$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa File: 02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa (raw, json) Hash identifier: ilvE54WnQoDAsRGM42gamJAqjrxlt+C2HJI6es2l7ic= Subject key identifier: B2:85:82:2F:A9:D0:36:BD:13:08:45:69:4E:E6:E0:3D:CB:64:4B:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 076E98E2417129423384B187EEBBEAD84774784A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa Signing time: Tue 20 Oct 2026 00:41:38 +0000 ROA not before: Tue 20 Oct 2026 00:41:38 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6e:98:e2:41:71:29:42:33:84:b1:87:ee:bb:ea:d8:47:74:78:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 20 00:41:38 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=cbef659cf7abf463ec4c39cd0bd61f12ff42b6178a2fc76c165feb2de3027eb0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:bb:b9:ca:df:69:2f:9c:2d:63:4f:a2:4a: 46:50:41:07:35:19:86:06:c2:10:ee:c9:5d:2a:9c: 85:8f:ec:94:ed:98:f7:39:7f:c9:f4:eb:89:37:86: a4:d9:b9:1d:19:1b:dc:4d:15:52:21:31:ed:12:e9: 16:61:cd:a9:5e:c4:10:ec:f7:20:4c:fa:d0:c8:fc: 63:1b:e1:53:ac:10:38:69:ba:98:7a:55:7a:63:e0: ae:e0:44:7d:e7:06:c4:85:63:9b:60:5e:99:12:d1: 95:38:cf:ac:cb:79:a8:cf:7a:74:b8:8f:69:bb:cb: 38:63:cf:fb:6e:f3:57:24:af:6c:99:c5:d7:d8:bb: d5:b8:a8:17:6c:92:68:e8:1d:53:c2:6d:60:bb:33: de:c6:67:18:78:ae:57:33:23:02:03:b5:34:1d:70: c5:52:c4:40:29:cf:d3:22:8d:a2:b7:58:75:ed:06: f3:a4:90:2d:28:d6:93:9c:3b:f5:00:5b:69:88:5d: 4c:d2:27:c8:b3:31:a5:ec:c2:c7:f3:84:b3:73:c9: 8a:91:b8:5b:6e:bd:a2:04:3d:db:f5:65:4e:c6:ec: 72:e9:3a:15:3c:85:7d:2b:c6:ec:f9:83:14:77:e9: a4:21:02:af:e5:d7:1f:5a:e3:b3:e1:0d:52:c0:1a: da:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:85:82:2F:A9:D0:36:BD:13:08:45:69:4E:E6:E0:3D:CB:64:4B:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.125.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:8a:75:73:0c:01:5b:34:10:62:a6:4a:c6:bd:39:70:24:20: 79:08:c4:8c:45:e9:8c:f1:d0:98:7d:96:96:b6:34:03:e8:0a: 75:be:fd:46:68:5b:28:8b:2e:88:41:65:0a:4b:34:7e:eb:b9: f9:e7:7f:a3:1b:5a:39:24:34:ec:95:81:74:bd:bc:10:c3:01: 89:8a:0e:59:1c:de:7e:76:64:1e:c1:09:e4:76:8d:ab:7a:65: 85:e7:58:53:f7:0a:21:aa:97:da:81:0d:96:7e:ef:a3:f1:64: 1b:9c:63:99:a1:f8:14:3e:09:a1:f9:54:3b:77:24:9c:85:75: 53:c3:a1:73:5d:54:31:e7:30:0e:79:e1:f5:97:e6:d4:dc:38: 71:d5:26:45:41:da:71:d5:b4:3e:da:e9:c2:be:e0:dd:0d:aa: 1a:f1:c4:9f:41:fe:e0:61:41:5b:7d:11:f2:c4:26:ec:6d:33: 7e:9c:bf:e1:1d:97:ff:02:2a:98:b4:c2:2c:bb:ab:37:5e:39: 78:cc:a3:97:63:65:ae:f1:8d:f0:23:08:be:78:ab:f5:f3:93: 8a:0a:a2:06:3c:d5:2b:a1:b2:30:b4:ef:a9:a2:fb:dd:1f:a8: 38:74:d9:1c:b9:b7:cf:2e:cf:6e:c1:95:0c:92:10:6e:36:eb: 10:7f:fa:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB26Y4kFxKUIzhLGH7rvq2Ed0eEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIwMDA0MTM4WhcNMjcwMTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmVmNjU5Y2Y3YWJmNDYzZWM0YzM5Y2QwYmQ2MWYxMmZm NDJiNjE3OGEyZmM3NmMxNjVmZWIyZGUzMDI3ZWIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+jLu5yt9pL5wtY0+iSkZQQQc1GYYGwhDuyV0qnIWP7JTt mPc5f8n064k3hqTZuR0ZG9xNFVIhMe0S6RZhzalexBDs9yBM+tDI/GMb4VOsEDhp uph6VXpj4K7gRH3nBsSFY5tgXpkS0ZU4z6zLeajPenS4j2m7yzhjz/tu81ckr2yZ xdfYu9W4qBdskmjoHVPCbWC7M97GZxh4rlczIwIDtTQdcMVSxEApz9MijaK3WHXt BvOkkC0o1pOcO/UAW2mIXUzSJ8izMaXswsfzhLNzyYqRuFtuvaIEPdv1ZU7G7HLp OhU8hX0rxuz5gxR36aQhAq/l1x9a47PhDVLAGtq3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsoWCL6nQNr0TCEVpTubgPctkS+owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyZTY2ODM1LTdlNzktNDQzZC05MmFiLWYwYjBiMDJkNGZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmH0wDQYJKoZIhvcNAQELBQADggEBABqKdXMMAVs0EGKmSsa9OXAkIHkI xIxF6Yzx0Jh9lpa2NAPoCnW+/UZoWyiLLohBZQpLNH7rufnnf6MbWjkkNOyVgXS9 vBDDAYmKDlkc3n52ZB7BCeR2jat6ZYXnWFP3CiGql9qBDZZ+76PxZBucY5mh+BQ+ CaH5VDt3JJyFdVPDoXNdVDHnMA554fWX5tTcOHHVJkVB2nHVtD7a6cK+4N0Nqhrx xJ9B/uBhQVt9EfLEJuxtM36cv+Edl/8CKpi0wiy7qzdeOXjMo5djZa7xjfAjCL54 q/Xzk4oKogY81SuhsjC076mi+90fqDh02Ry5t88uz27BlQySEG426xB/+nM= -----END CERTIFICATE-----Generated at Wed Nov 4 02:45:49 2026 by rpki-client