$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c23a83e6-32c4-43b4-9986-8f3da063223c.roa File: c23a83e6-32c4-43b4-9986-8f3da063223c.roa (raw, json) Hash identifier: /pLMUBMDpCnBHsgIVO8eg9WynSeDoWfm+/LaiHKgGFE= Subject key identifier: F4:0C:42:3B:C7:C8:B1:7C:7B:20:67:6C:63:39:84:58:AD:9B:3F:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2067D62CF0B113BA9BEF937E640ED772DAFA6EB8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c23a83e6-32c4-43b4-9986-8f3da063223c.roa Signing time: Tue 04 Aug 2026 01:00:45 +0000 ROA not before: Tue 04 Aug 2026 01:00:45 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 204.236.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:67:d6:2c:f0:b1:13:ba:9b:ef:93:7e:64:0e:d7:72:da:fa:6e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 01:00:45 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=5a4256ae2b866f3a189c7fb57406077a1b0bef69649c2f1fd54ecdc21a340eb6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:22:b3:00:95:24:ef:ed:43:dc:07:0b:24: 77:58:f1:1f:8d:4a:28:b4:57:cd:cf:43:72:57:78: d8:b4:b7:4c:f9:0e:39:1e:16:80:f0:66:cc:18:45: 92:62:6b:5d:5b:3d:41:51:21:7a:6b:1f:2d:bf:07: cc:f0:e7:f4:f4:36:2f:4c:8f:d0:89:4e:34:d5:47: 67:c4:20:23:a1:e7:8a:04:72:19:26:ff:ba:d6:62: fd:e4:b1:28:5d:03:6a:f2:bf:b1:5c:c7:ef:ce:cd: 59:39:b3:b5:ef:e4:57:6e:2b:fc:7a:bf:79:95:8b: fb:16:56:79:c0:a0:67:ba:19:cc:8c:85:a8:bc:35: c0:1a:c8:6e:d1:54:03:02:9e:e8:7b:72:7c:9d:23: 77:89:ef:24:1f:e0:8e:db:40:71:00:8b:ba:72:13: 82:5a:b2:a0:47:36:2c:f0:48:7d:ca:1c:3a:41:b2: 11:12:7e:4f:ab:d9:ae:1c:ec:6f:84:99:60:7b:63: b0:1b:a4:fd:d3:38:4d:98:29:85:91:be:ed:f0:06: c5:37:c6:7f:e8:91:47:8e:dd:03:4e:64:c2:5f:65: a4:e9:03:5c:5a:01:51:b4:9d:bc:41:d4:a0:a9:74: ef:80:8b:81:13:7b:0e:b2:a6:59:44:65:68:47:36: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0C:42:3B:C7:C8:B1:7C:7B:20:67:6C:63:39:84:58:AD:9B:3F:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c23a83e6-32c4-43b4-9986-8f3da063223c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.192.0/20 Signature Algorithm: sha256WithRSAEncryption 90:ac:19:44:e8:b5:48:7d:94:7e:35:7d:cf:74:68:c9:f1:b0: 1c:56:9c:f5:2b:54:52:2b:2f:68:f0:ee:cb:4b:ff:cc:60:52: 92:dc:96:89:a8:68:f5:2c:2d:4f:a4:af:72:ae:70:8c:dd:30: cc:2f:31:23:f1:eb:53:88:43:7d:2e:6b:c1:51:bf:e2:df:b3: dd:93:ef:8f:e8:2e:71:ea:23:28:94:13:a3:87:c7:16:87:e8: 1f:fe:0a:db:c3:cd:b8:54:9d:41:55:7a:2f:04:32:b4:4f:74: 44:88:42:af:06:7f:de:8b:25:0b:53:0d:72:51:19:a2:95:89: 50:b0:57:3e:b9:45:db:92:59:31:33:a8:ab:84:30:5d:08:e0: fb:e7:5b:4b:63:ba:16:2e:d2:fb:9b:47:8b:bf:14:f0:05:c0: 06:80:cd:ae:67:5d:29:c5:00:f0:40:f7:34:27:71:bc:74:69: 8d:af:f1:98:ae:7e:2b:20:1e:cd:85:56:ad:de:de:16:7b:cc: c9:21:02:4f:4e:f4:85:da:e9:6a:18:c5:7f:5c:0c:84:0d:bc: 15:43:c7:ee:2b:4b:95:f1:5f:a0:5c:ee:1d:58:ad:e6:be:95: 92:c7:75:dd:a0:5e:54:1e:ca:89:82:9a:8c:56:ba:94:05:ca: b3:ca:ba:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIGfWLPCxE7qb75N+ZA7Xctr6brgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEwMDQ1WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTQyNTZhZTJiODY2ZjNhMTg5YzdmYjU3NDA2MDc3YTFi MGJlZjY5NjQ5YzJmMWZkNTRlY2RjMjFhMzQwZWI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1eSKzAJUk7+1D3AcLJHdY8R+NSii0V83PQ3JXeNi0t0z5 DjkeFoDwZswYRZJia11bPUFRIXprHy2/B8zw5/T0Ni9Mj9CJTjTVR2fEICOh54oE chkm/7rWYv3ksShdA2ryv7Fcx+/OzVk5s7Xv5FduK/x6v3mVi/sWVnnAoGe6GcyM hai8NcAayG7RVAMCnuh7cnydI3eJ7yQf4I7bQHEAi7pyE4JasqBHNizwSH3KHDpB shESfk+r2a4c7G+EmWB7Y7AbpP3TOE2YKYWRvu3wBsU3xn/okUeO3QNOZMJfZaTp A1xaAVG0nbxB1KCpdO+Ai4ETew6ypllEZWhHNggbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9AxCO8fIsXx7IGdsYzmEWK2bP6wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyM2E4M2U2LTMyYzQtNDNiNC05OTg2LThmM2RhMDYzMjIzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATM7MAwDQYJKoZIhvcNAQELBQADggEBAJCsGUTotUh9lH41fc90aMnxsBxW nPUrVFIrL2jw7stL/8xgUpLclomoaPUsLU+kr3KucIzdMMwvMSPx61OIQ30ua8FR v+Lfs92T74/oLnHqIyiUE6OHxxaH6B/+CtvDzbhUnUFVei8EMrRPdESIQq8Gf96L JQtTDXJRGaKViVCwVz65RduSWTEzqKuEMF0I4PvnW0tjuhYu0vubR4u/FPAFwAaA za5nXSnFAPBA9zQncbx0aY2v8ZiufisgHs2FVq3e3hZ7zMkhAk9O9IXa6WoYxX9c DIQNvBVDx+4rS5XxX6Bc7h1Yrea+lZLHdd2gXlQeyomCmoxWupQFyrPKuqA= -----END CERTIFICATE-----Generated at Thu Sep 17 17:57:53 2026 by rpki-client