$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f03450e-d269-41c5-86ce-24bc209e0581.roa File: 2f03450e-d269-41c5-86ce-24bc209e0581.roa (raw, json) Hash identifier: lQmJ15cI8U4Lo7o8kMoyYv2yEFdUCrLO/3+jn5srebk= Subject key identifier: 75:BB:BA:7B:61:5D:5D:61:30:5B:E3:1A:EF:2A:FA:78:5D:E6:9D:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D2F1EC4CB0DD9F21008567B93C9A193CC0CC3BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f03450e-d269-41c5-86ce-24bc209e0581.roa Signing time: Sun 04 Oct 2026 00:00:11 +0000 ROA not before: Sun 04 Oct 2026 00:00:11 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.25.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2f:1e:c4:cb:0d:d9:f2:10:08:56:7b:93:c9:a1:93:cc:0c:c3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 4 00:00:11 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=e692b65c150d0a7820f4abbdab7f68183c409589faa5748881da33399cc4832e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:93:5a:05:62:46:89:ea:21:f9:c0:c1:80: bf:69:77:dc:fc:93:6b:88:84:8c:b9:bb:1a:6a:7e: 9b:10:bf:2f:f5:f2:ca:84:7b:4d:fd:cd:8f:08:01: ff:5e:23:09:32:f0:f4:83:18:75:de:2b:7b:29:fb: 0a:85:30:b4:1b:c1:ec:e9:d7:29:c8:af:83:30:21: 25:dd:e1:16:92:d8:41:d7:91:20:2d:91:35:5e:22: af:b3:ab:50:01:b2:44:18:04:1b:f6:79:ab:c2:d3: ff:ba:b3:cd:1b:35:f5:79:90:7d:15:d9:b1:10:9e: 6d:18:99:c0:4d:42:b7:6b:99:58:29:6c:c1:db:ed: f9:92:71:91:28:d0:70:a8:cb:5f:ee:25:ad:4c:68: 45:17:26:3f:8f:2e:aa:01:f4:5c:86:3a:69:fa:1f: bd:94:5c:46:9a:f8:54:c6:4c:d3:36:aa:0d:89:34: b4:4b:8b:c0:6a:58:1e:4e:6c:df:7d:5e:bf:fd:e3: de:55:a1:bb:9a:1b:08:b2:c3:c7:ae:7e:fc:0b:66: 58:8f:83:55:be:05:96:68:57:0d:d9:4a:a0:7e:52: 60:53:b3:93:91:8f:52:fd:87:a4:28:d8:ea:58:da: 0c:87:13:f2:38:28:23:bf:fe:51:54:78:fd:83:6e: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BB:BA:7B:61:5D:5D:61:30:5B:E3:1A:EF:2A:FA:78:5D:E6:9D:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f03450e-d269-41c5-86ce-24bc209e0581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.25.0.0/16 Signature Algorithm: sha256WithRSAEncryption 10:11:76:6c:21:32:21:28:24:34:32:36:da:29:bb:56:92:3f: 93:57:e5:44:c7:f3:31:d1:12:b3:c5:90:da:d5:a7:5a:b7:23: 13:b6:ea:25:a8:e0:24:3d:d0:0e:fb:c4:51:21:76:b9:6b:27: 4f:01:ce:2b:06:9d:0a:f6:f8:59:f0:87:8f:93:f5:d3:2c:31: e9:9d:2f:55:23:3e:78:53:28:44:30:c6:03:20:dc:09:82:a7: c0:f3:48:2d:32:0c:c8:e9:28:06:27:e3:3f:a6:4b:1c:36:d6: 78:10:14:c5:9e:f6:5d:49:a4:30:9e:0e:32:10:16:55:7b:4b: 5d:70:3a:d5:78:c4:b8:89:36:61:d0:66:36:46:82:47:e4:12: c0:c6:05:9f:39:cd:06:ba:ec:3e:ff:ab:68:40:35:d5:5b:f4: c9:ea:97:0c:d0:fe:7c:5a:50:04:e8:8e:ef:e9:57:95:37:df: fa:15:19:7c:98:0f:ae:6f:7a:6d:8f:a7:f7:ce:16:09:ff:03: fc:c0:75:93:89:45:eb:91:ff:6b:fe:ee:50:9e:94:56:d9:31: 7a:7f:00:47:84:f4:bb:30:a7:ff:e4:01:68:e5:80:a3:18:b9: 0c:eb:50:51:11:fe:fb:cf:5e:5f:46:03:66:44:c2:bd:a1:c8: 34:ed:11:ed -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTS8exMsN2fIQCFZ7k8mhk8wMw78wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA0MDAwMDExWhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjkyYjY1YzE1MGQwYTc4MjBmNGFiYmRhYjdmNjgxODNj NDA5NTg5ZmFhNTc0ODg4MWRhMzMzOTljYzQ4MzJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuM5NaBWJGieoh+cDBgL9pd9z8k2uIhIy5uxpqfpsQvy/1 8sqEe039zY8IAf9eIwky8PSDGHXeK3sp+wqFMLQbwezp1ynIr4MwISXd4RaS2EHX kSAtkTVeIq+zq1ABskQYBBv2eavC0/+6s80bNfV5kH0V2bEQnm0YmcBNQrdrmVgp bMHb7fmScZEo0HCoy1/uJa1MaEUXJj+PLqoB9FyGOmn6H72UXEaa+FTGTNM2qg2J NLRLi8BqWB5ObN99Xr/9495VobuaGwiyw8eufvwLZliPg1W+BZZoVw3ZSqB+UmBT s5ORj1L9h6Qo2OpY2gyHE/I4KCO//lFUeP2DbrIBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdbu6e2FdXWEwW+Ma7yr6eF3mnXkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmMDM0NTBlLWQyNjktNDFjNS04NmNlLTI0YmMyMDllMDU4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQGTANBgkqhkiG9w0BAQsFAAOCAQEAEBF2bCEyISgkNDI22im7VpI/k1fl RMfzMdESs8WQ2tWnWrcjE7bqJajgJD3QDvvEUSF2uWsnTwHOKwadCvb4WfCHj5P1 0ywx6Z0vVSM+eFMoRDDGAyDcCYKnwPNILTIMyOkoBifjP6ZLHDbWeBAUxZ72XUmk MJ4OMhAWVXtLXXA61XjEuIk2YdBmNkaCR+QSwMYFnznNBrrsPv+raEA11Vv0yeqX DND+fFpQBOiO7+lXlTff+hUZfJgPrm96bY+n984WCf8D/MB1k4lF65H/a/7uUJ6U Vtkxen8AR4T0uzCn/+QBaOWAoxi5DOtQURH++89eX0YDZkTCvaHINO0R7Q== -----END CERTIFICATE-----Generated at Tue Nov 3 10:02:28 2026 by rpki-client