$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa File: ee072b22-d511-4e36-bf63-9dea3fed9955.roa (raw, json) Hash identifier: X9L00cGx8RWNC4bUJ+WOfpOxc3bmsARRgOOdgV8IPwI= Subject key identifier: DC:3A:C4:BB:FE:A2:BC:C3:2A:C7:DA:04:7E:91:4C:BA:A1:18:D6:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CDCB67D3390F2AF0C36BBA2576B4D7A4B0432A0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa Signing time: Fri 07 Aug 2026 00:00:14 +0000 ROA not before: Fri 07 Aug 2026 00:00:14 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.40.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:dc:b6:7d:33:90:f2:af:0c:36:bb:a2:57:6b:4d:7a:4b:04:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:00:14 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=a063e9ca52bb059e8c74d5f0a91e79f854bd9a17696a2bd0baed242c494c2f30, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:42:d2:cc:8c:47:2c:0f:e2:cd:2d:a3:b2:e8: 49:f0:73:10:db:f4:ba:2d:17:ca:34:68:5d:76:42: 62:79:cc:e4:73:5c:f2:98:0f:7a:fb:27:86:98:fc: d7:cd:46:6d:01:a4:09:68:4c:0d:28:5c:13:76:09: 13:85:83:7f:1d:b0:76:1f:8c:7e:ae:16:4a:ca:13: 75:6b:b7:46:10:0f:44:50:2e:43:e9:c8:fd:0d:ec: 6a:54:80:f4:e8:6d:17:07:de:c3:b9:af:84:fc:bf: 58:c9:04:df:24:45:b2:a2:81:32:9b:5f:c8:87:cb: 48:70:7e:85:b5:87:63:81:67:cd:61:6e:ea:85:c5: a0:fd:8f:c6:93:2d:51:04:5d:2e:1b:19:aa:07:4f: 10:36:63:cf:4c:07:e6:27:0b:57:ec:31:34:e6:c3: 4e:d9:76:22:82:d5:1c:30:3f:73:a4:e4:ea:2f:9a: 68:f5:cc:ca:ec:a3:46:c1:ad:2d:46:71:72:2c:29: 61:b7:0b:06:fa:d9:86:c2:d4:ed:03:d9:e9:e5:b8: 48:fe:82:d6:b9:37:db:7a:72:63:a4:a0:1a:37:be: 63:57:ac:c5:9c:1b:56:e2:0b:80:03:2c:10:6c:8e: 39:31:de:bc:3e:2e:46:e6:e8:65:dd:52:f9:3b:68: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3A:C4:BB:FE:A2:BC:C3:2A:C7:DA:04:7E:91:4C:BA:A1:18:D6:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.40.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2d:7a:96:70:51:a8:06:35:9e:71:a9:ac:c5:81:1e:79:8b:9c: 3b:cd:6d:24:29:98:0c:18:53:ae:cd:37:c0:8c:c7:4a:cc:54: d8:7f:52:69:ca:46:13:fc:f0:61:76:5f:04:e3:c2:60:74:8e: 08:ca:19:40:56:bc:4b:04:5e:d7:53:02:8c:2d:82:d6:77:63: 4c:6d:63:d7:12:94:81:56:d5:69:08:8d:df:87:d4:40:7d:9b: ea:bb:c2:9b:dd:5b:6d:f8:ac:86:ea:b9:13:86:e5:f7:80:00: f5:07:21:a1:a3:1d:ef:af:63:f6:be:4c:35:66:c0:df:f2:40: 4e:71:00:17:95:d6:17:ba:2b:56:23:c4:4f:34:5d:48:d3:b8: c4:a7:64:35:21:27:6c:83:45:a5:20:5b:99:b4:e8:22:eb:98: 27:1d:f8:30:22:64:48:6e:4a:8b:2c:19:68:73:14:70:45:94: d0:a9:d9:53:16:1a:98:27:3e:50:fe:d3:7a:38:c6:e7:f3:04: 2e:52:c0:9f:50:b9:2a:58:78:80:20:78:6d:bb:4d:73:df:a8: d9:59:5e:52:8f:91:f7:2c:26:a9:6f:63:69:d6:ed:ba:c5:69: a0:91:ef:20:64:69:b8:65:cd:70:01:3b:5c:35:d4:ff:d2:04: 73:90:77:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDNy2fTOQ8q8MNruiV2tNeksEMqAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAwMDE0WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDYzZTljYTUyYmIwNTllOGM3NGQ1ZjBhOTFlNzlmODU0 YmQ5YTE3Njk2YTJiZDBiYWVkMjQyYzQ5NGMyZjMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMQtLMjEcsD+LNLaOy6EnwcxDb9LotF8o0aF12QmJ5zORz XPKYD3r7J4aY/NfNRm0BpAloTA0oXBN2CROFg38dsHYfjH6uFkrKE3Vrt0YQD0RQ LkPpyP0N7GpUgPTobRcH3sO5r4T8v1jJBN8kRbKigTKbX8iHy0hwfoW1h2OBZ81h buqFxaD9j8aTLVEEXS4bGaoHTxA2Y89MB+YnC1fsMTTmw07ZdiKC1RwwP3Ok5Oov mmj1zMrso0bBrS1GcXIsKWG3Cwb62YbC1O0D2enluEj+gta5N9t6cmOkoBo3vmNX rMWcG1biC4ADLBBsjjkx3rw+Lkbm6GXdUvk7aNtpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3DrEu/6ivMMqx9oEfpFMuqEY1nAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlMDcyYjIyLWQ1MTEtNGUzNi1iZjYzLTlkZWEzZmVkOTk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4KDANBgkqhkiG9w0BAQsFAAOCAQEALXqWcFGoBjWecamsxYEeeYucO81t JCmYDBhTrs03wIzHSsxU2H9SacpGE/zwYXZfBOPCYHSOCMoZQFa8SwRe11MCjC2C 1ndjTG1j1xKUgVbVaQiN34fUQH2b6rvCm91bbfishuq5E4bl94AA9QchoaMd769j 9r5MNWbA3/JATnEAF5XWF7orViPETzRdSNO4xKdkNSEnbINFpSBbmbToIuuYJx34 MCJkSG5KiywZaHMUcEWU0KnZUxYamCc+UP7TejjG5/MELlLAn1C5Klh4gCB4bbtN c9+o2VleUo+R9ywmqW9jadbtusVpoJHvIGRpuGXNcAE7XDXU/9IEc5B30g== -----END CERTIFICATE-----Generated at Tue Sep 15 12:44:36 2026 by rpki-client