$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa File: 7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa (raw, json) Hash identifier: A1sUX7fVVrXk+RCBkxiLxxG9+Ak//jrLHxMgo+CK9tk= Subject key identifier: EE:BC:C2:1D:00:96:2D:0A:87:FA:36:D1:E8:72:11:04:CA:4D:9B:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E8A3BD5D3C788CF2008A9E7FCE709654ED11E05 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa Signing time: Mon 26 Oct 2026 00:11:13 +0000 ROA not before: Mon 26 Oct 2026 00:11:13 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8a:3b:d5:d3:c7:88:cf:20:08:a9:e7:fc:e7:09:65:4e:d1:1e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:11:13 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=52b0519f96fab9563da32802878afa907427a4f9945ee5ac7c5be446b76385fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:2e:d2:6d:c8:d1:d2:dd:20:1d:c8:ff:f7: 46:91:e6:0d:58:32:d9:ce:78:11:20:c3:d5:21:fe: a8:c1:b6:bb:82:4b:10:3c:36:f2:02:c1:0c:c7:2a: 85:22:a9:de:01:8e:bb:21:9b:be:7b:f8:cd:c1:ab: b6:d2:83:e0:1e:3b:bd:65:cb:1a:41:17:28:08:f7: 37:9e:1f:94:48:23:e9:19:a9:ee:9f:7d:27:0f:03: bd:ad:c5:fc:be:04:c5:9c:63:ff:9f:cc:b1:f1:7f: fc:33:e6:fb:d6:97:24:4e:57:87:64:2d:68:87:48: 00:ec:79:b2:f2:ef:50:23:83:9b:38:df:9a:ca:99: 7d:4a:58:bb:a5:91:1f:85:50:55:63:df:5d:19:64: 15:ae:97:92:29:19:82:25:30:d7:dc:d2:da:31:d9: 7a:cd:65:16:8a:1e:f4:6d:85:07:f9:94:5d:1f:3b: 51:ac:33:12:ed:de:48:e6:58:f0:11:9e:c0:76:7b: 51:e9:04:48:d7:fc:17:1f:3a:ed:bb:89:12:6e:93: 71:a1:de:e2:60:61:97:d6:cb:1c:fb:71:a5:78:89: bc:6b:5d:62:38:d8:cf:58:56:ca:fc:a5:c0:52:2a: af:7e:73:b5:83:d0:8e:9a:7c:0c:a9:78:fd:39:a9: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:C2:1D:00:96:2D:0A:87:FA:36:D1:E8:72:11:04:CA:4D:9B:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:d4:9f:30:a4:0d:38:03:4e:cf:c1:54:4d:73:84:6b:6b:4e: 68:53:37:7e:7f:17:8f:d4:29:5e:47:38:78:38:18:d6:02:c9: 73:b6:b1:b0:c7:f3:7b:45:81:c4:6e:8b:e7:05:8f:49:5b:62: fb:48:7f:1c:d2:92:3e:9c:a8:2c:00:32:69:1e:cc:2c:65:d6: 5d:fc:73:cb:00:ff:1c:7c:72:f8:e9:9e:d0:8e:cc:8c:5d:4e: 92:cb:bf:83:9a:50:2e:d3:28:eb:29:17:c1:35:d1:b8:c4:29: b7:0a:55:f6:91:fb:18:f8:8b:49:9f:72:f2:66:58:e5:62:57: 9a:d7:f9:2a:69:a5:1e:79:2b:ad:06:3a:e4:a6:54:e9:41:de: f5:2b:63:66:d9:4e:70:8e:9c:42:5c:d0:df:8c:7b:cc:c4:68: ef:e2:08:07:5c:c5:25:55:a9:05:1f:a1:fe:51:72:24:05:97: 74:89:a0:d0:4d:44:e5:fd:9c:55:fa:a2:ef:62:00:9f:3e:ea: 83:41:b1:88:1c:44:09:b5:a3:32:d5:3f:bb:39:a7:22:f1:d1: 8f:c4:e6:0e:55:67:94:e6:fc:f8:57:18:b8:6e:eb:b8:ad:d2: 58:16:b0:31:18:9c:03:a8:89:ef:5d:b7:3a:d1:f4:ac:b8:0c: 0e:ef:80:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfoo71dPHiM8gCKnn/OcJZU7RHgUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAxMTEzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmIwNTE5Zjk2ZmFiOTU2M2RhMzI4MDI4NzhhZmE5MDc0 MjdhNGY5OTQ1ZWU1YWM3YzViZTQ0NmI3NjM4NWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwhi7SbcjR0t0gHcj/90aR5g1YMtnOeBEgw9Uh/qjBtruC SxA8NvICwQzHKoUiqd4Bjrshm757+M3Bq7bSg+AeO71lyxpBFygI9zeeH5RII+kZ qe6ffScPA72txfy+BMWcY/+fzLHxf/wz5vvWlyROV4dkLWiHSADsebLy71Ajg5s4 35rKmX1KWLulkR+FUFVj310ZZBWul5IpGYIlMNfc0tox2XrNZRaKHvRthQf5lF0f O1GsMxLt3kjmWPARnsB2e1HpBEjX/BcfOu27iRJuk3Gh3uJgYZfWyxz7caV4ibxr XWI42M9YVsr8pcBSKq9+c7WD0I6afAypeP05qVBTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7rzCHQCWLQqH+jbR6HIRBMpNm+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMTNiYjcwLWFhYzgtNGIxZi1hM2I0LWI4MDIwNjgyYTRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgTANBgkqhkiG9w0BAQsFAAOCAQEAlNSfMKQNOANOz8FUTXOEa2tOaFM3 fn8Xj9QpXkc4eDgY1gLJc7axsMfze0WBxG6L5wWPSVti+0h/HNKSPpyoLAAyaR7M LGXWXfxzywD/HHxy+Ome0I7MjF1Oksu/g5pQLtMo6ykXwTXRuMQptwpV9pH7GPiL SZ9y8mZY5WJXmtf5KmmlHnkrrQY65KZU6UHe9StjZtlOcI6cQlzQ34x7zMRo7+II B1zFJVWpBR+h/lFyJAWXdImg0E1E5f2cVfqi72IAnz7qg0GxiBxECbWjMtU/uzmn IvHRj8TmDlVnlOb8+FcYuG7ruK3SWBawMRicA6iJ7123OtH0rLgMDu+ASw== -----END CERTIFICATE-----Generated at Wed Nov 4 18:52:30 2026 by rpki-client