$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08df7e96-3f76-42f2-8881-59575ebcdea3.roa File: 08df7e96-3f76-42f2-8881-59575ebcdea3.roa (raw, json) Hash identifier: NabYdnFrW3JinpDGZOeC9TeZJCq2QRpBcwGJYIjGp+Y= Subject key identifier: BC:6C:F1:EE:94:68:49:4D:ED:10:7F:A5:69:59:01:E8:29:70:F2:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 055AF702B8EA6DF75E6378313C01AC07B492AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08df7e96-3f76-42f2-8881-59575ebcdea3.roa Signing time: Mon 19 Oct 2026 22:14:36 +0000 ROA not before: Mon 19 Oct 2026 22:14:36 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.66.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5a:f7:02:b8:ea:6d:f7:5e:63:78:31:3c:01:ac:07:b4:92:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 22:14:36 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=16e996b186218c6acdefc2e0d6279186a544ddbd0563685ce775f27706f30332, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:f7:ba:ea:32:3e:cb:42:49:e1:cc:50:a5: 4e:38:6d:60:c5:19:d4:39:4c:11:c6:10:2f:bb:ce: 20:99:4a:f4:68:16:b8:f6:3c:3d:de:e4:1b:73:69: 6d:63:8b:cf:42:8e:2d:7c:9f:59:79:4d:30:7e:a0: 64:2d:e1:55:5c:57:45:11:b2:39:c0:38:80:a5:0b: c4:c8:08:6a:08:fa:2e:ed:29:45:75:5b:62:3d:91: 15:07:53:5a:08:26:2b:a3:b7:a4:4a:3d:65:86:6b: 0b:de:99:a4:4d:fe:e1:89:4d:f8:73:b1:69:42:c7: 58:10:24:23:b9:2e:8b:f3:27:1d:97:2d:4b:0e:b2: 61:6c:54:fa:75:d7:0b:8d:29:12:b5:81:e0:d0:89: c9:65:ec:81:1a:85:f6:4b:d8:aa:49:09:b6:43:26: d4:3f:b4:e2:23:1d:26:3b:96:7a:23:58:63:04:ac: 43:1d:0b:53:28:54:bd:b4:0a:72:40:d2:99:ca:ae: 2e:14:94:f3:d1:a4:89:1a:91:f4:bb:b3:d5:de:84: 52:95:0e:e2:6f:d8:3a:b0:05:6e:1f:c9:2b:d2:84: e6:3b:01:69:ed:83:e6:6a:39:9d:a6:89:5c:f1:24: ab:c7:a1:cc:a1:2d:bf:0f:72:bd:9c:cf:c9:7d:6f: ee:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:F1:EE:94:68:49:4D:ED:10:7F:A5:69:59:01:E8:29:70:F2:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08df7e96-3f76-42f2-8881-59575ebcdea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.66.128.0/18 Signature Algorithm: sha256WithRSAEncryption 18:f8:55:d7:da:95:24:76:2c:83:d4:cb:0b:70:0a:a0:73:ca: 49:d1:e4:76:51:e0:c4:26:53:ca:d0:b8:b6:22:c9:55:aa:4e: fe:5d:c3:c0:bb:2c:c7:27:90:50:4b:cb:96:26:06:53:3a:1a: 36:f0:b6:e0:05:94:a0:69:0b:2d:f5:b1:4c:1a:98:49:1b:21: 02:f1:6b:0c:02:e4:ff:93:e3:be:f1:41:61:77:cc:24:1b:c0: 8b:f9:1c:24:88:80:d4:6a:51:90:95:83:d1:50:43:26:00:17: 22:1b:c5:7c:6d:8f:0b:2e:c1:25:4d:93:76:af:eb:bc:22:20: 9d:cc:02:7d:52:9c:7c:0b:ac:30:13:56:3f:7d:af:56:21:2f: a1:35:0b:93:55:82:6b:61:da:89:0a:7a:39:1e:1f:b8:85:58: 6a:99:4e:81:71:d6:81:ab:fc:bd:47:fb:b0:53:0c:59:4d:a9: aa:0a:f6:f7:43:a6:cf:0a:21:8d:d4:6b:9d:b2:ad:46:ad:f3: 6b:e9:05:4c:cc:d2:d6:75:7d:e3:2e:fe:5f:57:fe:15:6e:ec: 3e:33:63:82:c9:3b:ef:a3:d4:a1:dd:f0:b8:b6:8d:39:04:23: 06:9e:78:a0:92:bb:c5:07:ac:7a:44:d6:ab:76:c1:71:a6:fa: fc:24:6b:89 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITBVr3ArjqbfdeY3gxPAGsB7SSqjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMTkyMjE0MzZaFw0yNzAxMTcyMzU5NTla MHoxSTBHBgNVBAUTQDE2ZTk5NmIxODYyMThjNmFjZGVmYzJlMGQ2Mjc5MTg2YTU0 NGRkYmQwNTYzNjg1Y2U3NzVmMjc3MDZmMzAzMzIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAIyH97rqMj7LQknhzFClTjhtYMUZ1DlMEcYQL7vOIJlK9GgW uPY8Pd7kG3NpbWOLz0KOLXyfWXlNMH6gZC3hVVxXRRGyOcA4gKULxMgIagj6Lu0p RXVbYj2RFQdTWggmK6O3pEo9ZYZrC96ZpE3+4YlN+HOxaULHWBAkI7kui/MnHZct Sw6yYWxU+nXXC40pErWB4NCJyWXsgRqF9kvYqkkJtkMm1D+04iMdJjuWeiNYYwSs Qx0LUyhUvbQKckDSmcquLhSU89GkiRqR9Luz1d6EUpUO4m/YOrAFbh/JK9KE5jsB ae2D5mo5naaJXPEkq8ehzKEtvw9yvZzPyX1v7osCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBS8bPHulGhJTe0Qf6VpWQHoKXDyBDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMDhkZjdlOTYtM2Y3Ni00MmYyLTg4ODEtNTk1NzVlYmNkZWEzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBkBCgDANBgkqhkiG9w0BAQsFAAOCAQEAGPhV19qVJHYsg9TLC3AKoHPKSdHk dlHgxCZTytC4tiLJVapO/l3DwLssxyeQUEvLliYGUzoaNvC24AWUoGkLLfWxTBqY SRshAvFrDALk/5PjvvFBYXfMJBvAi/kcJIiA1GpRkJWD0VBDJgAXIhvFfG2PCy7B JU2Tdq/rvCIgncwCfVKcfAusMBNWP32vViEvoTULk1WCa2HaiQp6OR4fuIVYaplO gXHWgav8vUf7sFMMWU2pqgr290OmzwohjdRrnbKtRq3za+kFTMzS1nV94y7+X1f+ FW7sPjNjgsk776PUod3wuLaNOQQjBp54oJK7xQesekTWq3bBcab6/CRriQ== -----END CERTIFICATE-----Generated at Mon Nov 2 18:55:06 2026 by rpki-client