$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c6bb440-c520-453a-8ee1-f115d14cb0ac.roa File: 7c6bb440-c520-453a-8ee1-f115d14cb0ac.roa (raw, json) Hash identifier: gCnQICejDN3hT+s0hyj+qIDKwPLBvuYhBX1P1S+CpSU= Subject key identifier: 7C:D6:C1:8A:4F:46:3B:47:15:75:94:8F:72:33:1C:AE:3A:47:DC:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 674F182C51614475EB7E707FCE7BCCDBC46F2A12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c6bb440-c520-453a-8ee1-f115d14cb0ac.roa Signing time: Tue 06 Oct 2026 00:20:07 +0000 ROA not before: Tue 06 Oct 2026 00:20:07 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.147.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4f:18:2c:51:61:44:75:eb:7e:70:7f:ce:7b:cc:db:c4:6f:2a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:20:07 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=9e7102d1db559f04e3a71e2c18a6dcf00d5d9631970a280f66b03d466edde3f4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:ec:fb:31:fd:1d:22:8d:d6:0a:b0:77:5d: 68:94:a2:17:74:d9:2f:78:0d:40:4e:d2:a4:f6:38: 23:d8:8b:c9:ed:52:66:d6:26:0e:af:3c:5e:e4:ac: 0a:13:a9:5a:bb:8e:ea:f4:95:0e:04:02:ea:9d:7f: 56:02:0d:1c:ec:08:bb:62:fe:92:f4:30:72:2b:fb: 6c:fa:86:f4:cc:5a:3f:58:ed:82:04:a8:07:45:e9: 16:2f:89:23:13:3a:4f:68:58:06:09:6c:fc:82:cd: 22:c4:5d:a2:7b:cd:b5:ad:1a:b6:48:9c:5f:bc:e4: 07:50:ef:ac:24:e8:4a:04:9c:d9:99:e6:85:6e:62: 09:58:48:f2:4c:a9:d1:b3:06:3f:66:22:01:96:2f: 91:bd:8c:b5:dd:8c:27:ee:d4:63:15:d3:c0:82:ae: 0c:cc:15:fe:84:69:fc:38:77:56:e5:4b:67:01:58: 3f:e5:cb:f2:b6:56:e4:da:dd:1b:fb:9e:d5:0c:4e: 08:df:aa:14:e8:7c:99:e4:30:ca:2c:b4:ad:96:9c: 1f:46:39:ef:e2:3c:64:60:f3:89:71:7a:2a:28:e6: b8:56:b2:0c:02:3b:f6:3f:a0:cb:96:d2:74:43:c4: d0:d6:14:f2:3a:5f:8d:54:dc:58:c0:1e:2f:1e:fe: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:C1:8A:4F:46:3B:47:15:75:94:8F:72:33:1C:AE:3A:47:DC:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c6bb440-c520-453a-8ee1-f115d14cb0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.147.128.0/17 Signature Algorithm: sha256WithRSAEncryption d6:d3:48:c8:85:1e:a8:d5:34:ea:df:fa:23:8f:b3:39:7b:f4: bb:a9:e0:3d:7b:2a:1d:66:dd:26:b9:ee:cf:14:cf:b2:01:9d: 8f:ac:45:2d:7e:da:ca:89:ad:75:5f:0a:85:83:90:49:e0:fb: c7:8b:78:3d:c9:77:b9:23:0e:56:8b:44:d3:1e:a4:60:47:a2: 84:45:69:7f:24:57:60:82:c1:33:3b:0b:ce:aa:cd:87:b3:73: 79:4a:9b:e7:41:5c:01:a0:6e:59:11:58:c3:c2:e7:6c:8b:cb: 41:a7:48:73:9b:15:29:27:24:02:43:d0:d2:c2:58:60:9a:77: 27:c2:98:1e:6d:dc:b3:4a:33:89:bf:d9:c6:de:5c:b7:33:8a: 7b:fd:54:d7:d1:a5:da:8e:6e:0e:ae:99:9e:72:21:aa:c9:2c: 17:9b:e7:65:24:3d:50:c1:88:41:b4:19:84:c2:a8:09:47:af: 35:55:a0:3b:d4:5e:64:22:49:18:8c:fa:56:07:6f:d3:aa:77: 28:a5:51:1a:a6:2a:3a:61:b1:89:01:24:12:d7:73:84:af:d5: d8:4e:c4:46:a2:df:27:39:1e:8b:61:ae:6e:18:35:03:31:cd: 63:7d:0b:4e:4b:94:cc:0b:79:8b:6d:0b:75:bc:84:ec:28:81: cd:7f:78:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ08YLFFhRHXrfnB/znvM28RvKhIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAyMDA3WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTcxMDJkMWRiNTU5ZjA0ZTNhNzFlMmMxOGE2ZGNmMDBk NWQ5NjMxOTcwYTI4MGY2NmIwM2Q0NjZlZGRlM2Y0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4hOz7Mf0dIo3WCrB3XWiUohd02S94DUBO0qT2OCPYi8nt UmbWJg6vPF7krAoTqVq7jur0lQ4EAuqdf1YCDRzsCLti/pL0MHIr+2z6hvTMWj9Y 7YIEqAdF6RYviSMTOk9oWAYJbPyCzSLEXaJ7zbWtGrZInF+85AdQ76wk6EoEnNmZ 5oVuYglYSPJMqdGzBj9mIgGWL5G9jLXdjCfu1GMV08CCrgzMFf6Eafw4d1blS2cB WD/ly/K2VuTa3Rv7ntUMTgjfqhTofJnkMMostK2WnB9GOe/iPGRg84lxeioo5rhW sgwCO/Y/oMuW0nRDxNDWFPI6X41U3FjAHi8e/oGJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfNbBik9GO0cVdZSPcjMcrjpH3GowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjNmJiNDQwLWM1MjAtNDUzYS04ZWUxLWYxMTVkMTRjYjBhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQk4AwDQYJKoZIhvcNAQELBQADggEBANbTSMiFHqjVNOrf+iOPszl79Lup 4D17Kh1m3Sa57s8Uz7IBnY+sRS1+2sqJrXVfCoWDkEng+8eLeD3Jd7kjDlaLRNMe pGBHooRFaX8kV2CCwTM7C86qzYezc3lKm+dBXAGgblkRWMPC52yLy0GnSHObFSkn JAJD0NLCWGCadyfCmB5t3LNKM4m/2cbeXLczinv9VNfRpdqObg6umZ5yIarJLBeb 52UkPVDBiEG0GYTCqAlHrzVVoDvUXmQiSRiM+lYHb9OqdyilURqmKjphsYkBJBLX c4Sv1dhOxEai3yc5Hothrm4YNQMxzWN9C05LlMwLeYttC3W8hOwogc1/eJo= -----END CERTIFICATE-----Generated at Wed Nov 4 05:56:53 2026 by rpki-client