$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa File: ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa (raw, json) Hash identifier: QEUePRAftRv7E6zxKBmUX62cU5AjV9pt+zYLP/O/2b4= Subject key identifier: EB:75:D8:6A:E7:69:8E:F2:96:AC:B8:09:CD:04:43:EC:69:C1:59:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66ACACBC7AF5D5C12C9642B416838732ABF95406 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa Signing time: Fri 31 Jul 2026 00:50:05 +0000 ROA not before: Fri 31 Jul 2026 00:50:05 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ac:ac:bc:7a:f5:d5:c1:2c:96:42:b4:16:83:87:32:ab:f9:54:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 00:50:05 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=d90b435454207f6946b49f7b1fac1ee66b34eef5770fa097030d3904a9e37acc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:47:54:d0:cc:e4:11:61:8e:77:c1:2d:16: 4c:bf:16:86:ab:7e:99:c9:7a:da:d3:a0:df:94:8a: b4:9d:d9:b2:13:ac:d1:37:8b:fb:fc:b8:d5:77:6b: 67:e7:2c:3a:00:95:a1:6d:64:bf:45:c6:1c:4a:eb: a9:ff:1a:c4:a9:cd:72:8a:cc:2f:5f:5b:c2:d0:13: 42:b9:c4:06:a0:81:6b:c9:06:12:0a:d2:7b:91:ba: 2b:69:1d:a1:3d:c6:f6:12:9b:28:d3:89:ea:dd:c3: 5d:f3:66:34:f0:b2:7f:0f:14:0d:d9:08:86:d0:c4: e7:0e:39:71:79:2c:a2:0d:be:bb:78:df:62:0f:45: 5b:8f:1a:6e:d5:76:2b:e2:1d:29:98:50:67:93:0b: 17:c8:55:db:1f:d1:ff:fe:76:ed:5b:b7:f1:18:c1: 31:c7:34:fe:f6:93:1d:12:90:e3:5a:ec:5c:0e:74: 20:f2:f5:a2:19:6e:17:c7:8d:e0:86:89:54:3e:06: 88:86:82:54:62:91:b6:1d:dd:21:be:61:37:4a:e5: b7:89:f0:87:6f:99:e4:65:39:49:25:8f:65:c3:ea: 67:fb:7b:ec:65:f1:f5:6f:7b:f9:5f:30:81:18:41: 2c:9d:89:44:df:ca:89:48:53:83:e3:92:46:00:53: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:75:D8:6A:E7:69:8E:F2:96:AC:B8:09:CD:04:43:EC:69:C1:59:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.33.0/24 Signature Algorithm: sha256WithRSAEncryption a5:c2:cf:23:d5:72:4b:7a:94:16:97:27:63:03:e9:8e:47:43: 44:8a:4a:dc:69:78:22:eb:f0:34:b4:51:18:f5:25:08:93:f2: c0:4c:ad:d7:d2:5a:90:42:26:9b:72:ed:ad:e3:f3:3b:33:19: 47:9c:fe:d6:41:a4:b3:2b:57:cd:90:b3:2f:b0:75:91:c3:82: 1f:c7:d7:2d:8f:05:4c:3d:e7:ab:af:39:9e:60:31:44:02:10: 93:e4:35:4d:f5:7e:d0:e3:e9:ea:b0:c4:f8:21:26:1d:20:06: cd:12:5c:b3:78:61:ff:40:f3:4b:1b:9f:44:39:f5:d4:6f:c8: 1f:34:dd:58:0d:e4:79:b5:11:03:4f:a2:d1:67:82:fb:a8:23: 78:77:1d:2c:48:4b:18:ac:08:98:6c:d2:51:42:12:8b:85:0b: d2:d9:6e:3a:b4:a9:79:f9:ee:c7:07:29:74:a6:48:3a:a1:3b: 38:a1:75:d9:bc:99:58:d9:ab:7c:ca:16:56:e7:65:22:81:3c: 42:cf:5e:1c:8d:d3:01:34:97:a5:01:2a:db:89:6a:82:a9:e8: 6a:3f:4f:c7:df:01:19:93:fe:86:be:45:48:cb:a3:48:e9:24: ec:41:0f:52:6b:82:9d:5c:9f:5a:c3:69:a0:d7:7a:cf:70:ac: 3b:35:cb:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZqysvHr11cEslkK0FoOHMqv5VAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDA1MDA1WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTBiNDM1NDU0MjA3ZjY5NDZiNDlmN2IxZmFjMWVlNjZi MzRlZWY1NzcwZmEwOTcwMzBkMzkwNGE5ZTM3YWNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDArUdU0MzkEWGOd8EtFky/FoarfpnJetrToN+UirSd2bIT rNE3i/v8uNV3a2fnLDoAlaFtZL9FxhxK66n/GsSpzXKKzC9fW8LQE0K5xAaggWvJ BhIK0nuRuitpHaE9xvYSmyjTierdw13zZjTwsn8PFA3ZCIbQxOcOOXF5LKINvrt4 32IPRVuPGm7VdiviHSmYUGeTCxfIVdsf0f/+du1bt/EYwTHHNP72kx0SkONa7FwO dCDy9aIZbhfHjeCGiVQ+BoiGglRikbYd3SG+YTdK5beJ8IdvmeRlOUklj2XD6mf7 e+xl8fVve/lfMIEYQSydiUTfyolIU4PjkkYAUwKLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU63XYaudpjvKWrLgJzQRD7GnBWRowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmMzE4ODU3LThhMjktNGY3YS1iYTI4LTlkYzJiNTAzYTg2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmCEwDQYJKoZIhvcNAQELBQADggEBAKXCzyPVckt6lBaXJ2MD6Y5HQ0SK StxpeCLr8DS0URj1JQiT8sBMrdfSWpBCJpty7a3j8zszGUec/tZBpLMrV82Qsy+w dZHDgh/H1y2PBUw956uvOZ5gMUQCEJPkNU31ftDj6eqwxPghJh0gBs0SXLN4Yf9A 80sbn0Q59dRvyB803VgN5Hm1EQNPotFngvuoI3h3HSxISxisCJhs0lFCEouFC9LZ bjq0qXn57scHKXSmSDqhOzihddm8mVjZq3zKFlbnZSKBPELPXhyN0wE0l6UBKtuJ aoKp6Go/T8ffARmT/oa+RUjLo0jpJOxBD1Jrgp1cn1rDaaDXes9wrDs1y0w= -----END CERTIFICATE-----Generated at Tue Sep 15 13:21:10 2026 by rpki-client