$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a790320-e05f-4e42-923e-cc8fb7499981.roa File: 0a790320-e05f-4e42-923e-cc8fb7499981.roa (raw, json) Hash identifier: kT9tRKT1YarzrqhtzZiExOYWFRfrc4YD4u7KSNseo3I= Subject key identifier: 35:71:F1:D5:B5:E5:59:6E:46:9F:6C:71:92:60:7C:46:73:93:7A:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E517AF2DC617F452689AD2E60B0C31E89410DE3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a790320-e05f-4e42-923e-cc8fb7499981.roa Signing time: Thu 01 Oct 2026 00:00:27 +0000 ROA not before: Thu 01 Oct 2026 00:00:27 +0000 ROA not after: Wed 30 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:51:7a:f2:dc:61:7f:45:26:89:ad:2e:60:b0:c3:1e:89:41:0d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 1 00:00:27 2026 GMT Not After : Dec 30 23:59:59 2026 GMT Subject: serialNumber=1fd76e1bb091e4f6e525ed9ad95d72e9cdcde5829f5cf951636da071ef444156, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:34:eb:21:be:84:77:83:36:b2:71:7d:5e: c8:8c:df:aa:a5:e6:b8:91:4f:ee:1e:88:cd:23:cd: d5:33:7f:da:9d:86:e9:96:82:9c:a2:00:64:b1:e7: 83:2f:d9:c6:bb:86:5d:d7:ff:3d:ea:e5:69:dd:e1: 0e:f4:d5:dd:62:b1:0b:f1:d9:58:b1:b2:35:81:d2: b3:85:4d:97:75:00:7b:8c:ce:c8:84:87:ae:88:b7: 4c:38:98:7c:fb:89:6a:e5:25:85:42:14:78:c6:58: 31:d1:32:e0:0f:94:66:55:3f:66:be:6a:b1:7e:f2: 15:da:f7:f4:da:37:4f:94:e7:51:fd:db:bc:82:5e: fc:b2:a4:a4:8e:6f:45:a5:21:dd:ec:ec:61:25:3b: 7c:6f:4e:95:49:ce:ff:80:72:ce:83:11:c1:cb:82: 03:2a:dd:89:15:a7:61:2c:a9:cc:ae:75:5b:54:74: e2:bf:a9:17:f5:ed:26:5e:19:12:7f:37:5b:01:1c: 17:1a:53:94:5d:aa:4b:71:4a:7b:d0:32:e6:7f:71: a9:51:1a:de:05:70:49:ff:66:08:48:e9:99:df:55: 1a:da:a4:41:ff:27:16:cd:fc:7c:29:ec:95:69:67: 18:a5:70:04:3e:74:ff:14:29:2c:1b:eb:f8:a3:5e: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:71:F1:D5:B5:E5:59:6E:46:9F:6C:71:92:60:7C:46:73:93:7A:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a790320-e05f-4e42-923e-cc8fb7499981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.168.0/21 Signature Algorithm: sha256WithRSAEncryption 48:98:ec:ae:39:61:e4:d6:bc:e3:f6:04:3f:ec:63:35:86:a4: b9:5e:ed:e8:8c:b2:fd:fc:42:fa:a5:93:fc:40:64:c4:57:bb: 01:ae:bc:29:13:c4:cd:31:78:56:cf:47:e8:04:34:a8:83:9f: 2b:3b:41:6b:7a:d2:01:a1:52:ad:dd:e8:1e:d3:f8:ee:f2:9a: 5c:54:d9:ce:62:84:82:f3:d7:5f:d9:e5:51:6b:f0:ae:e6:dc: c1:60:99:a3:91:c4:bf:8a:f7:31:c2:97:2e:68:76:2f:bd:ee: bf:ca:11:b8:4d:64:1e:39:bf:69:0c:43:38:a6:57:50:60:cc: 7a:c3:11:0c:8f:e4:0c:66:e5:2f:43:b7:bc:82:83:12:c0:20: bb:8f:d3:bf:66:08:f3:6f:a8:43:32:56:b3:5c:78:48:99:37: 65:d0:c9:21:0c:a9:4d:e7:e2:8b:4f:a4:92:c9:99:46:58:e8: e7:a7:b6:ab:ef:fd:15:8f:2f:74:b9:99:07:21:8d:b5:79:20: 0a:31:bf:97:1f:ec:3e:f6:37:98:09:08:d1:6c:27:4b:f1:4c: a3:2d:2d:95:ff:2f:4d:a0:2f:74:80:3b:50:e8:10:aa:37:c6: 75:d5:cb:6e:63:3f:f9:5f:52:fc:01:9a:0c:2d:e2:53:e4:4d: 31:d8:b9:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPlF68txhf0Umia0uYLDDHolBDeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDAxMDAwMDI3WhcNMjYxMjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmQ3NmUxYmIwOTFlNGY2ZTUyNWVkOWFkOTVkNzJlOWNk Y2RlNTgyOWY1Y2Y5NTE2MzZkYTA3MWVmNDQ0MTU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnFzTrIb6Ed4M2snF9XsiM36ql5riRT+4eiM0jzdUzf9qd humWgpyiAGSx54Mv2ca7hl3X/z3q5Wnd4Q701d1isQvx2VixsjWB0rOFTZd1AHuM zsiEh66It0w4mHz7iWrlJYVCFHjGWDHRMuAPlGZVP2a+arF+8hXa9/TaN0+U51H9 27yCXvyypKSOb0WlId3s7GElO3xvTpVJzv+Acs6DEcHLggMq3YkVp2EsqcyudVtU dOK/qRf17SZeGRJ/N1sBHBcaU5RdqktxSnvQMuZ/calRGt4FcEn/ZghI6ZnfVRra pEH/JxbN/Hwp7JVpZxilcAQ+dP8UKSwb6/ijXvE7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNXHx1bXlWW5Gn2xxkmB8RnOTepwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhNzkwMzIwLWUwNWYtNGU0Mi05MjNlLWNjOGZiNzQ5OTk4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANBCagwDQYJKoZIhvcNAQELBQADggEBAEiY7K45YeTWvOP2BD/sYzWGpLle 7eiMsv38Qvqlk/xAZMRXuwGuvCkTxM0xeFbPR+gENKiDnys7QWt60gGhUq3d6B7T +O7ymlxU2c5ihILz11/Z5VFr8K7m3MFgmaORxL+K9zHCly5odi+97r/KEbhNZB45 v2kMQzimV1BgzHrDEQyP5Axm5S9Dt7yCgxLAILuP079mCPNvqEMyVrNceEiZN2XQ ySEMqU3n4otPpJLJmUZY6Oentqvv/RWPL3S5mQchjbV5IAoxv5cf7D72N5gJCNFs J0vxTKMtLZX/L02gL3SAO1DoEKo3xnXVy25jP/lfUvwBmgwt4lPkTTHYuUk= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:26 2026 by rpki-client