$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/250873af-3a8e-4002-b1f4-20debdd4fc2c.roa File: 250873af-3a8e-4002-b1f4-20debdd4fc2c.roa (raw, json) Hash identifier: alERQNyXAp7rccElaJ687rnVh5mzAp4yhfUy0PHP60I= Subject key identifier: F0:B8:88:C1:CC:CA:27:59:F6:AF:BF:94:1E:BE:62:38:3F:EC:16:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DB3891EE5C530A26DBECA74106A8FCCFA481F3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/250873af-3a8e-4002-b1f4-20debdd4fc2c.roa Signing time: Wed 05 Aug 2026 00:40:38 +0000 ROA not before: Wed 05 Aug 2026 00:40:38 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.135.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b3:89:1e:e5:c5:30:a2:6d:be:ca:74:10:6a:8f:cc:fa:48:1f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:40:38 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=95f6b5ab7a8fe3ac4125f1f2742f5c915b58e80e86f7b85c5378b597edced93f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:72:bb:f9:87:a8:80:33:cf:be:21:f0:32:08: ab:63:d6:89:f6:7b:20:25:7b:23:6f:a6:eb:28:a0: 4d:46:36:4d:bb:62:27:bc:1c:73:6f:80:b3:c4:f1: 54:f1:00:03:f5:5a:e0:5b:cf:ef:bd:24:c1:77:8d: 77:3b:76:c3:cf:60:47:c0:39:e8:c4:86:45:e0:59: 47:e5:2a:94:5f:d0:cf:05:c7:f2:6d:a5:b1:46:00: b0:d3:08:c1:75:b6:52:da:9c:09:0f:56:cd:8a:7d: 6c:6a:70:98:5c:94:8c:a2:1c:f5:a7:3d:d1:91:e7: d2:af:43:51:69:e7:cd:6f:e3:96:38:85:94:b8:b1: 84:e4:cd:16:e1:ed:af:1c:3c:38:ab:32:8e:06:1e: d0:ac:72:d6:c4:cc:b1:9a:59:19:a7:41:61:c7:ec: 1c:8d:53:b2:d4:1c:40:87:f2:0d:5a:b6:06:95:12: 61:6f:b2:e5:cd:79:df:2f:5d:1c:a9:41:db:a4:29: 71:cd:ae:05:69:17:6e:a8:3d:a3:16:ea:d6:2d:ef: af:8a:43:09:d9:0e:79:12:33:c7:e5:c6:26:d8:5b: 8a:fe:e6:29:b2:93:b1:45:93:c3:d7:0f:f3:88:9b: c8:66:13:2f:97:34:5c:f3:b0:b2:6c:ae:26:ef:f8: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:88:C1:CC:CA:27:59:F6:AF:BF:94:1E:BE:62:38:3F:EC:16:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/250873af-3a8e-4002-b1f4-20debdd4fc2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.135.0.0/16 Signature Algorithm: sha256WithRSAEncryption bf:8f:26:9f:4d:ee:62:e8:5c:e9:ea:e3:85:54:08:9f:3f:8e: 3e:5e:a2:ef:15:1b:6f:62:31:06:40:7c:10:33:c8:00:b2:fb: 14:c9:15:0a:1a:99:95:15:8a:e9:c6:3c:73:a4:c6:57:68:c9: 7e:bc:62:72:95:08:b5:ad:6f:8b:d6:ae:5d:ea:7b:99:d2:4c: 07:ba:f0:00:cc:7f:13:59:2b:0a:f5:56:3d:0f:a7:b0:e1:41: 81:b5:34:8a:70:57:be:0c:53:6c:3d:cf:cf:d9:1a:d1:cb:1c: ea:6b:47:2c:a8:30:01:a0:eb:ce:06:9a:34:9d:96:f7:ba:f7: aa:67:12:72:3b:27:2c:c5:b5:3d:d3:90:18:7a:d7:42:01:81: ce:fd:a5:45:c7:03:47:9d:cb:58:83:6e:ac:52:06:06:3c:e2: 63:35:1c:12:cd:cf:86:f9:de:d0:b2:fb:d0:5e:bb:72:f0:52: 5c:55:7b:d2:a9:3c:59:7b:ab:a5:62:44:80:93:d2:9b:cf:f9: d4:db:a8:3a:96:57:72:28:fd:8a:7f:f9:07:b4:c9:c2:a8:09: a3:cf:66:80:42:54:44:ae:79:5c:71:9e:57:33:ea:85:91:e1: d0:4e:df:15:23:23:84:05:95:26:9c:74:34:d6:2a:08:96:e6: 68:b5:ee:69 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPbOJHuXFMKJtvsp0EGqPzPpIHzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDA0MDM4WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWY2YjVhYjdhOGZlM2FjNDEyNWYxZjI3NDJmNWM5MTVi NThlODBlODZmN2I4NWM1Mzc4YjU5N2VkY2VkOTNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpcrv5h6iAM8++IfAyCKtj1on2eyAleyNvpusooE1GNk27 Yie8HHNvgLPE8VTxAAP1WuBbz++9JMF3jXc7dsPPYEfAOejEhkXgWUflKpRf0M8F x/JtpbFGALDTCMF1tlLanAkPVs2KfWxqcJhclIyiHPWnPdGR59KvQ1Fp581v45Y4 hZS4sYTkzRbh7a8cPDirMo4GHtCsctbEzLGaWRmnQWHH7ByNU7LUHECH8g1atgaV EmFvsuXNed8vXRypQdukKXHNrgVpF26oPaMW6tYt76+KQwnZDnkSM8flxibYW4r+ 5imyk7FFk8PXD/OIm8hmEy+XNFzzsLJsribv+AbbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8LiIwczKJ1n2r7+UHr5iOD/sFsgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1MDg3M2FmLTNhOGUtNDAwMi1iMWY0LTIwZGViZGQ0ZmMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPhzANBgkqhkiG9w0BAQsFAAOCAQEAv48mn03uYuhc6erjhVQInz+OPl6i 7xUbb2IxBkB8EDPIALL7FMkVChqZlRWK6cY8c6TGV2jJfrxicpUIta1vi9auXep7 mdJMB7rwAMx/E1krCvVWPQ+nsOFBgbU0inBXvgxTbD3Pz9ka0csc6mtHLKgwAaDr zgaaNJ2W97r3qmcScjsnLMW1PdOQGHrXQgGBzv2lRccDR53LWINurFIGBjziYzUc Es3Phvne0LL70F67cvBSXFV70qk8WXurpWJEgJPSm8/51NuoOpZXcij9in/5B7TJ wqgJo89mgEJURK55XHGeVzPqhZHh0E7fFSMjhAWVJpx0NNYqCJbmaLXuaQ== -----END CERTIFICATE-----Generated at Thu Sep 17 16:49:22 2026 by rpki-client