$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ec6bc2-2434-493b-a852-35740c2772a6.roa File: 12ec6bc2-2434-493b-a852-35740c2772a6.roa (raw, json) Hash identifier: PhgZURSKryKcxATPG68pZ+D+8xJYfrElts+7EnaJC4Q= Subject key identifier: 23:A9:42:5F:F2:66:C2:F5:0D:36:CB:D6:91:BD:B7:4C:53:CF:FF:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D6CB47FE411C5B0293A503DC469B18474531BD4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ec6bc2-2434-493b-a852-35740c2772a6.roa Signing time: Sun 20 Sep 2026 00:00:12 +0000 ROA not before: Sun 20 Sep 2026 00:00:12 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.54.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6c:b4:7f:e4:11:c5:b0:29:3a:50:3d:c4:69:b1:84:74:53:1b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 20 00:00:12 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=768550d8770934cf300f3bf8c34ae166c19aaa4dddc25491832bcf3031d11cde, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:9a:1a:0b:b9:bb:d9:30:cd:20:25:0d:39: 97:12:84:e9:71:42:e1:7d:2c:7d:4e:35:57:df:a4: e2:31:04:82:a4:6c:b0:9b:8d:08:57:dd:ff:71:b2: 2c:e9:a1:a5:d1:e7:6f:b6:71:ba:9a:04:2b:17:de: a3:d4:c9:3d:5e:df:88:8c:3c:80:08:80:8e:aa:c3: d0:a3:93:ef:8e:bf:26:d1:8d:bd:0c:7b:a4:32:96: fb:e3:a7:58:69:5a:18:39:37:05:23:4a:de:89:d8: 0d:81:fb:01:be:de:2a:b9:35:df:0c:fd:32:00:9e: 15:7e:55:5e:9b:51:86:f7:18:86:bc:50:2c:45:31: 6b:77:9c:30:07:c3:35:32:04:ef:23:c9:c9:0c:fd: 4d:66:80:48:f9:ed:01:ee:3b:e9:9c:4e:e2:7b:a4: 88:2f:e3:31:a0:91:e7:4c:43:37:7a:00:6b:3e:e9: 51:db:92:92:5c:ca:81:52:dd:b9:28:15:78:1f:2a: d1:d8:60:b5:62:4e:0c:93:9d:41:36:b8:a2:4d:a9: 53:6c:c0:c6:e3:93:e0:14:99:08:21:72:eb:c1:9e: 10:8a:a3:ee:20:16:20:88:77:00:e8:12:26:ba:e0: d2:27:1e:15:ac:97:d1:96:23:e1:6b:72:af:b0:09: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A9:42:5F:F2:66:C2:F5:0D:36:CB:D6:91:BD:B7:4C:53:CF:FF:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ec6bc2-2434-493b-a852-35740c2772a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.54.170.0/23 Signature Algorithm: sha256WithRSAEncryption 90:d1:f1:df:0a:f4:60:d5:02:30:c7:d6:09:1d:c4:8c:17:eb: 03:ee:6c:53:89:08:28:ea:d9:e2:3a:c0:9a:ad:7e:b0:58:60: 58:66:f9:3a:0d:c0:38:cd:c8:c6:db:11:8c:12:bb:a6:5c:f5: d2:ad:b9:c3:b3:cd:1d:a4:0e:28:ff:41:97:b5:fa:d2:f8:42: 42:ac:9d:1b:9a:54:28:20:f4:04:37:a4:f4:76:9d:d1:3e:9c: 79:46:71:2b:41:d3:e8:70:84:7b:81:f7:2e:10:30:79:ce:7a: 91:55:b8:2a:0e:38:11:2f:09:f6:58:9f:70:9f:b1:83:17:c9: 1c:50:9f:d1:00:56:f4:bd:f8:6b:30:9c:03:72:7c:63:14:84: a0:03:6e:ee:53:11:ae:cc:9e:fc:1b:db:78:bd:3d:f3:8a:4c: 14:bc:f9:ae:90:14:8d:d5:8c:94:4b:3a:7b:28:df:6d:ae:3a: a7:20:ff:30:0b:93:8a:6b:93:b2:6b:8c:3e:b5:e7:50:c6:0f: 31:28:23:56:14:8e:50:5d:24:36:8f:8a:e7:2c:85:f5:9c:b7: e9:5a:b4:f1:a8:5a:63:34:01:76:f3:d9:39:a7:3f:8e:f8:72: f9:42:0a:f5:16:c9:c4:b9:d5:31:e0:b4:8e:af:5f:43:0e:a6: 48:3b:8d:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXWy0f+QRxbApOlA9xGmxhHRTG9QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTIwMDAwMDEyWhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Njg1NTBkODc3MDkzNGNmMzAwZjNiZjhjMzRhZTE2NmMx OWFhYTRkZGRjMjU0OTE4MzJiY2YzMDMxZDExY2RlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqqJoaC7m72TDNICUNOZcShOlxQuF9LH1ONVffpOIxBIKk bLCbjQhX3f9xsizpoaXR52+2cbqaBCsX3qPUyT1e34iMPIAIgI6qw9Cjk++OvybR jb0Me6Qylvvjp1hpWhg5NwUjSt6J2A2B+wG+3iq5Nd8M/TIAnhV+VV6bUYb3GIa8 UCxFMWt3nDAHwzUyBO8jyckM/U1mgEj57QHuO+mcTuJ7pIgv4zGgkedMQzd6AGs+ 6VHbkpJcyoFS3bkoFXgfKtHYYLViTgyTnUE2uKJNqVNswMbjk+AUmQghcuvBnhCK o+4gFiCIdwDoEia64NInHhWsl9GWI+Frcq+wCWznAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI6lCX/JmwvUNNsvWkb23TFPP/9cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyZWM2YmMyLTI0MzQtNDkzYi1hODUyLTM1NzQwYzI3NzJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQNqowDQYJKoZIhvcNAQELBQADggEBAJDR8d8K9GDVAjDH1gkdxIwX6wPu bFOJCCjq2eI6wJqtfrBYYFhm+ToNwDjNyMbbEYwSu6Zc9dKtucOzzR2kDij/QZe1 +tL4QkKsnRuaVCgg9AQ3pPR2ndE+nHlGcStB0+hwhHuB9y4QMHnOepFVuCoOOBEv CfZYn3CfsYMXyRxQn9EAVvS9+GswnANyfGMUhKADbu5TEa7Mnvwb23i9PfOKTBS8 +a6QFI3VjJRLOnso322uOqcg/zALk4prk7JrjD6151DGDzEoI1YUjlBdJDaPiucs hfWct+latPGoWmM0AXbz2TmnP474cvlCCvUWycS51THgtI6vX0MOpkg7jSo= -----END CERTIFICATE-----Generated at Mon Sep 21 17:46:01 2026 by rpki-client