$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc2c70b-2c53-4001-8560-44ed39824c11.roa File: 1fc2c70b-2c53-4001-8560-44ed39824c11.roa (raw, json) Hash identifier: urHiBCP++35e8KlqCPlPLvIivtN9dHSTxt5Wz/fhKVk= Subject key identifier: 73:D5:BA:4C:C9:88:31:80:E9:8A:53:2D:16:70:3A:ED:F4:25:73:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C4A4E8C15E400575815CB633C4FC0971B955DAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc2c70b-2c53-4001-8560-44ed39824c11.roa Signing time: Tue 27 Oct 2026 00:20:46 +0000 ROA not before: Tue 27 Oct 2026 00:20:46 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.133.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4a:4e:8c:15:e4:00:57:58:15:cb:63:3c:4f:c0:97:1b:95:5d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:20:46 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=4d6865925dee52a4c088ebe67b3a25cf7d156e385eba59a400fd47d3c5867e9d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:dc:e3:18:88:5d:48:6d:45:86:9b:92:e0: 99:ef:02:5e:47:e5:ac:f6:59:8b:24:09:76:57:8d: a6:f8:ad:da:03:a4:85:3f:29:6c:ec:bb:be:bc:70: 2a:f9:80:28:05:4a:26:45:9b:c5:75:76:a9:3e:0e: 63:d7:25:c9:34:0a:e5:8f:35:64:a5:6c:0b:ee:94: 1d:c0:6d:25:25:c6:f8:be:77:37:ce:4a:bd:38:5a: d3:91:a6:46:a4:29:fb:6c:6a:03:0c:03:f6:f1:11: 2a:71:24:c6:6a:d6:fa:a6:92:e9:b0:f5:7d:e4:2f: 05:3c:b9:a1:e6:cd:36:c6:7d:64:53:80:de:e4:c8: de:c3:5e:8a:99:30:48:88:ef:49:97:25:d3:f8:c7: 4b:4b:19:af:d5:ab:a1:bb:e8:6d:6d:33:b7:e6:af: 5b:5f:6f:b1:f7:60:d0:bb:22:13:97:78:87:a0:65: b0:f9:88:01:eb:8f:f6:ee:cd:3e:9d:46:93:73:d9: 96:b0:3b:7a:86:0c:55:20:80:94:1e:cb:c6:2c:31: f1:12:9f:7c:3e:d6:5a:40:d5:78:9a:a5:d3:57:01: a8:8e:96:70:c8:49:8f:ff:52:b9:20:79:8a:fe:11: c5:6d:4c:00:8e:47:e9:66:5f:d2:bf:99:eb:8e:3c: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D5:BA:4C:C9:88:31:80:E9:8A:53:2D:16:70:3A:ED:F4:25:73:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc2c70b-2c53-4001-8560-44ed39824c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.133.0.0/16 Signature Algorithm: sha256WithRSAEncryption d6:3a:3a:84:4e:dc:d4:e7:e4:f4:f7:3d:24:87:60:e0:a7:b6: 66:40:05:d8:af:81:2b:b8:f2:90:15:80:7c:73:1d:5b:bb:f6: 1b:72:ad:19:52:23:1a:7e:1d:cd:0b:2f:33:35:f1:01:98:c7: a2:40:9b:e8:56:fd:38:b1:a2:8e:4e:70:d4:63:b3:74:9b:df: f4:87:86:53:4c:d5:f5:a5:f6:53:7b:ca:9c:3c:ca:1a:de:77: a5:6f:46:c8:61:5c:fc:d1:b4:ec:27:9c:5e:ca:32:ce:ea:40: e5:b1:b4:09:7b:b2:c0:d6:1f:7c:30:ea:b2:92:ba:7e:e5:13: a0:19:3e:17:22:1d:52:95:53:9c:82:48:29:55:6a:7d:c0:04: b2:b6:4c:99:03:2b:bb:01:9f:0f:b4:bd:19:6e:61:ef:04:79: c8:94:32:2a:40:bb:f3:70:e7:14:91:a6:4b:73:4e:7d:55:a8: 88:23:39:cb:fd:db:d2:a0:64:9e:51:54:c4:a1:20:1e:33:51: 42:ba:31:d4:b6:3e:ef:7b:dc:9f:a2:f7:5e:05:99:cb:83:cc: a7:7a:10:be:9d:82:8a:13:0f:0e:86:ab:36:cc:b7:90:ad:c3: b8:d9:c6:4f:a6:d2:c5:94:94:5f:52:96:98:f4:09:ea:a9:cd: 79:64:32:24 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULEpOjBXkAFdYFctjPE/AlxuVXaswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAyMDQ2WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDY4NjU5MjVkZWU1MmE0YzA4OGViZTY3YjNhMjVjZjdk MTU2ZTM4NWViYTU5YTQwMGZkNDdkM2M1ODY3ZTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/IdzjGIhdSG1FhpuS4JnvAl5H5az2WYskCXZXjab4rdoD pIU/KWzsu768cCr5gCgFSiZFm8V1dqk+DmPXJck0CuWPNWSlbAvulB3AbSUlxvi+ dzfOSr04WtORpkakKftsagMMA/bxESpxJMZq1vqmkumw9X3kLwU8uaHmzTbGfWRT gN7kyN7DXoqZMEiI70mXJdP4x0tLGa/Vq6G76G1tM7fmr1tfb7H3YNC7IhOXeIeg ZbD5iAHrj/buzT6dRpNz2ZawO3qGDFUggJQey8YsMfESn3w+1lpA1XiapdNXAaiO lnDISY//UrkgeYr+EcVtTACOR+lmX9K/meuOPItZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUc9W6TMmIMYDpilMtFnA67fQlc54wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmYzJjNzBiLTJjNTMtNDAwMS04NTYwLTQ0ZWQzOTgyNGMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQhTANBgkqhkiG9w0BAQsFAAOCAQEA1jo6hE7c1Ofk9Pc9JIdg4Ke2ZkAF 2K+BK7jykBWAfHMdW7v2G3KtGVIjGn4dzQsvMzXxAZjHokCb6Fb9OLGijk5w1GOz dJvf9IeGU0zV9aX2U3vKnDzKGt53pW9GyGFc/NG07CecXsoyzupA5bG0CXuywNYf fDDqspK6fuUToBk+FyIdUpVTnIJIKVVqfcAEsrZMmQMruwGfD7S9GW5h7wR5yJQy KkC783DnFJGmS3NOfVWoiCM5y/3b0qBknlFUxKEgHjNRQrox1LY+73vcn6L3XgWZ y4PMp3oQvp2CihMPDoarNsy3kK3DuNnGT6bSxZSUX1KWmPQJ6qnNeWQyJA== -----END CERTIFICATE-----Generated at Tue Nov 3 19:23:18 2026 by rpki-client