$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff7b8fa7-b834-463e-bb68-b5a4f30ad98d.roa File: ff7b8fa7-b834-463e-bb68-b5a4f30ad98d.roa (raw, json) Hash identifier: Uc/pxkI/JG4i81VjuhXXQJM6K0J2DvMJQZsAmRuSY6M= Subject key identifier: AE:5C:72:8F:8D:A8:D2:82:01:16:FC:8D:93:4A:87:77:64:DC:7A:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 399C2D50665420787591F489E92AFCD432AE6512 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff7b8fa7-b834-463e-bb68-b5a4f30ad98d.roa Signing time: Fri 31 Jul 2026 01:30:49 +0000 ROA not before: Fri 31 Jul 2026 01:30:49 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.20.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9c:2d:50:66:54:20:78:75:91:f4:89:e9:2a:fc:d4:32:ae:65:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 01:30:49 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=3bfa9daedfcec66eb54e0d002607d8a55f49e49a64e909ac1eb4e2785e77194a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:06:c7:65:15:0f:3b:49:3f:49:61:34:8c:d2: 0e:7f:af:79:15:42:0b:17:5a:23:98:a6:d0:29:ad: 5b:c4:cd:b0:22:be:35:fc:e0:3e:33:24:af:4b:77: e2:d5:57:85:a0:df:86:44:1c:d8:5a:98:bf:66:a4: 76:af:5a:23:fa:cf:53:20:9d:31:8f:45:2e:c7:ae: d6:f2:8f:41:4a:86:2c:a1:ee:a8:ed:3e:40:e2:1f: a2:1c:b5:bb:e5:8c:f7:85:14:33:98:1a:31:eb:c5: 4d:2d:28:53:e5:71:80:44:4f:16:a1:37:c8:31:f1: 51:8b:53:0f:57:77:20:75:27:80:c3:f5:db:5b:4b: 32:c0:e7:f9:59:33:d8:cc:c2:99:55:f6:47:f3:ff: 03:2d:90:f2:68:16:90:88:08:d2:8a:cd:83:92:ea: 02:ae:04:3d:99:b5:ae:48:96:49:57:06:27:92:a7: 8e:bc:0b:cd:07:dc:06:68:a7:77:fe:db:50:3e:27: 6d:f7:21:50:34:49:1f:04:64:be:3d:7d:fd:04:d5: 2a:02:17:6e:77:f6:85:60:e9:f9:aa:fe:f1:6c:68: d6:8c:1a:cc:43:24:93:d0:35:4c:04:41:71:85:87: 33:3c:40:c8:8b:10:3a:76:ec:e0:c5:f9:1e:fd:d1: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5C:72:8F:8D:A8:D2:82:01:16:FC:8D:93:4A:87:77:64:DC:7A:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff7b8fa7-b834-463e-bb68-b5a4f30ad98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.20.50.0/23 Signature Algorithm: sha256WithRSAEncryption c0:02:64:2c:50:76:3d:2f:0d:93:39:49:b6:d2:8e:ab:dc:75: 9b:ba:e3:93:05:db:60:74:73:b8:99:88:34:a2:6c:9d:85:81: 66:e2:68:be:4e:f7:44:92:4c:6e:46:35:30:19:be:02:b8:cc: b7:4c:fb:75:79:85:70:4b:31:f1:92:44:5e:b2:71:13:e4:e9: 24:5b:57:74:3d:1b:49:1e:76:d6:2b:59:3c:7d:ac:fd:14:54: 3f:bb:47:34:7b:91:38:73:e3:29:f7:ed:b5:c9:f6:62:ab:b7: 90:ce:6b:87:7c:40:41:ae:de:f4:d9:3f:06:13:4b:21:48:f7: e8:2d:16:d9:13:83:21:82:7c:87:c8:b1:ab:05:62:26:80:b9: c2:12:2d:57:d3:23:47:d9:ba:31:eb:90:0d:db:fc:9b:30:ef: 7c:be:5c:21:4c:95:88:96:0d:80:88:73:45:96:bd:1b:2d:3b: 3b:79:b2:09:ca:47:5b:67:55:00:0e:fb:3b:4f:80:d9:29:ae: b8:69:c9:13:f7:99:37:77:6d:f0:a3:6a:92:6b:b5:d4:24:02: 4e:7c:2c:5b:db:e2:39:18:5d:ac:2d:fa:23:be:19:64:e6:e6: 93:5f:62:36:30:45:d5:74:91:3b:a1:29:39:92:5d:52:af:09: 8a:79:4d:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOZwtUGZUIHh1kfSJ6Sr81DKuZRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEzMDQ5WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmZhOWRhZWRmY2VjNjZlYjU0ZTBkMDAyNjA3ZDhhNTVm NDllNDlhNjRlOTA5YWMxZWI0ZTI3ODVlNzcxOTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEBsdlFQ87ST9JYTSM0g5/r3kVQgsXWiOYptAprVvEzbAi vjX84D4zJK9Ld+LVV4Wg34ZEHNhamL9mpHavWiP6z1MgnTGPRS7Hrtbyj0FKhiyh 7qjtPkDiH6IctbvljPeFFDOYGjHrxU0tKFPlcYBETxahN8gx8VGLUw9XdyB1J4DD 9dtbSzLA5/lZM9jMwplV9kfz/wMtkPJoFpCICNKKzYOS6gKuBD2Zta5IlklXBieS p468C80H3AZop3f+21A+J233IVA0SR8EZL49ff0E1SoCF2539oVg6fmq/vFsaNaM GsxDJJPQNUwEQXGFhzM8QMiLEDp27ODF+R790XiBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrlxyj42o0oIBFvyNk0qHd2TcenYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmN2I4ZmE3LWI4MzQtNDYzZS1iYjY4LWI1YTRmMzBhZDk4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2FDIwDQYJKoZIhvcNAQELBQADggEBAMACZCxQdj0vDZM5SbbSjqvcdZu6 45MF22B0c7iZiDSibJ2FgWbiaL5O90SSTG5GNTAZvgK4zLdM+3V5hXBLMfGSRF6y cRPk6SRbV3Q9G0kedtYrWTx9rP0UVD+7RzR7kThz4yn37bXJ9mKrt5DOa4d8QEGu 3vTZPwYTSyFI9+gtFtkTgyGCfIfIsasFYiaAucISLVfTI0fZujHrkA3b/Jsw73y+ XCFMlYiWDYCIc0WWvRstOzt5sgnKR1tnVQAO+ztPgNkprrhpyRP3mTd3bfCjapJr tdQkAk58LFvb4jkYXawt+iO+GWTm5pNfYjYwRdV0kTuhKTmSXVKvCYp5TUs= -----END CERTIFICATE-----Generated at Tue Sep 15 11:37:53 2026 by rpki-client