$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/895712db-9912-4497-8a0d-bef721443846.roa File: 895712db-9912-4497-8a0d-bef721443846.roa (raw, json) Hash identifier: LYx/EGnFjB3UgjJQrfD+9sQXTr1hX4ygjbAnjcHnhfk= Subject key identifier: F0:F9:BC:CD:46:AD:D3:A7:6A:03:3A:27:E3:AA:8D:84:DB:89:C8:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BD38F5CCDF86FE6D44E7502A24480155AF9EF8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/895712db-9912-4497-8a0d-bef721443846.roa Signing time: Thu 03 Sep 2026 00:00:45 +0000 ROA not before: Thu 03 Sep 2026 00:00:45 +0000 ROA not after: Wed 02 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.76.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d3:8f:5c:cd:f8:6f:e6:d4:4e:75:02:a2:44:80:15:5a:f9:ef:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 3 00:00:45 2026 GMT Not After : Dec 2 23:59:59 2026 GMT Subject: serialNumber=db8fe5b858828fe7c0a911afdb6f22ca06c9ed70f3fa64596ad62d6164f83101, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:dc:b8:6c:f6:a2:b6:e0:84:fe:08:ae:c9: fd:69:17:95:0a:da:c4:1b:6d:03:ee:80:4f:96:0d: d6:f0:82:fa:00:d7:e1:9e:aa:7b:95:b8:d3:8b:66: 30:18:f9:72:f6:0e:99:06:89:59:99:49:05:4b:d9: 3d:cb:51:f7:55:25:7e:1e:a7:91:89:ef:ce:dd:2b: 85:87:1d:60:d7:29:f4:d4:12:04:24:d5:58:dd:d3: 82:b2:d8:1b:c3:31:57:a1:df:0f:07:d6:95:7a:8c: bb:7f:a5:d5:a9:0a:05:1a:bd:02:5e:ad:0a:b1:cc: b3:19:56:30:ad:78:3e:0d:38:13:c7:41:b6:a6:d9: 6d:4c:69:2e:d6:f1:f2:6c:b6:c9:6a:4b:1c:f5:04: 4a:98:00:06:a8:69:48:43:1d:7a:3c:37:c8:50:f7: cd:a5:8a:76:f7:82:d8:ff:73:7b:f8:0e:f6:a5:c7: a9:0a:ed:84:f3:39:a8:de:b9:98:f4:33:d2:85:6f: 87:27:96:71:d5:19:20:ae:11:86:ef:31:58:d2:c3: a6:19:0a:2a:76:f6:fb:e3:04:5b:1f:45:12:20:32: 4e:72:a9:fc:d2:3c:61:8f:5e:e4:ac:07:bd:b6:66: d4:62:10:92:f9:f4:b3:54:d5:bf:1a:24:ca:50:8f: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F9:BC:CD:46:AD:D3:A7:6A:03:3A:27:E3:AA:8D:84:DB:89:C8:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/895712db-9912-4497-8a0d-bef721443846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.76.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:2e:68:7d:cb:3f:43:ac:84:f3:a3:a8:6d:78:d5:4d:6e:a9: 31:a3:f4:98:1a:be:5b:a9:2c:77:fc:ca:0f:f8:c6:ad:42:9a: 1e:f3:20:9f:d8:aa:18:57:66:82:e0:26:74:67:54:07:98:8e: 18:ca:aa:6d:1d:66:6d:ea:74:d2:63:e3:fc:a2:f4:b8:be:c9: 50:e4:77:24:30:4b:70:ee:49:41:05:b5:00:f0:0a:f7:4d:56: 16:f3:5a:44:0d:09:82:80:c9:13:89:c0:89:11:f4:46:c2:b3: 75:5e:f3:79:48:93:fe:58:2c:44:50:0f:2c:af:95:02:3e:35: 7c:f6:80:9b:fa:3d:7a:40:b7:8f:ea:5c:4e:b0:04:f5:5b:f6: 3f:20:29:96:8d:99:f1:63:82:73:d0:41:04:0d:f7:ef:c1:62: ac:34:f0:50:6a:c1:16:18:a0:2c:4c:3c:92:70:ed:2a:8a:67: 32:22:16:b9:d2:6d:2c:43:20:47:c1:07:d8:a1:eb:02:68:32: 88:48:d6:c7:fa:8d:12:f6:da:62:ce:3e:a4:99:5c:80:99:e0: cb:12:d3:59:bf:d4:42:98:60:e2:9a:65:b7:a8:f6:f6:cd:cb: 26:2d:35:f4:df:04:33:a4:ee:88:96:59:2d:1e:7f:20:05:9c: ab:1d:65:f7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUe9OPXM34b+bUTnUCokSAFVr574swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTAzMDAwMDQ1WhcNMjYxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjhmZTViODU4ODI4ZmU3YzBhOTExYWZkYjZmMjJjYTA2 YzllZDcwZjNmYTY0NTk2YWQ2MmQ2MTY0ZjgzMTAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCavty4bPaituCE/giuyf1pF5UK2sQbbQPugE+WDdbwgvoA 1+GeqnuVuNOLZjAY+XL2DpkGiVmZSQVL2T3LUfdVJX4ep5GJ787dK4WHHWDXKfTU EgQk1Vjd04Ky2BvDMVeh3w8H1pV6jLt/pdWpCgUavQJerQqxzLMZVjCteD4NOBPH Qbam2W1MaS7W8fJstslqSxz1BEqYAAaoaUhDHXo8N8hQ982linb3gtj/c3v4Dval x6kK7YTzOajeuZj0M9KFb4cnlnHVGSCuEYbvMVjSw6YZCip29vvjBFsfRRIgMk5y qfzSPGGPXuSsB722ZtRiEJL59LNU1b8aJMpQj++JAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8Pm8zUat06dqAzon46qNhNuJyCIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5NTcxMmRiLTk5MTItNDQ5Ny04YTBkLWJlZjcyMTQ0Mzg0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQTDANBgkqhkiG9w0BAQsFAAOCAQEABi5ofcs/Q6yE86OobXjVTW6pMaP0 mBq+W6ksd/zKD/jGrUKaHvMgn9iqGFdmguAmdGdUB5iOGMqqbR1mbep00mPj/KL0 uL7JUOR3JDBLcO5JQQW1APAK901WFvNaRA0JgoDJE4nAiRH0RsKzdV7zeUiT/lgs RFAPLK+VAj41fPaAm/o9ekC3j+pcTrAE9Vv2PyAplo2Z8WOCc9BBBA3378FirDTw UGrBFhigLEw8knDtKopnMiIWudJtLEMgR8EH2KHrAmgyiEjWx/qNEvbaYs4+pJlc gJngyxLTWb/UQphg4pplt6j29s3LJi019N8EM6TuiJZZLR5/IAWcqx1l9w== -----END CERTIFICATE-----Generated at Tue Sep 22 16:03:58 2026 by rpki-client