$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b85564a-7b8e-482c-82f2-955d84a48b12.roa File: 9b85564a-7b8e-482c-82f2-955d84a48b12.roa (raw, json) Hash identifier: FUEJMl2yxkhuFcM7KHlS8V9XAWMv9Yj99zQFxXrYHao= Subject key identifier: BB:7B:44:27:53:D6:7A:5B:07:4F:4B:70:C0:8E:51:21:F4:5F:17:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D4961D55EF1FB74DC64EEDE62F0B6C7E182CB14 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b85564a-7b8e-482c-82f2-955d84a48b12.roa Signing time: Tue 04 Aug 2026 02:30:47 +0000 ROA not before: Tue 04 Aug 2026 02:30:47 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 32.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:49:61:d5:5e:f1:fb:74:dc:64:ee:de:62:f0:b6:c7:e1:82:cb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:30:47 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=b3a8d561662531055a04feb0ff97d9b383dd378150c4ca97b6622d41fa69fd56, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:ce:83:a5:05:9e:dc:ba:ee:f4:c0:0e:95: fb:27:3f:cf:13:16:4a:70:d1:bb:39:b3:d4:0b:a8: 58:53:0d:a4:94:55:f6:e9:03:cc:71:e5:39:31:ad: 94:3b:73:83:5f:cd:40:c4:dd:a8:e3:8f:9a:0a:f3: c8:58:1c:a6:ae:ff:48:72:31:2a:65:2d:76:8e:e2: 03:68:f1:83:e0:aa:20:c4:cb:63:ae:28:5e:9d:e9: 9d:3d:bd:b5:26:b1:36:16:e3:0f:0d:3a:3b:82:36: 1f:16:52:2c:70:e3:de:1b:1e:52:d7:5e:08:18:05: f4:04:fb:2f:19:36:2a:56:21:88:27:a9:d7:da:e1: 17:45:4f:4e:37:94:b5:82:77:b4:8a:01:46:76:8a: 1c:44:9b:2e:ac:11:90:34:a6:7d:c8:88:35:ff:22: 4a:ff:7c:98:e5:6d:c4:fe:79:24:52:cb:9c:f1:9b: f6:48:68:0e:a9:db:be:40:90:6b:53:91:5d:cf:ae: 5e:41:fb:c1:e2:2a:b9:7a:0a:fd:6d:46:e1:01:fd: 9f:40:73:aa:86:cb:08:cf:b2:1a:6e:6d:f9:c5:57: 53:08:a8:81:c2:f6:8a:63:b3:27:8c:f9:23:49:32: 4f:28:0f:c8:43:82:55:67:78:03:f4:b1:41:4d:a4: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7B:44:27:53:D6:7A:5B:07:4F:4B:70:C0:8E:51:21:F4:5F:17:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b85564a-7b8e-482c-82f2-955d84a48b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.247.0.0/16 Signature Algorithm: sha256WithRSAEncryption a4:f2:2e:c9:44:ed:d0:9b:2b:af:90:07:91:1a:34:de:cc:aa: ab:d7:1c:8a:b1:70:78:a7:c6:90:5c:39:1e:4f:7e:b5:f4:f9: 05:82:0f:fd:40:35:ad:a0:fb:8f:b9:5a:ba:0d:1c:cd:10:db: 50:cd:03:be:67:e4:2c:21:40:c9:f2:ff:e0:67:e8:21:ac:aa: 2a:f2:78:4d:5c:f1:9e:8b:59:06:60:80:4e:c4:41:75:5d:47: 91:96:20:55:f6:d6:23:b4:3b:b8:98:40:80:44:02:53:05:ff: be:c2:8e:f5:99:32:93:9a:3c:48:05:ce:72:2e:62:9d:a5:6b: b7:d5:b0:16:48:6e:76:a9:9a:2f:ec:12:5a:f6:95:bb:52:82: 05:d7:51:0a:54:d7:c3:a6:09:2d:62:06:18:7f:b1:f7:28:87: 21:6d:4c:a5:24:77:ea:16:0c:f9:b2:c5:03:aa:f5:1e:20:99: ad:76:f2:7c:15:ea:19:83:0f:8e:73:d5:9e:ff:8f:d5:11:d8: 59:11:34:58:94:ba:71:bd:fa:07:79:4c:19:b6:7f:80:5f:a5: 6e:01:87:f0:bf:a7:8a:e7:16:62:13:d0:b8:fd:1f:69:ab:60: fe:93:37:27:b1:ed:7b:a1:39:b6:ba:99:ad:f3:a0:78:83:05: 8f:09:e5:85 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDUlh1V7x+3TcZO7eYvC2x+GCyxQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIzMDQ3WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2E4ZDU2MTY2MjUzMTA1NWEwNGZlYjBmZjk3ZDliMzgz ZGQzNzgxNTBjNGNhOTdiNjYyMmQ0MWZhNjlmZDU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzss6DpQWe3Lru9MAOlfsnP88TFkpw0bs5s9QLqFhTDaSU VfbpA8xx5TkxrZQ7c4NfzUDE3ajjj5oK88hYHKau/0hyMSplLXaO4gNo8YPgqiDE y2OuKF6d6Z09vbUmsTYW4w8NOjuCNh8WUixw494bHlLXXggYBfQE+y8ZNipWIYgn qdfa4RdFT043lLWCd7SKAUZ2ihxEmy6sEZA0pn3IiDX/Ikr/fJjlbcT+eSRSy5zx m/ZIaA6p275AkGtTkV3Prl5B+8HiKrl6Cv1tRuEB/Z9Ac6qGywjPshpubfnFV1MI qIHC9opjsyeM+SNJMk8oD8hDglVneAP0sUFNpGbrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUu3tEJ1PWelsHT0twwI5RIfRfF7owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliODU1NjRhLTdiOGUtNDgyYy04MmYyLTk1NWQ4NGE0OGIxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAg9zANBgkqhkiG9w0BAQsFAAOCAQEApPIuyUTt0Jsrr5AHkRo03syqq9cc irFweKfGkFw5Hk9+tfT5BYIP/UA1raD7j7laug0czRDbUM0DvmfkLCFAyfL/4Gfo IayqKvJ4TVzxnotZBmCATsRBdV1HkZYgVfbWI7Q7uJhAgEQCUwX/vsKO9Zkyk5o8 SAXOci5inaVrt9WwFkhudqmaL+wSWvaVu1KCBddRClTXw6YJLWIGGH+x9yiHIW1M pSR36hYM+bLFA6r1HiCZrXbyfBXqGYMPjnPVnv+P1RHYWRE0WJS6cb36B3lMGbZ/ gF+lbgGH8L+niucWYhPQuP0faatg/pM3J7Hte6E5trqZrfOgeIMFjwnlhQ== -----END CERTIFICATE-----Generated at Thu Sep 17 17:06:15 2026 by rpki-client