$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa File: 4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa (raw, json) Hash identifier: fylUAmVW/thgtb9oK4UY1+UBMjZJ3pP2s5PwnIef+zg= Subject key identifier: F8:B2:82:BC:80:E1:B2:BC:59:87:0C:CF:1F:19:E5:B6:7C:04:54:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B7BF076EB1E7E48EF72076C737E627188052E6A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa Signing time: Mon 05 Oct 2026 00:30:13 +0000 ROA not before: Mon 05 Oct 2026 00:30:13 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.166.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7b:f0:76:eb:1e:7e:48:ef:72:07:6c:73:7e:62:71:88:05:2e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:30:13 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=1a8940f09f0ddf1c3f81a7a1fe5b773f444abdd120a62852d615c17f8cd3d176, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:6d:e8:08:fd:87:33:22:58:0b:e0:81:8e: d5:01:6f:e1:b4:04:bd:b9:7d:ef:13:4f:1c:3c:ae: 05:93:4e:8c:b6:c3:2a:bc:d6:93:2c:70:dd:af:17: c6:fa:c7:7a:1d:5a:11:9f:e1:1d:5f:e8:1a:5a:02: ce:1e:6a:48:75:20:4f:2c:3e:0b:8d:23:4a:83:b0: 55:bd:7d:71:9e:3c:d7:cf:75:2d:63:34:1d:5a:b4: 21:67:a4:ef:e8:5c:53:30:cb:6f:97:d3:d9:e6:db: 6c:9b:49:52:26:08:99:15:89:50:1e:57:ef:b1:fb: dc:13:b6:76:1d:9e:34:37:00:c8:d3:f4:f9:27:cf: e4:6e:de:f3:b0:4a:9a:ae:55:94:ef:42:ca:d9:ef: cb:a1:49:31:c4:c9:f1:fc:99:f9:9a:1f:e5:39:22: 87:80:a7:75:75:e4:76:63:90:15:e3:5e:85:82:54: 73:04:58:e4:7f:15:a1:6b:06:d4:a1:12:23:77:96: 32:2a:74:58:b6:fb:1a:89:3f:13:cc:9d:40:3c:57: e1:77:02:b1:c8:ad:fd:1a:36:a2:37:5e:df:71:a1: 1b:7d:74:18:06:8a:f4:79:8f:40:6e:af:8c:de:c4: 1c:d5:8e:63:41:2e:52:15:3f:58:f9:0b:ad:aa:81: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B2:82:BC:80:E1:B2:BC:59:87:0C:CF:1F:19:E5:B6:7C:04:54:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.166.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:6d:16:e3:f6:1f:e5:e6:b7:56:ee:cd:18:60:eb:86:31:1a: ba:a3:cf:ae:18:8b:85:85:5c:ce:76:41:c8:64:81:84:d3:03: 5f:b3:9b:c9:fc:3c:f0:3f:0d:7f:a9:31:7f:27:77:c2:1d:12: 15:e4:bc:e2:41:d5:fc:e2:53:80:1d:60:0e:2f:ca:cc:98:44: 26:18:55:79:1e:06:8f:e3:64:71:d8:b0:75:5b:d1:2c:cd:07: 11:35:fe:8e:18:ef:52:94:27:e6:ec:8b:ed:66:97:72:c5:54: f4:f0:55:f8:12:4f:40:18:07:d2:75:71:fa:2b:25:a7:38:84: b5:c5:bd:ba:71:c8:2c:e2:0f:b3:21:d8:89:09:25:de:ca:46: a7:cb:63:10:0d:67:1d:8c:46:18:00:89:b2:90:a9:90:ac:3a: 7e:d5:62:be:39:15:25:ba:e5:e6:84:07:40:9c:6b:37:87:d0: 86:8f:ba:00:02:bc:47:07:26:4d:e7:e4:b3:7b:b8:e2:cc:55: f1:88:dc:c6:ea:15:e0:31:eb:cd:de:22:73:f9:41:50:bd:c5: 17:06:aa:17:88:86:fd:ff:8a:23:5e:c9:83:86:c1:80:d0:80: ac:6c:7b:33:dd:37:f9:2a:48:09:d0:8c:09:a4:d0:e2:68:6d: 50:23:16:9d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS3vwdusefkjvcgdsc35icYgFLmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAzMDEzWhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTg5NDBmMDlmMGRkZjFjM2Y4MWE3YTFmZTViNzczZjQ0 NGFiZGQxMjBhNjI4NTJkNjE1YzE3ZjhjZDNkMTc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLw23oCP2HMyJYC+CBjtUBb+G0BL25fe8TTxw8rgWTToy2 wyq81pMscN2vF8b6x3odWhGf4R1f6BpaAs4eakh1IE8sPguNI0qDsFW9fXGePNfP dS1jNB1atCFnpO/oXFMwy2+X09nm22ybSVImCJkViVAeV++x+9wTtnYdnjQ3AMjT 9Pknz+Ru3vOwSpquVZTvQsrZ78uhSTHEyfH8mfmaH+U5IoeAp3V15HZjkBXjXoWC VHMEWOR/FaFrBtShEiN3ljIqdFi2+xqJPxPMnUA8V+F3ArHIrf0aNqI3Xt9xoRt9 dBgGivR5j0Bur4zexBzVjmNBLlIVP1j5C62qgTNBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+LKCvIDhsrxZhwzPHxnltnwEVFcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMTc1OGZjLWQ1MzgtNGMyMC04OTg4LWY3ZjFkY2YyZTYzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQpjANBgkqhkiG9w0BAQsFAAOCAQEAVW0W4/Yf5ea3Vu7NGGDrhjEauqPP rhiLhYVcznZByGSBhNMDX7Obyfw88D8Nf6kxfyd3wh0SFeS84kHV/OJTgB1gDi/K zJhEJhhVeR4Gj+NkcdiwdVvRLM0HETX+jhjvUpQn5uyL7WaXcsVU9PBV+BJPQBgH 0nVx+islpziEtcW9unHILOIPsyHYiQkl3spGp8tjEA1nHYxGGACJspCpkKw6ftVi vjkVJbrl5oQHQJxrN4fQho+6AAK8RwcmTefks3u44sxV8YjcxuoV4DHrzd4ic/lB UL3FFwaqF4iG/f+KI17Jg4bBgNCArGx7M903+SpICdCMCaTQ4mhtUCMWnQ== -----END CERTIFICATE-----Generated at Tue Nov 3 12:06:09 2026 by rpki-client