$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04306634-1dbc-4569-a40a-6081987ab549.roa File: 04306634-1dbc-4569-a40a-6081987ab549.roa (raw, json) Hash identifier: tzjQ1bS3mfXBmm449TqjiM7B8bVEdX5Y9tCGFKb28JE= Subject key identifier: 76:D8:CD:61:BE:06:1A:F6:DE:B5:20:31:AF:EC:5A:7E:9A:CD:BD:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B7CB138D804030A24492A3F57BC2564903E48B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04306634-1dbc-4569-a40a-6081987ab549.roa Signing time: Fri 16 Oct 2026 00:21:14 +0000 ROA not before: Fri 16 Oct 2026 00:21:14 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 72.40.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7c:b1:38:d8:04:03:0a:24:49:2a:3f:57:bc:25:64:90:3e:48:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:21:14 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=054b0072f598e86a8f97a9b4a0c6734df7ea02e2f0764ca486a5cc6f2668e707, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:12:b4:a6:9f:bc:30:db:10:ef:a5:d1:9e: 94:5b:66:7e:89:19:c9:9e:f8:1a:00:72:79:42:a9: 7f:7f:36:28:b8:29:18:42:59:c0:fe:a7:c2:8a:09: 22:2e:66:80:3d:6a:cd:a7:d1:20:a4:e7:68:23:5c: 2e:3e:70:f2:bc:59:8e:0b:05:80:61:91:05:42:7b: 88:01:17:99:32:11:a8:5d:f5:2b:23:66:38:80:07: 32:c0:68:95:2e:1f:7a:a4:95:7f:6f:18:b9:93:c0: 18:a7:62:fc:ed:09:58:de:a9:f4:3b:14:ea:fe:2d: b6:e9:8e:61:37:8b:9e:f8:3d:4d:af:b3:b3:72:3e: 15:fe:bd:63:7c:cc:ce:cd:86:c3:cc:c9:69:62:06: 74:24:90:92:9a:40:4a:a4:e4:7d:0c:c2:79:e4:ac: c6:53:5b:53:42:7e:9d:f2:e3:d9:32:61:d0:f4:eb: 48:85:7b:5e:e8:9b:d4:90:1f:16:2c:a6:90:42:ba: 91:c9:93:8e:59:bd:a4:2b:d2:e7:6c:6a:29:06:eb: f3:3b:e9:c3:d9:24:4b:3c:cf:2b:ca:33:a9:85:f4: b8:8c:db:ca:75:28:e9:b3:ba:7d:dc:a3:cc:b6:99: 33:58:47:a2:44:90:b2:53:62:87:79:5c:a6:dc:15: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D8:CD:61:BE:06:1A:F6:DE:B5:20:31:AF:EC:5A:7E:9A:CD:BD:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04306634-1dbc-4569-a40a-6081987ab549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.40.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5a:b4:89:94:96:70:65:aa:7d:af:05:4c:05:f3:14:66:00:8a: 56:ee:2c:41:f4:34:43:b8:66:86:e6:72:f6:d6:c3:7b:b9:e7: 70:c8:5f:a4:be:4c:1d:a6:69:8a:f0:36:b2:94:ea:12:01:f7: 83:14:b3:33:51:42:10:61:aa:a4:c8:33:f8:02:1d:4e:de:63: 57:da:20:6b:54:2a:e3:88:be:f8:69:bb:11:37:55:a3:d3:ad: 00:72:fc:1f:cd:50:be:2a:71:d5:16:91:bc:60:cb:02:f3:91: 60:18:28:30:1a:5a:47:04:91:75:f7:aa:ac:60:e0:f3:31:91: 63:bd:f5:50:d2:71:51:67:15:d1:fd:bb:75:ef:e0:7a:7a:47: 84:55:cf:a6:8f:28:1c:88:fd:c1:2d:3c:f7:4a:76:d3:dd:c5: bd:5c:9d:cb:4f:b1:56:fa:32:e8:e0:30:94:e9:9e:a4:dd:43: cb:e3:bd:b5:3e:3e:90:cf:43:79:be:c1:de:74:a5:9b:d7:ed: eb:05:14:f0:00:3f:2e:1e:94:f4:19:a2:a3:9f:58:3a:e9:fd: ee:e1:de:16:63:56:c5:d6:30:87:0f:be:87:1d:d3:e6:21:b3: 49:c4:ce:ed:1a:14:f2:59:3f:db:8f:b3:91:d7:9d:76:db:a9: fb:19:dd:43 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUG3yxONgEAwokSSo/V7wlZJA+SLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAyMTE0WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTRiMDA3MmY1OThlODZhOGY5N2E5YjRhMGM2NzM0ZGY3 ZWEwMmUyZjA3NjRjYTQ4NmE1Y2M2ZjI2NjhlNzA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4XxK0pp+8MNsQ76XRnpRbZn6JGcme+BoAcnlCqX9/Nii4 KRhCWcD+p8KKCSIuZoA9as2n0SCk52gjXC4+cPK8WY4LBYBhkQVCe4gBF5kyEahd 9SsjZjiABzLAaJUuH3qklX9vGLmTwBinYvztCVjeqfQ7FOr+LbbpjmE3i574PU2v s7NyPhX+vWN8zM7NhsPMyWliBnQkkJKaQEqk5H0MwnnkrMZTW1NCfp3y49kyYdD0 60iFe17om9SQHxYsppBCupHJk45ZvaQr0udsaikG6/M76cPZJEs8zyvKM6mF9LiM 28p1KOmzun3co8y2mTNYR6JEkLJTYod5XKbcFQrnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdtjNYb4GGvbetSAxr+xafprNvV8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0MzA2NjM0LTFkYmMtNDU2OS1hNDBhLTYwODE5ODdhYjU0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBIKDANBgkqhkiG9w0BAQsFAAOCAQEAWrSJlJZwZap9rwVMBfMUZgCKVu4s QfQ0Q7hmhuZy9tbDe7nncMhfpL5MHaZpivA2spTqEgH3gxSzM1FCEGGqpMgz+AId Tt5jV9oga1Qq44i++Gm7ETdVo9OtAHL8H81Qvipx1RaRvGDLAvORYBgoMBpaRwSR dfeqrGDg8zGRY731UNJxUWcV0f27de/genpHhFXPpo8oHIj9wS0890p2093FvVyd y0+xVvoy6OAwlOmepN1Dy+O9tT4+kM9Deb7B3nSlm9ft6wUU8AA/Lh6U9Bmio59Y Oun97uHeFmNWxdYwhw++hx3T5iGzScTO7RoU8lk/24+zkdeddtup+xndQw== -----END CERTIFICATE-----Generated at Sat Oct 31 02:19:40 2026 by rpki-client