$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa File: a4d49ad1-da76-4d40-801d-8877c08472a5.roa (raw, json) Hash identifier: WsezJJGWPPdkFh6uvDFWqPdXLyF8Nfg+MT4D9MC4R1Q= Subject key identifier: AF:5B:35:38:F8:ED:5E:A3:88:77:6E:DA:34:0D:91:77:B8:4B:BD:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E58D4D54B8AF4858941AD99C5CB0BDF5C746CF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa Signing time: Fri 07 Aug 2026 00:30:46 +0000 ROA not before: Fri 07 Aug 2026 00:30:46 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.194.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:58:d4:d5:4b:8a:f4:85:89:41:ad:99:c5:cb:0b:df:5c:74:6c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:30:46 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=9f3cb86e635592e4ab30f22ed4c98bca71803ff5ffd3947ae9d6480b2aec3f29, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:86:07:a8:b3:9f:75:35:05:8c:63:15:06: 13:9e:0d:39:99:1e:74:93:44:17:51:1f:81:36:41: a6:da:47:c9:c8:76:34:12:0e:d7:69:64:51:c1:72: 57:57:9d:a7:0f:99:8f:a7:44:68:49:bd:80:0b:08: 5e:6e:8d:45:b5:74:d5:49:4a:a8:a1:fb:75:ab:3e: 2b:fe:1c:65:d3:0f:7b:51:0f:47:df:30:3e:6c:e3: 5c:b2:62:7d:21:b7:20:7a:70:67:b2:27:d8:1f:3f: c2:17:ba:55:8c:96:e2:47:fd:1e:c1:b5:49:5a:bb: c5:53:44:ec:53:ea:66:ff:e4:71:9e:e3:b6:92:8a: fd:7b:79:b2:89:3d:15:44:d2:80:e7:f1:68:aa:6b: 22:2b:de:2b:25:3d:02:7e:b0:71:9f:88:95:3b:9e: 70:84:7f:47:e0:82:f9:7f:31:01:f6:4d:2f:4e:71: 73:09:da:92:d2:92:6a:e7:f7:bd:e7:18:39:08:63: 57:16:98:12:fb:b6:05:c4:3b:fb:e6:be:35:ed:8a: 53:a9:2a:fa:cf:27:9b:e3:f1:83:be:0b:41:b8:2d: f4:f3:09:c5:31:a5:e0:f8:de:b8:a1:63:d4:78:88: d6:8d:37:6b:cd:91:23:ea:40:50:bd:81:91:82:9a: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5B:35:38:F8:ED:5E:A3:88:77:6E:DA:34:0D:91:77:B8:4B:BD:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption b5:ab:df:37:a9:b8:22:e6:65:7a:21:1e:91:79:e0:eb:a2:fd: 88:d5:65:b7:d8:fd:55:a2:dd:c6:bb:a4:cb:b4:78:42:a9:56: 22:0f:8c:d9:8a:bb:0e:ae:70:33:3d:ed:0b:f8:b2:3d:c6:05: 00:8f:be:58:79:18:2f:f2:b9:d3:f2:4c:6b:13:55:04:71:bd: d7:90:ec:b2:32:dd:ce:26:dd:31:32:d8:2a:8a:32:66:5f:b6: b4:e9:dc:d6:81:d2:54:ca:0a:a6:12:1e:b3:47:89:68:10:e9: fc:c6:ed:58:fd:e9:f3:c9:e5:d4:52:d7:7e:b4:11:70:d0:20: 41:5d:e3:fe:36:f3:f7:3f:ad:01:8a:a2:38:14:00:ef:5e:cc: 98:9f:90:79:dd:6a:7f:86:4c:77:ee:9b:32:84:82:bc:bb:ff: 6b:29:1d:4e:30:91:b4:10:c4:25:29:64:ba:08:1a:28:b9:d9: 0c:a8:12:6b:0a:28:76:14:94:a4:d3:e9:be:b9:2e:17:7c:93: 62:06:ad:9c:d7:ec:71:a6:4e:f8:d1:5e:fa:58:f3:dd:1a:5f: 93:9b:75:7b:74:19:8f:19:47:5f:42:6e:0c:bb:2b:71:22:e9: b1:02:5b:59:49:4f:9f:17:5e:63:8d:12:58:e8:95:45:da:99: 73:fd:b2:f4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHljU1UuK9IWJQa2ZxcsL31x0bPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAzMDQ2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjNjYjg2ZTYzNTU5MmU0YWIzMGYyMmVkNGM5OGJjYTcx ODAzZmY1ZmZkMzk0N2FlOWQ2NDgwYjJhZWMzZjI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMRoYHqLOfdTUFjGMVBhOeDTmZHnSTRBdRH4E2QabaR8nI djQSDtdpZFHBcldXnacPmY+nRGhJvYALCF5ujUW1dNVJSqih+3WrPiv+HGXTD3tR D0ffMD5s41yyYn0htyB6cGeyJ9gfP8IXulWMluJH/R7BtUlau8VTROxT6mb/5HGe 47aSiv17ebKJPRVE0oDn8WiqayIr3islPQJ+sHGfiJU7nnCEf0fggvl/MQH2TS9O cXMJ2pLSkmrn973nGDkIY1cWmBL7tgXEO/vmvjXtilOpKvrPJ5vj8YO+C0G4LfTz CcUxpeD43rihY9R4iNaNN2vNkSPqQFC9gZGCmup7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUr1s1OPjtXqOId27aNA2Rd7hLvS0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0ZDQ5YWQxLWRhNzYtNGQ0MC04MDFkLTg4NzdjMDg0NzJhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPwjANBgkqhkiG9w0BAQsFAAOCAQEAtavfN6m4IuZleiEekXng66L9iNVl t9j9VaLdxruky7R4QqlWIg+M2Yq7Dq5wMz3tC/iyPcYFAI++WHkYL/K50/JMaxNV BHG915DssjLdzibdMTLYKooyZl+2tOnc1oHSVMoKphIes0eJaBDp/MbtWP3p88nl 1FLXfrQRcNAgQV3j/jbz9z+tAYqiOBQA717MmJ+Qed1qf4ZMd+6bMoSCvLv/aykd TjCRtBDEJSlkuggaKLnZDKgSawoodhSUpNPpvrkuF3yTYgatnNfscaZO+NFe+ljz 3Rpfk5t1e3QZjxlHX0JuDLsrcSLpsQJbWUlPnxdeY40SWOiVRdqZc/2y9A== -----END CERTIFICATE-----Generated at Thu Sep 17 17:00:32 2026 by rpki-client