$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe65d460-86d4-4da6-ba70-04bf7787ba40.roa File: fe65d460-86d4-4da6-ba70-04bf7787ba40.roa (raw, json) Hash identifier: ZDp7rYgXajfhlb1dyGtXEKV915KlHHsAWVajlUuvDvk= Subject key identifier: D2:53:62:D3:35:DA:CE:20:38:2B:6B:98:AA:CC:D9:73:1B:E8:AF:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EC117137CBD7113F3627CF885BA44C0E2846279 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe65d460-86d4-4da6-ba70-04bf7787ba40.roa Signing time: Fri 07 Aug 2026 00:10:13 +0000 ROA not before: Fri 07 Aug 2026 00:10:13 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c1:17:13:7c:bd:71:13:f3:62:7c:f8:85:ba:44:c0:e2:84:62:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:10:13 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=4365d172081032cbc873108758899f844a2a9ebfc26b6bbb2137dd9fcefc0938, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:12:a0:9e:80:45:16:cf:30:7b:dd:a1:3e: 82:fd:5a:63:f5:49:81:c3:0d:c1:b3:cf:65:f6:6e: 54:bd:b5:aa:9a:8e:30:79:ab:c4:dd:73:e1:6c:e0: 2d:1e:5e:a7:97:d9:2a:88:9b:6c:ba:2a:de:0e:47: 0d:f1:4f:8c:50:29:5b:d7:72:b7:c9:5c:a0:dd:d1: 20:42:fa:a8:1f:66:42:a6:89:6a:3d:8d:68:11:f2: ed:91:06:d4:94:72:3a:d0:c6:a7:68:c9:bf:b2:84: f0:66:8d:a8:64:0b:62:ce:ae:8b:0b:02:27:d9:c8: 33:ce:a2:a6:20:d2:79:de:38:bb:0b:a5:b5:72:cc: 07:6b:31:61:ae:d8:77:e4:ce:0a:d2:b2:32:8d:a4: 4f:86:8f:05:e9:d0:72:d6:35:6c:d6:f8:11:44:7f: 6f:fe:e3:c9:c2:27:3f:be:a2:4a:9c:5a:0a:6f:70: dc:69:1e:3c:21:a9:11:7c:a0:b9:c0:63:6d:e8:9c: e4:33:01:0b:7e:8a:d8:a4:9d:e3:9d:d8:c6:40:88: e3:a0:6b:96:8c:40:80:37:f4:81:68:e6:b8:8c:b9: 04:eb:31:f5:74:5b:2b:f3:7f:dc:42:e4:32:25:cc: 43:d0:80:aa:41:2c:28:78:ab:6c:26:1d:f9:50:8b: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:53:62:D3:35:DA:CE:20:38:2B:6B:98:AA:CC:D9:73:1B:E8:AF:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe65d460-86d4-4da6-ba70-04bf7787ba40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.156.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:fe:3e:13:8b:0a:a7:3d:bc:b2:72:13:70:06:b4:fc:84:57: 9b:8a:39:3b:fa:ff:8c:73:12:df:d5:10:cd:87:63:2e:b6:1c: 82:cd:03:be:88:f8:d0:e4:b9:47:cc:2a:f7:7a:6a:56:02:4e: 4c:14:d2:46:6c:69:87:90:13:ba:c7:6b:cf:08:80:e2:25:1b: 64:66:64:d0:99:78:fd:81:ae:12:74:28:ec:35:ca:36:bd:a4: 34:c3:49:a1:4f:25:8a:7b:65:78:dd:d4:fc:46:8d:7e:52:f3: 80:09:98:1b:76:d0:20:24:e4:2c:4a:48:b3:bb:ed:17:fc:e6: b3:e2:38:a6:4e:de:c8:ed:1b:55:52:8e:e2:77:1b:c5:3c:f8: a7:15:e8:58:e3:7b:88:e9:63:d2:41:c9:cb:f5:63:ce:03:62: 00:e2:e0:7c:b7:e2:28:ca:68:77:a5:b8:f3:81:b8:88:59:85: 81:77:08:9a:e3:d5:a7:6e:fa:61:77:91:2c:f7:3a:be:15:6f: 41:97:ac:8d:70:56:d7:b9:f7:98:46:7e:ac:1e:89:13:bf:0e: e7:14:ae:3d:3a:54:75:60:ff:13:66:83:5b:ac:2f:e2:14:8f: 92:fd:a4:cc:96:ed:41:41:94:47:25:a7:d9:11:70:e1:10:b8: 57:26:ee:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXsEXE3y9cRPzYnz4hbpEwOKEYnkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAxMDEzWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzY1ZDE3MjA4MTAzMmNiYzg3MzEwODc1ODg5OWY4NDRh MmE5ZWJmYzI2YjZiYmIyMTM3ZGQ5ZmNlZmMwOTM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWChKgnoBFFs8we92hPoL9WmP1SYHDDcGzz2X2blS9taqa jjB5q8Tdc+Fs4C0eXqeX2SqIm2y6Kt4ORw3xT4xQKVvXcrfJXKDd0SBC+qgfZkKm iWo9jWgR8u2RBtSUcjrQxqdoyb+yhPBmjahkC2LOrosLAifZyDPOoqYg0nneOLsL pbVyzAdrMWGu2HfkzgrSsjKNpE+GjwXp0HLWNWzW+BFEf2/+48nCJz++okqcWgpv cNxpHjwhqRF8oLnAY23onOQzAQt+itikneOd2MZAiOOga5aMQIA39IFo5riMuQTr MfV0Wyvzf9xC5DIlzEPQgKpBLCh4q2wmHflQi0jTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0lNi0zXaziA4K2uYqszZcxvor28wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlNjVkNDYwLTg2ZDQtNGRhNi1iYTcwLTA0YmY3Nzg3YmE0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUpwwDQYJKoZIhvcNAQELBQADggEBAD/+PhOLCqc9vLJyE3AGtPyEV5uK OTv6/4xzEt/VEM2HYy62HILNA76I+NDkuUfMKvd6alYCTkwU0kZsaYeQE7rHa88I gOIlG2RmZNCZeP2BrhJ0KOw1yja9pDTDSaFPJYp7ZXjd1PxGjX5S84AJmBt20CAk 5CxKSLO77Rf85rPiOKZO3sjtG1VSjuJ3G8U8+KcV6Fjje4jpY9JBycv1Y84DYgDi 4Hy34ijKaHeluPOBuIhZhYF3CJrj1adu+mF3kSz3Or4Vb0GXrI1wVte595hGfqwe iRO/DucUrj06VHVg/xNmg1usL+IUj5L9pMyW7UFBlEclp9kRcOEQuFcm7vU= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:49 2026 by rpki-client