$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa File: 01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa (raw, json) Hash identifier: HDqryGK248eYUrDnctEAxBVyLe1Eyp5O93uRY1yxUJA= Subject key identifier: 9A:7B:99:8A:6C:6A:B4:45:2A:FB:FF:01:87:6A:5F:0B:8A:66:58:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D0A75B4621EA19388E8162540D96394902C7FEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa Signing time: Fri 23 Oct 2026 00:51:09 +0000 ROA not before: Fri 23 Oct 2026 00:51:09 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0a:75:b4:62:1e:a1:93:88:e8:16:25:40:d9:63:94:90:2c:7f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:51:09 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=4d52b0b0e6e97e851bbb1d7d885f58366cdde7e7c3f885cba69622daee8c26bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:de:de:d5:b2:19:fe:c9:04:63:ad:1e:06: 78:10:64:19:80:e9:a0:17:50:de:25:fe:fc:37:31: 11:f9:c1:ee:a3:e2:70:a9:87:c2:84:9c:5c:de:ee: cc:21:47:05:7f:f6:07:12:21:74:2a:ef:65:6c:1c: b4:4b:f8:23:fd:89:a4:bc:a5:bd:36:af:41:79:bb: 0b:a8:c8:f6:e9:73:b6:22:54:d1:cd:cf:39:1a:aa: 08:a2:c4:ca:ee:0d:3d:11:a0:14:99:33:a1:e8:53: cb:7e:88:0c:72:14:2f:15:2a:fc:4b:3e:7b:19:ba: f8:0d:30:43:68:29:5f:34:be:60:69:cc:25:80:0f: 8a:eb:29:bf:12:23:29:7c:e4:cb:38:ce:4f:05:3c: ae:60:3b:02:67:55:3a:7a:52:5b:02:94:29:0f:39: f4:e5:f2:23:b4:3f:eb:3a:dc:8a:76:12:92:47:a4: 87:51:6b:ae:f3:9f:6a:0c:46:4c:7f:cd:5d:a9:55: 7d:12:1c:fb:f3:e3:fd:05:11:12:85:f3:6d:b3:97: 9a:57:76:95:81:75:08:bf:c6:9f:91:57:f9:db:e4: f7:f4:02:f4:57:fa:b6:7f:18:52:07:fe:9b:49:08: 28:50:bb:bb:00:f8:c2:36:c5:65:45:18:80:79:40: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:99:8A:6C:6A:B4:45:2A:FB:FF:01:87:6A:5F:0B:8A:66:58:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.48.0/20 Signature Algorithm: sha256WithRSAEncryption 98:52:65:74:a8:8a:50:9b:ae:cc:cd:b9:dc:28:cd:63:c5:8e: 4d:c0:ac:f3:86:fc:fe:81:ae:8a:c3:a5:07:f3:37:40:41:f4: b1:e9:3f:f7:40:9c:40:fb:57:c7:e2:65:1d:48:c0:99:de:a5: b8:75:fd:f8:0f:39:48:fe:33:62:7b:98:1e:b7:a7:31:a9:49: 72:b6:75:42:73:d7:33:a5:84:62:ad:e2:48:2a:54:04:12:2a: 8a:dc:10:a7:1e:49:5e:02:86:61:3b:bb:1c:54:b7:93:21:82: bd:45:34:1b:ef:67:a7:39:2b:83:5d:24:54:9f:f0:b4:9b:27: 55:82:2a:77:6d:65:3a:4f:61:69:a7:3f:92:8f:94:00:5f:69: 07:70:06:04:d3:6e:b1:4c:a9:47:40:0c:20:ca:d8:8b:81:ee: 8c:c0:10:8c:fb:3b:25:1f:ff:ad:8c:01:cc:9d:9c:7c:e9:ad: 7b:1e:1b:45:28:9c:f6:29:9a:c3:f6:3f:b0:5d:a6:6e:6b:8f: b6:6a:21:89:44:0b:65:d2:a3:92:80:94:3d:12:c7:04:c1:c3: c9:c6:62:88:4a:e6:b6:4a:79:0c:03:f2:a5:4e:b8:d8:25:6d: d8:57:3e:fe:2c:ad:2f:3a:06:33:2a:55:5e:c9:09:c2:0d:5e: b2:22:bf:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULQp1tGIeoZOI6BYlQNljlJAsf+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDA1MTA5WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDUyYjBiMGU2ZTk3ZTg1MWJiYjFkN2Q4ODVmNTgzNjZj ZGRlN2U3YzNmODg1Y2JhNjk2MjJkYWVlOGMyNmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+jN7e1bIZ/skEY60eBngQZBmA6aAXUN4l/vw3MRH5we6j 4nCph8KEnFze7swhRwV/9gcSIXQq72VsHLRL+CP9iaS8pb02r0F5uwuoyPbpc7Yi VNHNzzkaqgiixMruDT0RoBSZM6HoU8t+iAxyFC8VKvxLPnsZuvgNMENoKV80vmBp zCWAD4rrKb8SIyl85Ms4zk8FPK5gOwJnVTp6UlsClCkPOfTl8iO0P+s63Ip2EpJH pIdRa67zn2oMRkx/zV2pVX0SHPvz4/0FERKF822zl5pXdpWBdQi/xp+RV/nb5Pf0 AvRX+rZ/GFIH/ptJCChQu7sA+MI2xWVFGIB5QDrtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmnuZimxqtEUq+/8Bh2pfC4pmWMEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxYjVmZTM1LTE5MWUtNDNiMS1iMThlLWNmNDBkMWZhMTgwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQXFTAwDQYJKoZIhvcNAQELBQADggEBAJhSZXSoilCbrszNudwozWPFjk3A rPOG/P6BrorDpQfzN0BB9LHpP/dAnED7V8fiZR1IwJnepbh1/fgPOUj+M2J7mB63 pzGpSXK2dUJz1zOlhGKt4kgqVAQSKorcEKceSV4ChmE7uxxUt5Mhgr1FNBvvZ6c5 K4NdJFSf8LSbJ1WCKndtZTpPYWmnP5KPlABfaQdwBgTTbrFMqUdADCDK2IuB7ozA EIz7OyUf/62MAcydnHzprXseG0UonPYpmsP2P7Bdpm5rj7ZqIYlEC2XSo5KAlD0S xwTBw8nGYohK5rZKeQwD8qVOuNglbdhXPv4srS86BjMqVV7JCcINXrIiv/0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:46 2026 by rpki-client