$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7a9e474-627b-490e-9c17-0532f7c8aeee.roa File: f7a9e474-627b-490e-9c17-0532f7c8aeee.roa (raw, json) Hash identifier: /G3w2XMoa1adu/SR2fya3NZAIkXx/3GIcRMEfWRhUao= Subject key identifier: C4:1E:28:A3:28:DD:22:FC:C2:60:62:46:94:1C:77:30:3B:69:D9:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FB619193A202297CEDE019BBB92283FA1BBAED1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7a9e474-627b-490e-9c17-0532f7c8aeee.roa Signing time: Fri 07 Aug 2026 00:10:08 +0000 ROA not before: Fri 07 Aug 2026 00:10:08 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.23.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b6:19:19:3a:20:22:97:ce:de:01:9b:bb:92:28:3f:a1:bb:ae:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:10:08 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=4bc05a2a33c3b636796554ee4ea60bcc2fd241b4792d83eff738dc9ae767ea4e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:2c:05:52:4b:fa:65:84:9d:8f:22:99:dd: 86:1c:3e:45:67:13:5b:81:37:a8:6b:62:18:cd:2f: 8b:a7:14:79:71:4f:30:52:1b:3b:81:27:15:23:b8: f7:0c:db:34:ac:a7:7d:42:ee:bc:49:d1:80:fc:f2: b2:61:b3:ee:65:d4:82:67:1c:01:99:1b:01:68:9c: c9:e5:c7:8a:0d:13:da:7d:d7:1f:33:a2:1d:75:dd: db:e7:62:65:2e:aa:71:0d:33:e6:76:7f:a0:e4:fd: cd:fe:0d:28:54:9f:5d:a5:ec:7f:9d:92:b9:63:2d: 8b:64:9b:fb:24:1f:23:61:8b:26:2a:5e:80:4d:0f: 81:27:ca:7d:8c:44:25:90:f2:00:77:7c:0c:95:a0: 51:51:7c:9f:20:bd:d5:fd:98:78:16:61:fb:cb:e5: d8:74:ec:6b:1b:c1:f7:88:fc:e3:8b:e2:a9:8b:66: df:51:ed:84:38:d9:10:c2:29:f2:26:ae:39:0b:c6: c3:fb:ba:f4:7e:ba:c4:9d:c0:07:7c:f4:49:09:97: 2f:17:3b:34:75:a5:43:cf:88:02:24:56:02:14:f5: fd:a0:d2:6b:47:73:5e:fa:9e:1c:9f:ba:fb:c3:0f: 16:1f:76:5d:bc:83:a5:87:cb:99:62:65:fd:4d:bf: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:28:A3:28:DD:22:FC:C2:60:62:46:94:1C:77:30:3B:69:D9:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7a9e474-627b-490e-9c17-0532f7c8aeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.23.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:4b:c0:fe:da:d5:45:f9:54:22:6c:b0:34:67:9a:bf:6d:1c: 0c:2a:16:76:49:24:aa:d3:6e:73:4b:16:4f:88:df:58:d4:c8: 23:a3:c0:c1:f3:d7:e4:a4:75:75:f7:fa:d2:79:89:69:fa:39: 37:8e:0f:58:d8:eb:49:3f:f8:2c:76:72:73:eb:21:b2:58:b6: 56:4e:a5:ba:a4:64:96:76:45:22:b9:d7:be:4f:db:25:10:ad: a9:6c:fd:5e:c6:05:f9:a3:4b:eb:0e:64:b6:d2:c4:ea:f6:d7: 43:6c:f9:70:a7:ee:ef:88:4d:da:b4:fa:13:0b:94:a0:a1:0c: 80:84:37:91:e9:20:02:24:ba:70:cd:c3:72:a9:c1:f4:ab:12: 95:22:f8:29:a3:ca:83:ae:45:eb:3b:bb:43:3f:4c:a3:dd:1c: 62:3d:9d:ed:ea:8e:1a:2e:38:cc:b9:0e:eb:b1:d3:bb:03:76: 55:63:a3:c8:82:7c:0d:80:28:8f:2a:40:b7:35:40:df:ec:77: 68:29:bf:3d:6c:77:d0:1d:f5:c7:de:1e:9a:57:7b:ea:0c:aa: ae:4c:3e:61:f7:99:45:6e:38:2c:3f:87:a5:c0:c8:c2:c7:60: 54:3a:36:c7:27:cc:95:82:32:92:34:31:ce:01:23:f0:81:33: 65:77:96:a7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUP7YZGTogIpfO3gGbu5IoP6G7rtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAxMDA4WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmMwNWEyYTMzYzNiNjM2Nzk2NTU0ZWU0ZWE2MGJjYzJm ZDI0MWI0NzkyZDgzZWZmNzM4ZGM5YWU3NjdlYTRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFvSwFUkv6ZYSdjyKZ3YYcPkVnE1uBN6hrYhjNL4unFHlx TzBSGzuBJxUjuPcM2zSsp31C7rxJ0YD88rJhs+5l1IJnHAGZGwFonMnlx4oNE9p9 1x8zoh113dvnYmUuqnENM+Z2f6Dk/c3+DShUn12l7H+dkrljLYtkm/skHyNhiyYq XoBND4Enyn2MRCWQ8gB3fAyVoFFRfJ8gvdX9mHgWYfvL5dh07GsbwfeI/OOL4qmL Zt9R7YQ42RDCKfImrjkLxsP7uvR+usSdwAd89EkJly8XOzR1pUPPiAIkVgIU9f2g 0mtHc176nhyfuvvDDxYfdl28g6WHy5liZf1NvzbzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxB4ooyjdIvzCYGJGlBx3MDtp2QQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3YTllNDc0LTYyN2ItNDkwZS05YzE3LTA1MzJmN2M4YWVlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQFzANBgkqhkiG9w0BAQsFAAOCAQEAA0vA/trVRflUImywNGeav20cDCoW dkkkqtNuc0sWT4jfWNTII6PAwfPX5KR1dff60nmJafo5N44PWNjrST/4LHZyc+sh sli2Vk6luqRklnZFIrnXvk/bJRCtqWz9XsYF+aNL6w5kttLE6vbXQ2z5cKfu74hN 2rT6EwuUoKEMgIQ3kekgAiS6cM3DcqnB9KsSlSL4KaPKg65F6zu7Qz9Mo90cYj2d 7eqOGi44zLkO67HTuwN2VWOjyIJ8DYAojypAtzVA3+x3aCm/PWx30B31x94emld7 6gyqrkw+YfeZRW44LD+HpcDIwsdgVDo2xyfMlYIykjQxzgEj8IEzZXeWpw== -----END CERTIFICATE-----Generated at Fri Sep 4 20:17:42 2026 by rpki-client