$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa File: eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa (raw, json) Hash identifier: 3kHfEkqRq9jyMS3tTljJCyFLL4QATa7mKFvHUykWLU4= Subject key identifier: A8:B7:25:CB:D4:2D:76:D4:5F:E6:52:A3:42:11:E5:88:56:AB:55:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2770ACED6C0DA2B2B2B7D4DA6020720C014DF74A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa Signing time: Mon 03 Aug 2026 02:20:41 +0000 ROA not before: Mon 03 Aug 2026 02:20:41 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 185.169.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:70:ac:ed:6c:0d:a2:b2:b2:b7:d4:da:60:20:72:0c:01:4d:f7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:20:41 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=410b4f00be8e17c0baa27a1a57c3c03477d67cf38e6cd546dd329dfcaada3ba0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:94:fe:d4:c9:d2:b7:fa:46:8b:05:8b:24: 4a:08:33:10:d9:6b:98:84:a5:dd:1a:cd:da:34:7c: 19:5a:8d:db:20:a9:50:e1:0c:b7:ad:06:b8:94:f2: 58:87:49:b6:fe:19:95:2f:a0:3c:04:5e:5b:07:e9: 05:21:ab:f3:9e:e3:6b:11:16:a4:21:62:6c:88:43: e9:c0:0a:9a:04:e0:69:24:9b:ce:bb:64:22:a5:4f: 56:ed:aa:4e:12:fd:b4:15:bd:aa:43:f6:d0:df:e4: 36:d1:00:ae:ec:d8:15:97:0a:a9:a3:40:6f:e9:cd: 18:ad:8a:f4:1a:06:4c:00:fa:04:1d:16:0f:24:a0: eb:d2:45:4d:f4:10:b0:71:68:7c:92:9e:10:c5:7a: 94:79:03:d8:0e:9b:ad:57:46:29:14:71:2f:a1:9c: 31:e6:7c:8c:1f:66:5a:86:02:88:d0:93:14:b7:8b: d7:0f:34:ee:ca:d4:3c:eb:a1:d7:e1:0e:1a:ea:6f: f9:fe:7e:e5:eb:4a:a3:f5:7d:67:77:1a:bb:3e:26: af:ae:0c:b1:71:8e:bb:f5:0c:7e:9d:18:08:2e:cf: 41:f1:4d:6a:34:71:19:14:4b:62:69:4a:fc:de:d1: 1b:4e:f2:b0:9a:99:fb:56:92:d3:15:46:c3:9f:5f: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B7:25:CB:D4:2D:76:D4:5F:E6:52:A3:42:11:E5:88:56:AB:55:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.196.0/22 Signature Algorithm: sha256WithRSAEncryption 92:a1:ac:2a:8c:8e:bd:30:3d:42:9f:64:7e:33:06:4a:33:ae: 5b:19:e7:cb:6c:71:22:e6:4a:0e:c3:3b:99:a7:c7:f8:08:55: 31:04:c2:8b:34:ad:0c:e0:2b:74:79:08:ef:d9:fb:7e:a4:8a: 5c:8d:66:19:9b:63:7b:87:f1:fc:ec:14:89:0b:9a:a4:8a:b5: dc:61:90:87:2d:12:32:7a:ee:0d:5c:e4:f2:b1:d9:cf:31:f4: 95:7b:e4:e4:e7:da:77:c5:78:dc:a6:5f:97:01:12:72:b2:5f: 88:3d:92:2d:49:3c:b1:cd:a1:7f:df:da:d1:ee:da:d1:8b:ce: 84:c5:d2:9a:63:ab:aa:5f:5c:91:b6:de:2d:62:eb:68:c1:f6: 90:be:a1:20:e4:44:33:64:8c:f9:62:13:66:b4:c9:d5:ff:b0: c4:d6:d0:7d:ec:e4:9a:82:cf:2a:a1:08:9e:55:49:a1:af:87: eb:10:82:c6:22:c3:25:81:01:51:03:26:14:ca:a2:73:c8:09: 34:63:2a:64:fd:8f:37:a6:6d:d8:bb:57:2e:01:1e:a6:8b:60: 41:9a:55:1f:a3:3b:66:9e:88:23:ab:87:bc:6b:55:a2:44:c8: 90:0b:18:91:cf:9b:85:7a:57:61:bc:a4:79:61:e2:7d:21:c8: e4:a5:52:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ3Cs7WwNorKyt9TaYCByDAFN90owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIyMDQxWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTBiNGYwMGJlOGUxN2MwYmFhMjdhMWE1N2MzYzAzNDc3 ZDY3Y2YzOGU2Y2Q1NDZkZDMyOWRmY2FhZGEzYmEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCogZT+1MnSt/pGiwWLJEoIMxDZa5iEpd0azdo0fBlajdsg qVDhDLetBriU8liHSbb+GZUvoDwEXlsH6QUhq/Oe42sRFqQhYmyIQ+nACpoE4Gkk m867ZCKlT1btqk4S/bQVvapD9tDf5DbRAK7s2BWXCqmjQG/pzRitivQaBkwA+gQd Fg8koOvSRU30ELBxaHySnhDFepR5A9gOm61XRikUcS+hnDHmfIwfZlqGAojQkxS3 i9cPNO7K1DzrodfhDhrqb/n+fuXrSqP1fWd3Grs+Jq+uDLFxjrv1DH6dGAguz0Hx TWo0cRkUS2JpSvze0RtO8rCamftWktMVRsOfX13FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqLcly9QtdtRf5lKjQhHliFarVTkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhYTJkMmEzLWMxMTEtNGMyMi05YTU4LTdmMDJkZGVjZjY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK5qcQwDQYJKoZIhvcNAQELBQADggEBAJKhrCqMjr0wPUKfZH4zBkozrlsZ 58tscSLmSg7DO5mnx/gIVTEEwos0rQzgK3R5CO/Z+36kilyNZhmbY3uH8fzsFIkL mqSKtdxhkIctEjJ67g1c5PKx2c8x9JV75OTn2nfFeNymX5cBEnKyX4g9ki1JPLHN oX/f2tHu2tGLzoTF0ppjq6pfXJG23i1i62jB9pC+oSDkRDNkjPliE2a0ydX/sMTW 0H3s5JqCzyqhCJ5VSaGvh+sQgsYiwyWBAVEDJhTKonPICTRjKmT9jzembdi7Vy4B HqaLYEGaVR+jO2aeiCOrh7xrVaJEyJALGJHPm4V6V2G8pHlh4n0hyOSlUqg= -----END CERTIFICATE-----Generated at Tue Sep 15 11:01:51 2026 by rpki-client