$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a08b83-d5c1-4313-aaae-b3f390aa8189.roa File: f0a08b83-d5c1-4313-aaae-b3f390aa8189.roa (raw, json) Hash identifier: XHsiMqc32qmCm2mSuVcT8k0H1IaQY7qvlGAllGIULpw= Subject key identifier: 0A:F2:35:1D:EB:53:50:4D:A9:28:32:38:DA:7A:D5:58:1E:EA:1E:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 391419B89E3FCEDA35A3A59C894CC3342E98A704 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a08b83-d5c1-4313-aaae-b3f390aa8189.roa Signing time: Mon 03 Aug 2026 00:40:05 +0000 ROA not before: Mon 03 Aug 2026 00:40:05 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:14:19:b8:9e:3f:ce:da:35:a3:a5:9c:89:4c:c3:34:2e:98:a7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:40:05 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=97b2a6edb4e985f5113fafda9ab509536b024fb9180b3bb310342c4fc2d28eb6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:a8:b3:a3:c5:d3:2b:93:f9:d8:ea:46:0d: a2:f1:30:7a:c6:7c:4f:8a:4b:31:46:9d:d1:6d:d5: 17:c5:ab:87:81:a3:d1:b9:11:2b:04:52:9f:7a:ef: b6:68:48:d2:7f:81:f5:e8:4d:35:7d:42:e9:d4:c0: 6a:00:f2:01:6c:ba:5c:49:70:1c:c5:6f:bd:82:36: 33:32:70:85:cb:66:98:e8:2b:82:28:c5:62:a2:48: 86:27:e3:d6:be:16:2c:d8:9d:01:52:11:73:6c:4a: bb:66:79:c3:ff:22:53:50:e7:3a:1e:c6:1d:35:92: f9:0f:bc:1f:81:e0:ab:64:bd:f7:b3:bc:0a:5d:ed: 7d:fe:23:26:7f:19:ce:72:6e:36:1e:d3:d5:89:20: 2e:c6:12:5d:0f:b6:cb:45:5d:c5:ae:a2:4c:8a:79: 0b:36:d4:50:58:d8:5c:68:9f:fe:79:c3:7b:41:cd: 6b:47:09:c4:95:b5:22:ac:40:a6:fb:8f:c1:51:0c: ab:7b:44:b3:64:23:ee:86:53:1f:a3:35:60:77:95: 97:80:84:42:90:42:6a:71:dc:f1:48:41:19:b9:3b: 75:b3:ba:95:f7:5b:57:59:58:0d:47:1b:ea:6c:b3: e8:3e:1b:54:12:5f:1c:e9:7a:22:11:28:c5:c0:09: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:35:1D:EB:53:50:4D:A9:28:32:38:DA:7A:D5:58:1E:EA:1E:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a08b83-d5c1-4313-aaae-b3f390aa8189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.136.0/21 Signature Algorithm: sha256WithRSAEncryption 14:61:4e:0e:d9:82:43:9b:6b:e2:f3:3e:ee:25:c6:78:58:29: 84:4e:ce:e3:b5:79:05:25:05:a5:66:29:ff:b2:54:bb:8d:be: 2f:b2:42:d6:35:98:cd:ff:9c:f5:32:e5:29:1a:1a:69:2a:4c: 2a:36:b2:30:f8:43:5f:29:cd:c5:af:d0:24:60:f9:e9:89:00: d5:ea:a6:33:05:07:c2:74:00:e9:2d:fc:c4:b7:25:64:c3:00: 86:8d:61:d3:03:ae:af:f8:5b:e9:45:86:34:03:72:cb:f6:28: 20:d2:fb:b6:b8:ce:0b:d6:ce:8c:94:da:d2:32:44:dc:ad:e9: 44:6a:98:a3:0b:17:b2:dd:3b:70:00:e6:65:4b:cd:2b:72:89: 58:b3:01:14:19:d1:8b:12:cf:0b:d2:2a:12:84:2d:3d:a5:dd: 94:4a:d3:d4:e9:69:49:23:45:44:99:b6:c6:f3:82:03:d9:c6: ba:7a:61:43:9e:00:af:6d:14:be:01:88:28:c1:77:76:97:6b: c1:a6:f0:fd:af:5c:a1:57:03:82:c4:42:a3:45:cb:c7:0c:c9: 02:33:a4:32:47:05:92:b5:25:45:83:71:bd:0d:34:02:41:11: a2:ef:e5:6a:fc:06:d0:44:95:e0:65:00:a3:48:c9:46:aa:65: 50:13:95:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUORQZuJ4/zto1o6WciUzDNC6YpwQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA0MDA1WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2IyYTZlZGI0ZTk4NWY1MTEzZmFmZGE5YWI1MDk1MzZi MDI0ZmI5MTgwYjNiYjMxMDM0MmM0ZmMyZDI4ZWI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr0qizo8XTK5P52OpGDaLxMHrGfE+KSzFGndFt1RfFq4eB o9G5ESsEUp9677ZoSNJ/gfXoTTV9QunUwGoA8gFsulxJcBzFb72CNjMycIXLZpjo K4IoxWKiSIYn49a+FizYnQFSEXNsSrtmecP/IlNQ5zoexh01kvkPvB+B4Ktkvfez vApd7X3+IyZ/Gc5ybjYe09WJIC7GEl0PtstFXcWuokyKeQs21FBY2Fxon/55w3tB zWtHCcSVtSKsQKb7j8FRDKt7RLNkI+6GUx+jNWB3lZeAhEKQQmpx3PFIQRm5O3Wz upX3W1dZWA1HG+pss+g+G1QSXxzpeiIRKMXACSGBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCvI1HetTUE2pKDI42nrVWB7qHpowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwYTA4YjgzLWQ1YzEtNDMxMy1hYWFlLWIzZjM5MGFhODE4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFIgwDQYJKoZIhvcNAQELBQADggEBABRhTg7ZgkOba+LzPu4lxnhYKYRO zuO1eQUlBaVmKf+yVLuNvi+yQtY1mM3/nPUy5SkaGmkqTCo2sjD4Q18pzcWv0CRg +emJANXqpjMFB8J0AOkt/MS3JWTDAIaNYdMDrq/4W+lFhjQDcsv2KCDS+7a4zgvW zoyU2tIyRNyt6URqmKMLF7LdO3AA5mVLzStyiVizARQZ0YsSzwvSKhKELT2l3ZRK 09TpaUkjRUSZtsbzggPZxrp6YUOeAK9tFL4BiCjBd3aXa8Gm8P2vXKFXA4LEQqNF y8cMyQIzpDJHBZK1JUWDcb0NNAJBEaLv5Wr8BtBEleBlAKNIyUaqZVATlT4= -----END CERTIFICATE-----Generated at Tue Sep 15 11:38:41 2026 by rpki-client