$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa File: f5549e53-ed77-4bbe-b75d-2559b91cb973.roa (raw, json) Hash identifier: arL7GK6FWolxYU6HeHHCRlnbxdEWxTxLYg5jitheHnc= Subject key identifier: D0:72:06:C1:35:1F:13:30:58:61:05:72:BB:37:34:F8:88:A5:B7:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2049D6B94A782FE1138B7432F870E378A70CD332 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa Signing time: Tue 04 Aug 2026 01:00:14 +0000 ROA not before: Tue 04 Aug 2026 01:00:14 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:49:d6:b9:4a:78:2f:e1:13:8b:74:32:f8:70:e3:78:a7:0c:d3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 01:00:14 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=6ddebce184cc1987dd6a775d811916f53b0b6d4a5846bc5ab0a8ea68a62f3549, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:bf:5e:05:e1:20:71:7e:fc:d5:3d:b1:01: b0:56:1f:3b:65:07:95:e7:d2:6d:a1:20:86:ba:fd: 2a:9f:d0:6f:7e:bf:39:b4:b1:2f:a9:ac:62:73:e0: cb:c5:97:bc:b8:b0:b8:31:3d:4e:03:4a:e5:a8:78: d5:6e:2c:e4:4c:6c:24:bd:10:0d:26:89:d2:e8:ae: 83:b0:d1:51:03:72:b8:ad:05:28:90:b6:67:0a:89: 2b:3a:6a:eb:e9:c0:c0:4f:9a:1b:73:4b:ef:82:91: 57:67:08:cb:66:1e:d1:be:9a:0a:66:e4:36:de:62: e0:32:17:62:9a:20:d6:56:3a:d9:24:46:04:5e:e1: df:53:9a:e7:10:fd:df:b4:38:2b:4b:95:82:fc:6a: 11:3a:87:3d:69:c4:5e:09:5c:21:f5:89:b0:7f:da: 74:17:41:0f:93:5f:11:d9:8e:05:df:e9:de:69:16: 3f:37:fb:ab:cb:4b:3c:05:a1:58:08:84:65:cb:59: a2:dc:e7:af:1b:a8:7f:f3:a1:d5:d2:29:55:73:6c: 40:cc:4c:80:3b:f4:7f:6a:5a:d3:f8:02:fc:56:fe: e2:d6:a3:dc:1e:e5:4b:51:72:26:52:b7:e0:33:ab: f7:2d:24:ab:5c:cf:f2:0a:39:79:11:38:d2:6b:58: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:06:C1:35:1F:13:30:58:61:05:72:BB:37:34:F8:88:A5:B7:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.240.0/20 Signature Algorithm: sha256WithRSAEncryption 87:96:d3:bc:66:9f:37:76:e7:d0:3a:97:de:41:f3:df:ce:6d: b2:43:95:4e:6c:be:15:9e:bc:ff:93:e3:b6:41:46:39:ce:84: d6:1b:0f:22:ec:3b:a4:87:c3:2a:be:3f:47:2e:0c:61:00:fe: 52:24:04:83:84:5b:b9:f4:d1:c6:f6:c8:ae:ca:5e:3c:7d:a0: 93:c4:9d:c1:de:9d:d6:bb:ea:0f:b7:d7:cf:4d:d0:cc:08:10: e6:4f:c4:49:34:19:8d:5c:42:62:e1:09:71:d7:b0:df:e2:0c: 75:d4:5c:82:f1:57:67:32:87:56:ec:28:bb:f5:2e:63:3a:ad: d9:52:43:0b:cb:a2:49:91:e1:b6:8e:c2:e5:31:34:36:b7:45: f3:2e:f9:59:ae:b2:ad:ab:f6:99:10:f3:b3:f5:b9:56:e5:2e: 88:d7:b8:db:4a:d1:cc:74:40:ef:7a:25:cb:e2:2e:7e:ac:f6: c1:c1:be:b5:93:fb:6d:59:75:75:71:9d:c8:28:ac:77:fa:52: c5:08:56:a5:14:42:e0:84:65:06:03:25:58:3c:9c:e0:44:6a: d8:0d:44:10:42:48:c3:44:ae:d9:40:fd:d2:ca:69:64:85:6b: f7:4d:3b:29:86:0b:21:37:99:a3:86:a1:dc:01:db:56:e2:5f: 08:cd:78:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIEnWuUp4L+ETi3Qy+HDjeKcM0zIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEwMDE0WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGRlYmNlMTg0Y2MxOTg3ZGQ2YTc3NWQ4MTE5MTZmNTNi MGI2ZDRhNTg0NmJjNWFiMGE4ZWE2OGE2MmYzNTQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJpr9eBeEgcX781T2xAbBWHztlB5Xn0m2hIIa6/Sqf0G9+ vzm0sS+prGJz4MvFl7y4sLgxPU4DSuWoeNVuLORMbCS9EA0midLoroOw0VEDcrit BSiQtmcKiSs6auvpwMBPmhtzS++CkVdnCMtmHtG+mgpm5DbeYuAyF2KaINZWOtkk RgRe4d9TmucQ/d+0OCtLlYL8ahE6hz1pxF4JXCH1ibB/2nQXQQ+TXxHZjgXf6d5p Fj83+6vLSzwFoVgIhGXLWaLc568bqH/zodXSKVVzbEDMTIA79H9qWtP4AvxW/uLW o9we5UtRciZSt+Azq/ctJKtcz/IKOXkRONJrWMN/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0HIGwTUfEzBYYQVyuzc0+IiltwYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1NTQ5ZTUzLWVkNzctNGJiZS1iNzVkLTI1NTliOTFjYjk3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATM7PAwDQYJKoZIhvcNAQELBQADggEBAIeW07xmnzd259A6l95B89/ObbJD lU5svhWevP+T47ZBRjnOhNYbDyLsO6SHwyq+P0cuDGEA/lIkBIOEW7n00cb2yK7K Xjx9oJPEncHenda76g+3189N0MwIEOZPxEk0GY1cQmLhCXHXsN/iDHXUXILxV2cy h1bsKLv1LmM6rdlSQwvLokmR4baOwuUxNDa3RfMu+Vmusq2r9pkQ87P1uVblLojX uNtK0cx0QO96JcviLn6s9sHBvrWT+21ZdXVxncgorHf6UsUIVqUUQuCEZQYDJVg8 nOBEatgNRBBCSMNErtlA/dLKaWSFa/dNOymGCyE3maOGodwB21biXwjNeKc= -----END CERTIFICATE-----Generated at Tue Sep 15 13:23:31 2026 by rpki-client