$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3733ff4-60a5-4bde-8a28-1e0bb271609e.roa File: f3733ff4-60a5-4bde-8a28-1e0bb271609e.roa (raw, json) Hash identifier: d4fXe7CdYAQlaS26YnYmxh01+GP9Nfdtrn9x8EnEh/c= Subject key identifier: 6C:13:AF:2A:48:DB:69:C7:31:41:72:37:67:CF:2F:96:41:F0:03:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 552DBB32C95749292008983F8754E4666D74D733 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3733ff4-60a5-4bde-8a28-1e0bb271609e.roa Signing time: Mon 03 Aug 2026 01:21:12 +0000 ROA not before: Mon 03 Aug 2026 01:21:12 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 119.12.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2d:bb:32:c9:57:49:29:20:08:98:3f:87:54:e4:66:6d:74:d7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:21:12 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=ec6f41fca132a38fcc8eb893de9d5f34f353bd5fc534b30fc9118f619690fa94, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:5b:08:1e:63:ba:00:94:f3:54:98:e0:9a: 5c:08:bf:0d:7a:32:88:2a:2b:7d:e0:3d:5c:f4:09: e3:f1:b1:8e:0e:91:db:a3:58:d3:89:5f:9b:49:b9: 47:5b:34:46:22:f2:35:c4:c5:02:f7:04:68:a5:47: dc:ec:6a:b4:b9:43:ba:da:e4:9b:7e:09:4d:c8:30: b9:61:b9:e0:52:89:c5:d2:e6:36:ee:2e:27:2c:30: b3:cd:0b:8e:8a:98:d0:c7:80:01:47:b9:ec:ce:cd: da:1b:1d:4c:ac:bd:95:f9:2b:f2:fa:4c:69:1b:fa: d9:8c:61:b1:16:5a:0a:a5:ae:66:90:f4:80:b0:b0: d5:bb:8a:05:e1:0f:ba:63:e1:7d:be:94:76:eb:12: 60:d7:36:3c:72:8a:23:a8:af:22:0a:aa:49:17:b0: 96:94:a1:c4:ee:82:43:c9:06:b3:fd:e6:2e:94:c9: 60:bc:7d:66:55:bc:23:2c:c9:84:d6:7c:75:29:14: 1e:f8:8a:25:9b:8f:eb:39:81:23:98:34:bf:d5:f3: 87:db:3b:38:0d:c9:26:5f:3a:4d:de:24:13:33:47: 24:94:05:b8:f6:7d:79:bb:aa:cf:b1:df:a1:f5:45: 0f:16:81:da:6f:a1:17:4f:b0:0a:3b:57:6f:7a:8f: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:13:AF:2A:48:DB:69:C7:31:41:72:37:67:CF:2F:96:41:F0:03:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3733ff4-60a5-4bde-8a28-1e0bb271609e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.12.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:d9:6f:1a:f9:02:7d:5c:1b:1b:4d:47:af:44:f3:b6:a5:53: d1:18:b8:3e:e2:2c:f1:40:30:0d:d9:4a:21:91:2b:10:92:ae: 12:ed:8e:c3:50:ba:68:28:93:c6:09:33:b5:66:a9:c1:18:ab: dd:48:0b:65:ba:a3:a9:f1:4e:99:dc:c6:76:84:59:cf:0e:cb: e9:ca:62:4d:a6:24:2b:b9:73:a9:67:46:18:bf:1c:6a:4e:9d: 60:51:17:8d:5d:4a:36:40:19:5f:a8:ce:42:3f:62:bf:03:81: 81:3a:43:1b:04:d3:94:17:eb:4c:b5:fd:41:e5:0e:18:71:60: c1:ee:c8:ae:26:6d:09:10:9d:7d:40:39:f5:34:97:c5:13:a8: 97:1b:52:8c:d1:d0:0b:3e:62:bf:1a:26:10:9b:8d:66:04:37: 89:3d:3c:00:21:3d:bb:e2:94:f2:a6:45:85:1c:df:28:8c:b8: f5:32:7c:01:5f:06:49:da:43:81:7e:17:11:6a:20:34:85:e3: e0:7e:4b:28:91:ee:71:93:93:9e:a7:fe:de:e2:56:9c:3b:4e: 26:6d:79:7d:15:a2:21:dd:53:a8:97:dc:0e:d1:68:f5:c5:d1: 14:af:44:32:9a:b1:8a:79:1a:7e:54:b5:75:86:d3:e7:fd:0f: 6e:d9:ae:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVS27MslXSSkgCJg/h1TkZm101zMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEyMTEyWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzZmNDFmY2ExMzJhMzhmY2M4ZWI4OTNkZTlkNWYzNGYz NTNiZDVmYzUzNGIzMGZjOTExOGY2MTk2OTBmYTk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjIFsIHmO6AJTzVJjgmlwIvw16MogqK33gPVz0CePxsY4O kdujWNOJX5tJuUdbNEYi8jXExQL3BGilR9zsarS5Q7ra5Jt+CU3IMLlhueBSicXS 5jbuLicsMLPNC46KmNDHgAFHuezOzdobHUysvZX5K/L6TGkb+tmMYbEWWgqlrmaQ 9ICwsNW7igXhD7pj4X2+lHbrEmDXNjxyiiOoryIKqkkXsJaUocTugkPJBrP95i6U yWC8fWZVvCMsyYTWfHUpFB74iiWbj+s5gSOYNL/V84fbOzgNySZfOk3eJBMzRySU Bbj2fXm7qs+x36H1RQ8WgdpvoRdPsAo7V296jyDJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbBOvKkjbaccxQXI3Z88vlkHwA9YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzNzMzZmY0LTYwYTUtNGJkZS04YTI4LTFlMGJiMjcxNjA5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3DGAwDQYJKoZIhvcNAQELBQADggEBAH/Zbxr5An1cGxtNR69E87alU9EY uD7iLPFAMA3ZSiGRKxCSrhLtjsNQumgok8YJM7VmqcEYq91IC2W6o6nxTpncxnaE Wc8Oy+nKYk2mJCu5c6lnRhi/HGpOnWBRF41dSjZAGV+ozkI/Yr8DgYE6QxsE05QX 60y1/UHlDhhxYMHuyK4mbQkQnX1AOfU0l8UTqJcbUozR0As+Yr8aJhCbjWYEN4k9 PAAhPbvilPKmRYUc3yiMuPUyfAFfBknaQ4F+FxFqIDSF4+B+SyiR7nGTk56n/t7i Vpw7TiZteX0VoiHdU6iX3A7RaPXF0RSvRDKasYp5Gn5UtXWG0+f9D27Zrs8= -----END CERTIFICATE-----Generated at Tue Sep 15 13:19:38 2026 by rpki-client