$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de18eafb-82ef-4a3a-9f8f-2af6be4f74f7.roa File: de18eafb-82ef-4a3a-9f8f-2af6be4f74f7.roa (raw, json) Hash identifier: a45ivAff0yJMcqRKyHBnHaF4+0C+fzDwx76311zpyNs= Subject key identifier: CA:90:48:1A:82:C2:88:38:72:C4:20:A2:8B:41:90:80:67:D2:15:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F38BE6508280BD50FEDA5ABD94C9C7E41B46D9A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de18eafb-82ef-4a3a-9f8f-2af6be4f74f7.roa Signing time: Thu 10 Sep 2026 08:22:53 +0000 ROA not before: Thu 10 Sep 2026 08:22:53 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 63.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:38:be:65:08:28:0b:d5:0f:ed:a5:ab:d9:4c:9c:7e:41:b4:6d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 08:22:53 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=21ce988ef5a1601d84c10febb10079c822ccbdeb4c31536938b2c109ffd96e58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:10:d5:ae:d0:8d:a1:d5:95:86:75:09:15: 0c:8c:3c:90:dc:42:e3:b8:98:21:78:1b:33:78:19: 38:9b:c9:94:e6:52:f2:2e:58:81:eb:aa:23:ee:44: 0a:18:60:d1:0b:96:84:13:14:c0:6a:c1:b3:c9:d0: 3f:16:33:52:71:9a:6e:21:48:db:78:36:01:10:fa: ee:a1:e5:03:a8:53:5a:e7:f2:69:a6:10:1b:06:a7: 08:99:ff:c9:c9:e9:1c:c4:7b:c5:5a:d6:9c:ea:53: bb:cb:1f:d8:41:95:7d:cf:fd:d3:67:28:5d:72:3c: 46:22:d4:0b:cc:f4:0b:59:47:28:4f:09:6d:84:3c: ee:3a:c3:d1:3e:32:99:59:89:0f:f4:38:3f:99:6f: ad:9c:49:6b:bf:f3:72:31:fc:7c:15:c7:2d:2d:67: ea:47:50:24:ae:fb:50:ec:a9:bb:1f:59:03:9b:c7: 31:b3:09:01:88:c0:c0:0c:01:97:7c:f7:27:8c:af: 37:6a:ab:e5:c6:96:43:99:5a:15:6b:32:aa:aa:2e: 31:b3:af:66:54:3e:ed:d7:92:bf:2b:a9:09:46:e8: fb:51:04:19:53:22:e3:b9:e5:e9:10:bf:3a:79:c7: a6:e4:95:08:ec:63:13:1d:ac:08:ed:2d:0c:7a:81: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:48:1A:82:C2:88:38:72:C4:20:A2:8B:41:90:80:67:D2:15:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de18eafb-82ef-4a3a-9f8f-2af6be4f74f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 71:1a:44:f4:1c:c7:33:47:7a:36:a1:79:47:9a:f2:7c:83:64: a0:18:3e:5e:b6:30:91:2d:a2:32:0b:5f:44:97:0a:bc:d5:ad: 4d:f8:bb:db:c1:61:3c:70:ac:d5:57:99:4e:b3:4c:54:e5:e7: d0:41:bd:9a:ba:0c:b1:73:1a:6a:d5:53:dd:c3:f3:11:47:4e: b7:ed:66:f9:89:29:c8:58:4d:b2:46:5b:ef:f5:4b:06:48:4b: 65:e6:b3:ab:b8:5e:b1:77:ef:73:eb:c0:4e:c3:62:26:84:f4: 11:7a:fe:f1:ba:e1:46:b3:92:c7:52:33:06:9c:f1:5b:89:c8: 1c:34:59:45:8c:d7:46:e2:00:ef:ea:46:c1:aa:96:73:63:df: 3b:82:8c:ab:af:92:8b:9a:de:6b:4d:a7:91:21:09:22:81:0f: 08:70:88:ce:e3:ee:c9:8b:1f:e9:f3:1f:00:67:dc:20:3e:98: e4:14:61:0b:28:ee:0d:4b:68:2b:3c:12:cb:29:bc:82:eb:42: c0:86:8e:82:58:52:fb:38:a9:42:69:4b:ca:8a:aa:93:97:b4: 1d:2b:3b:d5:ae:df:e4:79:66:cf:74:c7:89:ed:7a:87:b1:58: ec:af:fc:72:22:35:52:de:0c:6d:87:6c:41:fb:57:5a:b3:26: 7c:d0:60:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXzi+ZQgoC9UP7aWr2UycfkG0bZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDgyMjUzWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWNlOTg4ZWY1YTE2MDFkODRjMTBmZWJiMTAwNzljODIy Y2NiZGViNGMzMTUzNjkzOGIyYzEwOWZmZDk2ZTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIEBDVrtCNodWVhnUJFQyMPJDcQuO4mCF4GzN4GTibyZTm UvIuWIHrqiPuRAoYYNELloQTFMBqwbPJ0D8WM1Jxmm4hSNt4NgEQ+u6h5QOoU1rn 8mmmEBsGpwiZ/8nJ6RzEe8Va1pzqU7vLH9hBlX3P/dNnKF1yPEYi1AvM9AtZRyhP CW2EPO46w9E+MplZiQ/0OD+Zb62cSWu/83Ix/HwVxy0tZ+pHUCSu+1DsqbsfWQOb xzGzCQGIwMAMAZd89yeMrzdqq+XGlkOZWhVrMqqqLjGzr2ZUPu3Xkr8rqQlG6PtR BBlTIuO55ekQvzp5x6bklQjsYxMdrAjtLQx6gY6RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUypBIGoLCiDhyxCCii0GQgGfSFTEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlMThlYWZiLTgyZWYtNGEzYS05ZjhmLTJhZjZiZTRmNzRmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA/+d0wDQYJKoZIhvcNAQELBQADggEBAHEaRPQcxzNHejaheUea8nyDZKAY Pl62MJEtojILX0SXCrzVrU34u9vBYTxwrNVXmU6zTFTl59BBvZq6DLFzGmrVU93D 8xFHTrftZvmJKchYTbJGW+/1SwZIS2Xms6u4XrF373PrwE7DYiaE9BF6/vG64Uaz ksdSMwac8VuJyBw0WUWM10biAO/qRsGqlnNj3zuCjKuvkoua3mtNp5EhCSKBDwhw iM7j7smLH+nzHwBn3CA+mOQUYQso7g1LaCs8EsspvILrQsCGjoJYUvs4qUJpS8qK qpOXtB0rO9Wu3+R5Zs90x4nteoexWOyv/HIiNVLeDG2HbEH7V1qzJnzQYIw= -----END CERTIFICATE-----Generated at Sun Sep 20 16:37:31 2026 by rpki-client