$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c62399b-5fa5-4a29-9b29-65771416f2a5.roa File: 7c62399b-5fa5-4a29-9b29-65771416f2a5.roa (raw, json) Hash identifier: XP5mJ/eKv8jpNUC7rEX93l/gR1yTGThy7diI4Ymzgzk= Subject key identifier: 09:1B:F1:C1:E2:50:16:20:61:18:99:40:32:8F:68:A4:33:DE:DD:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C39A65DF0A084B82FAB9D20697361D9E1194D09 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c62399b-5fa5-4a29-9b29-65771416f2a5.roa Signing time: Tue 27 Oct 2026 00:10:42 +0000 ROA not before: Tue 27 Oct 2026 00:10:42 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.29.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:39:a6:5d:f0:a0:84:b8:2f:ab:9d:20:69:73:61:d9:e1:19:4d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:10:42 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=c5b317e0b20519a15f7f3e35b2b0c2b2f5ee2b6d42ef89374ba71716a22dc735, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:b8:99:91:0b:5f:9e:b9:ad:57:05:8d:92: 67:0f:2b:f1:75:d8:87:b5:7a:f6:a2:8d:f5:30:e8: 57:1e:a8:14:2e:c7:a7:f6:66:f3:5b:5f:76:88:22: 98:fc:34:e5:00:06:82:9d:35:62:c4:f9:b6:7e:d6: 44:22:b7:88:e5:a6:2a:83:46:fe:54:04:67:a4:73: cd:9b:cc:35:9a:4f:44:27:87:a7:f4:2e:b4:d7:b6: 69:b3:02:3f:16:48:71:73:47:04:51:ca:8d:db:1c: b6:a5:e2:39:ce:19:50:0a:85:4f:db:9e:b7:d5:82: 35:86:4b:5d:a9:b3:23:b0:58:9a:cb:4b:be:dc:a6: 6e:e4:f6:41:90:4e:8d:96:58:2a:28:4d:ab:0d:fd: 0d:26:b8:b4:bc:ee:42:ed:83:98:c1:36:e6:fe:ed: 34:7b:86:a0:05:d0:18:bf:7b:18:74:4e:c3:b3:8c: ff:38:74:41:c5:da:48:7f:2e:ef:ed:7a:2a:b6:92: f4:8f:c3:bb:ce:47:bc:2a:55:6b:eb:b2:2b:89:e2: 0a:55:cc:af:e8:c9:08:e1:b8:75:c5:95:9c:fd:fe: 5a:fc:25:86:47:ef:f0:58:3c:33:7c:e0:92:0f:a4: 8f:07:61:6c:cc:69:1f:97:24:07:00:2c:b0:eb:91: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1B:F1:C1:E2:50:16:20:61:18:99:40:32:8F:68:A4:33:DE:DD:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c62399b-5fa5-4a29-9b29-65771416f2a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.29.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:c5:93:61:4a:e1:a0:83:34:43:7c:1d:51:6e:e6:06:c3:e7: c6:b9:f5:b5:ea:4f:09:28:64:c1:c0:6a:5f:b3:10:97:ad:a1: cb:78:3d:73:2c:4b:39:9e:56:42:f3:5f:10:52:96:70:29:fa: a0:a4:93:b1:67:57:ac:90:05:9f:c6:b4:69:12:56:6c:dc:0d: 60:0d:12:b5:89:59:11:a1:be:03:3e:d4:2f:6d:cb:d6:55:a9: 7b:f4:f2:5a:28:86:18:48:c6:85:5f:e1:aa:d3:66:d7:ee:8f: 74:de:4b:9e:43:5f:97:da:e0:f3:a9:4c:76:41:b5:45:ba:be: a3:4a:96:71:2b:be:1c:98:6e:05:1d:5f:5b:e4:41:64:8a:af: 7a:38:f2:2d:9a:06:96:5f:9a:5d:32:43:8b:a0:3d:b3:ca:66: 06:84:cf:9f:80:07:d7:9a:23:f2:63:5a:73:58:30:f4:a1:3e: ac:2b:06:5e:7a:02:00:e2:19:09:b0:01:cb:1a:91:c7:46:de: b2:0d:12:13:82:0e:8b:8c:0a:69:40:d7:1a:40:ac:8e:3b:f9: 6a:b7:77:fe:7b:a5:9c:f8:81:f5:2a:54:c2:ca:14:47:04:82: cc:3e:ac:f9:fd:53:10:5b:54:1e:e9:50:2c:4a:43:49:2d:c9: 6c:a8:45:87 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULDmmXfCghLgvq50gaXNh2eEZTQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAxMDQyWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWIzMTdlMGIyMDUxOWExNWY3ZjNlMzViMmIwYzJiMmY1 ZWUyYjZkNDJlZjg5Mzc0YmE3MTcxNmEyMmRjNzM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjI7iZkQtfnrmtVwWNkmcPK/F12Ie1evaijfUw6FceqBQu x6f2ZvNbX3aIIpj8NOUABoKdNWLE+bZ+1kQit4jlpiqDRv5UBGekc82bzDWaT0Qn h6f0LrTXtmmzAj8WSHFzRwRRyo3bHLal4jnOGVAKhU/bnrfVgjWGS12psyOwWJrL S77cpm7k9kGQTo2WWCooTasN/Q0muLS87kLtg5jBNub+7TR7hqAF0Bi/exh0TsOz jP84dEHF2kh/Lu/teiq2kvSPw7vOR7wqVWvrsiuJ4gpVzK/oyQjhuHXFlZz9/lr8 JYZH7/BYPDN84JIPpI8HYWzMaR+XJAcALLDrkb7dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCRvxweJQFiBhGJlAMo9opDPe3fwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjNjIzOTliLTVmYTUtNGEyOS05YjI5LTY1NzcxNDE2ZjJhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQHTANBgkqhkiG9w0BAQsFAAOCAQEAMcWTYUrhoIM0Q3wdUW7mBsPnxrn1 tepPCShkwcBqX7MQl62hy3g9cyxLOZ5WQvNfEFKWcCn6oKSTsWdXrJAFn8a0aRJW bNwNYA0StYlZEaG+Az7UL23L1lWpe/TyWiiGGEjGhV/hqtNm1+6PdN5LnkNfl9rg 86lMdkG1Rbq+o0qWcSu+HJhuBR1fW+RBZIqvejjyLZoGll+aXTJDi6A9s8pmBoTP n4AH15oj8mNac1gw9KE+rCsGXnoCAOIZCbAByxqRx0besg0SE4IOi4wKaUDXGkCs jjv5ard3/nulnPiB9SpUwsoURwSCzD6s+f1TEFtUHulQLEpDSS3JbKhFhw== -----END CERTIFICATE-----Generated at Thu Nov 5 01:43:57 2026 by rpki-client