$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e42ca712-62cd-4c87-afcf-7cd35a0bf852.roa File: e42ca712-62cd-4c87-afcf-7cd35a0bf852.roa (raw, json) Hash identifier: ZzoVPlUcTnpplb7izenl+2tvzHoWioov84qonZQleBM= Subject key identifier: 03:6B:35:1A:84:F0:C0:82:01:89:68:6A:0B:7B:29:89:C2:D7:FB:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B20EDDA7F9998AAF7BDD3DCE8552CB4B231F074 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e42ca712-62cd-4c87-afcf-7cd35a0bf852.roa Signing time: Thu 30 Jul 2026 00:30:13 +0000 ROA not before: Thu 30 Jul 2026 00:30:13 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:20:ed:da:7f:99:98:aa:f7:bd:d3:dc:e8:55:2c:b4:b2:31:f0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 30 00:30:13 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=be1baf193b5ed70d0f3c3ca452522f742c2fb7488b492b40b561bf1ffe6d8b13, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:20:b5:d8:a1:a7:3f:e0:b5:0b:c7:82:2e: 12:1f:fe:e1:63:e7:15:73:c7:76:11:9b:c3:11:48: 03:38:af:96:85:a4:20:f2:7a:fc:e6:b7:c1:19:c1: 45:5d:81:8a:27:81:04:f8:30:b5:14:f9:b7:44:11: 98:ac:27:0a:cc:b7:40:64:22:4e:69:6e:82:b3:3d: 07:78:49:53:88:e4:d1:48:9a:23:b0:c2:37:db:83: 72:b8:ff:78:f8:85:8f:4c:91:71:05:f6:d0:d0:d2: 69:96:83:24:f6:6f:e4:2d:9a:4b:44:81:d2:02:46: 79:88:b1:aa:23:eb:b3:d1:67:fd:85:aa:4a:07:27: 89:10:7b:7b:59:f5:81:2b:14:5f:6b:a6:1d:2e:b0: 5c:6a:06:a1:bb:c6:14:5f:b3:03:44:c3:a7:d3:c3: 64:9d:f5:2c:62:5d:b8:3d:71:a1:da:e5:2f:79:f6: 17:4d:0d:5b:a7:83:9e:0f:2b:8d:8b:1a:ee:e3:60: c5:8c:ce:a5:2e:ac:f1:c8:6b:a0:96:f4:cc:27:a5: 70:76:e1:2b:b0:ef:26:33:6d:36:6d:ca:e7:7e:bc: b9:f5:1a:2a:d2:8f:d1:9d:31:93:2d:b0:4c:fe:59: a0:77:8f:16:8f:40:97:a0:48:51:35:5f:13:9b:e5: db:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:35:1A:84:F0:C0:82:01:89:68:6A:0B:7B:29:89:C2:D7:FB:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e42ca712-62cd-4c87-afcf-7cd35a0bf852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.0.0/19 Signature Algorithm: sha256WithRSAEncryption ab:3d:a5:26:eb:0e:37:1d:30:2d:23:40:87:35:da:a5:31:3d: 1f:3d:52:36:0e:b8:00:2a:92:09:36:83:36:24:0a:99:84:bd: b8:b8:f1:77:b9:89:52:2f:df:34:5a:7f:1c:98:e9:a5:85:01: 1c:1b:bd:b8:79:0c:ff:c8:1b:74:6e:eb:4c:e5:08:d6:32:31: 9b:03:0e:a9:12:4a:fc:dc:1e:f6:1d:04:e0:d0:6c:21:22:d1: ca:eb:86:31:25:ec:d0:a4:5f:6b:26:a1:3a:24:7f:ee:4b:0e: fd:87:b9:05:1d:35:54:f5:e7:c9:eb:eb:e4:76:13:23:74:58: 45:cb:8e:13:57:48:60:5f:b9:63:df:cf:82:e5:48:58:7e:f2: 5c:46:4a:aa:5a:66:80:09:78:d3:5b:8e:ef:b4:38:96:ba:54: 78:45:76:32:5f:b7:ff:86:0f:32:17:ec:aa:23:1c:7f:56:f7: ba:1f:79:06:f6:a2:2c:85:e0:c5:40:00:d4:a0:f1:d3:7b:ad: 39:0e:2c:78:df:6a:da:8d:93:cb:a8:e3:82:42:e0:9d:ea:fb: dc:ec:46:a6:73:68:1c:3c:63:26:e0:81:c2:09:48:4e:41:29: d4:5d:d2:69:c5:6d:b3:3d:cd:69:f5:91:29:9b:24:31:b2:2e: 7c:c7:71:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUayDt2n+ZmKr3vdPc6FUstLIx8HQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMwMDAzMDEzWhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTFiYWYxOTNiNWVkNzBkMGYzYzNjYTQ1MjUyMmY3NDJj MmZiNzQ4OGI0OTJiNDBiNTYxYmYxZmZlNmQ4YjEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBoSC12KGnP+C1C8eCLhIf/uFj5xVzx3YRm8MRSAM4r5aF pCDyevzmt8EZwUVdgYongQT4MLUU+bdEEZisJwrMt0BkIk5pboKzPQd4SVOI5NFI miOwwjfbg3K4/3j4hY9MkXEF9tDQ0mmWgyT2b+QtmktEgdICRnmIsaoj67PRZ/2F qkoHJ4kQe3tZ9YErFF9rph0usFxqBqG7xhRfswNEw6fTw2Sd9SxiXbg9caHa5S95 9hdNDVung54PK42LGu7jYMWMzqUurPHIa6CW9MwnpXB24Suw7yYzbTZtyud+vLn1 GirSj9GdMZMtsEz+WaB3jxaPQJegSFE1XxOb5dsVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA2s1GoTwwIIBiWhqC3spicLX+50wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0MmNhNzEyLTYyY2QtNGM4Ny1hZmNmLTdjZDM1YTBiZjg1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUXWwAwDQYJKoZIhvcNAQELBQADggEBAKs9pSbrDjcdMC0jQIc12qUxPR89 UjYOuAAqkgk2gzYkCpmEvbi48Xe5iVIv3zRafxyY6aWFARwbvbh5DP/IG3Ru60zl CNYyMZsDDqkSSvzcHvYdBODQbCEi0crrhjEl7NCkX2smoTokf+5LDv2HuQUdNVT1 58nr6+R2EyN0WEXLjhNXSGBfuWPfz4LlSFh+8lxGSqpaZoAJeNNbju+0OJa6VHhF djJft/+GDzIX7KojHH9W97ofeQb2oiyF4MVAANSg8dN7rTkOLHjfatqNk8uo44JC 4J3q+9zsRqZzaBw8YybggcIJSE5BKdRd0mnFbbM9zWn1kSmbJDGyLnzHcZs= -----END CERTIFICATE-----Generated at Tue Sep 15 13:19:44 2026 by rpki-client