$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa File: f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa (raw, json) Hash identifier: 3AYJjEVJmpIwLj8IwIxXv1kqYm7rtvmF+vsKvKSmARE= Subject key identifier: C0:DD:52:1F:0D:33:E4:35:F4:CA:4D:99:1D:F8:71:27:42:E2:06:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57B0D6E09DCD0C71A7508D1E6EE182C691A325E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa Signing time: Wed 05 Aug 2026 00:10:53 +0000 ROA not before: Wed 05 Aug 2026 00:10:53 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 171.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b0:d6:e0:9d:cd:0c:71:a7:50:8d:1e:6e:e1:82:c6:91:a3:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:10:53 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=aa8e7b1af5fb7d9665d980de25fa374b3de815d67acbe9adfd027cc1ae50df6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:3e:00:21:50:0f:01:bb:ea:d0:55:4b:41: 36:af:e3:c4:5b:e9:05:94:7f:24:87:dd:45:67:5c: fb:ff:f7:c3:29:70:d7:ad:eb:55:7b:0a:5a:8a:33: ee:d2:76:a8:43:46:92:bf:f5:49:bd:81:06:b7:fa: fc:a0:ec:68:64:c3:f9:c8:37:5f:87:2b:49:d4:16: ab:24:9f:ce:f5:7e:cc:c9:f1:a3:fc:5c:71:e0:de: 4e:18:bc:53:ed:00:72:12:bb:f8:d1:54:fc:ed:25: 84:74:fb:09:fc:c6:51:2f:68:91:81:da:38:7a:54: 63:a9:b3:f6:40:a7:13:7e:5c:89:6c:53:4f:ad:c9: a5:96:4a:b8:b6:5d:8b:fc:ed:06:f7:f9:c2:aa:cc: c7:2c:7c:29:85:47:f7:c4:2a:db:68:53:6d:37:97: 75:ef:67:d0:9d:ea:48:e3:74:d7:36:e1:8d:76:5c: ee:f8:94:5a:42:50:63:b6:2c:f1:c1:47:f0:6d:2b: ff:14:de:d4:57:ca:1f:65:a0:be:02:f2:c0:b4:25: 5c:cc:c4:f6:6a:45:e6:f7:dd:58:37:88:85:71:39: 73:73:30:70:88:5e:3f:4c:79:02:a5:45:2d:97:f3: 3d:0e:48:83:04:05:03:32:3c:85:77:f9:c3:11:47: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DD:52:1F:0D:33:E4:35:F4:CA:4D:99:1D:F8:71:27:42:E2:06:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 66:14:06:41:d7:f4:28:a6:5a:80:a4:e8:8a:25:00:ed:fc:34: 6d:6b:78:45:e5:c9:09:c8:2a:44:1b:53:9e:33:4b:13:47:26: 87:43:26:0a:5c:aa:2b:67:21:3c:9e:8d:87:b5:50:e8:20:e8: 7d:66:ea:db:d6:3b:f2:3a:fe:c9:ed:8d:0e:77:cf:db:4d:f5: 12:42:bc:3a:8d:05:f5:f8:01:29:bc:f3:23:da:e7:ba:7b:a6: d7:0d:ca:e6:59:05:20:dc:a7:01:54:0c:a9:d9:e3:fb:65:9f: b3:7c:15:2b:1c:d5:6b:93:c9:67:6c:9b:1e:eb:cf:0d:09:65: bd:17:b1:22:72:e7:6c:db:16:c6:8a:74:da:5a:10:ae:02:7f: b5:08:6f:2b:93:2e:4f:9f:7f:be:c6:4f:d7:0b:a5:67:19:73: 8a:66:84:d3:4f:5b:ee:7e:72:ae:85:c0:e8:c1:97:79:c4:cc: 9e:39:22:09:bd:e0:24:5b:42:b4:8d:ef:60:9d:b2:7a:19:11: 2b:54:00:ca:3d:e7:2e:8b:e0:76:70:a2:dd:07:61:d8:09:07: f7:a2:34:cc:46:e2:b4:a4:11:16:f7:b6:e1:b1:c5:49:4e:d6: 66:72:18:a4:3e:e9:f2:b0:34:7a:61:84:0b:ce:e0:4b:9a:fe: 88:26:d3:dd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUV7DW4J3NDHGnUI0ebuGCxpGjJeAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAxMDUzWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYThlN2IxYWY1ZmI3ZDk2NjVkOTgwZGUyNWZhMzc0YjNk ZTgxNWQ2N2FjYmU5YWRmZDAyN2NjMWFlNTBkZjZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6PD4AIVAPAbvq0FVLQTav48Rb6QWUfySH3UVnXPv/98Mp cNet61V7ClqKM+7SdqhDRpK/9Um9gQa3+vyg7Ghkw/nIN1+HK0nUFqskn871fszJ 8aP8XHHg3k4YvFPtAHISu/jRVPztJYR0+wn8xlEvaJGB2jh6VGOps/ZApxN+XIls U0+tyaWWSri2XYv87Qb3+cKqzMcsfCmFR/fEKttoU203l3XvZ9Cd6kjjdNc24Y12 XO74lFpCUGO2LPHBR/BtK/8U3tRXyh9loL4C8sC0JVzMxPZqReb33Vg3iIVxOXNz MHCIXj9MeQKlRS2X8z0OSIMEBQMyPIV3+cMRR0t9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwN1SHw0z5DX0yk2ZHfhxJ0LiBlYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyZjVlNmMxLTA0ZjktNDI1My1hNGQ0LTg1ODg5Mjc2OWU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCrSTANBgkqhkiG9w0BAQsFAAOCAQEAZhQGQdf0KKZagKToiiUA7fw0bWt4 ReXJCcgqRBtTnjNLE0cmh0MmClyqK2chPJ6Nh7VQ6CDofWbq29Y78jr+ye2NDnfP 2031EkK8Oo0F9fgBKbzzI9rnunum1w3K5lkFINynAVQMqdnj+2Wfs3wVKxzVa5PJ Z2ybHuvPDQllvRexInLnbNsWxop02loQrgJ/tQhvK5MuT59/vsZP1wulZxlzimaE 009b7n5yroXA6MGXecTMnjkiCb3gJFtCtI3vYJ2yehkRK1QAyj3nLovgdnCi3Qdh 2AkH96I0zEbitKQRFve24bHFSU7WZnIYpD7p8rA0emGEC87gS5r+iCbT3Q== -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:39 2026 by rpki-client