$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a6dae7c-4ed4-4ea8-95b9-05f1ba32a91c.roa File: 4a6dae7c-4ed4-4ea8-95b9-05f1ba32a91c.roa (raw, json) Hash identifier: f2+b58wML1draxN/ebXntdzoxBA8kXiA02ewvViPbIM= Subject key identifier: 6F:03:44:DA:B8:AB:FD:71:9C:2B:F4:7C:76:D2:C0:8D:F1:E9:A3:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F738F69A648B78B4E07542302018B1CE481877F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a6dae7c-4ed4-4ea8-95b9-05f1ba32a91c.roa Signing time: Mon 05 Oct 2026 00:00:34 +0000 ROA not before: Mon 05 Oct 2026 00:00:34 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.30.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:73:8f:69:a6:48:b7:8b:4e:07:54:23:02:01:8b:1c:e4:81:87:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:00:34 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=86d8ea656bdd1606267ec8fac65cbb89286da6a942590350684e9602d05e8d0f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:2e:4b:83:07:4d:0f:2a:9e:a8:1c:68:72: de:da:97:e2:07:03:8c:b9:4c:65:d9:52:96:0d:15: f7:cf:3a:0b:51:8e:55:9d:5d:9e:2b:de:54:3b:d0: 4c:96:22:f2:ab:a1:79:ac:1a:b2:10:d0:d9:a2:d4: dc:0e:35:3e:6e:12:be:dd:42:32:84:3a:33:2f:74: ec:da:a6:5f:b4:aa:bc:97:43:93:0c:16:fa:e9:37: 6b:60:22:89:04:2a:a6:56:cb:76:ef:d5:2d:10:a9: 8c:c2:f4:aa:cd:b0:1a:b3:88:d3:18:09:01:0c:b2: 2b:5f:9f:cc:f5:c6:93:3e:73:5d:06:f2:af:b7:d1: 4b:10:52:3f:a6:04:02:63:88:6a:39:7d:85:f5:91: c3:e9:45:60:12:db:1e:8a:7a:d3:ec:26:08:a7:b8: a2:86:08:cc:c3:8e:de:a3:cf:30:24:e2:7b:53:53: c9:b1:eb:e9:3f:ee:c1:10:c5:ea:d6:26:d8:3f:c9: 01:01:ba:02:fb:37:8e:a3:90:41:57:60:72:da:40: 83:82:c7:c2:ff:af:3e:85:1e:0b:66:7f:2f:a9:df: 92:64:bd:01:fb:18:28:4c:e3:bc:eb:5b:f9:a6:7c: 37:a9:f7:ad:04:60:64:ae:4f:d1:0a:2a:c9:62:36: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:03:44:DA:B8:AB:FD:71:9C:2B:F4:7C:76:D2:C0:8D:F1:E9:A3:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a6dae7c-4ed4-4ea8-95b9-05f1ba32a91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:0d:c6:03:bb:f5:97:ae:dd:c6:8d:b6:97:da:2b:12:99:a2: 24:20:16:00:ce:9a:ba:ce:a1:4c:65:ab:fb:f6:a9:47:99:43: 37:37:e3:13:fd:bc:e7:e8:83:ab:c7:5c:57:14:6c:e1:4d:65: 45:c3:6d:d2:ec:60:5e:da:92:d8:8b:33:e7:45:ac:0a:49:8c: 3b:e1:58:51:0f:2d:44:61:9d:e0:c3:c4:8c:7e:dd:28:09:3b: 5e:17:f6:e7:80:52:6c:99:6a:b5:e9:f7:2e:b4:24:42:11:f8: f2:a9:a3:8d:d7:4f:03:d9:08:9f:42:54:fa:68:dd:a7:02:d8: 70:69:10:f4:2b:34:e6:ba:77:2a:e1:01:44:d6:b1:81:09:1f: 9f:24:71:4a:d2:37:be:5f:95:19:46:ad:cf:cf:78:9e:fc:44: 8b:91:db:c0:54:5d:1c:5e:f9:7b:22:cb:7a:27:9b:f3:25:3c: 14:d0:9c:2c:5c:72:f4:11:80:c3:2b:09:2f:de:12:2e:1e:40: c6:d5:3c:2f:dd:b2:ed:cd:54:9a:b0:51:11:3d:73:28:4b:b0: 72:c1:32:dc:55:bb:46:ac:a3:7e:f8:43:8a:ad:e2:b8:05:f6: 6a:14:84:ac:b6:1d:b4:71:11:2e:82:be:8f:2e:dd:58:a1:70: 5e:34:4c:12 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUX3OPaaZIt4tOB1QjAgGLHOSBh38wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAwMDM0WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmQ4ZWE2NTZiZGQxNjA2MjY3ZWM4ZmFjNjVjYmI4OTI4 NmRhNmE5NDI1OTAzNTA2ODRlOTYwMmQwNWU4ZDBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsLC5LgwdNDyqeqBxoct7al+IHA4y5TGXZUpYNFffPOgtR jlWdXZ4r3lQ70EyWIvKroXmsGrIQ0Nmi1NwONT5uEr7dQjKEOjMvdOzapl+0qryX Q5MMFvrpN2tgIokEKqZWy3bv1S0QqYzC9KrNsBqziNMYCQEMsitfn8z1xpM+c10G 8q+30UsQUj+mBAJjiGo5fYX1kcPpRWAS2x6KetPsJginuKKGCMzDjt6jzzAk4ntT U8mx6+k/7sEQxerWJtg/yQEBugL7N46jkEFXYHLaQIOCx8L/rz6FHgtmfy+p35Jk vQH7GChM47zrW/mmfDep960EYGSuT9EKKsliNjZlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbwNE2rir/XGcK/R8dtLAjfHpo4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhNmRhZTdjLTRlZDQtNGVhOC05NWI5LTA1ZjFiYTMyYTkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQHjANBgkqhkiG9w0BAQsFAAOCAQEARQ3GA7v1l67dxo22l9orEpmiJCAW AM6aus6hTGWr+/apR5lDNzfjE/285+iDq8dcVxRs4U1lRcNt0uxgXtqS2Isz50Ws CkmMO+FYUQ8tRGGd4MPEjH7dKAk7Xhf254BSbJlqten3LrQkQhH48qmjjddPA9kI n0JU+mjdpwLYcGkQ9Cs05rp3KuEBRNaxgQkfnyRxStI3vl+VGUatz894nvxEi5Hb wFRdHF75eyLLeieb8yU8FNCcLFxy9BGAwysJL94SLh5AxtU8L92y7c1UmrBRET1z KEuwcsEy3FW7RqyjfvhDiq3iuAX2ahSErLYdtHERLoK+jy7dWKFwXjRMEg== -----END CERTIFICATE-----Generated at Mon Oct 5 16:09:41 2026 by rpki-client