$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa File: f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa (raw, json) Hash identifier: NZ/2sGy+WSLh/O95AzaA0fULKv9i9fbRCHcIoY3bFFQ= Subject key identifier: 5B:D9:E6:3B:90:B6:75:D8:C4:56:54:8D:5A:E7:5B:B8:12:B1:5F:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61FF747DEB07E5E4091E8DBC8F1440803B4CE3E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa Signing time: Sat 08 Aug 2026 00:01:17 +0000 ROA not before: Sat 08 Aug 2026 00:01:17 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.15.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ff:74:7d:eb:07:e5:e4:09:1e:8d:bc:8f:14:40:80:3b:4c:e3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:01:17 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=100284103ed629191fd2161ea808a2069fb003b1330934c5f120d198b99d7baf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:5b:14:dc:32:4b:23:dc:76:d5:4f:05:3e: ae:e1:8d:57:22:8b:ce:b2:bc:54:d2:69:74:67:2c: 43:1a:a8:f0:72:4c:f6:a5:73:fa:4e:3b:07:f0:53: 25:54:fa:d9:f7:17:e9:23:3f:ef:e7:6c:63:71:5d: 3c:17:b2:45:87:aa:80:5a:3d:49:67:73:38:ac:95: 74:af:e5:a9:11:70:f0:a3:62:a3:e1:a3:65:ca:de: d5:bf:7a:2f:3b:38:1f:be:00:76:c2:20:e0:12:94: e4:d1:b2:6b:35:3f:1a:3a:67:18:91:be:84:fb:29: e2:94:0b:d5:bb:13:00:3a:de:49:23:d3:09:14:26: f8:6b:30:1c:cd:40:fa:ad:1f:40:59:19:2f:5b:c3: ac:5a:27:5e:5e:f5:8f:62:87:a8:c3:a5:54:d0:ee: dc:e4:0c:ea:1c:f4:6a:97:03:0e:cc:ca:01:e5:7a: c6:03:c1:fe:62:b8:d4:a4:a0:0b:fa:35:9c:4d:84: 28:54:fd:90:e0:20:59:bc:21:00:46:26:c7:1f:69: e3:d6:3f:df:03:07:14:70:c8:5e:88:e7:bd:fd:82: cc:52:0a:a7:0a:b4:17:61:9f:14:11:77:fa:00:8c: 58:1a:49:fc:63:f0:b5:af:b2:8b:38:dc:a1:e9:e1: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:E6:3B:90:B6:75:D8:C4:56:54:8D:5A:E7:5B:B8:12:B1:5F:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.15.128.0/17 Signature Algorithm: sha256WithRSAEncryption 57:23:69:6f:d0:b1:15:5d:29:74:ba:5a:95:24:7b:6b:15:0b: 34:02:1a:a2:45:ff:eb:bb:9e:91:a3:4c:a8:26:be:cf:7c:bb: cc:f1:d1:38:64:a6:53:07:bf:2f:68:38:00:d6:f2:69:ff:c6: 22:19:6a:41:38:7f:23:6c:60:f6:2a:e7:90:38:95:27:e3:46: 72:d4:07:72:28:fa:c7:29:dc:b8:a3:87:b4:e1:19:f5:ea:31: f0:37:15:e6:a9:72:41:bc:43:7b:e8:5a:08:02:71:35:a6:d8: ce:25:5d:9f:5f:95:ea:97:5d:f5:ff:7d:eb:52:7e:a3:ae:bc: df:f7:22:b7:86:d8:8a:58:85:97:78:d1:a6:38:0c:0b:ce:c3: 81:1c:3f:57:ad:d8:8a:51:3c:8b:36:cf:a2:d2:f7:1a:4e:61: f0:55:65:ea:6d:a6:67:2b:40:5a:23:6a:c3:a9:a4:97:dd:5d: 86:85:6d:5f:89:81:93:e1:b4:42:bd:99:1c:c0:84:dd:10:7b: 6d:4d:de:05:85:b9:12:6f:87:b6:63:b4:58:5b:29:49:38:cd: 96:19:0c:5b:29:64:ef:42:37:84:37:e3:6a:6c:ed:7b:41:7d: d1:ff:c5:1f:74:e0:79:f0:bd:88:50:ae:de:0a:fb:6a:0f:b0: 4f:97:65:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYf90fesH5eQJHo28jxRAgDtM4+cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMTE3WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDAyODQxMDNlZDYyOTE5MWZkMjE2MWVhODA4YTIwNjlm YjAwM2IxMzMwOTM0YzVmMTIwZDE5OGI5OWQ3YmFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZI1sU3DJLI9x21U8FPq7hjVcii86yvFTSaXRnLEMaqPBy TPalc/pOOwfwUyVU+tn3F+kjP+/nbGNxXTwXskWHqoBaPUlnczislXSv5akRcPCj YqPho2XK3tW/ei87OB++AHbCIOASlOTRsms1Pxo6ZxiRvoT7KeKUC9W7EwA63kkj 0wkUJvhrMBzNQPqtH0BZGS9bw6xaJ15e9Y9ih6jDpVTQ7tzkDOoc9GqXAw7MygHl esYDwf5iuNSkoAv6NZxNhChU/ZDgIFm8IQBGJscfaePWP98DBxRwyF6I5739gsxS CqcKtBdhnxQRd/oAjFgaSfxj8LWvsos43KHp4d4pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW9nmO5C2ddjEVlSNWudbuBKxX4owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4NTg3ZjY2LWE5YzYtNDI1Ni1iMTcxLTdiZjJiZGI3OTE1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfYD4AwDQYJKoZIhvcNAQELBQADggEBAFcjaW/QsRVdKXS6WpUke2sVCzQC GqJF/+u7npGjTKgmvs98u8zx0ThkplMHvy9oOADW8mn/xiIZakE4fyNsYPYq55A4 lSfjRnLUB3Io+scp3Lijh7ThGfXqMfA3FeapckG8Q3voWggCcTWm2M4lXZ9fleqX XfX/fetSfqOuvN/3IreG2IpYhZd40aY4DAvOw4EcP1et2IpRPIs2z6LS9xpOYfBV ZeptpmcrQFojasOppJfdXYaFbV+JgZPhtEK9mRzAhN0Qe21N3gWFuRJvh7ZjtFhb KUk4zZYZDFspZO9CN4Q342ps7XtBfdH/xR904HnwvYhQrt4K+2oPsE+XZUU= -----END CERTIFICATE-----Generated at Tue Sep 15 11:00:22 2026 by rpki-client