$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02d93fea-36af-4cd2-abce-31f714686d6c.roa File: 02d93fea-36af-4cd2-abce-31f714686d6c.roa (raw, json) Hash identifier: GcjNhiiCdrvYUYXCbN/6FE9SexDwDStnuXl7Cc7WG7U= Subject key identifier: 2A:B1:57:15:1E:F9:70:AF:BA:1C:33:0A:06:BE:31:C9:9B:CF:01:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B8B84067E3257BA0D0038388A191C26554416F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02d93fea-36af-4cd2-abce-31f714686d6c.roa Signing time: Mon 19 Oct 2026 00:40:38 +0000 ROA not before: Mon 19 Oct 2026 00:40:38 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8b:84:06:7e:32:57:ba:0d:00:38:38:8a:19:1c:26:55:44:16:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:40:38 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=387e882342eafcc3935a739a7b895988a267bc722b6b717fc267456fdeafd595, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:63:73:c8:38:a1:f7:e4:bd:b6:86:9a:d9: 81:3d:19:22:57:1a:a0:57:98:3f:60:36:5a:c0:fa: e3:64:c1:41:72:2d:aa:32:cc:ec:fe:09:b4:00:0c: 24:7e:a8:ec:8f:ea:10:a1:da:d3:f6:c4:67:a5:55: 3e:d9:64:5d:ad:8a:cf:d0:4a:8c:0e:5b:fd:48:fd: 80:97:55:b4:85:b6:0b:67:55:51:2f:d6:5e:ee:82: 3f:26:75:b2:01:3d:e8:00:ff:1a:8a:16:84:5a:6f: 05:e6:b9:bd:62:28:b0:05:31:dc:2a:ea:ed:7c:6e: 67:cb:21:e3:8d:ff:b7:a2:3c:d4:66:4f:92:b7:12: 03:da:dc:aa:ab:08:d1:79:7d:12:84:e3:98:00:6e: fe:f0:46:12:ce:9e:31:e9:dc:b6:e7:41:76:ac:4d: 60:32:8c:74:52:94:98:ff:40:55:eb:49:22:68:f8: ec:36:4d:1c:30:bd:71:6e:4f:41:97:a9:d7:aa:52: 06:f7:74:29:2c:32:59:94:90:37:e6:e8:b7:1e:eb: 90:96:27:41:53:78:18:31:4a:bd:3a:27:d7:5c:53: 56:12:33:44:79:b9:0c:82:f3:65:39:72:5b:79:db: 37:45:23:9c:70:7e:2c:8f:7e:43:f2:0a:61:38:0b: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B1:57:15:1E:F9:70:AF:BA:1C:33:0A:06:BE:31:C9:9B:CF:01:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02d93fea-36af-4cd2-abce-31f714686d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.112.0/24 Signature Algorithm: sha256WithRSAEncryption 74:65:0e:dd:8a:18:b9:99:ed:10:96:72:c9:28:5f:2e:4d:79: 6e:46:5a:c3:ad:2f:d9:00:06:00:89:78:41:1c:cb:b3:ba:f9: 4d:fc:e6:d7:2e:e9:a5:97:3b:2c:00:4e:ad:2e:83:0a:fa:6d: 8c:e8:32:2f:43:95:9f:72:c7:82:d6:e9:a0:ed:f3:45:23:a3: c1:ae:f4:0e:08:32:c9:89:ac:1f:7d:e2:3f:f9:46:05:2e:04: 6e:fd:44:57:50:df:14:f8:c6:14:ee:76:ae:dd:3d:f4:6a:e7: 64:f8:f7:f0:a5:06:a1:91:57:33:74:ad:2b:7e:c4:aa:39:9f: a4:64:0e:2e:65:82:ed:b8:4c:ec:fc:a1:31:9c:be:a2:1b:56: 69:2f:96:ad:c7:d1:f0:d2:ad:16:59:26:a4:71:ef:01:c0:51: cf:8e:f8:38:2f:b8:7c:bd:fa:87:a6:41:df:72:52:88:cf:83: 27:e1:b9:02:eb:d1:ae:d2:89:c4:ba:1d:08:c1:9a:48:5a:82: 27:a5:bf:03:70:9b:71:a2:1e:08:c2:72:c3:92:ac:33:23:7b: 1a:17:64:58:30:5d:53:7f:0e:80:d7:f9:25:39:c7:51:98:76: 28:74:0a:c4:17:28:ab:ac:9f:b1:3b:e9:d8:a1:b8:5f:25:51: 23:ad:ce:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS4uEBn4yV7oNADg4ihkcJlVEFvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA0MDM4WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODdlODgyMzQyZWFmY2MzOTM1YTczOWE3Yjg5NTk4OGEy NjdiYzcyMmI2YjcxN2ZjMjY3NDU2ZmRlYWZkNTk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVRmNzyDih9+S9toaa2YE9GSJXGqBXmD9gNlrA+uNkwUFy LaoyzOz+CbQADCR+qOyP6hCh2tP2xGelVT7ZZF2tis/QSowOW/1I/YCXVbSFtgtn VVEv1l7ugj8mdbIBPegA/xqKFoRabwXmub1iKLAFMdwq6u18bmfLIeON/7eiPNRm T5K3EgPa3KqrCNF5fRKE45gAbv7wRhLOnjHp3LbnQXasTWAyjHRSlJj/QFXrSSJo +Ow2TRwwvXFuT0GXqdeqUgb3dCksMlmUkDfm6Lce65CWJ0FTeBgxSr06J9dcU1YS M0R5uQyC82U5clt52zdFI5xwfiyPfkPyCmE4Cyv/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKrFXFR75cK+6HDMKBr4xyZvPAfEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyZDkzZmVhLTM2YWYtNGNkMi1hYmNlLTMxZjcxNDY4NmQ2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmHAwDQYJKoZIhvcNAQELBQADggEBAHRlDt2KGLmZ7RCWcskoXy5NeW5G WsOtL9kABgCJeEEcy7O6+U385tcu6aWXOywATq0ugwr6bYzoMi9DlZ9yx4LW6aDt 80Ujo8Gu9A4IMsmJrB994j/5RgUuBG79RFdQ3xT4xhTudq7dPfRq52T49/ClBqGR VzN0rSt+xKo5n6RkDi5lgu24TOz8oTGcvqIbVmkvlq3H0fDSrRZZJqRx7wHAUc+O +DgvuHy9+oemQd9yUojPgyfhuQLr0a7SicS6HQjBmkhagielvwNwm3GiHgjCcsOS rDMjexoXZFgwXVN/DoDX+SU5x1GYdih0CsQXKKusn7E76dihuF8lUSOtztA= -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:54 2026 by rpki-client