$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3436a8af-d642-4768-9682-d871bc03bc91.roa File: 3436a8af-d642-4768-9682-d871bc03bc91.roa (raw, json) Hash identifier: cm7r6LYpEf4nS3CIEpATNTvJUQsIyGaSYKzi8AY4vtE= Subject key identifier: 6B:EC:E6:02:5E:DB:BA:5D:25:07:C2:0C:FA:23:C3:45:02:00:90:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 178D542135DA695D4228CCE326E5E0EE0DAA1572 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3436a8af-d642-4768-9682-d871bc03bc91.roa Signing time: Tue 11 Aug 2026 03:47:51 +0000 ROA not before: Tue 11 Aug 2026 03:47:51 +0000 ROA not after: Mon 09 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.106.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8d:54:21:35:da:69:5d:42:28:cc:e3:26:e5:e0:ee:0d:aa:15:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 03:47:51 2026 GMT Not After : Nov 9 23:59:59 2026 GMT Subject: serialNumber=b9c83d1e53efac3de710cdcca69dd6d776b2eb85676403ea2f26b26b765ae1ad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:76:92:49:b7:d5:b6:83:c8:f6:af:ed:38: 82:d4:3f:a9:0d:6e:9f:3f:3a:00:d4:a9:ff:87:cb: f1:1e:04:69:8f:fa:19:ea:d9:4b:09:cb:30:7e:fc: b8:c1:de:9a:40:cb:36:01:f9:a4:ad:11:ef:08:14: 18:10:fb:d5:25:0a:28:9f:43:02:3a:7a:27:72:d8: b5:15:64:84:7f:23:c5:36:1c:98:6d:b0:33:80:e0: df:51:32:da:69:7a:dc:24:a9:d3:51:3a:ae:31:08: 79:17:81:27:2b:e0:ae:05:ee:09:59:06:f5:a7:eb: 99:c3:70:3c:32:51:74:ae:d7:e0:1a:a5:fa:6f:00: 8b:97:f9:2b:96:ce:f2:10:5d:6a:c0:c2:bb:d4:c6: 80:bc:2d:bc:0e:15:95:c8:dd:59:9d:0e:b4:51:a0: 05:fc:2d:4a:ef:4f:4d:60:24:11:06:cf:94:ab:7a: 51:b6:91:2c:65:da:39:eb:97:cf:71:3b:96:27:f4: 69:a8:1a:40:fa:90:a7:1b:17:b0:d5:70:22:9b:4d: fd:08:20:f0:c2:d5:ca:9d:29:b0:03:82:2c:58:41: 5b:b8:c4:0c:19:b3:e6:89:c8:f2:d5:43:97:31:ec: b4:59:a2:be:37:43:7e:e7:26:22:91:99:0c:e9:10: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:E6:02:5E:DB:BA:5D:25:07:C2:0C:FA:23:C3:45:02:00:90:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3436a8af-d642-4768-9682-d871bc03bc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.106.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2b:14:ff:c7:8e:a8:09:63:a8:f1:44:5a:51:a8:90:eb:69:09: da:3e:8f:85:1c:e7:47:32:fd:9f:e5:05:26:3a:62:7d:c8:94: f8:6e:82:b7:8d:76:04:04:10:e2:dd:0d:70:54:79:d9:e2:c2: 76:36:c8:f1:d0:ca:82:bc:72:44:f7:c4:44:ad:de:b2:11:4c: 6c:94:8e:d8:88:f7:d2:74:fb:7b:8e:ee:c3:be:bd:a4:48:e0: f0:87:9f:c2:55:9d:13:d3:05:15:1f:7c:b4:b1:74:94:7e:56: cf:7e:6d:f5:14:fd:28:2c:d7:82:71:01:1a:d3:0a:dd:12:40: d8:a2:fd:c0:9c:e4:87:0d:1d:3b:7a:f7:02:e2:27:9e:bb:d4: 68:53:b4:2b:69:cc:a6:d1:be:49:69:ad:7a:db:1c:90:a8:57: ef:9a:2c:18:e5:a8:18:35:f7:63:53:d4:98:a5:44:d7:fd:27: 17:59:d6:d9:b2:f0:13:37:46:64:5f:f2:de:23:88:28:8d:3e: fe:81:7e:c5:02:4b:a3:c7:85:6e:c2:8f:01:e5:fc:e6:c3:7d: 08:75:32:36:43:81:00:d7:01:a2:4a:a6:f1:10:95:91:e6:d5: 1d:a7:cd:01:8b:4f:8a:56:09:b6:ab:f9:08:74:a4:65:1e:37: 08:c8:85:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF41UITXaaV1CKMzjJuXg7g2qFXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODExMDM0NzUxWhcNMjYxMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWM4M2QxZTUzZWZhYzNkZTcxMGNkY2NhNjlkZDZkNzc2 YjJlYjg1Njc2NDAzZWEyZjI2YjI2Yjc2NWFlMWFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkwXaSSbfVtoPI9q/tOILUP6kNbp8/OgDUqf+Hy/EeBGmP +hnq2UsJyzB+/LjB3ppAyzYB+aStEe8IFBgQ+9UlCiifQwI6eidy2LUVZIR/I8U2 HJhtsDOA4N9RMtppetwkqdNROq4xCHkXgScr4K4F7glZBvWn65nDcDwyUXSu1+Aa pfpvAIuX+SuWzvIQXWrAwrvUxoC8LbwOFZXI3VmdDrRRoAX8LUrvT01gJBEGz5Sr elG2kSxl2jnrl89xO5Yn9GmoGkD6kKcbF7DVcCKbTf0IIPDC1cqdKbADgixYQVu4 xAwZs+aJyPLVQ5cx7LRZor43Q37nJiKRmQzpEMKfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa+zmAl7bul0lB8IM+iPDRQIAkMgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0MzZhOGFmLWQ2NDItNDc2OC05NjgyLWQ4NzFiYzAzYmM5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQaoAwDQYJKoZIhvcNAQELBQADggEBACsU/8eOqAljqPFEWlGokOtpCdo+ j4Uc50cy/Z/lBSY6Yn3IlPhugreNdgQEEOLdDXBUedniwnY2yPHQyoK8ckT3xESt 3rIRTGyUjtiI99J0+3uO7sO+vaRI4PCHn8JVnRPTBRUffLSxdJR+Vs9+bfUU/Sgs 14JxARrTCt0SQNii/cCc5IcNHTt69wLiJ5671GhTtCtpzKbRvklprXrbHJCoV++a LBjlqBg192NT1JilRNf9JxdZ1tmy8BM3RmRf8t4jiCiNPv6BfsUCS6PHhW7CjwHl /ObDfQh1MjZDgQDXAaJKpvEQlZHm1R2nzQGLT4pWCbar+Qh0pGUeNwjIhZE= -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:30 2026 by rpki-client