$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f018e31d-9f3c-4abc-a801-2e75c8305306.roa File: f018e31d-9f3c-4abc-a801-2e75c8305306.roa (raw, json) Hash identifier: go+T9Sjozb/JeCEzin9N8nED8vkWESXhZkIrYqg+SYs= Subject key identifier: A9:2D:3E:13:B4:3C:61:DA:0D:32:2C:DE:26:3D:90:8D:2A:96:D8:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 737B9549064F11C4483FACABCDE709E644954024 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f018e31d-9f3c-4abc-a801-2e75c8305306.roa Signing time: Fri 31 Jul 2026 00:30:13 +0000 ROA not before: Fri 31 Jul 2026 00:30:13 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7b:95:49:06:4f:11:c4:48:3f:ac:ab:cd:e7:09:e6:44:95:40:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 00:30:13 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=0dcc5aa1596913ef5807ce89c18b4b2d5e2155589150b406485d78ef0c3dd890, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2c:d6:e5:33:21:d5:b1:14:da:c7:b8:d8:ce: 48:2a:44:06:4e:41:f8:bd:ee:e8:00:3f:f7:f3:70: f0:cc:96:3a:85:1d:8a:59:58:86:a1:51:a0:16:65: 19:f1:53:6b:59:eb:93:62:45:24:1a:9a:45:31:19: 88:f4:fb:68:1d:c9:e2:48:29:ec:c3:c6:e1:32:ce: 95:a3:98:54:b3:00:b5:0b:28:b0:6d:2d:63:97:00: 11:76:75:19:57:c4:82:bc:66:72:01:6e:6d:73:d0: a7:2b:57:b5:53:f5:bb:77:80:98:8d:4f:8e:ce:4b: 1d:cc:c5:c8:21:62:0e:95:e2:9b:4f:4b:11:86:63: 69:a6:f6:d8:c2:49:e6:0a:2e:cc:95:29:eb:d9:c2: 33:d1:2a:6a:2e:f1:38:f6:0f:a3:02:5c:82:39:ed: 25:5b:4f:99:60:c4:22:e3:70:de:3b:dd:c0:da:7b: 36:21:f6:02:c9:a3:ab:fd:a7:43:6a:d5:8f:64:97: ed:1a:88:a4:ce:b5:40:13:03:da:42:d3:a1:45:4b: 68:21:23:ed:73:15:1f:ea:2a:37:4d:cc:7c:a6:be: b0:ee:30:3f:7b:2f:fb:b1:1c:64:e1:13:8f:de:cf: e9:cd:aa:df:dd:20:80:ee:74:c8:c3:3e:e5:ea:52: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2D:3E:13:B4:3C:61:DA:0D:32:2C:DE:26:3D:90:8D:2A:96:D8:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f018e31d-9f3c-4abc-a801-2e75c8305306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.118.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:50:12:99:6b:7c:90:b4:b5:5d:4f:91:df:1c:dc:50:18:cc: 17:f7:e2:d6:f5:8c:85:ec:bd:53:a6:4c:70:f5:31:20:a9:ff: 4b:58:89:23:4d:16:f3:ba:57:5a:e8:01:6b:1e:e7:b7:84:2f: f9:de:d5:e1:fe:53:19:82:1b:a6:0f:10:41:b1:84:31:4e:06: 98:cd:be:71:90:ae:22:e2:11:6f:ea:01:87:91:01:09:dc:36: 25:46:d1:f5:ac:02:93:80:b9:32:31:f2:06:b8:16:55:04:75: 7e:33:c5:fd:d4:c6:da:18:c6:0f:a4:4a:1b:29:2a:c8:ba:26: cd:06:f7:f1:00:b5:22:2a:fe:e4:16:37:9b:3c:e7:3c:bd:4f: 9f:e4:01:92:5f:e3:e7:d7:7f:68:dc:1d:19:76:f2:73:67:97: cc:f0:f2:0b:89:bd:43:e6:c7:c6:39:27:24:05:c3:ec:ef:c8: 89:20:5d:b0:06:05:32:2f:e3:20:5f:6f:65:1f:f5:55:e2:f0: c5:2c:54:6b:3d:e7:94:24:ad:b9:73:30:a6:e1:d8:51:78:40: 43:ce:b2:50:c9:5e:0a:af:57:2e:ed:1b:b3:0a:d0:40:8e:2c: 5b:b1:19:b4:0f:07:dc:d8:b9:f4:94:56:56:46:28:a5:e4:6d: 96:46:59:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc3uVSQZPEcRIP6yrzecJ5kSVQCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDAzMDEzWhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGNjNWFhMTU5NjkxM2VmNTgwN2NlODljMThiNGIyZDVl MjE1NTU4OTE1MGI0MDY0ODVkNzhlZjBjM2RkODkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgLNblMyHVsRTax7jYzkgqRAZOQfi97ugAP/fzcPDMljqF HYpZWIahUaAWZRnxU2tZ65NiRSQamkUxGYj0+2gdyeJIKezDxuEyzpWjmFSzALUL KLBtLWOXABF2dRlXxIK8ZnIBbm1z0KcrV7VT9bt3gJiNT47OSx3MxcghYg6V4ptP SxGGY2mm9tjCSeYKLsyVKevZwjPRKmou8Tj2D6MCXII57SVbT5lgxCLjcN473cDa ezYh9gLJo6v9p0Nq1Y9kl+0aiKTOtUATA9pC06FFS2ghI+1zFR/qKjdNzHymvrDu MD97L/uxHGThE4/ez+nNqt/dIIDudMjDPuXqUsuFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqS0+E7Q8YdoNMizeJj2QjSqW2M0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwMThlMzFkLTlmM2MtNGFiYy1hODAxLTJlNzVjODMwNTMwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmHYwDQYJKoZIhvcNAQELBQADggEBADtQEplrfJC0tV1Pkd8c3FAYzBf3 4tb1jIXsvVOmTHD1MSCp/0tYiSNNFvO6V1roAWse57eEL/ne1eH+UxmCG6YPEEGx hDFOBpjNvnGQriLiEW/qAYeRAQncNiVG0fWsApOAuTIx8ga4FlUEdX4zxf3UxtoY xg+kShspKsi6Js0G9/EAtSIq/uQWN5s85zy9T5/kAZJf4+fXf2jcHRl28nNnl8zw 8guJvUPmx8Y5JyQFw+zvyIkgXbAGBTIv4yBfb2Uf9VXi8MUsVGs955QkrblzMKbh 2FF4QEPOslDJXgqvVy7tG7MK0ECOLFuxGbQPB9zYufSUVlZGKKXkbZZGWR4= -----END CERTIFICATE-----Generated at Tue Sep 15 11:37:51 2026 by rpki-client