$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5149232-29f7-4fc8-8d35-c0c7000ded36.roa File: f5149232-29f7-4fc8-8d35-c0c7000ded36.roa (raw, json) Hash identifier: JQbOGMQx84oYf9n48dH6P0f0dY4QZeNqbDDghsmy6fA= Subject key identifier: A1:9F:3C:50:A6:46:67:40:F7:7B:1D:ED:1B:A5:AB:06:10:16:F6:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E64F51D69B1AB59A4D21A2B966E49D38A35EC9A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5149232-29f7-4fc8-8d35-c0c7000ded36.roa Signing time: Tue 04 Aug 2026 02:10:07 +0000 ROA not before: Tue 04 Aug 2026 02:10:07 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:64:f5:1d:69:b1:ab:59:a4:d2:1a:2b:96:6e:49:d3:8a:35:ec:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:10:07 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=25c4d9463400b15b05e0099927d44a19316c8b2c716a3a2e205f16bdf8cbf779, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:f3:17:a5:a9:d4:0a:c1:e2:08:49:d8:a6: 4a:e5:64:9f:1c:b9:0b:56:03:86:1e:8a:1b:ba:4b: a8:05:b7:30:a0:7f:67:8d:11:5e:65:86:a4:ee:60: 60:0b:57:f6:01:f9:38:7a:62:18:b9:ac:cc:3c:ca: 60:33:02:3a:de:f1:23:fc:f3:e3:39:96:c5:da:69: 9a:fe:7d:72:f2:56:f8:0d:d2:db:f3:ed:87:da:62: 57:22:5e:66:b9:67:72:55:8e:b4:50:d1:c1:cb:40: d8:48:a5:8d:1e:f1:0f:a6:31:f5:d4:d8:95:f6:d6: 1d:1b:3c:79:d1:11:cd:2e:94:71:41:5a:4c:ec:bc: a5:8e:97:60:f9:4c:2e:ce:08:c1:03:47:2d:04:08: 4e:f0:d2:16:19:b0:cd:40:15:7d:f4:15:86:07:fa: a3:54:62:2f:60:39:f4:a1:d8:0f:33:a4:77:17:52: 83:5f:aa:6f:9b:82:ba:56:70:46:f9:10:e1:b3:b6: 0b:ae:e5:af:15:57:87:24:f6:9c:31:c0:11:bb:f4: 8f:1e:88:f1:46:5e:4c:c4:60:2d:d0:97:f1:ce:44: c1:ab:b1:a4:fa:5a:79:57:02:90:73:6a:5e:3e:ac: 56:12:47:1b:b7:f9:8d:8d:b3:f3:6e:23:d4:4f:17: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:3C:50:A6:46:67:40:F7:7B:1D:ED:1B:A5:AB:06:10:16:F6:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5149232-29f7-4fc8-8d35-c0c7000ded36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.0.0/18 Signature Algorithm: sha256WithRSAEncryption 6c:37:dc:82:16:74:bb:25:ac:b0:0e:51:4e:eb:4e:15:de:c1: d4:63:4f:52:a2:2b:c0:89:8d:2b:8b:09:7a:c9:18:62:bd:f3: b5:7c:89:d9:18:13:b2:b5:8c:ed:c8:57:1e:58:e7:28:90:1f: e9:82:41:9a:c6:61:a4:46:b8:cf:99:82:62:20:94:eb:e1:dd: d6:36:91:79:86:f4:8d:32:9a:cb:09:74:aa:18:11:cf:97:21: f4:7a:4d:84:54:a7:88:f1:a3:76:8e:09:d0:a8:de:c1:ca:67: c5:87:e8:ab:1d:7c:ee:82:4a:25:a3:0b:a1:ea:b4:73:19:83: 97:3d:b6:56:a4:dd:d0:34:45:ff:23:25:e4:28:99:59:26:9a: 67:52:b3:b7:0f:ff:10:38:ee:e7:2e:71:f6:46:01:2b:2b:d3: da:30:dc:29:9a:05:93:71:43:7b:7d:46:87:cf:ad:90:c9:b6: 96:3a:d6:f6:e7:07:87:e9:62:63:19:8e:54:b6:12:60:e7:65: c7:60:e0:17:14:ec:3d:b3:84:ab:01:a0:35:01:fc:f4:2d:df: 98:d7:5c:03:30:a8:cc:33:8b:b5:d6:5a:06:81:ab:8d:8f:6c: 33:79:f5:65:6c:84:e1:ad:97:d8:3c:a3:cd:91:04:27:8d:22: 1a:94:96:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbmT1HWmxq1mk0horlm5J04o17JowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIxMDA3WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWM0ZDk0NjM0MDBiMTViMDVlMDA5OTkyN2Q0NGExOTMx NmM4YjJjNzE2YTNhMmUyMDVmMTZiZGY4Y2JmNzc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzEfMXpanUCsHiCEnYpkrlZJ8cuQtWA4Yeihu6S6gFtzCg f2eNEV5lhqTuYGALV/YB+Th6Yhi5rMw8ymAzAjre8SP88+M5lsXaaZr+fXLyVvgN 0tvz7YfaYlciXma5Z3JVjrRQ0cHLQNhIpY0e8Q+mMfXU2JX21h0bPHnREc0ulHFB WkzsvKWOl2D5TC7OCMEDRy0ECE7w0hYZsM1AFX30FYYH+qNUYi9gOfSh2A8zpHcX UoNfqm+bgrpWcEb5EOGztguu5a8VV4ck9pwxwBG79I8eiPFGXkzEYC3Ql/HORMGr saT6WnlXApBzal4+rFYSRxu3+Y2Ns/NuI9RPF7ZHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoZ88UKZGZ0D3ex3tG6WrBhAW9t8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1MTQ5MjMyLTI5ZjctNGZjOC04ZDM1LWMwYzcwMDBkZWQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZyOAAwDQYJKoZIhvcNAQELBQADggEBAGw33IIWdLslrLAOUU7rThXewdRj T1KiK8CJjSuLCXrJGGK987V8idkYE7K1jO3IVx5Y5yiQH+mCQZrGYaRGuM+ZgmIg lOvh3dY2kXmG9I0ymssJdKoYEc+XIfR6TYRUp4jxo3aOCdCo3sHKZ8WH6KsdfO6C SiWjC6HqtHMZg5c9tlak3dA0Rf8jJeQomVkmmmdSs7cP/xA47ucucfZGASsr09ow 3CmaBZNxQ3t9RofPrZDJtpY61vbnB4fpYmMZjlS2EmDnZcdg4BcU7D2zhKsBoDUB /PQt35jXXAMwqMwzi7XWWgaBq42PbDN59WVshOGtl9g8o82RBCeNIhqUln0= -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:17 2026 by rpki-client