$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa File: 5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa (raw, json) Hash identifier: FeLPG/T/zNIzyKdF80Hv17wNilZk6dUP9W1K7CRVbbY= Subject key identifier: 04:23:88:D4:29:7F:45:04:D5:FA:E5:54:4E:8A:66:E3:29:19:8E:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A904D635832A21BE6BC8218F63841093BA28928 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa Signing time: Sat 08 Aug 2026 00:00:47 +0000 ROA not before: Sat 08 Aug 2026 00:00:47 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:90:4d:63:58:32:a2:1b:e6:bc:82:18:f6:38:41:09:3b:a2:89:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:47 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=7d91c9ce33753eab689c606be738a1fe341ff047f5b2ccf479aaaa7c1df07d88, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:36:71:66:ad:82:6b:2d:ae:ac:86:65:c9: aa:c9:65:aa:60:28:3f:e8:db:73:1c:98:05:4e:d3: 2e:59:b7:11:7e:5d:82:07:07:f0:e9:a4:e7:f6:66: c8:d7:87:5b:25:5a:09:90:5e:18:36:60:d0:18:20: f1:17:55:0b:36:c2:c8:3e:d3:45:e4:bf:f7:97:8d: 55:9b:e1:f6:cf:48:54:5b:08:19:f3:35:66:ea:0b: 74:72:58:71:4e:10:d6:6d:c8:5a:dc:6d:b3:5c:75: 4a:d3:7c:df:0e:03:30:bb:1d:20:f7:24:9f:bf:d3: 26:f0:97:6d:62:5e:ec:fb:73:eb:2d:f3:72:e0:6f: 36:e2:dd:66:47:ae:ec:1c:0b:47:bc:8a:ac:fb:ea: 5c:5e:72:33:d5:09:bf:67:47:cf:ee:dd:f5:18:5f: ed:66:86:6f:18:4b:9a:d9:36:b8:d6:6e:91:0d:29: d8:60:93:18:98:b7:eb:f0:5d:5e:f4:45:f5:44:7b: dc:5a:0a:82:89:c0:5f:3b:3b:d2:5e:8e:d7:d5:f3: 04:10:c9:f5:8d:82:f1:5b:55:80:6b:18:e0:c6:f9: 8f:2a:34:0c:5b:40:84:fb:de:43:73:03:87:57:f7: b8:8d:eb:ef:d1:63:8e:43:23:43:11:b2:da:6c:7f: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:88:D4:29:7F:45:04:D5:FA:E5:54:4E:8A:66:E3:29:19:8E:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:84:1b:a2:04:65:c9:66:34:22:a4:72:5f:25:a2:7f:97:c9: 92:2f:b0:46:75:55:24:6c:a7:0f:6a:ca:75:6e:c0:2d:0d:7a: b1:62:7f:cd:72:cc:d6:71:cb:c3:20:7d:17:63:6f:9a:f1:39: 8b:81:43:46:11:4c:c5:f6:e8:b8:82:1a:83:ce:43:82:8b:9c: 43:5f:a3:44:8c:49:9d:9f:66:b5:d5:c5:ad:97:9f:42:58:d9: 66:19:e3:ce:da:a1:9c:94:c2:13:86:03:de:d7:b1:dd:1f:fb: 58:da:1e:e1:65:08:99:a4:f5:0f:9b:0b:a1:c0:c5:66:f7:a9: 93:3c:4f:54:b7:ed:d8:01:35:c3:2d:0f:0b:89:4d:b9:3d:71: b4:dd:8d:6b:04:3d:de:fc:69:c8:3f:70:18:3a:63:71:65:bd: 45:f5:8a:67:3c:d2:40:60:0d:2e:2a:b5:cc:19:c9:4f:ba:35: 1a:a4:f4:1c:93:65:b2:f8:e2:06:b8:24:0c:0f:32:73:ae:6b: bf:39:d4:26:f0:85:a5:ec:53:3e:d5:4d:21:c4:fd:ad:25:c7: f8:12:58:51:85:b0:ea:92:10:ba:ee:b7:14:80:d9:03:e9:cc: 2c:74:3d:c6:a4:ff:10:c8:4d:45:c3:0b:b1:bb:61:36:74:a7: ac:43:fa:72 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSpBNY1gyohvmvIIY9jhBCTuiiSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMDQ3WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDkxYzljZTMzNzUzZWFiNjg5YzYwNmJlNzM4YTFmZTM0 MWZmMDQ3ZjViMmNjZjQ3OWFhYWE3YzFkZjA3ZDg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHFDZxZq2Cay2urIZlyarJZapgKD/o23McmAVO0y5ZtxF+ XYIHB/DppOf2ZsjXh1slWgmQXhg2YNAYIPEXVQs2wsg+00Xkv/eXjVWb4fbPSFRb CBnzNWbqC3RyWHFOENZtyFrcbbNcdUrTfN8OAzC7HSD3JJ+/0ybwl21iXuz7c+st 83Lgbzbi3WZHruwcC0e8iqz76lxecjPVCb9nR8/u3fUYX+1mhm8YS5rZNrjWbpEN KdhgkxiYt+vwXV70RfVEe9xaCoKJwF87O9JejtfV8wQQyfWNgvFbVYBrGODG+Y8q NAxbQIT73kNzA4dX97iN6+/RY45DI0MRstpsf43FAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBCOI1Cl/RQTV+uVUTopm4ykZjnQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmOTg5ZTNhLThlM2QtNDVjZS1hODNkLWQ1MzQ5MWFiNGEzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQOTANBgkqhkiG9w0BAQsFAAOCAQEAD4QbogRlyWY0IqRyXyWif5fJki+w RnVVJGynD2rKdW7ALQ16sWJ/zXLM1nHLwyB9F2NvmvE5i4FDRhFMxfbouIIag85D goucQ1+jRIxJnZ9mtdXFrZefQljZZhnjztqhnJTCE4YD3tex3R/7WNoe4WUImaT1 D5sLocDFZvepkzxPVLft2AE1wy0PC4lNuT1xtN2NawQ93vxpyD9wGDpjcWW9RfWK ZzzSQGANLiq1zBnJT7o1GqT0HJNlsvjiBrgkDA8yc65rvznUJvCFpexTPtVNIcT9 rSXH+BJYUYWw6pIQuu63FIDZA+nMLHQ9xqT/EMhNRcMLsbthNnSnrEP6cg== -----END CERTIFICATE-----Generated at Tue Sep 15 12:11:47 2026 by rpki-client