$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c0017-54d6-40e5-a9bf-c433c1f49900.roa File: f72c0017-54d6-40e5-a9bf-c433c1f49900.roa (raw, json) Hash identifier: j92DUqBBaTyvYHnHxP1hhkSX0QMxB7g+sJpcCMnwlf8= Subject key identifier: 11:B2:2F:07:41:7F:89:61:2C:D5:D2:29:95:7E:32:8F:72:F4:58:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 617E4FB316EDBA856CF97DAC76ED0F727FAE1694 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c0017-54d6-40e5-a9bf-c433c1f49900.roa Signing time: Thu 10 Sep 2026 00:20:44 +0000 ROA not before: Thu 10 Sep 2026 00:20:44 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 199.183.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7e:4f:b3:16:ed:ba:85:6c:f9:7d:ac:76:ed:0f:72:7f:ae:16:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:20:44 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=f303679c6dcd08ba69926fb979b8efa68e1eae72a9d53e42018afde45481afba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:9c:d7:56:e9:08:22:f7:fb:27:37:78:41: 35:42:e8:79:a1:bc:17:e0:b2:f4:ef:1b:a2:08:42: 4c:ca:f3:43:eb:f6:f7:10:42:69:ae:c2:6f:0f:a9: 4a:7a:3d:89:de:6f:c7:de:6b:22:ea:4c:37:10:6f: d6:4a:29:23:a4:13:f5:24:52:aa:38:32:5d:a2:60: aa:d7:56:0b:49:71:ba:9f:94:c2:ae:a6:70:02:f7: 53:1d:42:1b:7b:0f:8c:05:83:de:03:58:f6:7e:7b: 18:cb:1b:b6:36:17:61:d6:3d:5f:e5:46:6f:cb:e8: b1:05:df:0c:82:16:3e:37:0c:a3:85:a7:81:9d:04: 3b:2a:40:4f:ee:38:1b:40:66:41:0d:af:a2:64:99: 2e:33:b7:ab:8d:25:f0:43:53:24:dc:b1:8d:81:87: b5:01:79:45:16:b9:03:30:e3:93:f3:83:6c:a6:83: 19:24:95:fb:0c:b4:2b:4c:22:88:1b:3e:ca:b4:40: a1:01:af:92:d3:67:6c:28:45:be:50:f3:ce:1b:e1: dd:b0:28:dd:5a:4a:bf:6e:f4:c1:70:74:b6:73:54: c8:64:74:bf:3f:0a:21:ff:44:37:69:30:d9:96:06: a8:e5:f2:a4:21:51:19:81:9a:50:9f:3e:1e:a5:c6: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B2:2F:07:41:7F:89:61:2C:D5:D2:29:95:7E:32:8F:72:F4:58:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c0017-54d6-40e5-a9bf-c433c1f49900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.183.0.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:3e:af:d4:38:ae:33:c9:d7:fb:1a:90:6f:e7:7c:9b:da:f2: ff:78:7f:34:35:cb:c1:1b:35:17:16:52:3e:19:ed:ce:55:37: bb:13:f9:69:01:78:d7:61:9b:d8:71:71:92:62:d9:67:46:bf: a5:2b:e8:b6:38:8d:15:40:64:36:bf:c1:e4:9c:ee:bb:a6:c1: 4c:aa:a8:60:3f:86:a9:12:82:46:29:9a:25:81:2a:d9:ea:49: b3:6b:8d:39:ab:54:1b:45:7f:39:79:d5:7a:63:54:e7:fa:5b: 70:2e:c4:35:e0:3e:a5:b0:4e:9d:c9:72:06:bb:a2:dd:99:82: 66:e2:04:2d:b2:1d:2f:e9:83:62:d6:c9:90:f2:29:da:db:81: 2d:e6:78:38:20:23:98:1e:29:b7:33:5e:bb:91:82:07:74:54: 42:08:c6:dc:4a:e1:68:3b:c0:c5:5c:11:49:70:ea:25:af:c5: 1d:ab:97:8e:f0:22:f7:8d:b3:10:0b:38:b2:80:cd:08:df:74: f2:a5:4c:12:2e:8b:4f:7b:4a:61:8a:ff:fe:df:7e:dd:be:b4: 93:92:71:c9:9b:19:e2:18:22:75:bf:59:1e:b5:a4:a6:8a:7e: c6:78:41:8b:40:b7:1b:da:6b:22:92:4f:67:12:01:da:ce:57: b4:80:0e:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYX5PsxbtuoVs+X2sdu0Pcn+uFpQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAyMDQ0WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzAzNjc5YzZkY2QwOGJhNjk5MjZmYjk3OWI4ZWZhNjhl MWVhZTcyYTlkNTNlNDIwMThhZmRlNDU0ODFhZmJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWC5zXVukIIvf7Jzd4QTVC6HmhvBfgsvTvG6IIQkzK80Pr 9vcQQmmuwm8PqUp6PYneb8feayLqTDcQb9ZKKSOkE/UkUqo4Ml2iYKrXVgtJcbqf lMKupnAC91MdQht7D4wFg94DWPZ+exjLG7Y2F2HWPV/lRm/L6LEF3wyCFj43DKOF p4GdBDsqQE/uOBtAZkENr6JkmS4zt6uNJfBDUyTcsY2Bh7UBeUUWuQMw45Pzg2ym gxkklfsMtCtMIogbPsq0QKEBr5LTZ2woRb5Q884b4d2wKN1aSr9u9MFwdLZzVMhk dL8/CiH/RDdpMNmWBqjl8qQhURmBmlCfPh6lxji5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEbIvB0F/iWEs1dIplX4yj3L0WBMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3MmMwMDE3LTU0ZDYtNDBlNS1hOWJmLWM0MzNjMWY0OTkwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATHtwAwDQYJKoZIhvcNAQELBQADggEBAGo+r9Q4rjPJ1/sakG/nfJva8v94 fzQ1y8EbNRcWUj4Z7c5VN7sT+WkBeNdhm9hxcZJi2WdGv6Ur6LY4jRVAZDa/weSc 7rumwUyqqGA/hqkSgkYpmiWBKtnqSbNrjTmrVBtFfzl51XpjVOf6W3AuxDXgPqWw Tp3Jcga7ot2ZgmbiBC2yHS/pg2LWyZDyKdrbgS3meDggI5geKbczXruRggd0VEII xtxK4Wg7wMVcEUlw6iWvxR2rl47wIveNsxALOLKAzQjfdPKlTBIui097SmGK//7f ft2+tJOSccmbGeIYInW/WR61pKaKfsZ4QYtAtxvaayKST2cSAdrOV7SADqQ= -----END CERTIFICATE-----Generated at Tue Sep 15 11:39:14 2026 by rpki-client