YgJDlsFA8D2FyVCC8ueiQ6SDAoeuw1HzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9OS6WXQQ/HjWBKDbY6Gb4XmQnbwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5NDE4YjJlLTM4MDQtNGE0NS05MjdlLTRkMzkzMGRiN2FhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABASc0wDQYJKoZIhvcNAQELBQADggEBAFzM13X4F2BkHE5w/x99uxgmH/m/ C3armIrnJDO/8k+FegfBxYoy+wI1mPv2LAqWULFcohLGjnS52MK+f7/h3jCttD4X 16t5bOJe+FFMijn2kBV2+A8zMgma1wwBrjcbi64mqdyVCpcfFIbNYGE2tHJwu0CI dWFHN1OD/7J1+wUE2b8KmDxSZhJTxnGoHl8MOV/S/CCehEP6lXoSvSl5SBFlUTpa s7AmcSsuL+zsLRHGePTsllEE8SZFZPD/kHD/JwfeonXjGR1mMcJ632cZDaqmaaM+ IqczMyBjzjhA+FYdEO6Zm/MOjoCKVkWAcNI4T92at79TFLGu3ngxx2Rfm1I= -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:39 2026 by rpki-client