$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ac729e-ea03-4783-a289-86fbbf28ddda.roa File: c7ac729e-ea03-4783-a289-86fbbf28ddda.roa (raw, json) Hash identifier: P8LxwhK1sXdwYIthlriLI0GVJvGCPg4UFkA3fsYoxuM= Subject key identifier: D6:27:F1:59:E5:92:85:C5:BF:DA:37:82:CB:32:BB:A0:8E:68:F6:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E3D43619A1C3E801EC3FC7E1F9500B6C0AA06C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ac729e-ea03-4783-a289-86fbbf28ddda.roa Signing time: Tue 25 Aug 2026 19:53:42 +0000 ROA not before: Tue 25 Aug 2026 19:53:42 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:43:61:9a:1c:3e:80:1e:c3:fc:7e:1f:95:00:b6:c0:aa:06:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 19:53:42 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=700d351957bd4c0d1baae5c9ecd7e516a5a20e3ebb91b59b7afe456c8900f5c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:c5:18:b3:78:60:bc:a8:6a:d8:b0:5a:6f: 81:46:b1:5a:ba:cf:ce:6a:3d:9c:3e:4c:33:d7:7c: 3d:5c:d5:f4:d2:87:77:12:db:65:47:b0:3a:bd:6c: 3c:b7:bf:13:a7:98:67:6b:89:84:0b:f0:68:77:e6: ad:ea:59:f7:35:0c:ad:bf:95:84:4c:a9:d5:d7:fe: 58:d7:d2:ab:0d:fb:13:17:b9:c0:57:64:bc:b8:59: 43:e1:30:cc:d4:f2:09:c8:8e:43:ef:b1:8d:9b:f7: 7a:97:d4:c1:f4:f9:bb:98:0e:9e:11:2e:02:3d:e5: 73:c9:22:49:b1:c2:fb:47:3b:a7:41:0d:6f:ec:15: 0a:46:ff:5b:d7:1c:2d:ea:da:1e:a3:2a:c4:b5:48: 8f:ec:e4:2d:e6:03:e2:0d:b3:d4:18:5d:8c:67:e1: 73:59:d5:c0:e2:96:fa:00:14:5b:96:ce:1e:03:c6: 15:34:ed:fd:32:3d:e1:11:b2:fd:e4:f2:d3:a8:c3: 51:b5:e3:b2:b4:92:39:e9:03:f5:f5:ca:80:a2:0a: 37:c0:51:fe:be:37:22:69:72:27:d1:e2:ce:d6:5f: 2c:5c:25:37:21:ef:d1:55:eb:e9:91:62:93:c0:92: e5:b5:ab:3b:d8:a0:4a:8b:16:0c:81:b6:85:56:13: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:F1:59:E5:92:85:C5:BF:DA:37:82:CB:32:BB:A0:8E:68:F6:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ac729e-ea03-4783-a289-86fbbf28ddda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption c8:b8:56:d9:95:34:12:e8:32:11:d5:ef:09:f6:24:0e:f1:b2: dd:d2:27:4d:04:96:a7:3b:18:4c:eb:71:d2:d5:fe:af:d1:e7: ac:1b:e5:b5:b7:84:61:c7:da:ec:56:8b:d0:f0:ef:19:d5:1a: ac:3e:58:4e:0f:e4:0a:05:0e:b5:56:34:78:02:29:f8:fe:d7: f1:41:9f:16:c4:cc:99:24:99:da:de:5f:02:23:f3:ba:c7:a0: 49:e8:c9:ac:3b:ad:8e:77:28:84:19:23:77:39:df:c6:3c:74: 28:55:a4:d9:29:52:75:0a:46:b4:a6:d5:1f:07:ff:d5:00:c9: 45:67:36:57:35:0f:76:a1:2d:9b:e7:24:eb:90:f5:3e:b9:0f: 99:27:a0:49:c7:1e:84:aa:6f:27:2e:d5:30:cc:2c:71:6b:4b: d6:77:e6:ef:4d:f3:28:89:06:12:76:c3:e4:bc:34:0e:0e:8e: 59:3c:f5:6c:ec:50:9e:29:a8:29:95:56:72:99:b7:0b:7e:de: 9e:df:31:49:f2:e4:98:c7:3e:5e:bf:d9:16:f6:a3:a6:82:09: f0:70:8b:2c:a8:fe:5f:0d:b1:2b:bb:bb:b1:ed:27:c0:de:16: 4f:50:41:3e:ab:d9:82:41:e0:ec:7b:e2:fd:0e:b7:e6:ca:83: 19:38:2d:d0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTj1DYZocPoAew/x+H5UAtsCqBskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MTk1MzQyWhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDBkMzUxOTU3YmQ0YzBkMWJhYWU1YzllY2Q3ZTUxNmE1 YTIwZTNlYmI5MWI1OWI3YWZlNDU2Yzg5MDBmNWM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF+8UYs3hgvKhq2LBab4FGsVq6z85qPZw+TDPXfD1c1fTS h3cS22VHsDq9bDy3vxOnmGdriYQL8Gh35q3qWfc1DK2/lYRMqdXX/ljX0qsN+xMX ucBXZLy4WUPhMMzU8gnIjkPvsY2b93qX1MH0+buYDp4RLgI95XPJIkmxwvtHO6dB DW/sFQpG/1vXHC3q2h6jKsS1SI/s5C3mA+INs9QYXYxn4XNZ1cDilvoAFFuWzh4D xhU07f0yPeERsv3k8tOow1G147K0kjnpA/X1yoCiCjfAUf6+NyJpcifR4s7WXyxc JTch79FV6+mRYpPAkuW1qzvYoEqLFgyBtoVWE4ITAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1ifxWeWShcW/2jeCyzK7oI5o9kowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3YWM3MjllLWVhMDMtNDc4My1hMjg5LTg2ZmJiZjI4ZGRkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2fjANBgkqhkiG9w0BAQsFAAOCAQEAyLhW2ZU0EugyEdXvCfYkDvGy3dIn TQSWpzsYTOtx0tX+r9HnrBvltbeEYcfa7FaL0PDvGdUarD5YTg/kCgUOtVY0eAIp +P7X8UGfFsTMmSSZ2t5fAiPzusegSejJrDutjncohBkjdznfxjx0KFWk2SlSdQpG tKbVHwf/1QDJRWc2VzUPdqEtm+ck65D1PrkPmSegSccehKpvJy7VMMwscWtL1nfm 703zKIkGEnbD5Lw0Dg6OWTz1bOxQnimoKZVWcpm3C37ent8xSfLkmMc+Xr/ZFvaj poIJ8HCLLKj+Xw2xK7u7se0nwN4WT1BBPqvZgkHg7Hvi/Q635sqDGTgt0A== -----END CERTIFICATE-----Generated at Tue Sep 15 12:09:22 2026 by rpki-client