$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa File: 5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa (raw, json) Hash identifier: kksg94eu1hjzTy2gLvB6cVMZTMGIa5enNI3zTw0hYDQ= Subject key identifier: 30:C1:B1:16:21:90:53:79:D0:94:9F:32:1D:20:09:5B:F5:5B:4F:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C9C2D6EA1521AC7B1904F038DDEC20B42CB4752 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa Signing time: Tue 27 Oct 2026 00:10:42 +0000 ROA not before: Tue 27 Oct 2026 00:10:42 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.29.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9c:2d:6e:a1:52:1a:c7:b1:90:4f:03:8d:de:c2:0b:42:cb:47:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:10:42 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=084b3c6223766adb23a4ef5f77e8e1d005dbdf1b598875311f2b03aa40733d1b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:f8:f8:4d:27:7b:98:5b:b0:1c:1b:00:30: 30:c7:0b:3c:b6:d4:5e:eb:c6:75:87:a2:40:20:17: d6:9d:43:23:c9:d8:0c:a3:79:aa:0f:52:6d:95:c5: f2:15:a1:cc:8f:33:91:5a:da:cf:19:7c:79:45:45: 64:d8:7f:00:3f:cc:1a:55:09:a4:30:58:f8:ca:33: 4e:5a:90:38:26:62:40:5b:95:49:f8:34:14:19:e9: d6:56:5b:c0:f3:ff:9f:1b:96:8e:cc:48:49:75:d1: d4:d6:45:b1:61:1a:b7:3d:85:8e:28:0e:62:e5:75: 07:f6:ff:4d:b9:86:ec:13:5b:d1:48:cf:4b:ee:a3: be:c6:37:86:1f:8b:85:dd:1a:5d:22:34:31:15:b1: 17:48:ed:1b:a6:ff:1a:5b:74:27:00:02:02:17:ae: 33:1a:b0:4f:d1:ef:d2:40:09:15:54:6a:25:f8:56: 2d:f3:6a:78:da:4e:83:2b:c5:f3:01:79:23:85:47: ca:5a:1b:90:03:d8:05:c4:51:31:1a:96:d7:71:03: 70:2e:fb:e9:a1:f0:1a:3e:f7:41:8a:89:f6:5e:2c: bb:ad:81:6e:a4:6c:6b:9b:61:63:9d:ae:5e:1a:fc: 57:94:d4:73:97:ea:d7:a6:15:7f:6b:33:47:ea:64: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C1:B1:16:21:90:53:79:D0:94:9F:32:1D:20:09:5B:F5:5B:4F:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.29.0.0/16 Signature Algorithm: sha256WithRSAEncryption ca:b6:45:95:6e:9f:95:cd:93:ff:26:f0:32:37:52:1b:c4:2e: fb:22:72:97:e5:76:b0:7c:7b:51:4c:bf:86:cf:1e:7f:2c:06: 0c:8e:72:bb:ca:43:c5:f0:da:d1:be:02:b8:ef:cb:45:1b:26: 91:3d:2d:d3:21:3b:9c:fc:44:76:49:c4:64:f8:68:ff:25:2a: 49:a2:54:c8:10:34:04:78:cf:d8:99:ad:f7:0e:ec:7e:98:b7: 50:ed:2b:38:78:49:5d:16:31:58:49:a0:27:72:a0:1a:ad:7b: 89:49:1c:af:b1:c0:c9:5c:0a:14:ab:56:33:29:9d:7c:9e:aa: ce:64:01:9e:0e:47:3e:82:3e:ba:91:53:31:46:bb:fa:25:82: 42:99:92:8e:c2:e9:cf:51:4c:24:ab:7f:a5:7e:16:85:f7:fc: e7:3a:ad:00:fe:d9:32:02:fb:6e:41:1d:05:72:15:3b:52:10: 07:d7:d6:64:cc:a5:57:da:5e:72:d8:14:67:f7:dc:aa:d8:79: 27:41:dd:b6:a1:7e:f5:f6:19:02:b1:80:e2:59:46:ef:30:a5: 17:dc:16:a1:6a:13:cf:cd:f1:e3:17:b7:b4:9d:21:9a:ad:33: 19:75:14:9c:1c:ca:f1:cf:16:3c:e2:b4:58:2b:86:c1:cc:03: 96:4e:62:63 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULJwtbqFSGsexkE8Djd7CC0LLR1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAxMDQyWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODRiM2M2MjIzNzY2YWRiMjNhNGVmNWY3N2U4ZTFkMDA1 ZGJkZjFiNTk4ODc1MzExZjJiMDNhYTQwNzMzZDFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Jvj4TSd7mFuwHBsAMDDHCzy21F7rxnWHokAgF9adQyPJ 2AyjeaoPUm2VxfIVocyPM5Fa2s8ZfHlFRWTYfwA/zBpVCaQwWPjKM05akDgmYkBb lUn4NBQZ6dZWW8Dz/58blo7MSEl10dTWRbFhGrc9hY4oDmLldQf2/025huwTW9FI z0vuo77GN4Yfi4XdGl0iNDEVsRdI7Rum/xpbdCcAAgIXrjMasE/R79JACRVUaiX4 Vi3zanjaToMrxfMBeSOFR8paG5AD2AXEUTEaltdxA3Au++mh8Bo+90GKifZeLLut gW6kbGubYWOdrl4a/FeU1HOX6temFX9rM0fqZGXnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMMGxFiGQU3nQlJ8yHSAJW/VbT3YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0MzVlNGM3LWFhN2ItNDdjNy1hZTk4LTk5ZWJhODE4NDFmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQHTANBgkqhkiG9w0BAQsFAAOCAQEAyrZFlW6flc2T/ybwMjdSG8Qu+yJy l+V2sHx7UUy/hs8efywGDI5yu8pDxfDa0b4CuO/LRRsmkT0t0yE7nPxEdknEZPho /yUqSaJUyBA0BHjP2Jmt9w7sfpi3UO0rOHhJXRYxWEmgJ3KgGq17iUkcr7HAyVwK FKtWMymdfJ6qzmQBng5HPoI+upFTMUa7+iWCQpmSjsLpz1FMJKt/pX4Whff85zqt AP7ZMgL7bkEdBXIVO1IQB9fWZMylV9pectgUZ/fcqth5J0HdtqF+9fYZArGA4llG 7zClF9wWoWoTz83x4xe3tJ0hmq0zGXUUnBzK8c8WPOK0WCuGwcwDlk5iYw== -----END CERTIFICATE-----Generated at Tue Nov 3 19:20:07 2026 by rpki-client