$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa File: 528b6591-3aae-49d5-aecd-8320249f6d0e.roa (raw, json) Hash identifier: Fcvme2hx9MCfQ5jTkKn0d7qYrq7GePV2axzyxlFElWo= Subject key identifier: 70:74:BA:B5:62:64:0A:5C:68:08:A6:0C:21:6E:5B:7A:AA:F2:FE:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F507BB39A61C6CBB70F14C99CDC1F9775F467 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa Signing time: Mon 05 Oct 2026 00:21:21 +0000 ROA not before: Mon 05 Oct 2026 00:21:21 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.17.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:50:7b:b3:9a:61:c6:cb:b7:0f:14:c9:9c:dc:1f:97:75:f4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:21:21 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=4b0129082d2b4f0741a8f2a434e632df5b781a0bcbb9528aa61cab270bcb6589, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:7d:71:33:ac:32:96:75:ed:4f:60:a6:ce: 73:6f:2a:43:b5:37:3d:6a:85:95:50:91:a3:c9:a2: 44:ab:73:c5:bd:0b:53:a2:31:0e:03:d6:22:b5:2d: 93:c2:a3:be:b0:91:3b:3e:fb:ea:df:2a:41:c0:74: 4c:7c:d6:ad:ef:9e:da:36:67:06:1a:fd:70:a8:24: df:1f:22:7a:68:1a:ab:ca:98:8f:01:b4:d8:0c:4c: eb:7d:99:9d:68:e1:a4:b0:78:ce:79:b4:dd:d9:64: 2d:03:8a:cb:ba:3c:40:93:ad:5e:69:71:2e:ce:4a: e1:d1:5c:64:1a:8f:48:b2:b2:43:50:08:7d:0b:cb: ea:f9:a8:29:c6:92:33:35:dd:4c:43:e7:9f:7e:b9: 09:e9:d4:a1:2f:d3:06:52:5a:97:0b:52:4c:bd:14: 46:d0:f9:7c:c0:96:5b:eb:f4:c7:9a:05:79:d2:98: fe:43:7f:06:17:69:d1:91:fd:c9:6f:aa:12:6d:dc: 5f:f1:be:36:c2:24:70:44:24:d8:1d:fa:6d:86:a7: b5:f4:f6:2d:9c:d0:bc:a4:96:8e:b6:21:65:9c:75: 6f:c6:5b:74:9f:93:e8:22:7d:ff:84:a7:06:9a:9f: e2:a3:de:ae:d7:9d:6c:68:70:5f:31:54:4e:df:2b: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:BA:B5:62:64:0A:5C:68:08:A6:0C:21:6E:5B:7A:AA:F2:FE:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 95:01:57:b9:4b:6a:76:af:c8:15:f3:24:61:f8:a6:81:a6:b2: c1:4a:86:6f:8c:f9:5a:69:e2:40:b0:71:1e:72:3c:5b:f8:a2: 3d:e2:16:45:d6:ff:d2:a5:92:05:97:4f:51:eb:26:97:ed:05: 24:c2:af:30:c5:e8:d1:82:ba:97:07:22:c9:3f:51:66:60:f3: 00:53:7f:43:a4:28:f3:55:ed:e7:91:f8:27:e5:31:e6:34:53: 0e:2d:ce:c5:6a:fc:63:83:f0:79:02:3a:29:33:0e:86:9d:ac: 8b:33:37:b6:6b:44:10:80:cc:da:71:a9:9f:22:2d:76:6c:af: 11:72:c5:8a:e8:da:b9:1e:db:77:be:f6:bb:99:42:52:d5:e3: d7:f5:40:e4:3b:d7:fd:30:6b:fe:b5:f4:a4:f7:bf:b3:00:87: 0a:e9:40:eb:83:ff:cc:4e:9f:70:db:65:f5:a3:ff:db:0b:1a: bc:89:3c:e2:d0:96:1a:69:e2:3f:9e:09:dc:9e:a9:99:0c:bb: e7:99:8f:be:91:eb:84:48:cd:f1:b5:c1:a2:81:01:3d:ec:77: 34:bf:db:f3:e8:2d:f3:b4:ae:7d:3b:7f:a2:4c:6f:e4:bd:5b: f4:69:e0:da:c1:14:d9:e9:70:de:18:45:2e:66:f5:fe:dd:f4: 12:ba:1b:7b -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITT1B7s5phxsu3DxTJnNwfl3X0ZzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMDUwMDIxMjFaFw0yNzAxMDMyMzU5NTla MHoxSTBHBgNVBAUTQDRiMDEyOTA4MmQyYjRmMDc0MWE4ZjJhNDM0ZTYzMmRmNWI3 ODFhMGJjYmI5NTI4YWE2MWNhYjI3MGJjYjY1ODkxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALZdfXEzrDKWde1PYKbOc28qQ7U3PWqFlVCRo8miRKtzxb0L U6IxDgPWIrUtk8KjvrCROz776t8qQcB0THzWre+e2jZnBhr9cKgk3x8iemgaq8qY jwG02AxM632ZnWjhpLB4znm03dlkLQOKy7o8QJOtXmlxLs5K4dFcZBqPSLKyQ1AI fQvL6vmoKcaSMzXdTEPnn365CenUoS/TBlJalwtSTL0URtD5fMCWW+v0x5oFedKY /kN/Bhdp0ZH9yW+qEm3cX/G+NsIkcEQk2B36bYantfT2LZzQvKSWjrYhZZx1b8Zb dJ+T6CJ9/4SnBpqf4qPertedbGhwXzFUTt8r/BsCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBRwdLq1YmQKXGgIpgwhblt6qvL+UDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNTI4YjY1OTEtM2FhZS00OWQ1LWFlY2QtODMyMDI0OWY2ZDBlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDABARMA0GCSqGSIb3DQEBCwUAA4IBAQCVAVe5S2p2r8gV8yRh+KaBprLBSoZv jPlaaeJAsHEecjxb+KI94hZF1v/SpZIFl09R6yaX7QUkwq8wxejRgrqXByLJP1Fm YPMAU39DpCjzVe3nkfgn5THmNFMOLc7Favxjg/B5AjopMw6GnayLMze2a0QQgMza camfIi12bK8RcsWK6Nq5Htt3vva7mUJS1ePX9UDkO9f9MGv+tfSk97+zAIcK6UDr g//MTp9w22X1o//bCxq8iTzi0JYaaeI/ngncnqmZDLvnmY++keuESM3xtcGigQE9 7Hc0v9vz6C3ztK59O3+iTG/kvVv0aeDawRTZ6XDeGEUuZvX+3fQSuht7 -----END CERTIFICATE-----Generated at Sun Oct 25 03:07:10 2026 by rpki-client