$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa File: 8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa (raw, json) Hash identifier: HHfeXT/MvjNQl3k+kZ0m+PMixuvH8r4oqxbn2cYTEzc= Subject key identifier: AA:D7:F8:EF:33:C0:BD:57:85:15:BC:6F:ED:87:99:6B:D8:6A:6D:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 773CA52965873F85572996A2DAA1E8786A145DE3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa Signing time: Tue 06 Oct 2026 01:00:50 +0000 ROA not before: Tue 06 Oct 2026 01:00:50 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 137.16.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3c:a5:29:65:87:3f:85:57:29:96:a2:da:a1:e8:78:6a:14:5d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 01:00:50 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=519dc10f13bb01e28120d69317fdd5244f70a184041c81c5e2904b9fb11a899d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:99:2e:0f:23:1e:9f:c6:f2:d3:2a:e0:df: d2:7a:a3:b4:b2:ab:c8:33:84:d6:2f:bf:87:48:53: ff:7c:7a:27:91:ba:0d:85:89:be:e3:dc:fd:c0:ce: 97:44:0a:09:e4:37:91:aa:30:23:0a:ff:b6:23:37: 06:25:30:29:02:a2:5d:7f:34:9a:3c:23:01:fb:47: c6:86:24:c9:67:2e:87:9a:e1:7c:cf:50:34:1f:58: f8:62:aa:14:de:3e:69:e7:6e:12:8a:45:f3:30:ea: 7c:10:8d:64:0e:c4:ff:fe:fe:28:89:b4:27:ab:4d: a7:c3:b7:bf:4f:81:2a:97:3d:38:8d:2b:99:28:19: 6a:4d:33:28:11:d0:52:c5:19:5b:3e:3a:fe:bd:1d: b6:5f:7e:bb:75:ab:e4:93:f9:a0:48:b2:fb:36:2f: f6:d2:c2:dd:c2:5a:2e:4b:ac:79:8b:23:77:1d:1c: 2b:2a:d2:eb:f5:45:39:bf:78:3a:9c:9f:5f:97:f8: 0e:52:eb:37:8e:92:d5:df:01:a7:41:87:1f:48:a1: b9:47:74:ba:ad:ab:22:89:a6:58:b6:63:8c:74:d5: 02:a0:5b:e4:09:e5:77:b3:22:59:a1:bf:8e:47:86: 18:e1:56:21:fa:87:fd:ca:68:14:e7:49:77:d1:c0: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:F8:EF:33:C0:BD:57:85:15:BC:6F:ED:87:99:6B:D8:6A:6D:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption ba:f5:34:f9:a1:9b:63:26:a9:8d:4e:89:98:57:72:02:8e:c4: 7e:f3:87:e6:b4:06:96:0e:38:1a:b8:b8:00:61:29:8e:01:c5: 63:86:57:e4:cb:1f:0f:7e:20:53:e4:00:be:97:2e:71:39:8c: 03:62:b6:0e:a0:89:27:af:2e:19:9e:0e:d7:da:5d:4c:35:b6: 64:f8:52:b3:6c:da:21:1f:9e:4f:52:1d:d3:0a:63:29:34:4e: 3e:0a:7e:3b:71:22:40:25:32:96:25:c0:95:bf:23:2b:7f:04: 62:2c:b2:d7:9f:77:44:2b:b4:65:2a:27:91:75:de:86:a9:33: a5:0d:fb:b3:34:7c:3a:ea:fb:7c:65:7c:df:36:b1:e4:25:76: 74:cf:b7:47:f1:61:f7:5b:49:d7:32:7d:2e:f1:06:b9:ce:20: 62:3c:b8:e9:af:df:10:ac:68:41:64:60:e6:ea:61:77:b6:22: a6:85:e2:c4:65:d5:c4:93:65:a9:17:c7:ae:6d:30:49:67:c3: 01:09:81:d7:98:1d:93:69:c5:63:8b:bd:0e:2d:54:94:82:eb: b1:1c:e6:2b:73:5e:02:2f:d7:e5:6f:f2:2c:03:f2:17:87:f5: 8e:80:e8:b1:30:93:ed:a8:00:fa:45:d7:a2:c9:08:0e:61:18: d8:e1:27:f5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdzylKWWHP4VXKZai2qHoeGoUXeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDEwMDUwWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTlkYzEwZjEzYmIwMWUyODEyMGQ2OTMxN2ZkZDUyNDRm NzBhMTg0MDQxYzgxYzVlMjkwNGI5ZmIxMWE4OTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3kpkuDyMen8by0yrg39J6o7Syq8gzhNYvv4dIU/98eieR ug2Fib7j3P3AzpdECgnkN5GqMCMK/7YjNwYlMCkCol1/NJo8IwH7R8aGJMlnLoea 4XzPUDQfWPhiqhTePmnnbhKKRfMw6nwQjWQOxP/+/iiJtCerTafDt79PgSqXPTiN K5koGWpNMygR0FLFGVs+Ov69HbZffrt1q+ST+aBIsvs2L/bSwt3CWi5LrHmLI3cd HCsq0uv1RTm/eDqcn1+X+A5S6zeOktXfAadBhx9IoblHdLqtqyKJpli2Y4x01QKg W+QJ5XezIlmhv45HhhjhViH6h/3KaBTnSXfRwIFLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqtf47zPAvVeFFbxv7YeZa9hqbYYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiYjJkM2RkLTE3NGItNGM0OC1hMWM4LTM0NjNjMGMwNTRiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCJEDANBgkqhkiG9w0BAQsFAAOCAQEAuvU0+aGbYyapjU6JmFdyAo7EfvOH 5rQGlg44Gri4AGEpjgHFY4ZX5MsfD34gU+QAvpcucTmMA2K2DqCJJ68uGZ4O19pd TDW2ZPhSs2zaIR+eT1Id0wpjKTROPgp+O3EiQCUyliXAlb8jK38EYiyy1593RCu0 ZSonkXXehqkzpQ37szR8Our7fGV83zax5CV2dM+3R/Fh91tJ1zJ9LvEGuc4gYjy4 6a/fEKxoQWRg5uphd7YipoXixGXVxJNlqRfHrm0wSWfDAQmB15gdk2nFY4u9Di1U lILrsRzmK3NeAi/X5W/yLAPyF4f1joDosTCT7agA+kXXoskIDmEY2OEn9Q== -----END CERTIFICATE-----Generated at Tue Nov 3 20:13:01 2026 by rpki-client