$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa File: 1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa (raw, json) Hash identifier: NswTFVYDlvgrL5+maGxWc9mG0mPpArdlbN24AmQGPxE= Subject key identifier: FE:3C:CA:DA:B3:C1:E0:72:59:5B:3B:68:B1:FC:CF:F9:BA:EA:0E:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FBB784CE20525552EA6FE8099988C885A730D26 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa Signing time: Wed 09 Sep 2026 00:00:13 +0000 ROA not before: Wed 09 Sep 2026 00:00:13 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.15.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bb:78:4c:e2:05:25:55:2e:a6:fe:80:99:98:8c:88:5a:73:0d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 00:00:13 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=77fec9c24de7bbabbcaf83fe2eab911d38d97e6475d5ca3e33b9101320ab8054, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b1:8f:84:ee:c4:8c:1c:2e:f6:a7:7e:f3:28: 73:c7:f0:13:c2:a9:a0:74:19:af:e8:7d:ce:b7:a1: 33:1c:7f:24:c4:ab:e6:47:8e:a8:a7:7b:64:20:d4: df:a8:0a:b7:9f:a0:08:b0:57:43:45:fa:67:ce:d6: 26:72:21:65:97:be:b5:4f:4b:63:bf:56:cd:c2:8e: 99:e8:eb:18:59:1e:df:00:8c:dc:33:e9:26:77:14: 71:6b:3d:84:32:48:12:b5:73:bc:ee:04:d7:1b:74: 8d:34:7d:3e:7c:d3:16:0f:95:46:7a:36:a1:d8:9d: 96:bc:c4:93:c3:51:7e:d0:65:2b:5f:e7:04:fa:f5: 81:79:de:db:5e:af:d0:78:94:94:9e:f5:c9:81:c8: ef:c6:c6:2e:83:fd:22:1e:e2:85:e6:9b:89:47:49: 29:fd:8d:2a:19:e5:0f:aa:25:a4:17:29:4d:cd:77: 51:4c:f9:e9:bc:3d:f2:b4:46:e1:8e:a7:10:dd:4e: e9:16:93:24:d0:e5:3c:6c:45:5e:86:f5:f6:f0:0e: ec:8a:fb:44:fb:0c:13:d6:85:87:3d:3e:b9:27:f6: 71:fb:23:09:ca:49:47:63:ff:de:7a:f4:b3:ef:aa: 87:76:77:b4:f0:fe:91:25:ca:cc:ea:e0:34:b9:4f: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3C:CA:DA:B3:C1:E0:72:59:5B:3B:68:B1:FC:CF:F9:BA:EA:0E:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.15.44.0/22 Signature Algorithm: sha256WithRSAEncryption c0:cf:a3:3a:68:87:70:89:f2:d7:cc:d2:40:20:c4:c2:6e:a2: 38:21:7c:9e:cd:17:b2:2e:9c:36:fb:28:5c:e1:50:58:ea:54: 5a:40:19:42:bc:62:a1:91:43:d3:03:a0:6b:0e:04:ea:bc:e7: a0:ca:c9:f9:16:2d:db:be:c1:c4:64:68:be:74:6c:f8:d7:de: 7f:28:dc:8e:82:48:32:ce:6d:c8:8c:a1:b8:31:bb:c8:63:4e: e8:0d:3e:00:63:4b:d5:97:df:00:9d:47:25:f6:49:c3:52:d2: d9:86:e0:88:25:86:a2:5e:2c:6f:8d:64:db:db:c6:4a:88:82: c2:ab:4d:41:07:f2:77:12:2f:30:e8:92:c7:9c:0c:16:67:4d: fa:36:01:14:44:74:13:0b:8c:56:70:89:10:11:6d:43:69:ed: cc:90:bc:b8:4e:a4:7e:41:e9:d4:c5:a3:90:d8:20:11:02:d6: c4:c9:bd:72:09:16:de:63:78:d8:10:76:41:1a:50:93:25:49: e8:8b:f0:a3:3b:79:6d:15:2f:5a:7f:04:53:1c:35:2b:33:eb: 3e:28:20:9f:ab:1d:48:54:17:a8:34:98:24:e0:24:dc:66:e4: a8:77:c4:6e:27:23:6d:81:7e:d0:54:5f:5c:46:e7:53:18:c1: 58:f3:0f:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb7t4TOIFJVUupv6AmZiMiFpzDSYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MDAwMDEzWhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2ZlYzljMjRkZTdiYmFiYmNhZjgzZmUyZWFiOTExZDM4 ZDk3ZTY0NzVkNWNhM2UzM2I5MTAxMzIwYWI4MDU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDesY+E7sSMHC72p37zKHPH8BPCqaB0Ga/ofc63oTMcfyTE q+ZHjqine2Qg1N+oCrefoAiwV0NF+mfO1iZyIWWXvrVPS2O/Vs3Cjpno6xhZHt8A jNwz6SZ3FHFrPYQySBK1c7zuBNcbdI00fT580xYPlUZ6NqHYnZa8xJPDUX7QZStf 5wT69YF53tter9B4lJSe9cmByO/Gxi6D/SIe4oXmm4lHSSn9jSoZ5Q+qJaQXKU3N d1FM+em8PfK0RuGOpxDdTukWkyTQ5TxsRV6G9fbwDuyK+0T7DBPWhYc9Prkn9nH7 IwnKSUdj/9569LPvqod2d7Tw/pElyszq4DS5TzdBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/jzK2rPB4HJZWztosfzP+brqDpQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiYzZlNTJlLTQwNWQtNDBkZS04ZTY3LTljMTlkYTllMzJhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIQDywwDQYJKoZIhvcNAQELBQADggEBAMDPozpoh3CJ8tfM0kAgxMJuojgh fJ7NF7IunDb7KFzhUFjqVFpAGUK8YqGRQ9MDoGsOBOq856DKyfkWLdu+wcRkaL50 bPjX3n8o3I6CSDLObciMobgxu8hjTugNPgBjS9WX3wCdRyX2ScNS0tmG4IglhqJe LG+NZNvbxkqIgsKrTUEH8ncSLzDoksecDBZnTfo2ARREdBMLjFZwiRARbUNp7cyQ vLhOpH5B6dTFo5DYIBEC1sTJvXIJFt5jeNgQdkEaUJMlSeiL8KM7eW0VL1p/BFMc NSsz6z4oIJ+rHUhUF6g0mCTgJNxm5Kh3xG4nI22BftBUX1xG51MYwVjzDxU= -----END CERTIFICATE-----Generated at Sun Sep 20 17:07:42 2026 by rpki-client