$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa File: b50e29db-8ea8-465e-b77b-6bb4903e7932.roa (raw, json) Hash identifier: SRjsPMcAwa7n0a+p2KQ4FVKqnXME73s0G8vUWBTUo2E= Subject key identifier: 33:A6:FD:A4:14:57:B8:88:1E:0F:57:79:1D:DE:FA:2F:4D:88:3D:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E0D8A5B26EC030E8006A77F821C9A0B813BF3E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa Signing time: Wed 05 Aug 2026 00:21:17 +0000 ROA not before: Wed 05 Aug 2026 00:21:17 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.215.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0d:8a:5b:26:ec:03:0e:80:06:a7:7f:82:1c:9a:0b:81:3b:f3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:21:17 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=311e048e531e0d600dbca977def09a05be785625f844613f33f26fa349b3d9db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:d4:e2:55:df:36:9d:ec:a9:59:15:d7:e7: 6d:de:6b:a9:ca:a3:cf:ed:f0:69:70:69:04:2c:30: c5:b1:61:b5:a8:46:c7:3b:a7:c0:a4:cc:93:ef:29: 6c:e9:0d:ff:1b:1d:ac:7b:64:a5:48:90:ac:1d:3d: 83:02:73:91:32:ff:80:c1:0c:49:c8:9a:f9:24:ad: 88:f7:48:64:c2:69:da:2d:14:8c:7c:1e:94:17:43: 8e:83:19:b3:d1:36:4c:80:0f:ce:1f:dd:2d:87:53: 4e:aa:60:07:09:29:c8:b3:39:f7:e2:ca:bf:44:9c: eb:9c:68:8a:fc:bf:61:0c:7b:bb:f4:e7:4a:ae:e1: 02:6a:22:25:21:3c:59:64:a5:33:67:8b:a4:ff:3d: 01:23:92:52:96:ba:df:72:e3:b8:0a:5e:92:4b:c8: 6f:16:47:74:1f:31:87:0c:a4:25:d3:1e:d4:1c:4f: 32:aa:07:b1:22:92:ee:b5:d3:7e:51:b5:c3:ec:c3: 23:cf:ad:2c:c2:be:52:68:26:72:3f:95:16:43:0c: e6:e0:b6:14:aa:2f:81:ff:d2:fb:11:8e:24:9d:08: 73:30:a7:4c:49:18:f8:6a:f6:cc:0f:b2:41:83:34: 5e:49:4e:e8:32:89:72:43:9f:dc:bc:b3:49:e2:7b: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A6:FD:A4:14:57:B8:88:1E:0F:57:79:1D:DE:FA:2F:4D:88:3D:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.215.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:e1:ac:9e:4c:48:51:ae:d3:ce:73:bc:88:d4:f3:f2:fb:3c: 0a:f0:81:1c:f5:22:c8:81:e3:0a:19:fb:23:86:a7:67:85:65: 3c:07:f8:b2:f3:c9:f5:73:3f:9c:d5:99:e8:96:db:4e:ff:26: 3f:4e:b6:c4:23:ec:91:89:b0:f3:9d:0a:ef:c2:0f:9a:5e:ad: 94:46:b2:d3:16:25:b2:3b:af:d9:98:f8:a9:bb:da:6b:68:a2: 7a:7c:af:4c:06:15:9d:76:57:6c:44:f4:55:52:46:b3:9d:0a: 04:16:4b:35:02:f2:15:27:74:c8:4c:e8:62:6c:1a:19:25:8d: 98:79:d6:d8:87:4b:a8:86:6c:dd:af:9a:87:0f:17:39:06:08: 7c:d3:7a:bc:18:c3:ff:78:90:a7:1b:2d:be:03:1e:8c:bb:3a: ab:e3:6d:6c:50:aa:2b:0c:24:25:a3:95:b0:0e:f3:c1:db:85: 05:15:69:6f:29:da:05:70:6c:92:fc:81:54:0b:95:87:34:ea: c2:66:a2:bf:95:5d:7f:c8:ec:fe:0f:d3:f8:fa:32:e4:1d:38: 96:83:dc:fa:f8:38:21:90:8d:7f:81:7e:0f:7d:b2:60:74:71: 0e:92:38:71:99:76:62:4b:b3:1b:0f:e0:f5:b3:6c:67:ba:e9: f6:80:c5:05 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXg2KWybsAw6ABqd/ghyaC4E78+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAyMTE3WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTFlMDQ4ZTUzMWUwZDYwMGRiY2E5NzdkZWYwOWEwNWJl Nzg1NjI1Zjg0NDYxM2YzM2YyNmZhMzQ5YjNkOWRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeKtTiVd82neypWRXX523ea6nKo8/t8GlwaQQsMMWxYbWo Rsc7p8CkzJPvKWzpDf8bHax7ZKVIkKwdPYMCc5Ey/4DBDEnImvkkrYj3SGTCadot FIx8HpQXQ46DGbPRNkyAD84f3S2HU06qYAcJKcizOffiyr9EnOucaIr8v2EMe7v0 50qu4QJqIiUhPFlkpTNni6T/PQEjklKWut9y47gKXpJLyG8WR3QfMYcMpCXTHtQc TzKqB7Eiku61035RtcPswyPPrSzCvlJoJnI/lRZDDObgthSqL4H/0vsRjiSdCHMw p0xJGPhq9swPskGDNF5JTugyiXJDn9y8s0nie8jfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM6b9pBRXuIgeD1d5Hd76L02IPUMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1MGUyOWRiLThlYTgtNDY1ZS1iNzdiLTZiYjQ5MDNlNzkzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA41zANBgkqhkiG9w0BAQsFAAOCAQEAdOGsnkxIUa7TznO8iNTz8vs8CvCB HPUiyIHjChn7I4anZ4VlPAf4svPJ9XM/nNWZ6JbbTv8mP062xCPskYmw850K78IP ml6tlEay0xYlsjuv2Zj4qbvaa2iienyvTAYVnXZXbET0VVJGs50KBBZLNQLyFSd0 yEzoYmwaGSWNmHnW2IdLqIZs3a+ahw8XOQYIfNN6vBjD/3iQpxstvgMejLs6q+Nt bFCqKwwkJaOVsA7zwduFBRVpbynaBXBskvyBVAuVhzTqwmaiv5Vdf8js/g/T+Poy 5B04loPc+vg4IZCNf4F+D32yYHRxDpI4cZl2YkuzGw/g9bNsZ7rp9oDFBQ== -----END CERTIFICATE-----Generated at Thu Sep 17 16:48:02 2026 by rpki-client