$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa File: f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa (raw, json) Hash identifier: 07uHxNR3nPLOyfcpn7w6NbLWi30uXrria/2EHyPLQ64= Subject key identifier: 1E:50:D1:E3:19:9D:AE:11:8D:86:E8:2F:79:0A:AC:BA:36:BF:66:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E896B67A70DE177F49874A347CD6508473ABE82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa Signing time: Mon 03 Aug 2026 00:50:33 +0000 ROA not before: Mon 03 Aug 2026 00:50:33 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.79.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:89:6b:67:a7:0d:e1:77:f4:98:74:a3:47:cd:65:08:47:3a:be:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:50:33 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=885adc95bca590fe482c57a370414a7b080e52a91059b66bfe07baee08ab430f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:99:ae:4d:51:fe:98:1b:d8:d8:59:62:bf: 3f:a1:92:14:12:ae:f5:32:63:b9:03:ae:84:d6:31: 5f:f6:59:d9:c2:19:88:a5:2b:a7:c4:64:50:c9:b2: ac:2c:11:48:a9:50:cf:3b:6a:29:1d:40:49:87:c8: b0:b0:61:ed:f7:77:4b:41:f8:5e:90:6f:2c:b3:0f: 52:d9:7d:99:5f:91:00:82:28:81:0b:20:06:d6:f1: a0:6a:0e:3f:f6:05:2a:49:d9:36:e3:92:62:0a:5b: 59:db:8c:7c:11:f2:ef:cc:fe:81:2f:3c:2c:82:86: d1:cf:c0:2b:f0:d3:45:27:bf:ee:0f:80:3a:33:31: 51:cd:42:1d:b8:94:6c:7f:98:ff:5d:85:f5:cf:50: a7:6e:d4:54:c8:bb:7a:a4:7a:bd:dd:cc:f6:88:d1: 79:0b:20:5d:d8:03:98:a6:07:13:ad:09:fe:03:f4: e3:26:57:e2:ac:6b:b0:61:d2:07:8d:ed:f8:79:cf: a6:30:b1:a9:aa:63:97:e9:a4:71:0a:e7:a5:4a:f3: 9f:b5:8c:ad:9a:50:c4:ca:58:34:f9:87:70:a8:46: 60:9c:56:b4:fc:b1:7d:ca:53:5b:09:b3:66:8c:e8: b0:cc:f1:e1:f1:ed:f6:01:69:c9:fd:04:4d:08:23: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:D1:E3:19:9D:AE:11:8D:86:E8:2F:79:0A:AC:BA:36:BF:66:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.79.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:c1:12:00:b8:a0:6d:10:f3:89:46:a1:8f:47:a8:6b:a4:77: f4:1d:2b:81:7b:15:2f:ab:05:9b:16:d8:10:9c:44:6b:39:c2: 22:11:b6:88:74:8c:d4:d6:98:b0:95:30:9e:3a:e9:94:96:7b: d7:cd:b8:65:11:bb:fc:6b:b1:d0:fe:76:14:ce:b3:b3:85:48: 0c:81:7a:64:53:c3:ba:b4:da:19:08:42:e0:b7:e0:8e:96:bc: 5f:f0:11:98:c3:63:b1:63:95:40:e0:d4:37:bf:2a:68:b6:38: 10:7a:5e:49:e8:7f:00:b0:d1:85:e8:ae:30:c9:d1:04:11:77: b9:f5:24:86:11:f4:40:56:4e:3c:e9:e6:94:a7:b0:7b:23:50: a6:00:88:58:79:98:45:a9:1f:26:fc:ba:7b:c7:34:3e:ac:ab: 0b:1b:b0:c4:07:88:ec:90:f1:07:8e:da:3e:34:a8:25:ec:65: 48:79:d9:f8:ee:bc:76:8b:c5:72:70:bc:68:dc:ae:a9:1d:0d: 4e:16:59:bc:69:3a:8a:54:79:c1:fa:c2:f0:9f:ee:57:01:d0: 6c:71:78:84:11:93:bf:6b:2a:75:1c:8f:f1:1d:0c:a5:80:89: 1b:9f:43:c9:1f:76:a9:29:43:8f:5d:41:83:28:34:a5:a5:0e: 1b:92:92:e4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfolrZ6cN4Xf0mHSjR81lCEc6voIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA1MDMzWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODVhZGM5NWJjYTU5MGZlNDgyYzU3YTM3MDQxNGE3YjA4 MGU1MmE5MTA1OWI2NmJmZTA3YmFlZTA4YWI0MzBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXhpmuTVH+mBvY2Flivz+hkhQSrvUyY7kDroTWMV/2WdnC GYilK6fEZFDJsqwsEUipUM87aikdQEmHyLCwYe33d0tB+F6QbyyzD1LZfZlfkQCC KIELIAbW8aBqDj/2BSpJ2TbjkmIKW1nbjHwR8u/M/oEvPCyChtHPwCvw00Unv+4P gDozMVHNQh24lGx/mP9dhfXPUKdu1FTIu3qker3dzPaI0XkLIF3YA5imBxOtCf4D 9OMmV+Ksa7Bh0geN7fh5z6YwsamqY5fppHEK56VK85+1jK2aUMTKWDT5h3CoRmCc VrT8sX3KU1sJs2aM6LDM8eHx7fYBacn9BE0II1ZdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHlDR4xmdrhGNhugveQqsuja/Zg0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2ZGMwZDRjLTJiNDktNDA0YS04MzlkLTY5ZDY0MGJiYjZmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQTzANBgkqhkiG9w0BAQsFAAOCAQEAQsESALigbRDziUahj0eoa6R39B0r gXsVL6sFmxbYEJxEaznCIhG2iHSM1NaYsJUwnjrplJZ71824ZRG7/Gux0P52FM6z s4VIDIF6ZFPDurTaGQhC4Lfgjpa8X/ARmMNjsWOVQODUN78qaLY4EHpeSeh/ALDR heiuMMnRBBF3ufUkhhH0QFZOPOnmlKeweyNQpgCIWHmYRakfJvy6e8c0PqyrCxuw xAeI7JDxB47aPjSoJexlSHnZ+O68dovFcnC8aNyuqR0NThZZvGk6ilR5wfrC8J/u VwHQbHF4hBGTv2sqdRyP8R0MpYCJG59DyR92qSlDj11Bgyg0paUOG5KS5A== -----END CERTIFICATE-----Generated at Tue Sep 15 11:37:47 2026 by rpki-client