$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa File: eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa (raw, json) Hash identifier: aYKfPYDRTLmB/yAPD2B1LeXPaRM7XaxOPLhL9taX+AQ= Subject key identifier: EA:10:74:FE:2F:EE:FB:0F:B9:AB:25:C2:63:2B:36:3C:D9:3F:CF:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 14E9A95CB452E4CB3F90A0263DA2971EC47A54B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa Signing time: Sat 25 Jul 2026 00:30:57 +0000 ROA not before: Sat 25 Jul 2026 00:30:57 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e9:a9:5c:b4:52:e4:cb:3f:90:a0:26:3d:a2:97:1e:c4:7a:54:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:30:57 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=b62181ac35748c73d4711b209fea78bd9186960ed87562b830fa080d61156730, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5c:09:7f:04:ed:ae:93:64:b6:3e:7b:51:78: 9b:53:c4:23:79:3f:c1:7f:ef:e0:a9:bf:9f:d1:0e: 6f:3e:85:b6:73:d1:f0:f8:c2:29:f8:92:22:b1:52: 7a:50:1d:b6:34:05:90:ac:59:ca:9a:60:91:d3:2c: 49:31:62:fe:93:cf:1e:b1:3b:13:3a:2e:5a:7d:f3: 50:91:a3:7a:fe:92:48:1b:0b:ec:34:d5:dd:42:38: ae:58:9e:8c:01:bf:42:ef:56:fe:bd:ac:cb:d8:04: 00:be:74:6c:ac:de:83:a2:9a:6b:13:bd:b1:f4:49: 2f:a7:34:03:41:8b:c8:df:f0:9e:83:cf:6f:bb:98: 5b:4e:ed:91:50:c2:cd:18:05:da:00:66:04:a7:9d: f3:3c:0a:cf:8d:57:df:f4:65:15:69:94:2c:fc:b2: a9:a0:bb:2f:b7:20:e4:12:e3:e6:b0:12:c9:e8:8a: ff:08:92:f1:b7:bc:12:91:53:ff:be:0f:d0:6a:b1: b2:4a:4c:22:a8:51:8c:5b:4b:26:8d:ed:4f:b1:5e: f5:da:67:de:23:9a:ad:6f:18:29:c5:41:40:ec:da: 36:54:be:54:63:77:59:5d:a7:55:ff:95:07:1b:1d: 8d:cb:76:4b:7a:34:c7:d1:ce:37:9a:6f:ac:e1:e6: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:10:74:FE:2F:EE:FB:0F:B9:AB:25:C2:63:2B:36:3C:D9:3F:CF:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.16.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:32:9b:df:62:ca:98:f8:00:50:cc:b0:10:f9:51:16:74:b8: 08:e2:ff:8b:5c:1a:0e:fb:65:b5:11:73:26:7e:86:8a:30:84: 95:f3:a4:01:fd:6f:bb:8c:83:41:6b:2d:fc:84:74:ad:78:11: 9e:84:72:33:3a:97:34:03:5c:71:2f:5a:fc:82:2c:97:e1:7b: ac:82:db:1e:1f:4b:d2:96:8f:26:5f:05:12:ca:71:34:eb:29: 3d:50:b6:5c:75:7a:22:03:24:4a:e7:f0:e6:35:3b:c2:93:f9: c2:ef:e2:2b:1d:83:01:1f:96:90:5b:6b:6f:53:96:b2:b7:62: 84:38:61:34:7a:07:1e:a4:41:90:13:6a:28:d8:ca:b8:96:4e: 04:af:8e:0a:54:94:20:70:8a:c9:63:96:fc:8e:90:91:56:e9: 91:b9:0f:7c:f4:6f:e6:61:81:55:d0:d8:7d:38:85:b9:ed:91: 3e:09:cd:c3:02:93:c4:20:68:1c:86:08:3a:15:5f:46:24:72: 8d:58:54:03:ad:3b:d9:ca:51:1b:1c:92:dd:58:87:46:e1:49: 07:d5:73:78:4d:78:92:50:45:f8:9a:76:42:d5:b2:4f:c4:4c: e1:ae:0f:9d:63:9e:f4:83:9e:88:cc:a4:c6:65:ed:0a:78:e4: 32:c7:d8:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFOmpXLRS5Ms/kKAmPaKXHsR6VLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAzMDU3WhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjIxODFhYzM1NzQ4YzczZDQ3MTFiMjA5ZmVhNzhiZDkx ODY5NjBlZDg3NTYyYjgzMGZhMDgwZDYxMTU2NzMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkXAl/BO2uk2S2PntReJtTxCN5P8F/7+Cpv5/RDm8+hbZz 0fD4win4kiKxUnpQHbY0BZCsWcqaYJHTLEkxYv6Tzx6xOxM6Llp981CRo3r+kkgb C+w01d1COK5YnowBv0LvVv69rMvYBAC+dGys3oOimmsTvbH0SS+nNANBi8jf8J6D z2+7mFtO7ZFQws0YBdoAZgSnnfM8Cs+NV9/0ZRVplCz8sqmguy+3IOQS4+awEsno iv8IkvG3vBKRU/++D9BqsbJKTCKoUYxbSyaN7U+xXvXaZ94jmq1vGCnFQUDs2jZU vlRjd1ldp1X/lQcbHY3Ldkt6NMfRzjeab6zh5jU5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6hB0/i/u+w+5qyXCYys2PNk/z+gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhY2ExMGVkLWY3NjUtNGE3Ni05ZWE1LTMyZjM5YjE5YzM2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjlhAwDQYJKoZIhvcNAQELBQADggEBAAwym99iypj4AFDMsBD5URZ0uAji /4tcGg77ZbURcyZ+hoowhJXzpAH9b7uMg0FrLfyEdK14EZ6EcjM6lzQDXHEvWvyC LJfhe6yC2x4fS9KWjyZfBRLKcTTrKT1Qtlx1eiIDJErn8OY1O8KT+cLv4isdgwEf lpBba29TlrK3YoQ4YTR6Bx6kQZATaijYyriWTgSvjgpUlCBwisljlvyOkJFW6ZG5 D3z0b+ZhgVXQ2H04hbntkT4JzcMCk8QgaByGCDoVX0Ykco1YVAOtO9nKURsckt1Y h0bhSQfVc3hNeJJQRfiadkLVsk/ETOGuD51jnvSDnojMpMZl7Qp45DLH2OQ= -----END CERTIFICATE-----Generated at Tue Sep 15 13:24:44 2026 by rpki-client