$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea769b54-5918-490c-9520-6a7c6f3fa3b1.roa File: ea769b54-5918-490c-9520-6a7c6f3fa3b1.roa (raw, json) Hash identifier: R8slnooYb1eIxZWawiR+6yOX+lmpiuYBh46t2Mu6f0g= Subject key identifier: 95:E5:A6:45:55:F2:80:84:D1:E1:5F:12:19:33:C3:AB:37:89:9D:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20923E5EE99EEACE4A3E4E3C06F608DD19A08A93 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea769b54-5918-490c-9520-6a7c6f3fa3b1.roa Signing time: Fri 04 Sep 2026 00:00:52 +0000 ROA not before: Fri 04 Sep 2026 00:00:52 +0000 ROA not after: Thu 03 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 78.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:92:3e:5e:e9:9e:ea:ce:4a:3e:4e:3c:06:f6:08:dd:19:a0:8a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 4 00:00:52 2026 GMT Not After : Dec 3 23:59:59 2026 GMT Subject: serialNumber=67ba196d64c55f5fec82305f42207c4b4efa30115a3c89d6f60747a03034de2f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:36:86:05:43:e2:8f:96:70:14:5c:59:1d: 44:a8:e8:b4:f0:52:26:54:41:26:c3:01:38:02:9b: 55:df:cb:ea:f4:fd:30:71:94:2d:10:34:6a:55:9f: d0:0a:c9:e6:6b:74:bc:cd:73:87:2b:8b:57:bc:e0: 00:1a:db:0a:02:b6:e8:4d:23:10:bf:08:10:5b:0c: b1:51:f7:16:fd:0a:91:4e:45:34:ef:d7:62:a3:af: bc:4b:15:91:06:6d:a3:fb:8a:a4:ed:7e:25:51:6c: 0f:8d:87:8b:35:81:72:a2:11:48:5d:24:e1:9e:24: a0:a6:d8:44:33:2e:9c:0e:6d:45:c2:7b:8e:05:6d: 76:dc:41:a7:c3:f4:9c:62:e6:12:08:2b:76:0d:8d: c0:b5:e3:30:fe:be:fe:db:15:5f:0c:70:ac:f7:4a: 92:d9:e1:d8:60:c1:82:7b:1a:d6:64:27:61:4d:59: 74:18:53:ef:d3:6e:79:b3:27:96:55:b1:c1:97:d9: 87:13:62:e7:a3:de:f1:02:3d:7e:1b:fb:01:2b:f6: b8:c5:ac:f8:92:d4:cd:6e:e4:9e:b7:2d:82:2d:3d: 0e:e2:1a:64:82:fe:68:bc:03:1a:92:ff:1f:4f:94: 9b:83:17:e9:96:1a:a5:3a:45:77:a5:6f:77:df:d8: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E5:A6:45:55:F2:80:84:D1:E1:5F:12:19:33:C3:AB:37:89:9D:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea769b54-5918-490c-9520-6a7c6f3fa3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:a4:cb:fb:1d:57:4d:9e:6d:46:00:fb:4a:4c:a2:e2:2f:29: e5:09:3b:19:05:db:31:ae:79:ec:95:5c:79:ac:02:34:09:29: 36:fa:c3:c0:3b:70:78:f8:9d:21:de:ee:63:da:ef:fb:f0:63: 8e:60:22:b2:7a:1e:96:39:fb:a5:5e:b4:78:03:40:21:35:73: d0:63:fd:86:35:99:17:70:61:91:5c:da:d5:fa:dd:b1:89:34: d3:a7:3a:78:ac:3d:11:f5:48:77:a3:da:d5:d1:5a:f4:8f:df: 8a:fe:22:de:87:4e:d1:80:9b:ea:52:22:f4:23:be:05:b2:95: c9:f6:25:63:48:24:4d:58:df:8e:cd:9b:9a:57:12:90:b5:ab: a4:19:72:8a:7b:eb:c5:b5:c1:90:2a:5e:c3:90:76:d2:7d:e1: 6f:1d:8b:e1:a6:d0:28:ee:c1:36:2f:da:71:b1:fd:f4:ca:9f: 66:81:23:86:8a:b4:0d:7f:86:df:11:4f:dc:9d:64:20:94:4b: c7:2e:69:23:6f:89:9f:0c:2e:9c:45:1d:e4:13:44:f3:b4:ed: 10:e4:d3:9e:07:d7:0d:e0:b4:85:ff:30:bd:94:65:6d:46:9b: ae:28:11:8e:fb:7f:fc:1e:5b:b1:cd:64:65:98:55:ff:0c:05: b4:46:47:cb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIJI+Xume6s5KPk48BvYI3RmgipMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA0MDAwMDUyWhcNMjYxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2JhMTk2ZDY0YzU1ZjVmZWM4MjMwNWY0MjIwN2M0YjRl ZmEzMDExNWEzYzg5ZDZmNjA3NDdhMDMwMzRkZTJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQEDaGBUPij5ZwFFxZHUSo6LTwUiZUQSbDATgCm1Xfy+r0 /TBxlC0QNGpVn9AKyeZrdLzNc4cri1e84AAa2woCtuhNIxC/CBBbDLFR9xb9CpFO RTTv12Kjr7xLFZEGbaP7iqTtfiVRbA+Nh4s1gXKiEUhdJOGeJKCm2EQzLpwObUXC e44FbXbcQafD9Jxi5hIIK3YNjcC14zD+vv7bFV8McKz3SpLZ4dhgwYJ7GtZkJ2FN WXQYU+/TbnmzJ5ZVscGX2YcTYuej3vECPX4b+wEr9rjFrPiS1M1u5J63LYItPQ7i GmSC/mi8AxqS/x9PlJuDF+mWGqU6RXelb3ff2DfTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUleWmRVXygITR4V8SGTPDqzeJnZQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhNzY5YjU0LTU5MTgtNDkwYy05NTIwLTZhN2M2ZjNmYTNiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBO5TANBgkqhkiG9w0BAQsFAAOCAQEAQqTL+x1XTZ5tRgD7Skyi4i8p5Qk7 GQXbMa557JVceawCNAkpNvrDwDtwePidId7uY9rv+/BjjmAisnoeljn7pV60eANA ITVz0GP9hjWZF3BhkVza1frdsYk006c6eKw9EfVId6Pa1dFa9I/fiv4i3odO0YCb 6lIi9CO+BbKVyfYlY0gkTVjfjs2bmlcSkLWrpBlyinvrxbXBkCpew5B20n3hbx2L 4abQKO7BNi/acbH99MqfZoEjhoq0DX+G3xFP3J1kIJRLxy5pI2+JnwwunEUd5BNE 87TtEOTTngfXDeC0hf8wvZRlbUabrigRjvt//B5bsc1kZZhV/wwFtEZHyw== -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:46 2026 by rpki-client