$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2b29ee-eb9b-4b98-8632-62271a0714e4.roa File: af2b29ee-eb9b-4b98-8632-62271a0714e4.roa (raw, json) Hash identifier: cl9F54uEtv1N6FG4L6/r+Vt0yA2F9uBLw160dJEr+0k= Subject key identifier: A3:26:0E:5F:86:1A:79:FF:CD:EA:6A:05:26:C8:E2:67:31:4B:DB:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 025EC713AC0ED12157F9607EAA683F44C0C45860 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2b29ee-eb9b-4b98-8632-62271a0714e4.roa Signing time: Fri 07 Aug 2026 00:40:09 +0000 ROA not before: Fri 07 Aug 2026 00:40:09 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5e:c7:13:ac:0e:d1:21:57:f9:60:7e:aa:68:3f:44:c0:c4:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:40:09 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=7e4689f6b0f7c181c8cfca8783cdb064f8adce1ba1b797f9ce1dc42043ee8fae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:8e:84:70:e9:d1:3e:59:bf:44:2e:b0:d0: 16:07:d2:63:36:b9:cd:59:ad:5e:78:ef:a6:15:42: 22:62:0d:ce:28:7d:ab:c1:4f:05:36:32:b0:7c:0d: a0:71:5c:ac:56:cd:f0:6e:6d:e0:da:fb:74:a5:97: 3b:c1:da:2b:75:91:9d:1f:81:b2:d0:36:cb:ca:f7: fa:12:fe:6d:76:da:1b:82:5b:25:07:f4:40:9a:a1: 7e:82:0a:ba:81:1b:2c:89:d8:19:7c:24:d6:2a:fd: 7e:ab:f6:e8:cc:e2:04:d1:57:f8:bd:b9:32:7e:06: 52:58:1b:cd:88:be:b1:f9:86:2f:fa:cd:db:21:89: ce:86:dc:ba:ce:ed:a4:e2:26:79:d9:f3:4d:b4:3d: 46:a5:81:17:d2:f3:dd:ec:d6:43:2e:52:bf:04:b5: 98:61:5c:c9:ba:4e:5c:39:7d:84:47:89:90:59:3b: 93:91:b0:08:85:dc:3b:8f:14:28:37:94:62:1e:77: 1a:70:8a:c3:5f:f7:67:1a:79:1f:e9:18:86:1c:ac: 2a:8d:84:ad:11:3f:d6:85:86:c7:db:9e:0a:2b:b4: b0:f8:13:ed:e7:38:8e:72:48:4b:49:2d:ce:3e:6c: 4c:de:f7:b4:8e:f8:91:50:be:e7:6b:5a:7c:38:d1: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:26:0E:5F:86:1A:79:FF:CD:EA:6A:05:26:C8:E2:67:31:4B:DB:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2b29ee-eb9b-4b98-8632-62271a0714e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.129.0/24 Signature Algorithm: sha256WithRSAEncryption 63:98:9c:82:6a:af:c5:87:71:43:1b:1e:2b:21:37:ee:ae:57: d8:bf:04:56:b1:cd:85:00:ae:44:b1:f4:f0:d5:3f:cc:46:94: 7a:21:07:bf:ca:97:22:09:3b:fa:13:55:6b:0a:5c:b6:04:32: 6f:bf:09:fe:6e:3e:2d:bf:5a:80:ea:dc:af:58:de:54:f9:70: e9:3e:53:c8:b0:67:a5:d5:95:9d:17:fa:08:cb:88:ac:29:89: b5:8c:70:02:d1:54:d2:1c:f2:ab:b8:bf:ca:3e:be:c5:3c:28: 8e:b7:87:aa:34:22:c9:21:18:72:12:fc:63:17:c2:53:a3:3e: 8f:cc:99:42:00:a1:b3:c0:09:37:72:84:ef:87:3b:de:b8:89: f3:33:d6:f6:b8:dc:eb:04:85:ef:c6:28:dc:c9:65:2d:f4:65: 46:c8:0a:37:51:fe:26:ca:8b:98:bb:86:95:82:20:13:87:b9: 44:ca:83:f4:f0:29:34:27:92:6d:bf:cf:aa:5d:16:c9:94:66: fa:92:f7:c6:77:83:a7:e4:15:f1:16:62:0a:1f:ed:ce:3e:3d: f3:21:3c:ed:77:9d:f8:2f:47:a8:ed:4d:88:c3:2c:33:36:6f: 34:82:0a:b1:cb:e9:30:47:53:e9:93:93:f1:37:11:cf:7a:86: 7c:0f:d9:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAl7HE6wO0SFX+WB+qmg/RMDEWGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDA5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTQ2ODlmNmIwZjdjMTgxYzhjZmNhODc4M2NkYjA2NGY4 YWRjZTFiYTFiNzk3ZjljZTFkYzQyMDQzZWU4ZmFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5yo6EcOnRPlm/RC6w0BYH0mM2uc1ZrV5476YVQiJiDc4o favBTwU2MrB8DaBxXKxWzfBubeDa+3SllzvB2it1kZ0fgbLQNsvK9/oS/m122huC WyUH9ECaoX6CCrqBGyyJ2Bl8JNYq/X6r9ujM4gTRV/i9uTJ+BlJYG82IvrH5hi/6 zdshic6G3LrO7aTiJnnZ8020PUalgRfS893s1kMuUr8EtZhhXMm6Tlw5fYRHiZBZ O5ORsAiF3DuPFCg3lGIedxpwisNf92caeR/pGIYcrCqNhK0RP9aFhsfbngortLD4 E+3nOI5ySEtJLc4+bEze97SO+JFQvudrWnw40bwXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoyYOX4Yaef/N6moFJsjiZzFL2/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmMmIyOWVlLWViOWItNGI5OC04NjMyLTYyMjcxYTA3MTRlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKroEwDQYJKoZIhvcNAQELBQADggEBAGOYnIJqr8WHcUMbHishN+6uV9i/ BFaxzYUArkSx9PDVP8xGlHohB7/KlyIJO/oTVWsKXLYEMm+/Cf5uPi2/WoDq3K9Y 3lT5cOk+U8iwZ6XVlZ0X+gjLiKwpibWMcALRVNIc8qu4v8o+vsU8KI63h6o0Iskh GHIS/GMXwlOjPo/MmUIAobPACTdyhO+HO964ifMz1va43OsEhe/GKNzJZS30ZUbI CjdR/ibKi5i7hpWCIBOHuUTKg/TwKTQnkm2/z6pdFsmUZvqS98Z3g6fkFfEWYgof 7c4+PfMhPO13nfgvR6jtTYjDLDM2bzSCCrHL6TBHU+mTk/E3Ec96hnwP2UY= -----END CERTIFICATE-----Generated at Thu Sep 17 17:07:36 2026 by rpki-client