$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f40d8929-a106-4a2c-86d0-d2f5d7650e99.roa File: f40d8929-a106-4a2c-86d0-d2f5d7650e99.roa (raw, json) Hash identifier: NKi2tLhXzQPDX5vzfqHNPoIFmxWgPHRRB4dQ1Eal9sE= Subject key identifier: 48:1E:5E:61:18:A8:23:CA:B9:F0:4C:32:44:BD:4A:3B:FB:73:CB:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2946745459A06DC9A56414D008860D3B0A3CAF37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f40d8929-a106-4a2c-86d0-d2f5d7650e99.roa Signing time: Wed 05 Aug 2026 00:31:28 +0000 ROA not before: Wed 05 Aug 2026 00:31:28 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 72.44.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:46:74:54:59:a0:6d:c9:a5:64:14:d0:08:86:0d:3b:0a:3c:af:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:31:28 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=011b3bab11d61ab6e6686af538dc1ae22f868f551476241d06e065ab54687966, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:19:5f:fd:02:fb:e1:0d:f0:47:e3:69:ee:bc: 8d:6c:8a:c3:c6:30:0f:df:9d:ee:7c:a7:82:34:9f: 93:f9:18:35:76:40:f0:5f:2c:86:2a:38:63:da:6d: bc:e2:84:f6:c1:16:d3:3e:58:e1:8f:4e:11:09:11: fe:df:25:f2:da:c5:6e:94:fe:c7:f2:9e:69:66:45: 9a:18:3d:8b:20:e1:31:6f:ce:a7:41:27:c5:a3:d7: b5:31:d8:c0:64:19:28:99:18:18:6d:72:a2:8f:ad: 8d:36:16:b7:ae:8b:f8:9d:af:0a:48:bd:38:b4:97: ce:a0:9f:08:97:be:ee:a0:1e:3b:ec:0c:bc:a6:9c: fb:83:7a:2d:27:b2:58:e6:42:25:15:45:50:36:55: f3:87:8e:ea:14:40:38:24:10:8f:dc:20:a2:69:9a: 1c:10:c0:eb:d8:ce:19:71:ac:16:b3:0c:d9:06:09: f2:70:de:41:75:30:23:af:0d:23:12:b2:3f:a4:30: 65:11:64:09:13:74:e5:9d:26:48:91:d3:59:01:b4: 1b:6e:24:d5:3c:fd:f7:af:44:be:97:16:d6:65:c8: e7:65:fb:61:20:23:02:ab:10:32:0a:f9:a3:75:33: 82:3d:4e:99:03:c1:d4:1f:08:3f:6d:cd:6f:8d:04: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:5E:61:18:A8:23:CA:B9:F0:4C:32:44:BD:4A:3B:FB:73:CB:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f40d8929-a106-4a2c-86d0-d2f5d7650e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.48.0/20 Signature Algorithm: sha256WithRSAEncryption 33:b1:31:a9:93:0c:55:a9:7a:5c:91:99:60:c7:ce:c6:f4:54: e9:1d:57:46:bc:19:33:51:18:a0:39:cc:6c:af:75:af:74:c9: 38:40:e2:72:3f:be:a2:9d:71:53:fb:86:3d:da:27:f1:0f:15: 05:f7:9e:d0:51:1e:4a:b1:8f:ff:9a:e2:b9:32:7c:9f:b1:96: d7:78:59:da:1a:2f:75:c7:f4:e5:26:68:f9:04:73:54:5e:9e: be:be:35:d1:24:de:7d:ec:9d:5a:3f:45:a8:32:1e:b4:84:c6: f5:e7:19:46:74:be:ab:d7:61:03:22:26:2a:58:5b:94:e0:c4: 4d:e8:60:33:e3:20:3d:5b:bd:04:fa:8e:28:5a:26:49:df:68: f1:3f:0b:4e:e7:72:8e:ec:3a:2e:cd:99:5a:6b:cc:43:5c:df: fd:fe:5d:ae:ae:fe:99:6b:dc:60:c7:79:07:5d:32:8b:fc:31: ea:ef:37:c9:73:04:aa:6d:2b:68:8d:48:c9:af:8b:70:6a:27: 52:3b:c9:1a:8a:54:d8:b0:38:c0:1a:7d:3f:40:5b:a5:ae:20: a2:79:f9:fb:ea:d2:b4:4f:f7:c6:dd:17:d2:a4:2a:2e:f6:96: 6e:f2:49:9f:a2:0b:ef:52:4f:a8:1c:8c:e8:85:24:97:49:1a: 9c:65:93:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKUZ0VFmgbcmlZBTQCIYNOwo8rzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAzMTI4WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTFiM2JhYjExZDYxYWI2ZTY2ODZhZjUzOGRjMWFlMjJm ODY4ZjU1MTQ3NjI0MWQwNmUwNjVhYjU0Njg3OTY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkGV/9AvvhDfBH42nuvI1sisPGMA/fne58p4I0n5P5GDV2 QPBfLIYqOGPabbzihPbBFtM+WOGPThEJEf7fJfLaxW6U/sfynmlmRZoYPYsg4TFv zqdBJ8Wj17Ux2MBkGSiZGBhtcqKPrY02Freui/idrwpIvTi0l86gnwiXvu6gHjvs DLymnPuDei0nsljmQiUVRVA2VfOHjuoUQDgkEI/cIKJpmhwQwOvYzhlxrBazDNkG CfJw3kF1MCOvDSMSsj+kMGURZAkTdOWdJkiR01kBtBtuJNU8/fevRL6XFtZlyOdl +2EgIwKrEDIK+aN1M4I9TpkDwdQfCD9tzW+NBPgVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSB5eYRioI8q58EwyRL1KO/tzy+MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0MGQ4OTI5LWExMDYtNGEyYy04NmQwLWQyZjVkNzY1MGU5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARILDAwDQYJKoZIhvcNAQELBQADggEBADOxMamTDFWpelyRmWDHzsb0VOkd V0a8GTNRGKA5zGyvda90yThA4nI/vqKdcVP7hj3aJ/EPFQX3ntBRHkqxj/+a4rky fJ+xltd4WdoaL3XH9OUmaPkEc1Renr6+NdEk3n3snVo/RagyHrSExvXnGUZ0vqvX YQMiJipYW5TgxE3oYDPjID1bvQT6jihaJknfaPE/C07nco7sOi7NmVprzENc3/3+ Xa6u/plr3GDHeQddMov8MervN8lzBKptK2iNSMmvi3BqJ1I7yRqKVNiwOMAafT9A W6WuIKJ5+fvq0rRP98bdF9KkKi72lm7ySZ+iC+9ST6gcjOiFJJdJGpxlkwg= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:36 2026 by rpki-client