$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa File: f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa (raw, json) Hash identifier: Orj+DTX5x32ng42tXyN9Q+jeoezHuiBBNMQsbaIG6Yo= Subject key identifier: D3:41:88:81:78:1A:DE:06:A7:9A:34:AD:D3:46:B3:E7:76:C1:22:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D41E20248BE2F83B960EB70B7C4F4E0C68D7F42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa Signing time: Thu 22 Oct 2026 01:20:10 +0000 ROA not before: Thu 22 Oct 2026 01:20:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:41:e2:02:48:be:2f:83:b9:60:eb:70:b7:c4:f4:e0:c6:8d:7f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:20:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=8c09cea2de9be7fdfa56ba1d512318e88832215b418e4c81c770752c7b9402cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:63:51:15:bc:ef:aa:94:22:8d:40:b8:25: db:68:d9:30:22:44:d4:d6:6e:d0:9b:84:9d:1d:39: 55:2b:39:fa:06:21:7b:f0:f2:09:88:cf:3e:81:4f: 7f:eb:69:51:4a:fd:85:10:68:ff:02:fc:52:27:e9: 52:0e:2e:f8:d5:68:90:01:4c:ff:43:92:f8:78:7b: 10:0c:21:b3:d5:32:da:02:7a:45:68:a2:11:7f:2e: ad:8c:66:6f:ce:64:58:87:89:f2:b8:76:40:01:7f: bf:6a:a1:be:24:fc:68:6f:20:f8:67:5e:dc:44:27: 03:96:38:85:e2:07:79:60:c4:31:89:3e:a6:eb:95: d9:26:78:b9:56:15:de:c0:58:ca:fd:a8:df:0d:18: f5:2f:1c:8d:a5:91:9f:e4:8e:07:74:c7:40:51:73: 15:c1:9f:b1:b0:e5:39:31:16:13:7e:8b:a3:9b:51: 3d:8d:aa:9f:4c:a8:f3:23:61:4a:ed:9a:f4:a0:35: 6b:85:27:fa:cd:ee:19:ee:2b:43:d9:93:ce:4a:32: 8c:81:46:a4:74:e1:99:9e:3b:95:4f:49:fe:3e:f1: 7f:cb:78:2f:11:52:cf:85:ad:ef:65:4a:5c:75:2c: f5:9d:38:93:ba:97:ed:85:50:32:8d:73:3b:62:eb: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:88:81:78:1A:DE:06:A7:9A:34:AD:D3:46:B3:E7:76:C1:22:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.151.0.0/16 Signature Algorithm: sha256WithRSAEncryption c2:fc:13:60:39:e2:92:d9:1c:79:7e:6a:19:c0:65:97:44:66: 0e:e6:a2:2e:4e:87:fe:42:6f:80:60:52:13:9f:61:12:84:32: 51:fc:57:e2:31:7e:17:b5:3e:d8:ca:4d:01:05:ad:f7:ea:0c: 94:c3:59:01:94:1d:94:44:4f:ae:a3:22:70:51:b0:72:29:f6: c9:6c:19:fa:7e:b8:e3:79:0f:78:47:64:30:38:40:52:69:1e: a2:25:92:86:08:6a:25:c5:b3:0d:88:f7:d8:a4:d0:b4:eb:7d: 46:9c:28:cb:52:9c:e0:74:05:c6:31:5c:70:50:d8:fa:bc:32: 63:49:16:b1:d2:f8:39:62:cf:0b:47:55:fe:ff:d8:2b:67:ec: 1f:b1:3e:38:f5:70:d9:57:ac:53:7b:31:3c:4f:75:a1:d5:02: f3:0f:10:54:18:75:5c:41:80:65:93:b6:1b:07:e0:66:c3:d7: 84:9f:de:08:ab:39:8f:ec:65:41:f7:ef:53:ef:a7:0a:29:cd: 68:e7:e8:58:99:94:f2:69:b6:30:9d:2b:2a:9f:cc:d7:1c:dc: 4f:63:78:4a:ec:91:f9:a9:5d:88:45:2d:00:0b:8a:72:e3:e0: 23:fc:b5:6f:95:a7:84:47:36:14:aa:24:c7:87:2d:c4:a9:aa: e2:4a:16:8a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXUHiAki+L4O5YOtwt8T04MaNf0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEyMDEwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzA5Y2VhMmRlOWJlN2ZkZmE1NmJhMWQ1MTIzMThlODg4 MzIyMTViNDE4ZTRjODFjNzcwNzUyYzdiOTQwMmNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9GmNRFbzvqpQijUC4Jdto2TAiRNTWbtCbhJ0dOVUrOfoG IXvw8gmIzz6BT3/raVFK/YUQaP8C/FIn6VIOLvjVaJABTP9Dkvh4exAMIbPVMtoC ekVoohF/Lq2MZm/OZFiHifK4dkABf79qob4k/GhvIPhnXtxEJwOWOIXiB3lgxDGJ PqbrldkmeLlWFd7AWMr9qN8NGPUvHI2lkZ/kjgd0x0BRcxXBn7Gw5TkxFhN+i6Ob UT2Nqp9MqPMjYUrtmvSgNWuFJ/rN7hnuK0PZk85KMoyBRqR04ZmeO5VPSf4+8X/L eC8RUs+Fre9lSlx1LPWdOJO6l+2FUDKNczti6yX9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU00GIgXga3ganmjSt00az53bBIt4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYmRmYjUyLTNjOTktNGJjMC05Y2VlLTI3NjhkYzM5YzEwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQlzANBgkqhkiG9w0BAQsFAAOCAQEAwvwTYDniktkceX5qGcBll0RmDuai Lk6H/kJvgGBSE59hEoQyUfxX4jF+F7U+2MpNAQWt9+oMlMNZAZQdlERPrqMicFGw cin2yWwZ+n6443kPeEdkMDhAUmkeoiWShghqJcWzDYj32KTQtOt9Rpwoy1Kc4HQF xjFccFDY+rwyY0kWsdL4OWLPC0dV/v/YK2fsH7E+OPVw2VesU3sxPE91odUC8w8Q VBh1XEGAZZO2GwfgZsPXhJ/eCKs5j+xlQffvU++nCinNaOfoWJmU8mm2MJ0rKp/M 1xzcT2N4SuyR+aldiEUtAAuKcuPgI/y1b5WnhEc2FKokx4ctxKmq4koWig== -----END CERTIFICATE-----Generated at Mon Nov 9 09:59:18 2026 by rpki-client