$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097ea704-a277-40bf-9b0b-37ca8c9c0263.roa File: 097ea704-a277-40bf-9b0b-37ca8c9c0263.roa (raw, json) Hash identifier: SGwLRyjCwPDU9sFcPxGlueAiSRJBTFEOOmABfuTsTcg= Subject key identifier: 9E:EC:D7:33:F4:4A:D8:37:C0:12:EF:26:1C:50:DD:0D:54:C4:0D:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15845D2FCA06571995A3DB2733F516209AE019CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097ea704-a277-40bf-9b0b-37ca8c9c0263.roa Signing time: Sat 24 Oct 2026 01:04:07 +0000 ROA not before: Sat 24 Oct 2026 01:04:07 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 168.84.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:84:5d:2f:ca:06:57:19:95:a3:db:27:33:f5:16:20:9a:e0:19:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 01:04:07 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=3fba50d89178260b9e72f0aebcb6afb88f8d7b61ac08e49e4ca71ed3eaa54179, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f3:d0:04:d5:78:a8:f6:7e:a0:17:3a:43:74: 97:ca:c2:14:40:73:6e:ac:e7:ed:e7:37:ad:57:bf: b4:95:35:02:d4:00:7c:85:f2:02:8e:7a:d9:71:22: 25:0b:33:fe:76:35:b2:7f:f9:b0:f1:c9:fa:72:50: fa:95:33:fa:82:bb:0f:a3:8e:fc:bf:96:09:6e:9d: ab:c9:a2:03:5a:f8:1d:42:53:92:8f:2f:15:92:ba: a9:12:15:11:06:1b:47:ad:c3:48:95:68:bd:24:bc: b7:8c:1e:53:ad:98:f6:cd:eb:7a:71:db:c0:70:59: 25:4f:c9:d8:cd:f5:49:85:01:30:5b:99:99:df:fc: bd:cd:ab:1d:6e:a0:50:05:40:38:ed:b5:3f:5f:d0: c0:4d:3f:62:15:f2:49:e9:1f:4d:83:00:a6:bf:9e: 67:cd:33:bc:75:19:3f:6c:f1:2c:2c:87:20:37:35: 4f:e1:7e:cd:37:78:b1:20:86:c7:ee:17:c4:b8:1d: 9f:e1:3b:a5:84:68:39:92:4a:93:a9:5d:f1:64:c5: 21:96:9d:28:04:3e:13:ac:9b:b8:b0:af:ed:21:1c: 46:99:33:3c:77:87:0c:90:f0:7a:38:d7:cf:06:0c: 70:a4:2f:e4:75:f4:1f:19:40:98:06:d7:65:54:cb: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EC:D7:33:F4:4A:D8:37:C0:12:EF:26:1C:50:DD:0D:54:C4:0D:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097ea704-a277-40bf-9b0b-37ca8c9c0263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.84.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:da:8f:c2:ef:1b:41:73:cf:d9:47:3a:93:5e:29:b1:5b:21: ce:2e:57:2e:8c:0f:05:6d:6f:54:01:09:e8:5b:d1:89:5c:65: c8:78:1f:03:32:cf:47:b5:fa:53:ed:12:7a:83:af:02:45:6f: 22:57:05:5c:d4:55:16:4c:2d:e0:bc:cd:14:3c:c7:1c:7f:f2: 89:df:98:18:8f:17:5b:7e:49:48:1a:9d:46:4e:18:a8:39:4f: c1:c7:f7:6d:90:8e:76:d5:4a:ce:f5:2f:f9:6b:1a:e7:06:b6: 4d:21:b6:c6:f4:a2:be:8d:81:78:91:51:a1:55:1f:9b:dc:23: 13:1c:5c:ab:15:4e:4b:98:62:da:d5:7a:3e:85:81:d2:9b:bf: 25:ec:20:1f:75:24:43:6b:02:a3:38:f0:b2:fa:cd:c4:7e:f2: e7:ad:ea:15:ae:44:7a:91:26:d4:9a:de:5d:49:d9:15:46:8f: 93:32:30:23:ca:df:d5:17:77:26:61:a1:8c:4c:bf:f9:81:10: a3:f9:41:44:2b:ef:66:a8:66:7c:75:c6:3d:f4:3d:d0:e4:11: 16:b3:b4:2d:29:21:c6:73:c3:d5:20:be:76:f6:db:ab:05:17: 79:ab:ba:1b:cf:b4:00:25:7e:4e:6b:02:62:c1:0d:75:64:5c: 89:a1:a0:84 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFYRdL8oGVxmVo9snM/UWIJrgGcswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDEwNDA3WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmJhNTBkODkxNzgyNjBiOWU3MmYwYWViY2I2YWZiODhm OGQ3YjYxYWMwOGU0OWU0Y2E3MWVkM2VhYTU0MTc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCE89AE1Xio9n6gFzpDdJfKwhRAc26s5+3nN61Xv7SVNQLU AHyF8gKOetlxIiULM/52NbJ/+bDxyfpyUPqVM/qCuw+jjvy/lglunavJogNa+B1C U5KPLxWSuqkSFREGG0etw0iVaL0kvLeMHlOtmPbN63px28BwWSVPydjN9UmFATBb mZnf/L3Nqx1uoFAFQDjttT9f0MBNP2IV8knpH02DAKa/nmfNM7x1GT9s8SwshyA3 NU/hfs03eLEghsfuF8S4HZ/hO6WEaDmSSpOpXfFkxSGWnSgEPhOsm7iwr+0hHEaZ Mzx3hwyQ8Ho4188GDHCkL+R19B8ZQJgG12VUy+IlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnuzXM/RK2DfAEu8mHFDdDVTEDV8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5N2VhNzA0LWEyNzctNDBiZi05YjBiLTM3Y2E4YzljMDI2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCoVDANBgkqhkiG9w0BAQsFAAOCAQEAi9qPwu8bQXPP2Uc6k14psVshzi5X LowPBW1vVAEJ6FvRiVxlyHgfAzLPR7X6U+0SeoOvAkVvIlcFXNRVFkwt4LzNFDzH HH/yid+YGI8XW35JSBqdRk4YqDlPwcf3bZCOdtVKzvUv+Wsa5wa2TSG2xvSivo2B eJFRoVUfm9wjExxcqxVOS5hi2tV6PoWB0pu/JewgH3UkQ2sCozjwsvrNxH7y563q Fa5EepEm1JreXUnZFUaPkzIwI8rf1Rd3JmGhjEy/+YEQo/lBRCvvZqhmfHXGPfQ9 0OQRFrO0LSkhxnPD1SC+dvbbqwUXeau6G8+0ACV+TmsCYsENdWRciaGghA== -----END CERTIFICATE-----Generated at Tue Nov 3 12:01:26 2026 by rpki-client