$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07265bd-4a28-40d0-9e9a-4960732702ee.roa File: a07265bd-4a28-40d0-9e9a-4960732702ee.roa (raw, json) Hash identifier: 1S5SNzGsqlk5famMa9uXfL+aDVDdWXVsppwt7fV11Ok= Subject key identifier: 8A:AD:5D:2D:A8:45:B1:3B:01:67:F5:E1:69:A3:DD:2B:A7:C3:7A:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 054A3BA8244A27ED9DF341F1DFF11911F4D8070B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07265bd-4a28-40d0-9e9a-4960732702ee.roa Signing time: Wed 05 Aug 2026 01:01:17 +0000 ROA not before: Wed 05 Aug 2026 01:01:17 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.226.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4a:3b:a8:24:4a:27:ed:9d:f3:41:f1:df:f1:19:11:f4:d8:07:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 01:01:17 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=8f419942eb8a5c800eaebc1830f72ca9110423977a11b94e11e99a03ba14d37c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:87:c3:49:23:1a:5e:52:7a:1b:3e:60:89: 1d:45:b1:95:92:16:0a:5c:67:de:64:5d:94:c7:0e: 2c:3e:6f:14:c8:f1:b2:97:bc:50:a5:fd:ef:47:67: 7a:ab:8c:c2:6e:00:25:67:ce:b0:2a:0e:30:17:c5: b0:30:a3:de:90:d7:5e:7e:e3:35:ea:55:4f:b5:d4: 81:15:df:ec:97:f5:02:96:6e:d2:82:a0:63:05:51: 6e:80:d4:7d:58:66:07:41:f6:d0:1d:f3:39:9b:78: 57:b0:97:8b:46:25:21:d2:54:a6:4f:be:be:7d:26: 5c:14:66:00:2b:a9:88:88:85:36:fe:1c:14:7e:aa: 04:d1:a4:cd:22:f3:ac:ef:43:88:87:f9:fa:5c:67: ad:da:53:94:f4:ab:24:fd:27:cd:51:45:25:2e:3a: d1:c9:d8:13:b1:4a:bf:d8:a5:f9:81:31:55:d2:aa: 0f:b3:59:f8:d3:d3:dc:09:68:0f:c1:4c:b5:96:4d: b3:2a:9e:49:40:d8:04:16:23:96:34:d6:92:dd:3c: bc:09:e0:05:54:9e:ce:53:5f:62:ee:4c:b9:9a:83: 8a:43:75:50:b9:80:4a:c5:52:99:fc:f1:9c:c8:50: b9:92:89:f4:06:1d:08:5e:10:7d:6f:29:e0:a6:62: 19:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:5D:2D:A8:45:B1:3B:01:67:F5:E1:69:A3:DD:2B:A7:C3:7A:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07265bd-4a28-40d0-9e9a-4960732702ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.226.227.0/24 Signature Algorithm: sha256WithRSAEncryption b8:af:bc:eb:64:17:0c:2e:69:8a:cd:68:19:6c:29:04:42:7a: 5d:2f:5d:c2:b7:ca:de:fc:18:67:1a:22:86:32:f0:d0:d8:a5: 15:b4:32:5d:b7:6d:d1:26:aa:bb:9a:c4:65:30:0a:15:ad:60: ce:3b:6f:cc:25:97:38:c7:79:15:94:b8:56:a0:bc:72:43:8b: bb:18:42:b2:07:64:fd:c3:13:b0:16:79:14:21:7c:48:6d:7a: 96:62:4c:7d:3f:1d:ac:b3:26:fb:da:6f:67:3b:c5:9d:01:d5: 2a:4f:17:96:ef:30:e9:e6:07:b9:99:63:3f:7a:f7:e0:bf:0e: fd:22:ff:de:34:9d:e1:8b:4c:68:f5:2d:79:bd:0e:c6:da:fb: 48:16:c2:55:e1:78:f4:80:c9:91:4a:80:a6:f9:47:69:2e:bb: 61:91:7b:55:66:ad:02:ed:e6:67:40:c7:8b:c5:09:7a:f9:40: a1:be:87:61:50:56:5d:69:64:eb:4f:e8:ad:09:1c:3c:ff:4a: fe:3d:a4:b6:5f:cb:19:88:76:b5:d3:f1:93:4d:5b:6a:48:30: 1a:4b:ea:8e:4d:3c:b2:7e:0f:a0:00:aa:3c:70:62:cf:f5:40: 22:75:3a:e8:4a:f5:2b:f5:ed:16:77:0b:94:95:b2:57:86:5f: 58:31:14:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBUo7qCRKJ+2d80Hx3/EZEfTYBwswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDEwMTE3WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjQxOTk0MmViOGE1YzgwMGVhZWJjMTgzMGY3MmNhOTEx MDQyMzk3N2ExMWI5NGUxMWU5OWEwM2JhMTRkMzdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI0YfDSSMaXlJ6Gz5giR1FsZWSFgpcZ95kXZTHDiw+bxTI 8bKXvFCl/e9HZ3qrjMJuACVnzrAqDjAXxbAwo96Q115+4zXqVU+11IEV3+yX9QKW btKCoGMFUW6A1H1YZgdB9tAd8zmbeFewl4tGJSHSVKZPvr59JlwUZgArqYiIhTb+ HBR+qgTRpM0i86zvQ4iH+fpcZ63aU5T0qyT9J81RRSUuOtHJ2BOxSr/YpfmBMVXS qg+zWfjT09wJaA/BTLWWTbMqnklA2AQWI5Y01pLdPLwJ4AVUns5TX2LuTLmag4pD dVC5gErFUpn88ZzIULmSifQGHQheEH1vKeCmYhltAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiq1dLahFsTsBZ/XhaaPdK6fDetUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwNzI2NWJkLTRhMjgtNDBkMC05ZTlhLTQ5NjA3MzI3MDJlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA4uMwDQYJKoZIhvcNAQELBQADggEBALivvOtkFwwuaYrNaBlsKQRCel0v XcK3yt78GGcaIoYy8NDYpRW0Ml23bdEmqruaxGUwChWtYM47b8wllzjHeRWUuFag vHJDi7sYQrIHZP3DE7AWeRQhfEhtepZiTH0/HayzJvvab2c7xZ0B1SpPF5bvMOnm B7mZYz969+C/Dv0i/940neGLTGj1LXm9Dsba+0gWwlXhePSAyZFKgKb5R2kuu2GR e1VmrQLt5mdAx4vFCXr5QKG+h2FQVl1pZOtP6K0JHDz/Sv49pLZfyxmIdrXT8ZNN W2pIMBpL6o5NPLJ+D6AAqjxwYs/1QCJ1OuhK9Sv17RZ3C5SVsleGX1gxFOQ= -----END CERTIFICATE-----Generated at Thu Sep 17 16:21:12 2026 by rpki-client