$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfeccc68-b535-451a-9cc7-983817c87adf.roa File: dfeccc68-b535-451a-9cc7-983817c87adf.roa (raw, json) Hash identifier: Sa59VfdVmdpSerbbpjdBPhmTbN+coZ/qnuT6/PkUKCE= Subject key identifier: 4F:51:4C:41:48:BA:4C:C1:81:E0:97:43:58:75:BB:43:2D:B3:15:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36AEFE4E58CDA525F92556E9EE7E062CA31C6ED5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfeccc68-b535-451a-9cc7-983817c87adf.roa Signing time: Tue 04 Aug 2026 01:30:40 +0000 ROA not before: Tue 04 Aug 2026 01:30:40 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.174.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ae:fe:4e:58:cd:a5:25:f9:25:56:e9:ee:7e:06:2c:a3:1c:6e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 01:30:40 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=8ad434b4d4f075993cd83fd9d53c6fb5fed68e969b8bb3378e06b8c74c629b82, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:58:a9:8c:53:28:53:0f:e1:75:8f:5d:0f: de:3b:ed:ff:1c:9d:57:09:ca:af:a1:eb:ed:25:6c: 6b:aa:ff:7b:89:45:7e:7f:34:6a:9c:fb:2a:b8:d9: 8c:c9:32:fd:47:5e:dd:a9:02:72:94:83:a5:e5:63: 71:14:f8:06:dc:5d:74:a8:66:6e:4b:18:68:a2:a6: ed:db:14:2f:dc:ce:f3:f1:d7:5e:a6:90:a6:80:f1: e5:2a:4c:d9:d4:74:d6:ad:eb:11:94:f8:dc:3b:bb: c6:d9:fd:85:4a:47:ac:ce:5d:7b:8f:a9:d9:45:66: da:40:98:ca:51:f7:e0:b4:19:98:26:03:c0:cc:e5: 58:e1:13:e1:6e:01:b6:57:45:c3:c3:d9:e6:da:64: f2:8a:aa:a8:3e:07:05:e2:3d:a1:52:37:bd:1f:99: 2f:c6:a4:c2:db:4f:54:2d:77:1f:c0:57:08:61:70: 36:4d:18:2a:48:6e:db:21:b5:5c:7d:1a:a2:46:d4: c5:a0:12:c7:b8:38:bb:ab:d9:75:92:b6:70:91:5d: d3:66:0c:44:d7:3d:f3:27:f1:fb:e4:fc:29:a0:ba: 95:6f:ab:f8:6b:b0:90:55:03:8a:ed:45:49:02:28: 10:2f:ee:d0:1f:9b:fc:80:cd:32:63:2f:3f:bc:7c: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:4C:41:48:BA:4C:C1:81:E0:97:43:58:75:BB:43:2D:B3:15:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfeccc68-b535-451a-9cc7-983817c87adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.174.0.0/15 Signature Algorithm: sha256WithRSAEncryption 56:dc:5e:c1:86:86:70:84:9b:45:8f:9a:a9:33:73:1d:50:a9: c2:db:79:20:15:15:09:32:f9:79:28:32:36:e9:d9:b4:b8:5e: bb:62:4f:67:00:bb:3e:7f:6a:7d:af:3c:50:ab:ba:13:96:ac: 2e:00:57:df:8e:0e:94:bc:bb:63:c7:3e:d5:d4:38:f1:89:79: 16:27:06:ea:64:f9:fc:bc:cc:7c:e9:01:ed:f3:f9:b0:2c:24: 91:86:15:8b:a1:e6:44:4d:06:0c:6d:3d:a4:2e:93:6e:47:35: 77:77:a5:af:98:66:3d:28:74:0e:df:ff:64:71:a1:11:74:6c: 65:0f:b1:33:15:79:e2:b1:55:3c:26:36:df:03:13:a2:e8:cf: af:38:67:9c:2b:a0:d6:d7:ce:74:56:ca:cf:c4:0d:58:50:ff: 7c:fc:35:c0:21:c6:d1:1b:9e:59:32:9a:7b:aa:fa:24:62:d4: 04:7c:c5:a6:d3:3b:57:8c:50:ac:a1:4d:15:90:9b:57:97:26: 19:5c:b1:87:96:5c:d7:f9:e9:91:52:c9:0a:97:10:1f:95:29: 60:a5:db:a0:88:0c:2e:77:a6:5f:88:82:2b:24:2e:41:f3:47: 4c:6a:b7:58:db:b5:9b:77:e9:27:ff:f3:88:2c:5f:c9:12:96: eb:fe:69:3f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNq7+TljNpSX5JVbp7n4GLKMcbtUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEzMDQwWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWQ0MzRiNGQ0ZjA3NTk5M2NkODNmZDlkNTNjNmZiNWZl ZDY4ZTk2OWI4YmIzMzc4ZTA2YjhjNzRjNjI5YjgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4hlipjFMoUw/hdY9dD9477f8cnVcJyq+h6+0lbGuq/3uJ RX5/NGqc+yq42YzJMv1HXt2pAnKUg6XlY3EU+AbcXXSoZm5LGGiipu3bFC/czvPx 116mkKaA8eUqTNnUdNat6xGU+Nw7u8bZ/YVKR6zOXXuPqdlFZtpAmMpR9+C0GZgm A8DM5VjhE+FuAbZXRcPD2ebaZPKKqqg+BwXiPaFSN70fmS/GpMLbT1Qtdx/AVwhh cDZNGCpIbtshtVx9GqJG1MWgEse4OLur2XWStnCRXdNmDETXPfMn8fvk/CmgupVv q/hrsJBVA4rtRUkCKBAv7tAfm/yAzTJjLz+8fM57AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUT1FMQUi6TMGB4JdDWHW7Qy2zFU0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmZWNjYzY4LWI1MzUtNDUxYS05Y2M3LTk4MzgxN2M4N2FkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEorjANBgkqhkiG9w0BAQsFAAOCAQEAVtxewYaGcISbRY+aqTNzHVCpwtt5 IBUVCTL5eSgyNunZtLheu2JPZwC7Pn9qfa88UKu6E5asLgBX344OlLy7Y8c+1dQ4 8Yl5FicG6mT5/LzMfOkB7fP5sCwkkYYVi6HmRE0GDG09pC6Tbkc1d3elr5hmPSh0 Dt//ZHGhEXRsZQ+xMxV54rFVPCY23wMToujPrzhnnCug1tfOdFbKz8QNWFD/fPw1 wCHG0RueWTKae6r6JGLUBHzFptM7V4xQrKFNFZCbV5cmGVyxh5Zc1/npkVLJCpcQ H5UpYKXboIgMLnemX4iCKyQuQfNHTGq3WNu1m3fpJ//ziCxfyRKW6/5pPw== -----END CERTIFICATE-----Generated at Tue Sep 15 11:38:27 2026 by rpki-client