$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39dca287-26d4-4bbc-a590-f5bf14971de6.roa File: 39dca287-26d4-4bbc-a590-f5bf14971de6.roa (raw, json) Hash identifier: GB5MyBfTF/mWJb1YUNGn1dzJcFhJzH/W9GIfDgAI3c0= Subject key identifier: BE:37:70:EF:35:D5:05:1B:B8:86:A9:93:43:67:AC:7C:04:FD:ED:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21BA9F3C23958B203D5A879889340D52B5E9E1D5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39dca287-26d4-4bbc-a590-f5bf14971de6.roa Signing time: Tue 04 Aug 2026 00:10:44 +0000 ROA not before: Tue 04 Aug 2026 00:10:44 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.187.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ba:9f:3c:23:95:8b:20:3d:5a:87:98:89:34:0d:52:b5:e9:e1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:10:44 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=8c632499a3c320eab60aeae6775e62f8445f8020af73a754705d426e71ec3217, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:b5:b8:53:46:be:7c:f1:fa:b8:f1:e9:3c: 4a:61:b7:e8:8e:6e:ef:f3:15:61:be:c4:e8:1a:44: 84:c1:c8:1f:84:b8:6c:f2:dd:c1:bb:52:90:bf:98: 52:41:d7:88:99:bd:64:dc:a1:fa:96:35:fd:49:aa: b7:78:92:22:a5:22:39:dc:b3:de:3e:7e:11:65:38: 4d:bf:8e:c2:bb:b7:5e:4d:e6:3b:95:a8:91:32:50: d4:54:b8:7f:80:83:60:bc:59:8e:99:8a:66:e1:c1: f4:1c:a9:53:fe:26:d8:80:0f:fc:68:a7:e7:5e:a7: ee:16:d6:cc:4b:ce:69:dc:05:b9:ed:b4:91:15:68: 12:dc:ea:3d:2d:a7:50:57:99:86:d2:a7:e9:af:2b: 15:9c:21:8d:0f:4e:1f:e2:60:7f:06:e2:a0:79:3d: ec:2c:64:3f:d4:01:4f:6a:37:73:90:b9:24:1f:46: 7c:6c:f3:1b:a5:b8:75:05:bf:12:8f:05:fb:b5:d1: 89:09:e0:45:d7:17:79:dc:69:b2:a3:86:3f:47:2e: 03:5e:d4:2a:11:60:44:fc:18:99:bd:8b:55:95:cd: a0:b6:c1:a0:f4:81:f8:f1:4a:fa:ac:a1:7d:96:68: f3:b1:24:9d:a9:5e:b0:d5:6d:bc:f9:6c:0e:54:c1: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:70:EF:35:D5:05:1B:B8:86:A9:93:43:67:AC:7C:04:FD:ED:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39dca287-26d4-4bbc-a590-f5bf14971de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:32:4a:e7:6a:f4:f2:0e:db:52:13:60:6a:76:1e:cd:39:9a: 80:d4:14:02:6e:2c:7c:6e:15:bb:e5:d1:07:da:e6:48:b2:b4: 4f:52:d8:fc:ce:fd:c8:f2:e0:e6:04:c1:00:42:f9:c5:3b:89: 8d:d1:01:b9:ee:ca:62:3a:3f:cb:ab:92:c4:14:ca:9f:20:d2: 12:29:e3:ed:99:b8:35:41:61:d7:fe:b5:d3:a4:2b:51:78:af: 5b:12:67:57:e1:67:2d:ba:3c:ad:5a:1e:1c:9e:2c:91:b3:fe: be:ff:fd:6e:90:40:db:9b:96:dc:24:4e:f9:03:17:6a:b0:91: 71:7e:90:16:1b:ba:e7:39:5e:31:1b:d8:b1:28:73:f1:cc:e5: ca:21:19:2c:1e:8c:eb:39:da:f2:79:82:2d:f4:df:0b:bb:4b: 65:5e:99:97:8a:37:c9:66:02:81:bf:9a:f2:e3:95:42:62:b3: bb:d4:c7:19:e0:09:e4:c9:85:a9:69:df:08:7d:d1:0e:f3:ae: d3:b8:04:09:fd:3e:43:0b:c6:14:99:c2:14:ef:4a:4d:c9:1f: bc:20:12:62:74:d1:3e:88:cd:44:f9:34:4b:97:78:c5:6c:27: 7c:c6:29:08:17:73:9c:fb:dd:32:ed:4c:64:b9:15:92:12:6c: ad:cf:4b:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIbqfPCOViyA9WoeYiTQNUrXp4dUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAxMDQ0WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzYzMjQ5OWEzYzMyMGVhYjYwYWVhZTY3NzVlNjJmODQ0 NWY4MDIwYWY3M2E3NTQ3MDVkNDI2ZTcxZWMzMjE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxnbW4U0a+fPH6uPHpPEpht+iObu/zFWG+xOgaRITByB+E uGzy3cG7UpC/mFJB14iZvWTcofqWNf1Jqrd4kiKlIjncs94+fhFlOE2/jsK7t15N 5juVqJEyUNRUuH+Ag2C8WY6ZimbhwfQcqVP+JtiAD/xop+dep+4W1sxLzmncBbnt tJEVaBLc6j0tp1BXmYbSp+mvKxWcIY0PTh/iYH8G4qB5PewsZD/UAU9qN3OQuSQf Rnxs8xuluHUFvxKPBfu10YkJ4EXXF3ncabKjhj9HLgNe1CoRYET8GJm9i1WVzaC2 waD0gfjxSvqsoX2WaPOxJJ2pXrDVbbz5bA5UwQevAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvjdw7zXVBRu4hqmTQ2esfAT97XcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5ZGNhMjg3LTI2ZDQtNGJiYy1hNTkwLWY1YmYxNDk3MWRlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQuzANBgkqhkiG9w0BAQsFAAOCAQEAhTJK52r08g7bUhNganYezTmagNQU Am4sfG4Vu+XRB9rmSLK0T1LY/M79yPLg5gTBAEL5xTuJjdEBue7KYjo/y6uSxBTK nyDSEinj7Zm4NUFh1/6106QrUXivWxJnV+FnLbo8rVoeHJ4skbP+vv/9bpBA25uW 3CRO+QMXarCRcX6QFhu65zleMRvYsShz8czlyiEZLB6M6zna8nmCLfTfC7tLZV6Z l4o3yWYCgb+a8uOVQmKzu9THGeAJ5MmFqWnfCH3RDvOu07gECf0+QwvGFJnCFO9K TckfvCASYnTRPojNRPk0S5d4xWwnfMYpCBdznPvdMu1MZLkVkhJsrc9LeQ== -----END CERTIFICATE-----Generated at Thu Sep 17 17:12:47 2026 by rpki-client