$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/788c8f4f-a3db-4e18-acda-6fc96da8a534.roa File: 788c8f4f-a3db-4e18-acda-6fc96da8a534.roa (raw, json) Hash identifier: ounQj6mBSJoyMScuygH2OAM9EeUrSoGM2NXfoxA+LNY= Subject key identifier: 61:79:92:42:9E:2A:75:EB:13:51:34:2B:FE:24:8F:DF:9C:2C:A8:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C13FF916879A1B314CDC92875469B7F1AC4220B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/788c8f4f-a3db-4e18-acda-6fc96da8a534.roa Signing time: Thu 22 Oct 2026 01:50:46 +0000 ROA not before: Thu 22 Oct 2026 01:50:46 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.156.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:13:ff:91:68:79:a1:b3:14:cd:c9:28:75:46:9b:7f:1a:c4:22:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:50:46 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=2a3a11b498cdd5b18bad941e9bc051611e0450b8488c629c07dbfa922810d5bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:2b:68:81:44:69:bd:6d:4e:da:31:ae:e7: 16:a7:0e:1e:c7:92:40:3b:54:77:1f:5d:be:f6:27: 43:a8:13:4b:0a:6d:de:7f:c1:23:c9:0e:d8:31:2c: 95:4d:0f:eb:b6:c0:70:fc:c5:44:03:3d:48:46:cf: 6e:11:3e:b9:53:53:13:1e:f7:75:85:6e:40:66:74: 91:16:32:ba:8f:dd:bc:24:32:0d:10:14:8c:9a:ac: 24:40:ac:af:80:2c:a7:48:4d:9b:34:56:71:b7:e9: 78:16:69:cb:6c:6c:11:94:8d:dd:82:7a:c7:d4:00: 72:28:ea:25:c1:a4:bf:1d:41:72:e9:6d:fc:d4:b0: 12:07:10:85:c6:ca:6b:0d:74:7d:1c:41:7b:d8:f1: b8:a1:c6:3f:54:95:6a:7a:1c:84:52:0b:4a:33:94: a9:16:d5:eb:1e:88:48:40:14:dc:4c:a0:4a:b4:19: 07:25:a9:df:4d:de:9a:cf:d5:1c:ea:0c:6e:fb:19: 6c:de:3c:62:4e:96:80:ea:f7:1e:b9:76:87:68:8d: a8:c3:a9:8a:82:51:2b:c8:b2:83:5f:03:7a:7b:57: 6c:ba:8c:dd:4e:39:e8:5c:41:06:f8:86:9e:c3:49: 50:42:b3:66:4b:b5:3e:9d:57:97:52:65:1e:a1:e5: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:79:92:42:9E:2A:75:EB:13:51:34:2B:FE:24:8F:DF:9C:2C:A8:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/788c8f4f-a3db-4e18-acda-6fc96da8a534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.156.0.0/15 Signature Algorithm: sha256WithRSAEncryption 46:f4:b6:73:cf:14:0e:ea:ab:a4:94:66:cf:cc:ff:88:d8:23: de:4a:3c:5b:e3:b3:cc:8b:eb:11:c9:e9:91:93:63:3f:23:83: 7f:cf:90:cc:de:90:6f:99:6c:9d:84:7d:ad:a8:a2:7a:46:fd: 0f:ed:ef:7a:6f:92:da:28:69:3b:2a:10:47:bc:8f:f0:7d:d8: a8:99:e8:c5:48:2b:9f:e5:13:8f:bb:33:d1:42:ae:42:1a:f7: 10:50:4f:fd:59:91:aa:79:13:25:2b:16:19:89:1f:83:08:20: f8:7c:00:e6:63:3e:b0:a2:33:a7:e1:c1:31:65:e5:b4:f2:27: a0:c6:45:9a:5d:b4:d1:73:ec:67:c7:c5:95:70:92:05:08:08: d9:c7:b5:5f:26:1f:9c:ba:9a:b6:35:35:25:f9:f3:83:84:67: 1e:87:d1:1c:eb:da:c3:16:8b:d7:56:1e:d1:d2:21:c6:c1:e8: e7:28:10:80:2f:ed:95:5d:ba:43:14:99:89:87:47:65:f5:8d: 84:13:72:48:67:82:04:01:4f:7c:9e:d7:61:2b:23:89:14:92: d2:69:34:ea:6b:0d:4b:61:fc:2d:ca:40:e2:92:c8:bb:ae:19: 9d:58:be:fe:f9:70:a9:a8:3d:44:9b:6e:fe:d2:b8:6a:ea:45: cc:d1:54:6c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULBP/kWh5obMUzckodUabfxrEIgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDE1MDQ2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTNhMTFiNDk4Y2RkNWIxOGJhZDk0MWU5YmMwNTE2MTFl MDQ1MGI4NDg4YzYyOWMwN2RiZmE5MjI4MTBkNWJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGRCtogURpvW1O2jGu5xanDh7HkkA7VHcfXb72J0OoE0sK bd5/wSPJDtgxLJVND+u2wHD8xUQDPUhGz24RPrlTUxMe93WFbkBmdJEWMrqP3bwk Mg0QFIyarCRArK+ALKdITZs0VnG36XgWactsbBGUjd2CesfUAHIo6iXBpL8dQXLp bfzUsBIHEIXGymsNdH0cQXvY8bihxj9UlWp6HIRSC0ozlKkW1eseiEhAFNxMoEq0 GQclqd9N3prP1RzqDG77GWzePGJOloDq9x65dodojajDqYqCUSvIsoNfA3p7V2y6 jN1OOehcQQb4hp7DSVBCs2ZLtT6dV5dSZR6h5WwVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYXmSQp4qdesTUTQr/iSP35wsqCEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4OGM4ZjRmLWEzZGItNGUxOC1hY2RhLTZmYzk2ZGE4YTUzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQnDANBgkqhkiG9w0BAQsFAAOCAQEARvS2c88UDuqrpJRmz8z/iNgj3ko8 W+OzzIvrEcnpkZNjPyODf8+QzN6Qb5lsnYR9raiiekb9D+3vem+S2ihpOyoQR7yP 8H3YqJnoxUgrn+UTj7sz0UKuQhr3EFBP/VmRqnkTJSsWGYkfgwgg+HwA5mM+sKIz p+HBMWXltPInoMZFml200XPsZ8fFlXCSBQgI2ce1XyYfnLqatjU1Jfnzg4RnHofR HOvawxaL11Ye0dIhxsHo5ygQgC/tlV26QxSZiYdHZfWNhBNySGeCBAFPfJ7XYSsj iRSS0mk06msNS2H8LcpA4pLIu64ZnVi+/vlwqag9RJtu/tK4aupFzNFUbA== -----END CERTIFICATE-----Generated at Wed Nov 4 17:57:33 2026 by rpki-client