$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65a01aad-4382-4698-b0f7-79abb6735744.roa File: 65a01aad-4382-4698-b0f7-79abb6735744.roa (raw, json) Hash identifier: 9CrHMKSJt+I/gWqVZR2AyLxGY0bfwfd4j3300j34e3Q= Subject key identifier: C8:5F:5D:67:60:D5:C4:92:5D:9C:A2:3D:38:12:0C:1C:D4:E2:CC:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DCFA3BD675B27BCCCC95C7C4897C0D81E31311E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65a01aad-4382-4698-b0f7-79abb6735744.roa Signing time: Sat 08 Aug 2026 00:40:08 +0000 ROA not before: Sat 08 Aug 2026 00:40:08 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:cf:a3:bd:67:5b:27:bc:cc:c9:5c:7c:48:97:c0:d8:1e:31:31:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:40:08 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=fc533b3680dbba48d17a1a7afacf02d25483a141a5af9f434f7bc0203c3ab4e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a2:55:91:a2:ac:43:f8:19:d3:d7:b8:d9:e7: 82:9b:3a:38:43:93:b0:35:5f:79:e5:2b:ee:59:8b: 7c:f5:f7:81:eb:3a:a0:30:75:23:10:1c:6c:27:45: 6d:14:6e:2e:37:c6:17:c4:4f:1e:ea:50:e9:b9:93: 47:ed:84:82:f2:6d:74:3d:30:a3:b8:26:35:d7:b5: 05:62:b3:22:21:1c:15:c6:b3:84:e9:ec:67:8a:e7: 67:48:7e:b7:ae:a1:5f:51:60:39:d8:d7:8d:1c:27: 45:f3:76:c5:f1:89:4f:0e:fd:15:83:90:1f:6d:2e: fd:b3:a5:a7:5a:09:4b:8f:cf:2e:99:82:ba:1e:a4: 28:14:cb:67:26:3f:1c:19:8a:b9:74:31:f4:a8:78: ba:6d:b2:20:99:15:05:3d:69:86:04:9b:ca:3b:59: c2:27:f0:82:94:d7:70:a0:5b:94:64:28:b4:b4:aa: 52:2e:20:a9:b7:99:36:91:b0:40:67:02:24:44:06: 77:a4:03:ea:13:43:e7:9d:6b:07:74:d8:44:95:c6: 01:da:32:51:3f:c3:4b:c9:4a:3d:76:2b:07:86:47: 1a:6e:c4:28:cd:f9:70:b7:4f:4d:aa:d6:30:9c:9f: 5f:19:e1:3c:e8:fa:9d:8e:08:bc:f3:91:c0:77:8f: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5F:5D:67:60:D5:C4:92:5D:9C:A2:3D:38:12:0C:1C:D4:E2:CC:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65a01aad-4382-4698-b0f7-79abb6735744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.0.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:87:81:d8:04:ed:77:ff:f1:c8:38:78:6c:7b:5b:13:5a:1b: 20:cf:58:83:ef:bd:d8:9e:d8:8c:40:76:cf:ba:c9:8d:da:e7: 0e:d7:9f:5f:0d:ac:ab:84:f5:6f:f0:20:61:c7:97:9e:d5:01: 0e:c1:cf:90:4e:4d:d9:87:18:01:d8:a7:5f:65:2c:f6:52:a9: 24:bf:8a:4b:54:2f:21:cb:fa:b5:0d:4d:f7:f6:70:9c:c7:40: f6:9d:80:e0:6c:23:64:3a:b2:af:0c:76:fc:44:99:4d:5d:27: c0:e4:e3:ef:98:b1:8e:ec:56:2d:a2:f9:ae:71:1b:04:15:93: 4f:7d:5a:99:37:13:53:3d:88:e8:86:2c:f4:88:8b:67:b4:ff: c0:86:30:7c:5b:a9:25:62:b3:21:77:65:14:9a:75:88:d5:c5: d7:09:9f:f0:16:a1:e3:37:c7:c4:b7:96:61:64:68:2a:d7:f9: 20:13:be:60:e6:1c:4a:7a:a6:f4:20:12:24:f0:c4:0e:da:bd: 20:37:2d:1e:a5:24:b6:bf:da:8d:03:a0:eb:d6:43:7e:44:cf: c7:b5:93:84:ee:4c:a4:7e:37:a0:61:15:8c:15:68:2b:86:24: ae:4d:16:71:d3:57:ad:89:77:5e:1e:06:08:cf:77:92:c2:1a: 77:f5:b8:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTc+jvWdbJ7zMyVx8SJfA2B4xMR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDA0MDA4WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzUzM2IzNjgwZGJiYTQ4ZDE3YTFhN2FmYWNmMDJkMjU0 ODNhMTQxYTVhZjlmNDM0ZjdiYzAyMDNjM2FiNGUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQolWRoqxD+BnT17jZ54KbOjhDk7A1X3nlK+5Zi3z194Hr OqAwdSMQHGwnRW0Ubi43xhfETx7qUOm5k0fthILybXQ9MKO4JjXXtQVisyIhHBXG s4Tp7GeK52dIfreuoV9RYDnY140cJ0XzdsXxiU8O/RWDkB9tLv2zpadaCUuPzy6Z groepCgUy2cmPxwZirl0MfSoeLptsiCZFQU9aYYEm8o7WcIn8IKU13CgW5RkKLS0 qlIuIKm3mTaRsEBnAiREBnekA+oTQ+edawd02ESVxgHaMlE/w0vJSj12KweGRxpu xCjN+XC3T02q1jCcn18Z4Tzo+p2OCLzzkcB3j9bbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyF9dZ2DVxJJdnKI9OBIMHNTizBgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1YTAxYWFkLTQzODItNDY5OC1iMGY3LTc5YWJiNjczNTc0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQOQAwDQYJKoZIhvcNAQELBQADggEBAGqHgdgE7Xf/8cg4eGx7WxNaGyDP WIPvvdie2IxAds+6yY3a5w7Xn18NrKuE9W/wIGHHl57VAQ7Bz5BOTdmHGAHYp19l LPZSqSS/iktULyHL+rUNTff2cJzHQPadgOBsI2Q6sq8MdvxEmU1dJ8Dk4++YsY7s Vi2i+a5xGwQVk099Wpk3E1M9iOiGLPSIi2e0/8CGMHxbqSVisyF3ZRSadYjVxdcJ n/AWoeM3x8S3lmFkaCrX+SATvmDmHEp6pvQgEiTwxA7avSA3LR6lJLa/2o0DoOvW Q35Ez8e1k4TuTKR+N6BhFYwVaCuGJK5NFnHTV62Jd14eBgjPd5LCGnf1uAc= -----END CERTIFICATE-----Generated at Thu Sep 17 21:50:32 2026 by rpki-client