$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa File: 9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa (raw, json) Hash identifier: 1HCOF0WsmG85oSNak4RMDAEgWhGtGPuOU25pOHCN4Q8= Subject key identifier: C2:27:76:80:46:E9:F7:66:A0:C2:B5:44:1C:C8:FE:D9:76:EA:7F:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23EF571873BA5CDF25BF582EF2F2B42A49EEA20B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa Signing time: Wed 05 Aug 2026 00:40:11 +0000 ROA not before: Wed 05 Aug 2026 00:40:11 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 136.8.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ef:57:18:73:ba:5c:df:25:bf:58:2e:f2:f2:b4:2a:49:ee:a2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:40:11 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=cf82acaa1719af5a1a3b34119e26f3da5833966546b644291ba9708c0dad6f88, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:a8:ad:cc:89:36:1f:2d:39:32:de:4d:71: 85:53:18:e4:f4:22:42:f0:32:43:32:b5:12:81:a7: 48:58:30:71:16:6b:55:64:c0:9b:81:30:d0:21:05: 1a:42:c5:66:80:a3:19:0f:df:87:f4:df:a2:4f:b9: 66:60:3f:4c:28:ca:ef:aa:11:5f:c8:a0:2c:6e:8a: 00:7e:85:7c:5b:cc:63:64:57:fa:a8:3c:fa:5a:52: 87:93:f9:05:ba:6f:0f:12:a1:c2:c0:2b:d7:39:6f: a7:b1:f4:b4:be:ee:72:08:46:42:eb:76:66:f4:da: 6a:4b:31:e0:6a:d4:f9:07:52:fd:1c:a1:89:a1:e5: 8c:63:a6:40:cb:26:df:03:84:6d:8d:03:dd:85:8e: b6:ad:ac:4a:db:54:43:d5:32:29:7f:53:ee:01:73: ef:e8:1e:53:47:7e:16:f6:9b:87:a3:5c:8b:25:35: c1:3d:47:06:a7:7d:6c:09:fb:0d:45:57:33:4a:52: 77:9c:75:ea:33:12:b8:da:69:88:44:66:5e:0a:9e: 93:a4:f4:78:34:e4:96:76:5e:47:f0:bf:7f:7a:f0: df:5c:5e:f3:b4:21:63:12:83:05:50:00:13:22:4e: 17:bb:3a:2a:ca:d5:c5:0e:62:12:e6:19:cd:e7:d1: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:76:80:46:E9:F7:66:A0:C2:B5:44:1C:C8:FE:D9:76:EA:7F:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.8.0.0/15 Signature Algorithm: sha256WithRSAEncryption 89:0e:61:ee:18:ba:df:d0:cf:29:3e:f3:c6:44:23:a1:47:c5: 61:82:4f:95:c3:9e:f6:bc:23:54:0e:1e:7f:05:7e:2c:75:04: 83:fb:ea:ad:99:91:21:1f:9d:69:60:2c:cf:77:db:dd:84:3b: f1:10:2c:1e:a2:2f:b1:9d:bb:c0:66:4a:3e:48:a4:5b:0d:56: 27:48:e5:95:e7:27:69:36:4e:fe:17:ad:8b:ef:fd:1e:74:39: 3b:c0:4b:9c:f4:f4:01:33:66:03:74:f9:ab:35:c7:98:a8:23: 6b:3f:76:58:07:51:10:f9:20:86:9a:f4:ef:d0:bc:56:c2:44: 19:ce:5b:24:5d:e1:bd:84:49:82:00:02:c3:54:4c:9e:a6:72: 72:60:90:ce:fc:29:ad:d3:31:21:2a:30:60:73:a0:b4:93:4e: 01:9d:60:fa:69:f8:46:41:6f:23:8e:6c:7f:b8:f8:4b:e6:09: c4:36:d5:a2:04:ad:61:e2:a3:04:b1:c6:dc:d8:40:85:98:6f: a2:d0:fe:38:8f:c4:c8:c2:9c:55:d2:f1:a0:2f:a3:e2:ad:65: a5:81:0c:02:c6:66:64:2d:00:74:3e:cb:a5:bd:de:ef:df:38: 0f:45:9d:98:65:5b:f5:10:9b:a7:5f:33:a4:8d:5f:1e:49:c2: d6:39:d1:2c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI+9XGHO6XN8lv1gu8vK0KknuogswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDA0MDExWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjgyYWNhYTE3MTlhZjVhMWEzYjM0MTE5ZTI2ZjNkYTU4 MzM5NjY1NDZiNjQ0MjkxYmE5NzA4YzBkYWQ2Zjg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNraitzIk2Hy05Mt5NcYVTGOT0IkLwMkMytRKBp0hYMHEW a1VkwJuBMNAhBRpCxWaAoxkP34f036JPuWZgP0woyu+qEV/IoCxuigB+hXxbzGNk V/qoPPpaUoeT+QW6bw8SocLAK9c5b6ex9LS+7nIIRkLrdmb02mpLMeBq1PkHUv0c oYmh5YxjpkDLJt8DhG2NA92FjratrErbVEPVMil/U+4Bc+/oHlNHfhb2m4ejXIsl NcE9RwanfWwJ+w1FVzNKUnecdeozErjaaYhEZl4KnpOk9Hg05JZ2Xkfwv3968N9c XvO0IWMSgwVQABMiThe7OirK1cUOYhLmGc3n0aXjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwid2gEbp92agwrVEHMj+2XbqfwQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljYzNkY2NhLWYzOGItNDg5Yy1iZGUxLWQ4ZDhhYWYzOTAxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGICDANBgkqhkiG9w0BAQsFAAOCAQEAiQ5h7hi639DPKT7zxkQjoUfFYYJP lcOe9rwjVA4efwV+LHUEg/vqrZmRIR+daWAsz3fb3YQ78RAsHqIvsZ27wGZKPkik Ww1WJ0jllecnaTZO/heti+/9HnQ5O8BLnPT0ATNmA3T5qzXHmKgjaz92WAdREPkg hpr079C8VsJEGc5bJF3hvYRJggACw1RMnqZycmCQzvwprdMxISowYHOgtJNOAZ1g +mn4RkFvI45sf7j4S+YJxDbVogStYeKjBLHG3NhAhZhvotD+OI/EyMKcVdLxoC+j 4q1lpYEMAsZmZC0AdD7Lpb3e7984D0WdmGVb9RCbp18zpI1fHknC1jnRLA== -----END CERTIFICATE-----Generated at Thu Sep 17 16:18:06 2026 by rpki-client