$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568d3250-3ca0-477b-b40b-050f99d54c5a.roa File: 568d3250-3ca0-477b-b40b-050f99d54c5a.roa (raw, json) Hash identifier: y8XOyiqC6mUJVPCR2jMauU2vvyeroe4H127XjKcXuI4= Subject key identifier: F9:97:9B:EF:91:F8:F6:F7:78:6D:85:36:8F:51:EB:47:9E:A3:13:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D6871A4450F8F92DECD67DEFD7129BFA6AA9CA0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568d3250-3ca0-477b-b40b-050f99d54c5a.roa Signing time: Thu 08 Oct 2026 17:23:21 +0000 ROA not before: Thu 08 Oct 2026 17:23:21 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.15.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:68:71:a4:45:0f:8f:92:de:cd:67:de:fd:71:29:bf:a6:aa:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 17:23:21 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=6583188e54d2fe9be14c91c10758c3fd6a96ca782e9bea5bdfe16c39672abfcb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:ad:37:ff:a8:34:c0:9c:47:52:85:58:1c: dd:2f:a0:30:18:f5:f0:d9:48:fb:6d:82:b5:41:f7: 84:d8:88:1b:dc:bc:f2:bc:eb:12:47:3c:12:b9:81: 11:8f:04:08:16:fb:8a:5b:8a:14:18:d2:03:b3:11: 60:95:73:f8:96:3b:d5:97:d0:d0:5c:80:66:93:cc: 30:18:55:6a:e2:39:43:6d:1f:65:16:71:2f:00:48: 9c:6b:20:aa:b5:eb:24:01:3c:1a:88:70:1d:8c:c1: d3:0a:e1:9e:72:1b:7e:50:d0:78:9e:06:43:f4:de: db:24:02:16:a4:0d:0a:51:29:5b:fb:b0:e6:2c:ed: 48:d8:af:fd:b8:9b:c7:ca:15:0a:3d:55:7a:cb:a4: 24:c6:e6:38:63:0c:f7:a7:af:0e:6a:6c:e0:46:d5: 74:b6:a4:83:30:be:34:09:ef:b2:8f:4f:77:40:3b: 53:c3:c3:13:92:8c:61:da:23:3f:f5:d7:a9:9c:bc: e4:29:a4:25:a2:e4:28:04:8f:65:a9:35:21:06:cb: c8:41:9a:8a:45:8c:b2:b0:c5:78:e8:d5:05:74:13: 10:1b:5b:d2:ee:d2:0f:43:7c:94:59:36:ac:61:99: e3:2a:6b:d1:b7:74:ce:36:3a:d6:10:53:a8:fd:23: c2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:97:9B:EF:91:F8:F6:F7:78:6D:85:36:8F:51:EB:47:9E:A3:13:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568d3250-3ca0-477b-b40b-050f99d54c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.15.100.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:64:54:a3:4a:4e:c4:06:8e:8a:5f:ff:f4:5a:38:3b:12:d0: 64:d2:bd:ba:a6:a4:44:96:92:1b:68:35:8e:98:29:b0:83:70: 43:8d:23:f2:23:a5:ab:0a:9a:fb:a4:59:85:11:14:f2:bd:5d: 54:37:6f:3b:23:d6:4b:a7:2b:90:be:9e:21:39:46:9c:6e:9b: 9f:ca:6d:12:01:1d:fa:12:7e:26:bd:16:3e:e4:31:28:a3:9a: 9b:79:06:c1:42:3b:45:70:d6:58:89:ef:42:07:41:94:b3:33: 94:32:24:29:b9:9b:df:28:e4:2a:c3:37:ab:66:9f:49:10:fb: 5a:24:89:ac:2e:d3:17:ee:f9:91:76:f5:67:f8:55:22:ae:16: 7a:a0:64:4c:2a:1a:52:57:38:0a:7d:de:e2:67:95:76:97:74: 6a:6a:5d:14:54:69:10:a1:8e:18:1c:f6:5e:c8:b3:53:0c:63: bc:72:f7:d8:d0:f4:70:6d:af:1b:5a:fc:fc:1c:f6:82:e2:7c: 84:63:af:73:e8:07:16:d7:c1:82:48:5e:ba:26:e6:72:b6:c2: 89:b3:db:ca:91:ab:f2:d4:e9:18:20:c4:b2:b2:be:bc:ef:11: 3c:8d:ad:d9:72:d5:1f:23:a5:a1:95:1f:4e:4a:5d:9d:64:89: 51:08:7a:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPWhxpEUPj5LezWfe/XEpv6aqnKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MTcyMzIxWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTgzMTg4ZTU0ZDJmZTliZTE0YzkxYzEwNzU4YzNmZDZh OTZjYTc4MmU5YmVhNWJkZmUxNmMzOTY3MmFiZmNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKU603/6g0wJxHUoVYHN0voDAY9fDZSPttgrVB94TYiBvc vPK86xJHPBK5gRGPBAgW+4pbihQY0gOzEWCVc/iWO9WX0NBcgGaTzDAYVWriOUNt H2UWcS8ASJxrIKq16yQBPBqIcB2MwdMK4Z5yG35Q0HieBkP03tskAhakDQpRKVv7 sOYs7UjYr/24m8fKFQo9VXrLpCTG5jhjDPenrw5qbOBG1XS2pIMwvjQJ77KPT3dA O1PDwxOSjGHaIz/116mcvOQppCWi5CgEj2WpNSEGy8hBmopFjLKwxXjo1QV0ExAb W9Lu0g9DfJRZNqxhmeMqa9G3dM42OtYQU6j9I8KFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+Zeb75H49vd4bYU2j1HrR56jE9cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2OGQzMjUwLTNjYTAtNDc3Yi1iNDBiLTA1MGY5OWQ1NGM1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIQD2QwDQYJKoZIhvcNAQELBQADggEBAFxkVKNKTsQGjopf//RaODsS0GTS vbqmpESWkhtoNY6YKbCDcEONI/IjpasKmvukWYURFPK9XVQ3bzsj1kunK5C+niE5 Rpxum5/KbRIBHfoSfia9Fj7kMSijmpt5BsFCO0Vw1liJ70IHQZSzM5QyJCm5m98o 5CrDN6tmn0kQ+1okiawu0xfu+ZF29Wf4VSKuFnqgZEwqGlJXOAp93uJnlXaXdGpq XRRUaRChjhgc9l7Is1MMY7xy99jQ9HBtrxta/Pwc9oLifIRjr3PoBxbXwYJIXrom 5nK2womz28qRq/LU6RggxLKyvrzvETyNrdly1R8jpaGVH05KXZ1kiVEIeqc= -----END CERTIFICATE-----Generated at Tue Nov 3 06:15:26 2026 by rpki-client