$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa File: ce9b44e8-c731-4450-962f-6cad76033edf.roa (raw, json) Hash identifier: aEUFtmC6L0b9/I139P4oCHAKh+4MliTqqoQmECkk+LY= Subject key identifier: 15:35:25:38:C5:76:11:7D:FD:B4:CA:E0:56:6A:35:D0:E3:E2:85:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 019355E41B707E8C8F8BE5097387E5F7E079D969 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa Signing time: Mon 05 Oct 2026 00:00:37 +0000 ROA not before: Mon 05 Oct 2026 00:00:37 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:55:e4:1b:70:7e:8c:8f:8b:e5:09:73:87:e5:f7:e0:79:d9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:00:37 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=6f842dcfa5fd6d246daa30d87d564a8f0032c64f90c40366de8a4834ea2652df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:8f:f7:39:a9:72:96:c7:15:b9:44:7c:18: c8:21:dc:9f:4a:4d:2d:4b:ee:c9:67:25:19:c1:71: cf:d8:18:f4:90:26:b0:6f:83:ab:b6:93:5f:c8:9b: 05:0f:80:47:c1:75:e2:50:2e:47:a9:a2:34:01:f9: f0:97:11:d0:c6:b2:06:f1:26:79:bf:c7:5f:28:bd: 02:fa:ba:be:94:65:1c:1c:0d:24:75:91:81:ca:89: d8:b0:a0:b0:a2:7b:77:8d:83:03:77:41:81:90:46: a8:42:e4:34:51:97:f1:9e:4b:ab:7a:b9:d2:dd:a3: f9:2f:88:3d:36:15:e2:b6:64:86:8c:53:1f:dc:6d: 66:25:8d:49:c7:bd:39:c0:bb:62:e6:ab:90:fe:16: 1b:11:75:06:fd:40:f9:ec:ed:49:1c:2d:35:f0:e7: b4:31:8f:bf:83:8a:3b:46:f0:a1:ac:b1:cd:a5:f0: e5:73:5e:3a:2a:59:7d:8a:9d:cb:6a:0f:3d:24:eb: a3:9b:a8:5e:90:10:d0:75:a4:b4:bb:c3:08:5e:7e: 2c:5c:fe:88:d7:79:52:8f:0a:1b:f3:08:39:44:d8: 53:d3:37:90:3f:9c:62:af:d2:cb:1f:02:4a:83:ff: 2c:26:24:ed:4a:f5:e2:c3:7d:5a:12:fa:d5:52:14: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:35:25:38:C5:76:11:7D:FD:B4:CA:E0:56:6A:35:D0:E3:E2:85:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:fb:ea:62:ec:6a:b2:f1:5b:8a:2e:01:e2:f4:d0:29:3e:16: 34:76:15:71:02:0a:3b:44:b4:33:4c:bc:aa:b4:34:d9:26:45: 90:8e:95:7e:c4:22:53:77:2e:4a:df:ca:f6:d6:b6:da:e4:66: 37:ad:82:eb:99:6d:11:1a:74:f8:6e:67:91:57:0c:6f:9a:ac: 5c:87:d6:65:34:92:03:19:ad:2e:b1:a9:94:33:8f:54:82:35: 61:19:be:b5:61:d1:43:08:cd:38:76:1e:e5:aa:81:d2:9b:ea: de:c7:91:4e:70:8f:33:2b:38:12:a3:96:21:23:6a:ac:7d:71: e8:22:1d:db:4b:16:c7:c0:d3:f2:5f:46:88:a9:38:6e:27:a6: 9b:fa:01:21:2a:0e:4d:0a:bc:da:93:49:fb:bf:aa:fc:04:a5: 5c:c9:d2:00:79:bc:f3:56:80:8f:62:d2:0c:b5:4e:17:86:7d: af:fe:34:0c:c5:dd:ea:da:4a:46:07:27:31:70:10:a0:43:fe: 5f:3c:4e:4b:de:b8:09:ec:a2:5d:0c:fa:e6:4b:9e:77:22:e4: 0e:d5:38:31:ec:87:91:c5:c6:8f:32:29:e8:dc:69:4c:9d:51: 61:f9:fd:38:7a:5d:32:93:66:22:dd:83:07:84:e1:ef:9e:bd: 7e:2f:61:e1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAZNV5BtwfoyPi+UJc4fl9+B52WkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAwMDM3WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Zjg0MmRjZmE1ZmQ2ZDI0NmRhYTMwZDg3ZDU2NGE4ZjAw MzJjNjRmOTBjNDAzNjZkZThhNDgzNGVhMjY1MmRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCexI/3OalylscVuUR8GMgh3J9KTS1L7slnJRnBcc/YGPSQ JrBvg6u2k1/ImwUPgEfBdeJQLkepojQB+fCXEdDGsgbxJnm/x18ovQL6ur6UZRwc DSR1kYHKidiwoLCie3eNgwN3QYGQRqhC5DRRl/GeS6t6udLdo/kviD02FeK2ZIaM Ux/cbWYljUnHvTnAu2Lmq5D+FhsRdQb9QPns7UkcLTXw57Qxj7+DijtG8KGssc2l 8OVzXjoqWX2KnctqDz0k66ObqF6QENB1pLS7wwhefixc/ojXeVKPChvzCDlE2FPT N5A/nGKv0ssfAkqD/ywmJO1K9eLDfVoS+tVSFJDZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFTUlOMV2EX39tMrgVmo10OPihQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlOWI0NGU4LWM3MzEtNDQ1MC05NjJmLTZjYWQ3NjAzM2VkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQTTANBgkqhkiG9w0BAQsFAAOCAQEAQPvqYuxqsvFbii4B4vTQKT4WNHYV cQIKO0S0M0y8qrQ02SZFkI6VfsQiU3cuSt/K9ta22uRmN62C65ltERp0+G5nkVcM b5qsXIfWZTSSAxmtLrGplDOPVII1YRm+tWHRQwjNOHYe5aqB0pvq3seRTnCPMys4 EqOWISNqrH1x6CId20sWx8DT8l9GiKk4biemm/oBISoOTQq82pNJ+7+q/ASlXMnS AHm881aAj2LSDLVOF4Z9r/40DMXd6tpKRgcnMXAQoEP+XzxOS964CeyiXQz65kue dyLkDtU4MeyHkcXGjzIp6NxpTJ1RYfn9OHpdMpNmIt2DB4Th7569fi9h4Q== -----END CERTIFICATE-----Generated at Wed Oct 7 02:01:12 2026 by rpki-client