$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa File: f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa (raw, json) Hash identifier: /PzxuaV4N/WbEAbab8flaaFDS9xtD2cKb/u8pPqa0/0= Subject key identifier: 64:37:38:3F:8B:CA:70:4A:D2:92:5E:9A:07:CF:FD:C6:B3:CA:24:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38AC388342D0698061B18BF97C281D9EE124A664 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa Signing time: Mon 07 Sep 2026 00:00:08 +0000 ROA not before: Mon 07 Sep 2026 00:00:08 +0000 ROA not after: Sun 06 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.164.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ac:38:83:42:d0:69:80:61:b1:8b:f9:7c:28:1d:9e:e1:24:a6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 7 00:00:08 2026 GMT Not After : Dec 6 23:59:59 2026 GMT Subject: serialNumber=4704c2a594d5fc96f7c5f469b102d5781cdceb537e694be0a9903fae61408963, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:1a:73:69:88:61:c1:42:a4:86:96:9a:3a: 7a:e6:02:f4:76:a5:79:68:40:d4:23:4f:78:20:81: a7:ad:33:f8:97:ec:ef:a7:05:b8:84:0b:e4:ec:d0: 40:31:5a:a4:59:c6:ed:7c:19:7d:cb:69:22:98:56: b4:4d:ab:c5:b5:8e:1e:a8:9a:04:69:26:89:bd:2b: ba:94:15:ed:b2:37:a5:92:c1:62:b8:4c:35:64:a8: b8:50:be:21:28:72:7a:56:89:38:ae:fd:bd:1e:0a: cc:d0:4b:d9:44:68:31:79:60:42:3b:43:ab:f4:8f: 33:88:3c:86:3d:be:28:94:c0:76:17:4a:2b:2d:02: 7f:fb:b8:ff:b9:52:cd:97:a6:ba:c3:bb:cb:e5:8f: 00:bd:2e:d1:84:33:d6:26:07:b9:a3:11:91:ad:e3: 4e:0e:d0:98:60:7c:a5:c2:05:d9:51:d0:2b:b9:d7: 06:40:55:b3:32:5d:1c:2f:4f:e7:08:1e:92:9f:1b: d0:9d:dc:64:db:ca:37:6e:80:77:23:c9:59:62:cf: 2d:16:30:88:bc:ca:38:a8:a5:c6:26:9b:68:e2:30: 72:98:f0:e1:07:81:b8:81:25:e7:65:60:7e:8e:79: 2c:8b:8b:8f:ce:f7:8e:e5:5f:d0:11:5b:61:e2:f8: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:37:38:3F:8B:CA:70:4A:D2:92:5E:9A:07:CF:FD:C6:B3:CA:24:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.164.0.0/17 Signature Algorithm: sha256WithRSAEncryption b9:1d:d7:02:da:93:9c:33:ae:61:cf:9d:b7:78:c9:e2:66:76: 3d:04:f9:5a:e8:4d:d0:32:ca:14:b4:96:74:88:78:2a:67:34: 04:ab:b9:ae:45:57:a2:46:c3:8e:e8:c9:0d:6b:75:b0:e7:15: 88:d1:00:70:45:6f:36:af:ab:1a:54:f1:e2:a3:05:f8:34:ee: aa:af:3e:fc:58:b2:c4:8c:6d:f3:b2:80:ce:9c:c0:a5:b4:67: 94:68:bf:db:4d:dd:28:16:0a:83:f1:1c:f6:49:c7:6f:14:46: f9:30:1c:f7:3d:b3:fc:be:8a:1c:dd:72:12:dc:f5:03:f6:52: 69:b5:0a:df:e0:57:0e:7f:61:a5:d6:b6:97:e1:ae:c3:22:e4: 45:1d:06:3d:a5:18:f4:d1:2a:f3:96:56:f8:b0:1a:21:72:2f: 4c:a1:f7:f1:ec:25:b5:2a:a4:81:d1:39:7e:b3:e7:df:a6:dd: 48:cf:ed:60:0e:06:0a:04:4d:d7:14:f9:7a:62:47:44:2b:3c: 67:c1:5a:72:2c:45:19:6b:f6:5b:7d:40:12:11:59:f9:40:43: 6e:5c:1e:9e:59:ee:a8:11:04:b8:54:86:45:4d:bd:af:39:97: 8b:d4:43:4b:45:12:9e:4b:3b:be:08:2a:77:64:13:27:33:b5: ca:4b:c9:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOKw4g0LQaYBhsYv5fCgdnuEkpmQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA3MDAwMDA4WhcNMjYxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzA0YzJhNTk0ZDVmYzk2ZjdjNWY0NjliMTAyZDU3ODFj ZGNlYjUzN2U2OTRiZTBhOTkwM2ZhZTYxNDA4OTYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4/BpzaYhhwUKkhpaaOnrmAvR2pXloQNQjT3gggaetM/iX 7O+nBbiEC+Ts0EAxWqRZxu18GX3LaSKYVrRNq8W1jh6omgRpJom9K7qUFe2yN6WS wWK4TDVkqLhQviEocnpWiTiu/b0eCszQS9lEaDF5YEI7Q6v0jzOIPIY9viiUwHYX SistAn/7uP+5Us2XprrDu8vljwC9LtGEM9YmB7mjEZGt404O0JhgfKXCBdlR0Cu5 1wZAVbMyXRwvT+cIHpKfG9Cd3GTbyjdugHcjyVlizy0WMIi8yjiopcYmm2jiMHKY 8OEHgbiBJedlYH6OeSyLi4/O947lX9ARW2Hi+AkVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZDc4P4vKcErSkl6aB8/9xrPKJB0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0MWY2ZmYyLWZmZjItNDI2NS05MzlmLTk5NDlmM2FlM2UzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQpAAwDQYJKoZIhvcNAQELBQADggEBALkd1wLak5wzrmHPnbd4yeJmdj0E +VroTdAyyhS0lnSIeCpnNASrua5FV6JGw47oyQ1rdbDnFYjRAHBFbzavqxpU8eKj Bfg07qqvPvxYssSMbfOygM6cwKW0Z5Rov9tN3SgWCoPxHPZJx28URvkwHPc9s/y+ ihzdchLc9QP2Umm1Ct/gVw5/YaXWtpfhrsMi5EUdBj2lGPTRKvOWVviwGiFyL0yh 9/HsJbUqpIHROX6z59+m3UjP7WAOBgoETdcU+XpiR0QrPGfBWnIsRRlr9lt9QBIR WflAQ25cHp5Z7qgRBLhUhkVNva85l4vUQ0tFEp5LO74IKndkEycztcpLyb8= -----END CERTIFICATE-----Generated at Tue Sep 15 11:38:33 2026 by rpki-client