$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa File: e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa (raw, json) Hash identifier: EFcyJ79EhpIaI3iD9JO1OJZkbQieObTXHLJjyPOy3CY= Subject key identifier: 98:EA:C9:1E:EA:C9:BB:F8:3F:92:90:17:DE:E1:ED:98:01:C5:C8:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A0E3A32756F4B2ED56708B32C0C883CB63FC37A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa Signing time: Tue 04 Aug 2026 01:00:47 +0000 ROA not before: Tue 04 Aug 2026 01:00:47 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0e:3a:32:75:6f:4b:2e:d5:67:08:b3:2c:0c:88:3c:b6:3f:c3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 01:00:47 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=eed358b3d9667a02c00f13759007bccaef4ce73da290c6023984bddac664bcd0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:cb:1c:fc:63:67:41:a3:db:b8:da:86:d7: d5:9e:df:a2:e8:9a:b1:a5:32:08:eb:14:3f:13:2d: 53:21:6c:f4:cc:3c:0a:db:e9:f3:70:ce:c7:26:42: 73:e8:2e:67:3c:a5:ff:fe:7a:5c:d6:cd:ed:c8:72: b5:11:64:f4:c3:5a:d9:61:16:d7:cc:ff:aa:4a:3b: 97:7b:28:4a:e2:80:fd:89:a1:e0:cb:c0:fa:58:28: ad:60:7d:0b:bd:f3:9f:da:96:2a:29:8b:5b:da:af: e9:41:32:39:0d:30:c1:27:00:bc:a6:fe:7d:bc:3a: 13:51:e4:57:81:84:c2:06:0f:b7:64:d8:36:69:d0: 71:73:09:1a:9b:4c:3b:29:c2:62:76:1d:03:f5:a9: 6d:a6:18:65:b2:01:59:43:8b:13:20:ef:05:f1:77: 9a:5e:fa:05:3b:2c:83:2c:8f:e7:28:58:fa:a2:89: c9:fc:10:0b:a6:e3:cf:f1:a4:20:08:ec:18:ab:57: f4:37:fb:ee:ec:4c:bf:f4:26:b7:5a:da:58:0b:01: ca:9c:2e:c3:cc:46:6d:41:c3:56:a2:f4:73:37:62: 7f:b4:74:ec:5f:04:a8:05:7b:1b:d1:ca:c3:8f:da: 68:6f:00:c9:13:14:16:fa:c9:12:be:81:ca:81:c6: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EA:C9:1E:EA:C9:BB:F8:3F:92:90:17:DE:E1:ED:98:01:C5:C8:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.192.0/20 Signature Algorithm: sha256WithRSAEncryption 21:01:fa:d2:57:15:7c:7f:f7:bb:ae:b2:d0:61:4d:33:65:5e: 16:d4:84:e9:19:a0:7b:44:55:61:0d:0e:17:e5:63:03:90:74: 02:79:e7:ab:0e:30:20:2f:4f:b3:10:89:bf:76:a4:ae:d1:fd: e4:f2:ed:19:64:48:d4:85:a1:73:a7:59:d5:24:8a:7d:72:56: ec:3f:fd:4a:82:2e:48:d3:57:a4:2f:af:e3:ee:27:49:7a:0a: 22:8c:ac:02:d9:db:e3:8b:61:b1:a2:4b:0d:0d:ca:60:0b:fa: dd:63:5a:6e:e4:cb:0e:80:39:aa:a8:fa:06:47:e8:90:80:78: 06:7c:82:b5:67:9e:b0:75:fe:c9:7a:0a:fa:cd:d3:78:c0:06: 93:a0:11:fc:4d:a8:a5:f5:4f:79:e3:e2:e4:e7:05:2f:26:44: 32:0d:b9:b8:b0:db:32:f7:75:fd:4e:68:95:1e:b0:b2:ec:e8: 25:e3:f5:c0:08:c5:02:ae:7a:53:9d:cc:01:e6:62:4a:2d:28: 7c:af:38:48:fc:f3:4f:42:21:a1:94:fc:5f:48:e1:b1:10:26: 73:26:ed:6d:4a:75:5a:b6:17:29:81:0f:42:c4:eb:10:22:87: e4:49:6c:66:59:61:2f:a0:40:35:5a:98:30:2d:7d:99:96:84: 34:a0:1a:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKg46MnVvSy7VZwizLAyIPLY/w3owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEwMDQ3WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWQzNThiM2Q5NjY3YTAyYzAwZjEzNzU5MDA3YmNjYWVm NGNlNzNkYTI5MGM2MDIzOTg0YmRkYWM2NjRiY2QwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf68sc/GNnQaPbuNqG19We36LomrGlMgjrFD8TLVMhbPTM PArb6fNwzscmQnPoLmc8pf/+elzWze3IcrURZPTDWtlhFtfM/6pKO5d7KErigP2J oeDLwPpYKK1gfQu985/aliopi1var+lBMjkNMMEnALym/n28OhNR5FeBhMIGD7dk 2DZp0HFzCRqbTDspwmJ2HQP1qW2mGGWyAVlDixMg7wXxd5pe+gU7LIMsj+coWPqi icn8EAum48/xpCAI7BirV/Q3++7sTL/0Jrda2lgLAcqcLsPMRm1Bw1ai9HM3Yn+0 dOxfBKgFexvRysOP2mhvAMkTFBb6yRK+gcqBxgM5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmOrJHurJu/g/kpAX3uHtmAHFyHIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5ZGJmZTdhLWVmZGEtNGZmYi1hMGJkLWY2OWQ5MTNmMjFkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATM7MAwDQYJKoZIhvcNAQELBQADggEBACEB+tJXFXx/97uustBhTTNlXhbU hOkZoHtEVWENDhflYwOQdAJ556sOMCAvT7MQib92pK7R/eTy7RlkSNSFoXOnWdUk in1yVuw//UqCLkjTV6Qvr+PuJ0l6CiKMrALZ2+OLYbGiSw0NymAL+t1jWm7kyw6A Oaqo+gZH6JCAeAZ8grVnnrB1/sl6CvrN03jABpOgEfxNqKX1T3nj4uTnBS8mRDIN ubiw2zL3df1OaJUesLLs6CXj9cAIxQKuelOdzAHmYkotKHyvOEj8809CIaGU/F9I 4bEQJnMm7W1KdVq2FymBD0LE6xAih+RJbGZZYS+gQDVamDAtfZmWhDSgGho= -----END CERTIFICATE-----Generated at Tue Sep 15 13:20:56 2026 by rpki-client