$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf13f91-3cae-4b21-8b5c-479ec1b10488.roa File: caf13f91-3cae-4b21-8b5c-479ec1b10488.roa (raw, json) Hash identifier: GBpMdxpKqFgn5CQeYOmtS9jX+e/Rb3ZG8vk2CUqJuQ4= Subject key identifier: AF:9F:CA:CC:EE:25:FB:55:6C:66:22:DF:0E:3F:83:9A:12:25:C9:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2146C74A9D5EA2AA428B18AAE4115F1AA4E21AC7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf13f91-3cae-4b21-8b5c-479ec1b10488.roa Signing time: Wed 12 Aug 2026 15:47:08 +0000 ROA not before: Wed 12 Aug 2026 15:47:08 +0000 ROA not after: Tue 10 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 66.36.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:46:c7:4a:9d:5e:a2:aa:42:8b:18:aa:e4:11:5f:1a:a4:e2:1a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 15:47:08 2026 GMT Not After : Nov 10 23:59:59 2026 GMT Subject: serialNumber=b209c122ca6540b7f59334124aa9d6da88a68a668eec01d07c8b1e2e8ef11f1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:7a:ae:ca:bf:19:4c:68:5a:09:a5:18:9f: 74:af:e4:77:7b:5e:e2:b6:0a:2c:35:0d:b6:18:09: 73:01:c9:35:6b:81:c9:66:e3:23:00:7c:71:ed:51: d9:65:fa:b8:4d:af:af:ff:4f:63:21:f1:4d:0d:1c: 5e:88:1d:53:9e:12:6e:da:12:a3:9d:d2:b2:57:46: 35:04:22:7b:ca:ac:ca:b6:c8:33:4e:8f:63:6d:47: 4b:54:ab:a0:4f:c1:b8:46:5f:32:0c:0f:67:6a:bd: f5:19:e8:d4:b2:19:52:dd:fb:96:89:a9:5b:34:c9: 3a:55:c8:dd:6a:f4:8f:e8:3d:fb:72:c1:f8:b2:05: 3a:c6:6a:e3:62:08:17:d1:7c:c4:e8:f2:7f:da:b5: 15:36:66:44:43:91:26:ed:63:f9:f0:2f:e5:c6:7f: db:c7:20:fd:32:c4:cc:3d:5b:d3:b4:92:8e:13:e9: 6d:63:50:44:ab:4c:5f:b3:4f:7f:37:2e:3b:66:e0: 17:31:4b:83:c1:8a:20:b0:d7:f7:69:f3:fa:e9:51: b2:ac:95:40:13:f0:f9:df:ba:15:7f:cf:0b:1d:73: c7:30:e3:b0:ea:54:fa:e1:66:9a:f4:02:76:77:ee: 25:c6:89:7e:15:ab:29:e1:9b:20:d0:54:e2:97:e9: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9F:CA:CC:EE:25:FB:55:6C:66:22:DF:0E:3F:83:9A:12:25:C9:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf13f91-3cae-4b21-8b5c-479ec1b10488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.36.0.0/24 Signature Algorithm: sha256WithRSAEncryption 26:a0:d1:64:64:71:fd:ec:32:52:61:8d:3c:7d:62:fc:df:2b: cf:3b:68:5e:26:06:5f:18:36:a4:ad:f5:f1:26:13:bc:14:ce: ba:ec:28:73:da:f0:5a:45:ab:83:8a:bb:f5:d5:97:16:d3:9d: e0:5d:f4:fa:8e:d2:27:e3:c9:97:fb:e8:91:13:37:6a:df:0e: 66:08:36:f7:27:67:a9:d5:bf:8e:f6:8c:5b:73:3b:9f:3b:25: 63:5e:4a:58:79:c6:69:89:89:74:ed:28:e1:5b:06:c2:68:f8: 51:c5:97:5f:17:7c:70:6c:bb:5f:8b:b3:73:5c:58:95:22:73: 85:69:ea:ea:0f:b8:7c:6d:52:f9:9e:36:58:88:33:3e:5b:f2: 46:1e:3b:90:a4:e1:1c:86:3b:ab:eb:5a:8d:3c:82:4e:8c:2a: 89:8e:bd:1d:e4:ef:23:61:3e:c8:e5:65:b7:d0:70:3d:34:8f: ca:2f:69:71:e3:ef:5e:c4:71:29:54:9b:97:05:8b:2a:31:28: f4:e6:ab:23:38:57:c2:c0:cc:98:01:24:c1:79:43:3e:a2:ba: cd:e9:51:26:eb:22:c4:6a:16:2a:40:7b:cc:0c:ed:d8:4d:cf: 0b:45:02:ec:1f:8c:50:ed:61:94:94:b8:a5:0b:58:3a:e8:3b: 85:15:fb:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIUbHSp1eoqpCixiq5BFfGqTiGscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEyMTU0NzA4WhcNMjYxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjA5YzEyMmNhNjU0MGI3ZjU5MzM0MTI0YWE5ZDZkYTg4 YTY4YTY2OGVlYzAxZDA3YzhiMWUyZThlZjExZjFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqInquyr8ZTGhaCaUYn3Sv5Hd7XuK2Ciw1DbYYCXMByTVr gclm4yMAfHHtUdll+rhNr6//T2Mh8U0NHF6IHVOeEm7aEqOd0rJXRjUEInvKrMq2 yDNOj2NtR0tUq6BPwbhGXzIMD2dqvfUZ6NSyGVLd+5aJqVs0yTpVyN1q9I/oPfty wfiyBTrGauNiCBfRfMTo8n/atRU2ZkRDkSbtY/nwL+XGf9vHIP0yxMw9W9O0ko4T 6W1jUESrTF+zT383Ljtm4BcxS4PBiiCw1/dp8/rpUbKslUAT8PnfuhV/zwsdc8cw 47DqVPrhZpr0AnZ37iXGiX4VqynhmyDQVOKX6QIbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr5/KzO4l+1VsZiLfDj+DmhIlyU8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhZjEzZjkxLTNjYWUtNGIyMS04YjVjLTQ3OWVjMWIxMDQ4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABCJAAwDQYJKoZIhvcNAQELBQADggEBACag0WRkcf3sMlJhjTx9YvzfK887 aF4mBl8YNqSt9fEmE7wUzrrsKHPa8FpFq4OKu/XVlxbTneBd9PqO0ifjyZf76JET N2rfDmYINvcnZ6nVv472jFtzO587JWNeSlh5xmmJiXTtKOFbBsJo+FHFl18XfHBs u1+Ls3NcWJUic4Vp6uoPuHxtUvmeNliIMz5b8kYeO5Ck4RyGO6vrWo08gk6MKomO vR3k7yNhPsjlZbfQcD00j8ovaXHj717EcSlUm5cFiyoxKPTmqyM4V8LAzJgBJMF5 Qz6ius3pUSbrIsRqFipAe8wM7dhNzwtFAuwfjFDtYZSUuKULWDroO4UV+x0= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:07 2026 by rpki-client