$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa File: af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa (raw, json) Hash identifier: 7UTDANQxOwVRu0wyWfkhWTeTdVuF00BDysUktPC2mZ4= Subject key identifier: EB:DB:15:EC:B9:91:77:AB:AA:20:8F:D0:0A:2B:F2:55:A6:97:72:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12017E3ED109009CEFC1459EAFE081357CE23AFA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa Signing time: Fri 07 Aug 2026 00:11:23 +0000 ROA not before: Fri 07 Aug 2026 00:11:23 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.175.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:01:7e:3e:d1:09:00:9c:ef:c1:45:9e:af:e0:81:35:7c:e2:3a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:11:23 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=03b749c70d79d1de8deaa1be0e85329b2603113d32f9e8f4316f8ab13e1a0b89, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:75:c7:55:20:72:a7:4a:c8:2e:a9:81:e1: 41:db:64:5e:f8:2c:4f:71:07:99:1c:72:7f:d4:82: 6a:fa:1c:be:c4:c4:5d:04:9c:05:d1:d8:93:ab:8b: e4:ef:8f:2a:9c:a4:54:eb:d7:79:1e:1b:47:b1:de: a2:03:a6:96:d6:cf:6a:62:3f:81:d4:d9:82:12:b1: 1d:49:ce:7e:df:e5:26:22:bb:bf:c1:52:20:e1:a3: 88:3b:25:5d:c6:a6:02:8a:2b:04:d6:24:9e:1c:f2: 59:8e:cb:da:39:2e:dc:de:fc:a5:e2:54:46:b3:74: ac:9c:21:0d:90:8b:13:0a:c8:2c:87:7c:7f:02:37: d5:ea:fd:2b:4d:04:31:60:a3:8a:5b:cb:7e:c3:3f: ac:44:2d:9b:5e:60:c7:4e:c8:b5:11:63:e6:0d:78: ef:6f:3e:35:8b:6e:a7:e7:16:0a:f1:5f:5c:08:42: 4e:28:60:20:3f:93:54:c3:12:24:53:f3:21:58:0c: 88:46:2f:84:b7:31:56:02:4c:4c:0a:e1:03:9e:e3: 4c:93:5a:a7:b8:9e:11:09:75:c6:7a:17:af:53:c7: bf:76:80:85:19:d3:01:8b:8e:5b:1a:ed:a8:ed:b1: 35:d9:ca:77:d4:0d:8c:47:69:a5:e0:ec:b6:be:05: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:15:EC:B9:91:77:AB:AA:20:8F:D0:0A:2B:F2:55:A6:97:72:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af2ec907-ffb6-4c22-a884-4c64b9f09a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.48.0/22 Signature Algorithm: sha256WithRSAEncryption 69:fd:03:e6:f2:dc:5f:a2:09:2c:96:76:0d:6e:98:d8:52:66: 5b:30:1b:6b:b8:bb:60:be:08:70:09:8c:3b:47:fd:8b:e3:ba: 77:19:97:a6:80:3d:7a:84:78:fc:6a:3f:03:f7:be:22:5b:74: 40:b9:dd:94:32:e3:ac:61:aa:3f:8a:3b:99:b3:34:22:ce:43: 3c:81:95:90:03:8d:60:07:ba:af:33:c7:5b:5c:a7:76:e8:14: 97:cb:43:62:0b:4a:ef:9b:6d:6f:ec:6e:5f:e9:f3:2c:78:22: 87:d3:c9:13:f4:10:69:39:36:d1:b2:91:35:ad:f2:95:9e:5a: e6:c4:31:b1:1c:59:3d:ca:df:73:6c:af:36:3f:bd:d5:06:65: 11:11:65:55:93:6f:a4:31:62:8f:c7:eb:d7:d2:31:79:d1:55: 60:0c:48:f4:b9:5b:00:c4:56:96:cd:8f:e6:97:f4:18:cb:8f: 1a:74:65:cf:70:35:4d:c3:08:08:88:18:27:71:89:b1:5b:90: 7a:2c:62:e4:22:d6:8a:71:89:c4:a2:d1:4f:01:46:4d:5e:cd: 1b:54:92:c9:53:02:2c:7d:cc:3a:92:9b:d7:66:b4:da:79:00: fb:e9:c2:20:7c:0e:38:d0:35:0b:83:53:33:f5:55:df:aa:83: b0:40:ee:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEgF+PtEJAJzvwUWer+CBNXziOvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAxMTIzWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2I3NDljNzBkNzlkMWRlOGRlYWExYmUwZTg1MzI5YjI2 MDMxMTNkMzJmOWU4ZjQzMTZmOGFiMTNlMWEwYjg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRSXXHVSByp0rILqmB4UHbZF74LE9xB5kccn/Ugmr6HL7E xF0EnAXR2JOri+TvjyqcpFTr13keG0ex3qIDppbWz2piP4HU2YISsR1Jzn7f5SYi u7/BUiDho4g7JV3GpgKKKwTWJJ4c8lmOy9o5Ltze/KXiVEazdKycIQ2QixMKyCyH fH8CN9Xq/StNBDFgo4pby37DP6xELZteYMdOyLURY+YNeO9vPjWLbqfnFgrxX1wI Qk4oYCA/k1TDEiRT8yFYDIhGL4S3MVYCTEwK4QOe40yTWqe4nhEJdcZ6F69Tx792 gIUZ0wGLjlsa7ajtsTXZynfUDYxHaaXg7La+BdkzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU69sV7LmRd6uqII/QCivyVaaXcjYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmMmVjOTA3LWZmYjYtNGMyMi1hODg0LTRjNjRiOWYwOWExMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJsrzAwDQYJKoZIhvcNAQELBQADggEBAGn9A+by3F+iCSyWdg1umNhSZlsw G2u4u2C+CHAJjDtH/YvjuncZl6aAPXqEePxqPwP3viJbdEC53ZQy46xhqj+KO5mz NCLOQzyBlZADjWAHuq8zx1tcp3boFJfLQ2ILSu+bbW/sbl/p8yx4IofTyRP0EGk5 NtGykTWt8pWeWubEMbEcWT3K33NsrzY/vdUGZRERZVWTb6QxYo/H69fSMXnRVWAM SPS5WwDEVpbNj+aX9BjLjxp0Zc9wNU3DCAiIGCdxibFbkHosYuQi1opxicSi0U8B Rk1ezRtUkslTAix9zDqSm9dmtNp5APvpwiB8DjjQNQuDUzP1Vd+qg7BA7v8= -----END CERTIFICATE-----Generated at Thu Sep 17 16:18:58 2026 by rpki-client