$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa File: 7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa (raw, json) Hash identifier: nM09NfN37vaA9n8ckevVAkiZQzwpVAw+lb2KwFV5Xnc= Subject key identifier: 09:A8:B8:5F:07:AE:FD:22:81:67:D3:BE:56:D1:C7:77:B1:D0:C2:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BB7ADAA8DF0CD2452207BE6AFB6791CC8EDF0AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa Signing time: Fri 07 Aug 2026 00:11:25 +0000 ROA not before: Fri 07 Aug 2026 00:11:25 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b7:ad:aa:8d:f0:cd:24:52:20:7b:e6:af:b6:79:1c:c8:ed:f0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:11:25 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=5ad79db889f2c319c2f2c35dda44d65816a314aacfa446c4d73f25fe406640df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:da:24:89:75:28:2e:f2:b0:85:b3:8a:16: b9:16:21:b2:e8:d9:2d:5b:e8:a8:e0:f2:5c:d9:93: 1c:7f:5b:f7:63:08:19:27:89:b9:4b:dd:a7:58:8a: 9f:76:d2:1e:97:5d:66:db:08:68:6f:3c:a3:8c:b6: d9:e1:45:ce:f3:37:59:8d:e0:79:1a:9d:36:02:ef: fb:3d:1d:05:52:79:16:94:e8:f2:65:82:9f:90:34: 3e:63:e0:62:d6:1b:9b:61:cb:fe:06:38:97:7e:ee: 23:5d:ef:59:c8:4a:fb:09:ca:92:1d:8e:f2:a9:62: 9d:60:11:fb:7a:bd:0e:4d:7a:47:4f:e0:f2:aa:92: c1:f8:61:6b:ac:f3:1d:17:e9:5b:3a:f6:ec:1b:07: 95:58:d5:81:29:83:6a:c8:e0:03:05:6e:84:a8:b2: 56:c2:f4:e4:39:51:23:8b:6f:55:f7:24:3d:cc:a3: c1:62:03:70:8b:ea:cc:61:dd:07:85:4f:ad:f2:c7: 1d:9c:a9:a9:c9:8f:48:66:e5:25:80:cf:44:76:86: d9:dd:e2:7f:25:b7:16:da:14:70:d4:db:58:3e:a3: 08:96:68:04:cd:c5:8a:44:80:99:0c:b2:6c:7b:3c: 14:f8:28:02:c0:81:e0:15:10:99:d1:06:13:18:b7: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:B8:5F:07:AE:FD:22:81:67:D3:BE:56:D1:C7:77:B1:D0:C2:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption d2:a8:d4:cf:85:ad:44:dd:14:59:e4:1a:c8:d1:c5:5d:63:b9: bc:4e:b9:39:b9:df:4b:85:eb:74:13:b3:1c:d6:79:ce:b4:11: ca:65:4b:0c:fb:d1:30:b8:ec:3e:29:ff:24:7d:dd:b6:9a:f8: e0:36:73:bc:c2:24:07:a5:87:02:7a:83:5a:f8:0c:fe:72:3d: 83:ab:ab:39:f8:b1:37:65:66:49:ec:65:dc:77:73:c8:f6:d7: 52:8a:bf:d4:ad:bc:5a:fe:27:03:52:04:a2:10:f2:ba:65:39: 91:b5:75:2c:4b:95:51:15:03:d4:85:14:58:cb:83:0c:b9:62: d6:e0:21:6a:2f:ec:2e:99:98:d6:9e:51:76:ac:d2:5d:39:3c: 0f:89:0f:be:69:70:f9:bc:02:4f:01:9c:79:24:6b:ea:b7:fe: 27:42:cc:bb:a8:1e:74:0e:4b:42:06:52:b2:56:8d:73:6e:f1: c9:f5:bc:64:4d:18:d9:c1:90:66:7c:ac:be:e3:e0:d1:76:be: 83:29:20:4f:69:86:32:b4:e8:e3:f9:3e:15:07:2a:91:08:6f: b7:41:de:e4:d1:e5:c5:58:9a:01:f9:44:78:61:5e:ff:5b:6d: b5:c1:df:53:d4:40:02:c9:48:a5:af:ca:20:2e:dd:8c:6c:5a: b4:be:cc:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUC7etqo3wzSRSIHvmr7Z5HMjt8KowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAxMTI1WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWQ3OWRiODg5ZjJjMzE5YzJmMmMzNWRkYTQ0ZDY1ODE2 YTMxNGFhY2ZhNDQ2YzRkNzNmMjVmZTQwNjY0MGRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1qtokiXUoLvKwhbOKFrkWIbLo2S1b6Kjg8lzZkxx/W/dj CBkniblL3adYip920h6XXWbbCGhvPKOMttnhRc7zN1mN4HkanTYC7/s9HQVSeRaU 6PJlgp+QND5j4GLWG5thy/4GOJd+7iNd71nISvsJypIdjvKpYp1gEft6vQ5NekdP 4PKqksH4YWus8x0X6Vs69uwbB5VY1YEpg2rI4AMFboSoslbC9OQ5USOLb1X3JD3M o8FiA3CL6sxh3QeFT63yxx2cqanJj0hm5SWAz0R2htnd4n8ltxbaFHDU21g+owiW aATNxYpEgJkMsmx7PBT4KALAgeAVEJnRBhMYt/+TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCai4Xweu/SKBZ9O+VtHHd7HQwoMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMTNiYjcwLWFhYzgtNGIxZi1hM2I0LWI4MDIwNjgyYTRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgTANBgkqhkiG9w0BAQsFAAOCAQEA0qjUz4WtRN0UWeQayNHFXWO5vE65 ObnfS4XrdBOzHNZ5zrQRymVLDPvRMLjsPin/JH3dtpr44DZzvMIkB6WHAnqDWvgM /nI9g6urOfixN2VmSexl3HdzyPbXUoq/1K28Wv4nA1IEohDyumU5kbV1LEuVURUD 1IUUWMuDDLli1uAhai/sLpmY1p5RdqzSXTk8D4kPvmlw+bwCTwGceSRr6rf+J0LM u6gedA5LQgZSslaNc27xyfW8ZE0Y2cGQZnysvuPg0Xa+gykgT2mGMrTo4/k+FQcq kQhvt0He5NHlxViaAflEeGFe/1tttcHfU9RAAslIpa/KIC7djGxatL7MRQ== -----END CERTIFICATE-----Generated at Tue Sep 15 12:10:50 2026 by rpki-client