$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef251cf4-ade4-418e-b4fb-7951801e00bc.roa File: ef251cf4-ade4-418e-b4fb-7951801e00bc.roa (raw, json) Hash identifier: voDX9s34a/zXiLRyaRCTjlYHiUqba0Bc3F0FaUziMfY= Subject key identifier: 88:C3:A5:C2:BC:CD:21:EF:46:44:EB:3F:89:FB:F0:4B:F0:4A:DB:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BE5277921DD5CAD91B8FCFD654798D95F4B13AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef251cf4-ade4-418e-b4fb-7951801e00bc.roa Signing time: Mon 03 Aug 2026 00:50:37 +0000 ROA not before: Mon 03 Aug 2026 00:50:37 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e5:27:79:21:dd:5c:ad:91:b8:fc:fd:65:47:98:d9:5f:4b:13:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:50:37 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=51c679777f827b7d688630b136740fea261a061e9ece728a2f77ffaedc2981dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e4:1d:56:bd:cc:5d:97:de:0c:00:e5:49:cc: ca:0e:c6:13:58:9d:c5:73:a5:dd:ec:78:e6:b8:c1: 2e:f1:57:5e:98:cb:9b:d6:bb:5a:36:41:38:69:01: 5e:11:7c:ad:81:79:bf:4a:20:b2:fb:05:63:fe:23: 5e:c4:7c:8a:c8:7d:c6:4c:e5:79:a9:75:f6:3a:fc: c6:7b:30:d8:b4:77:41:d7:11:70:5d:db:c0:ea:1e: 2d:71:76:cc:e0:0b:a8:14:a2:54:0f:bd:09:c0:2d: d5:19:09:0e:2a:e9:59:85:70:fd:4f:6f:29:0f:b5: 32:c6:be:04:bf:46:08:8b:32:c2:7e:e6:30:1a:f5: 87:3e:26:66:5f:69:b5:44:cf:53:db:d3:ab:c7:f3: 92:32:9c:f9:e6:53:c6:ec:24:48:b9:ce:e1:ef:2e: 1f:3e:87:70:07:f6:41:a7:6a:a8:a1:e3:80:a3:2f: 3c:40:d1:66:a8:a6:4d:df:d6:3a:ac:73:4d:dc:b2: 50:69:61:85:d8:b9:85:7e:db:42:45:4b:df:fc:a9: 56:f5:b8:0d:6a:1f:37:51:82:45:95:71:bc:44:03: 13:79:53:17:7e:42:7d:7d:87:2a:e4:c9:45:eb:c1: 99:49:81:58:0b:45:80:e5:55:08:0f:94:da:34:d3: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C3:A5:C2:BC:CD:21:EF:46:44:EB:3F:89:FB:F0:4B:F0:4A:DB:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef251cf4-ade4-418e-b4fb-7951801e00bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.218.0/23 Signature Algorithm: sha256WithRSAEncryption c2:83:8b:c8:a5:d8:92:83:de:a1:7f:5c:b4:e3:e6:af:31:f0: 33:7f:cc:f3:6e:bf:06:e1:42:77:34:6c:f3:01:fc:cc:19:2c: 7b:14:f6:e4:52:f7:f9:32:30:aa:e3:86:3c:20:f2:fc:1a:31: b3:b6:8a:78:5f:b3:70:20:0d:85:e1:98:41:b8:6c:88:23:74: dc:6d:61:51:57:c2:38:b4:d1:28:62:06:38:49:96:ec:33:49: 45:98:96:07:61:67:a5:71:49:4d:63:b0:20:cc:7a:75:d6:f5: 7b:f8:1e:c9:b9:43:9c:6f:97:26:28:90:fa:1a:d8:7d:f5:69: 9f:bc:b9:6e:5b:f9:7b:b9:fb:ea:66:36:3c:1a:16:c8:58:c6: 2f:36:61:f2:c0:83:5b:73:3a:c8:fa:e2:19:27:7d:1f:66:cf: a9:69:2c:48:e6:92:8c:2d:e8:37:52:41:5c:93:64:11:8e:f3: 4e:8b:45:ff:84:44:26:30:41:0c:54:d6:0d:e5:45:21:83:82: 37:d7:9c:9e:76:63:20:2c:34:82:a3:c5:96:b9:d3:c3:77:bc: 5c:86:fa:5d:69:bb:4d:d7:c8:c5:a9:40:1c:e8:b4:00:9f:8c: d4:14:92:5b:84:db:5a:f3:e2:4b:04:17:30:0f:ec:24:18:96: 16:1c:a4:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK+UneSHdXK2RuPz9ZUeY2V9LE64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA1MDM3WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWM2Nzk3NzdmODI3YjdkNjg4NjMwYjEzNjc0MGZlYTI2 MWEwNjFlOWVjZTcyOGEyZjc3ZmZhZWRjMjk4MWRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDo5B1Wvcxdl94MAOVJzMoOxhNYncVzpd3seOa4wS7xV16Y y5vWu1o2QThpAV4RfK2Beb9KILL7BWP+I17EfIrIfcZM5XmpdfY6/MZ7MNi0d0HX EXBd28DqHi1xdszgC6gUolQPvQnALdUZCQ4q6VmFcP1PbykPtTLGvgS/RgiLMsJ+ 5jAa9Yc+JmZfabVEz1Pb06vH85IynPnmU8bsJEi5zuHvLh8+h3AH9kGnaqih44Cj LzxA0Waopk3f1jqsc03cslBpYYXYuYV+20JFS9/8qVb1uA1qHzdRgkWVcbxEAxN5 Uxd+Qn19hyrkyUXrwZlJgVgLRYDlVQgPlNo00/3rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiMOlwrzNIe9GROs/ifvwS/BK21kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmMjUxY2Y0LWFkZTQtNDE4ZS1iNGZiLTc5NTE4MDFlMDBiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM7NowDQYJKoZIhvcNAQELBQADggEBAMKDi8il2JKD3qF/XLTj5q8x8DN/ zPNuvwbhQnc0bPMB/MwZLHsU9uRS9/kyMKrjhjwg8vwaMbO2inhfs3AgDYXhmEG4 bIgjdNxtYVFXwji00ShiBjhJluwzSUWYlgdhZ6VxSU1jsCDMenXW9Xv4Hsm5Q5xv lyYokPoa2H31aZ+8uW5b+Xu5++pmNjwaFshYxi82YfLAg1tzOsj64hknfR9mz6lp LEjmkowt6DdSQVyTZBGO806LRf+ERCYwQQxU1g3lRSGDgjfXnJ52YyAsNIKjxZa5 08N3vFyG+l1pu03XyMWpQBzotACfjNQUkluE21rz4ksEFzAP7CQYlhYcpO0= -----END CERTIFICATE-----Generated at Tue Sep 15 11:37:57 2026 by rpki-client