$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb335dae-ef79-4fc2-bddc-ab23a8527e5c.roa File: fb335dae-ef79-4fc2-bddc-ab23a8527e5c.roa (raw, json) Hash identifier: Ht2ANRIpvBjPlbQf2Vt432F/hNlRhTHz6+CEdbTExNA= Subject key identifier: 7F:2B:CE:28:0F:26:34:50:E3:89:6A:66:10:0C:0C:D2:37:14:9A:ED Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C4987029DBD23F762CC2D7077C3BB3F9B428714 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb335dae-ef79-4fc2-bddc-ab23a8527e5c.roa Signing time: Mon 07 Sep 2026 00:00:09 +0000 ROA not before: Mon 07 Sep 2026 00:00:09 +0000 ROA not after: Sun 06 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.164.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:49:87:02:9d:bd:23:f7:62:cc:2d:70:77:c3:bb:3f:9b:42:87:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 7 00:00:09 2026 GMT Not After : Dec 6 23:59:59 2026 GMT Subject: serialNumber=b3020e600d69ab713b4d2b137d82f66c264781aedb178741505868d43b3cbd6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:2f:69:56:74:f4:80:01:9b:b5:b2:38:ce: 99:19:72:a1:4f:f9:60:85:db:20:7d:34:f4:af:de: e1:e7:e3:13:41:50:d3:0d:0d:6a:bc:f8:48:7b:78: 6d:d2:0f:fc:d0:ee:82:49:3c:9a:7d:65:6b:69:e2: 89:e0:c6:71:9a:24:df:d7:55:05:8a:52:f3:2d:cd: 17:a5:78:ba:7e:95:2f:91:a7:be:31:af:2b:fb:a0: e3:78:99:b3:01:08:46:e0:7b:0a:d8:a1:52:72:c5: 60:05:1d:95:55:bd:fd:31:29:d6:89:16:96:4b:40: 42:95:98:29:40:88:30:4c:b8:b0:35:3e:ad:ba:28: e5:e0:5b:fd:b7:99:69:61:fa:43:d2:be:a4:cc:6b: c8:cb:58:27:62:82:d2:65:39:c1:ab:61:81:f8:0b: d2:16:06:03:c0:98:ac:fd:63:16:3f:27:4d:b3:aa: ff:6b:6d:1f:8b:ca:87:25:d7:71:97:f0:14:e2:ea: 0b:02:6d:cf:f0:57:49:cf:ab:58:75:99:c4:b3:a7: 4b:37:25:88:5f:ad:94:93:74:a5:e2:c5:50:4c:11: b8:e8:fe:d1:02:e3:d7:55:0d:2a:91:0f:5f:6c:de: 6b:c2:74:d9:35:a2:13:f2:9c:35:0b:7f:73:4b:67: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2B:CE:28:0F:26:34:50:E3:89:6A:66:10:0C:0C:D2:37:14:9A:ED X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb335dae-ef79-4fc2-bddc-ab23a8527e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.164.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1e:6b:94:62:1d:05:a3:40:60:08:a3:22:d3:65:2d:61:c2:78: 63:39:cf:87:af:4f:80:e8:0e:f2:89:16:65:e7:b8:82:f2:51: 45:8a:61:bd:19:83:a2:de:cb:3a:4c:b4:39:8c:ab:23:66:77: 70:cf:3b:cc:93:1b:f9:66:1c:31:e9:cb:a4:e2:c7:03:73:60: 3a:c1:79:09:2f:56:a5:78:24:56:9c:27:81:5b:66:b3:3f:77: 27:4b:c5:a4:5c:94:55:d0:ba:31:80:ab:83:98:f1:ad:03:60: 58:78:6f:49:0f:13:c7:21:08:43:0a:3c:60:1e:fa:f4:ac:13: c7:0f:27:fe:c9:74:ba:43:c2:7b:26:2c:e5:e1:60:97:11:6b: 2a:46:8a:8a:44:79:9e:a8:b6:e9:66:5e:a0:c6:5a:56:99:6d: de:c0:d8:dd:b7:fe:50:a4:54:b2:8b:77:71:23:5d:19:7d:27: a3:fc:62:68:06:5f:48:fa:e3:46:f7:c8:f2:64:13:d4:02:18: a1:c5:61:b5:e0:97:52:03:3a:fb:b2:ce:e7:d6:ae:2b:bd:00: ea:e8:1a:16:4b:3c:10:7c:33:a9:08:94:ad:05:ee:3b:46:4c: 09:71:12:36:22:38:e5:cf:e0:36:0d:35:19:e7:25:0a:4a:b5: ce:a8:d1:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTEmHAp29I/dizC1wd8O7P5tChxQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA3MDAwMDA5WhcNMjYxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzAyMGU2MDBkNjlhYjcxM2I0ZDJiMTM3ZDgyZjY2YzI2 NDc4MWFlZGIxNzg3NDE1MDU4NjhkNDNiM2NiZDZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6ji9pVnT0gAGbtbI4zpkZcqFP+WCF2yB9NPSv3uHn4xNB UNMNDWq8+Eh7eG3SD/zQ7oJJPJp9ZWtp4ongxnGaJN/XVQWKUvMtzReleLp+lS+R p74xryv7oON4mbMBCEbgewrYoVJyxWAFHZVVvf0xKdaJFpZLQEKVmClAiDBMuLA1 Pq26KOXgW/23mWlh+kPSvqTMa8jLWCdigtJlOcGrYYH4C9IWBgPAmKz9YxY/J02z qv9rbR+Lyocl13GX8BTi6gsCbc/wV0nPq1h1mcSzp0s3JYhfrZSTdKXixVBMEbjo /tEC49dVDSqRD19s3mvCdNk1ohPynDULf3NLZ8g/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfyvOKA8mNFDjiWpmEAwM0jcUmu0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiMzM1ZGFlLWVmNzktNGZjMi1iZGRjLWFiMjNhODUyN2U1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQpIAwDQYJKoZIhvcNAQELBQADggEBAB5rlGIdBaNAYAijItNlLWHCeGM5 z4evT4DoDvKJFmXnuILyUUWKYb0Zg6LeyzpMtDmMqyNmd3DPO8yTG/lmHDHpy6Ti xwNzYDrBeQkvVqV4JFacJ4FbZrM/dydLxaRclFXQujGAq4OY8a0DYFh4b0kPE8ch CEMKPGAe+vSsE8cPJ/7JdLpDwnsmLOXhYJcRaypGiopEeZ6otulmXqDGWlaZbd7A 2N23/lCkVLKLd3EjXRl9J6P8YmgGX0j640b3yPJkE9QCGKHFYbXgl1IDOvuyzufW riu9AOroGhZLPBB8M6kIlK0F7jtGTAlxEjYiOOXP4DYNNRnnJQpKtc6o0VE= -----END CERTIFICATE-----Generated at Tue Sep 15 12:10:26 2026 by rpki-client