$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cd1c20-e26c-40aa-b6df-207c7835aa03.roa File: 06cd1c20-e26c-40aa-b6df-207c7835aa03.roa (raw, json) Hash identifier: WB/W9M8NfBUJIPF56tDR/9fggO+ToaTWu8fTHidjnDk= Subject key identifier: 6D:5A:ED:C1:2E:96:2F:CC:7A:42:FD:3B:43:0E:E6:AC:7D:C9:CF:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24807177183FE899C540B538243E212689C5E1A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cd1c20-e26c-40aa-b6df-207c7835aa03.roa Signing time: Tue 11 Aug 2026 18:47:07 +0000 ROA not before: Tue 11 Aug 2026 18:47:07 +0000 ROA not after: Mon 09 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.4.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:80:71:77:18:3f:e8:99:c5:40:b5:38:24:3e:21:26:89:c5:e1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 18:47:07 2026 GMT Not After : Nov 9 23:59:59 2026 GMT Subject: serialNumber=eadd7ef3bad4a2332a436c63f0d31ffd40894677cae540309153e4d94a2ead22, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:7d:ea:8e:0e:e2:e8:c4:c3:1f:5b:3f:d4: e0:43:6f:7e:f6:44:f3:f8:e2:ea:0f:cd:d0:22:91: c6:cd:bc:ad:53:89:f6:72:71:61:9b:c9:bb:ed:9f: c5:d8:7d:28:65:83:34:93:a2:5b:07:77:94:62:bd: a0:70:fb:34:b8:dd:d2:bb:e6:8b:cc:21:db:a4:af: 7c:c6:b6:ff:db:86:12:37:16:e4:b3:d7:89:b3:98: dd:8a:1b:51:5e:c6:da:cb:72:27:9d:d2:00:bf:56: b3:27:4c:92:2b:e2:aa:c9:73:6f:e9:9f:c9:fc:6c: c6:3e:b3:8d:aa:36:9b:f3:9d:db:f9:7c:d0:2f:1d: 16:82:68:f5:fd:66:ed:0c:5a:71:fc:e1:16:ca:d3: c7:17:f6:96:3b:dc:65:8e:b5:74:64:13:bf:ea:69: 66:59:70:26:34:3c:aa:01:80:2a:8c:44:6f:62:0d: fd:36:da:98:cb:07:4b:5d:cb:e1:ab:83:c1:89:3e: 2d:ec:37:08:6b:6a:bb:71:0f:3d:e8:d1:30:6c:62: f2:0a:9a:48:e5:dc:0a:99:47:90:0e:9f:a9:13:0e: b9:d0:35:73:50:ca:20:ab:8e:7d:75:ec:77:63:1a: 9a:f0:6e:8d:75:25:51:1d:7a:64:f0:bf:c2:cf:20: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:ED:C1:2E:96:2F:CC:7A:42:FD:3B:43:0E:E6:AC:7D:C9:CF:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cd1c20-e26c-40aa-b6df-207c7835aa03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.4.128.0/17 Signature Algorithm: sha256WithRSAEncryption d1:0b:da:06:cf:ea:6e:33:34:c4:a7:52:f3:2f:38:d0:7c:37: bf:f1:a9:9f:d6:63:7b:32:6e:a8:6b:ba:42:7d:47:94:c6:d8: 5a:4d:ef:8f:79:00:f5:3a:8b:78:ec:78:c2:66:f5:90:9b:e7: fe:6a:6d:95:c7:1e:eb:68:f5:dc:54:50:68:30:fa:ce:a4:55: a4:95:4f:14:6f:4a:01:88:80:78:2d:f3:03:a0:24:f0:ac:f8: cc:48:27:21:bf:12:1b:4b:51:e3:ab:85:87:df:eb:18:b7:0c: 94:6a:fa:0b:15:cf:80:06:f6:ad:16:0b:60:d0:5a:50:91:c6: 46:39:c3:ab:cf:c5:59:31:12:a0:00:e7:97:39:55:be:72:d4: b6:66:40:11:99:05:c4:32:7f:a2:c3:98:18:8d:11:24:0f:90: 4a:6c:f6:2f:77:fc:55:44:d2:02:48:80:d1:3e:b6:cf:2c:a1: cf:23:2e:6b:b9:9b:6b:d7:5e:7a:9b:a9:84:0f:70:3d:71:aa: a3:9f:d2:fa:06:b8:74:59:13:00:6c:98:4f:ed:b9:8a:a7:5f: 7b:34:92:1f:fc:78:65:26:54:ed:f2:dd:4a:bd:c9:95:fe:dc: b4:ad:e0:d7:c2:a3:cf:cd:82:53:d8:a0:d0:2a:61:47:b2:d4: d2:e7:60:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJIBxdxg/6JnFQLU4JD4hJonF4aMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODExMTg0NzA3WhcNMjYxMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWRkN2VmM2JhZDRhMjMzMmE0MzZjNjNmMGQzMWZmZDQw ODk0Njc3Y2FlNTQwMzA5MTUzZTRkOTRhMmVhZDIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5Nn3qjg7i6MTDH1s/1OBDb372RPP44uoPzdAikcbNvK1T ifZycWGbybvtn8XYfShlgzSTolsHd5RivaBw+zS43dK75ovMIdukr3zGtv/bhhI3 FuSz14mzmN2KG1FextrLcied0gC/VrMnTJIr4qrJc2/pn8n8bMY+s42qNpvzndv5 fNAvHRaCaPX9Zu0MWnH84RbK08cX9pY73GWOtXRkE7/qaWZZcCY0PKoBgCqMRG9i Df022pjLB0tdy+Grg8GJPi3sNwhrartxDz3o0TBsYvIKmkjl3AqZR5AOn6kTDrnQ NXNQyiCrjn117HdjGprwbo11JVEdemTwv8LPIGTzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbVrtwS6WL8x6Qv07Qw7mrH3Jz9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2Y2QxYzIwLWUyNmMtNDBhYS1iNmRmLTIwN2M3ODM1YWEwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQBIAwDQYJKoZIhvcNAQELBQADggEBANEL2gbP6m4zNMSnUvMvONB8N7/x qZ/WY3sybqhrukJ9R5TG2FpN7495APU6i3jseMJm9ZCb5/5qbZXHHuto9dxUUGgw +s6kVaSVTxRvSgGIgHgt8wOgJPCs+MxIJyG/EhtLUeOrhYff6xi3DJRq+gsVz4AG 9q0WC2DQWlCRxkY5w6vPxVkxEqAA55c5Vb5y1LZmQBGZBcQyf6LDmBiNESQPkEps 9i93/FVE0gJIgNE+ts8soc8jLmu5m2vXXnqbqYQPcD1xqqOf0voGuHRZEwBsmE/t uYqnX3s0kh/8eGUmVO3y3Uq9yZX+3LSt4NfCo8/NglPYoNAqYUey1NLnYNI= -----END CERTIFICATE-----Generated at Tue Sep 15 11:36:23 2026 by rpki-client