$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a022cf7-0f11-4c1a-b021-24883a373bdb.roa File: 1a022cf7-0f11-4c1a-b021-24883a373bdb.roa (raw, json) Hash identifier: ACzneG9iGxyByiEHGY0LY0U16CDEQI2KSCoBMsMuuN0= Subject key identifier: 7B:90:BD:56:E9:6D:B5:CD:99:C3:F1:EC:F5:6B:6F:8F:C5:2B:E3:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AFA8B396424FF0C6254289B5DE8630560002FAC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a022cf7-0f11-4c1a-b021-24883a373bdb.roa Signing time: Tue 06 Oct 2026 00:51:14 +0000 ROA not before: Tue 06 Oct 2026 00:51:14 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.54.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fa:8b:39:64:24:ff:0c:62:54:28:9b:5d:e8:63:05:60:00:2f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:51:14 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=cfa84f08f6c65cb61a1b657481379335fc8b900aad7cc166ad55bd190f25f7eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:6a:b7:48:34:c0:b6:6a:35:bc:5e:d0:ef: 2e:c8:a9:f7:2b:2f:86:f3:5e:79:98:4b:07:3c:db: 66:f3:19:82:62:ad:f0:84:9c:18:27:93:bd:ce:74: ca:64:b2:8b:fd:f6:b4:d3:15:58:ec:16:4b:e8:cf: cb:af:bf:6c:dc:c2:76:3d:e6:50:0a:e0:f0:c5:fc: 20:31:07:8c:77:3b:8d:a5:8e:4f:61:92:93:19:75: e3:19:e6:fa:fe:ac:8f:0e:66:99:38:81:9d:bc:58: af:a1:65:94:a8:cc:90:08:5f:4a:4d:9a:07:07:73: 29:6e:27:fe:ff:3f:b8:22:97:3b:b4:9d:d1:79:57: ab:fd:4f:e0:3b:11:57:f1:f7:d3:a2:d5:30:b1:c1: 27:71:69:ea:34:50:a9:50:dc:97:a2:53:f3:ba:cf: b9:52:aa:d9:8d:d8:8e:0e:9c:74:33:6d:e9:1e:e3: 16:5f:cd:41:e9:a1:1a:2f:4f:99:23:d3:70:7b:0c: 51:2e:6d:05:a8:5a:2d:61:d0:71:4d:2f:2f:b8:b1: 07:cb:52:90:79:99:81:f7:98:b3:d9:59:e9:fa:9a: 49:69:a0:59:b8:ba:57:5a:75:a2:a6:cf:f8:13:24: 06:23:07:23:b4:1c:20:0f:73:f7:45:f1:10:43:c2: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:90:BD:56:E9:6D:B5:CD:99:C3:F1:EC:F5:6B:6F:8F:C5:2B:E3:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a022cf7-0f11-4c1a-b021-24883a373bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.54.0.0/15 Signature Algorithm: sha256WithRSAEncryption 36:d4:70:00:c2:12:fa:26:08:ee:dc:87:5a:8d:e4:1d:e1:00: 2e:b5:a0:a8:3f:22:fd:27:62:d8:e5:8d:9b:5a:8c:eb:e7:7b: 07:8d:e1:89:01:05:c9:5e:4f:b6:33:c9:80:74:98:25:c4:64: fb:5c:f5:32:46:88:1f:f7:9b:f4:25:50:e9:f9:37:44:fa:a9: 71:e4:c3:83:83:9c:3c:de:e9:c5:13:36:09:01:a0:c2:e2:65: 22:8e:28:96:d6:10:18:17:fd:f2:a8:9d:24:26:df:ef:ea:67: 2c:5a:b2:a5:1d:55:e2:02:04:6b:5d:9d:81:a0:ed:e4:7d:ed: 02:2d:ca:24:89:de:17:0a:53:16:4e:e6:80:de:19:40:9f:9b: 20:3e:99:84:b0:80:bd:49:93:74:8d:d6:27:d7:32:8c:2c:eb: 71:3f:46:e0:d4:1d:10:ab:9d:58:f6:c1:b3:9a:99:19:a2:7c: c6:c9:dc:7e:db:35:2b:01:bf:d3:f3:0e:41:db:c5:a7:23:ca: 56:a9:1e:f6:59:6e:53:12:66:d3:e5:08:44:fd:c6:19:8e:da: d0:46:ca:8a:9d:b8:e8:d3:6b:35:19:98:b7:0f:06:30:5c:ed: 19:38:a5:1f:fc:52:0d:07:77:bf:ea:e7:36:86:92:87:f0:ff: ff:58:1a:b8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUevqLOWQk/wxiVCibXehjBWAAL6wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA1MTE0WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmE4NGYwOGY2YzY1Y2I2MWExYjY1NzQ4MTM3OTMzNWZj OGI5MDBhYWQ3Y2MxNjZhZDU1YmQxOTBmMjVmN2ViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwy2q3SDTAtmo1vF7Q7y7IqfcrL4bzXnmYSwc822bzGYJi rfCEnBgnk73OdMpksov99rTTFVjsFkvoz8uvv2zcwnY95lAK4PDF/CAxB4x3O42l jk9hkpMZdeMZ5vr+rI8OZpk4gZ28WK+hZZSozJAIX0pNmgcHcyluJ/7/P7gilzu0 ndF5V6v9T+A7EVfx99Oi1TCxwSdxaeo0UKlQ3JeiU/O6z7lSqtmN2I4OnHQzbeke 4xZfzUHpoRovT5kj03B7DFEubQWoWi1h0HFNLy+4sQfLUpB5mYH3mLPZWen6mklp oFm4uldadaKmz/gTJAYjByO0HCAPc/dF8RBDwovNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUe5C9Vulttc2Zw/Hs9Wtvj8Ur40AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhMDIyY2Y3LTBmMTEtNGMxYS1iMDIxLTI0ODgzYTM3M2JkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQNjANBgkqhkiG9w0BAQsFAAOCAQEANtRwAMIS+iYI7tyHWo3kHeEALrWg qD8i/Sdi2OWNm1qM6+d7B43hiQEFyV5PtjPJgHSYJcRk+1z1MkaIH/eb9CVQ6fk3 RPqpceTDg4OcPN7pxRM2CQGgwuJlIo4oltYQGBf98qidJCbf7+pnLFqypR1V4gIE a12dgaDt5H3tAi3KJIneFwpTFk7mgN4ZQJ+bID6ZhLCAvUmTdI3WJ9cyjCzrcT9G 4NQdEKudWPbBs5qZGaJ8xsncfts1KwG/0/MOQdvFpyPKVqke9lluUxJm0+UIRP3G GY7a0EbKip246NNrNRmYtw8GMFztGTilH/xSDQd3v+rnNoaSh/D//1gauA== -----END CERTIFICATE-----Generated at Wed Nov 4 21:13:47 2026 by rpki-client