$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa File: 0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa (raw, json) Hash identifier: fYUOtIhasn0xDC3mxziUmVMexLY7Jr2i4nDhjUZ3Pw8= Subject key identifier: 7A:FF:8C:29:12:5F:05:84:AD:A2:B2:F1:3E:D6:53:06:2F:FE:B5:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 379A32042AAAC635FD9D0EC2CC30635747C8FA88 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa Signing time: Tue 06 Oct 2026 00:11:17 +0000 ROA not before: Tue 06 Oct 2026 00:11:17 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 63.246.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9a:32:04:2a:aa:c6:35:fd:9d:0e:c2:cc:30:63:57:47:c8:fa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:11:17 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=100b95e21b2b65ded7486f20e8569e9222618557ea016d298fc067d20a05b508, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:40:24:82:33:92:f0:c6:41:62:50:c4:1c: b8:96:a7:45:26:b8:3f:73:ec:09:15:3a:0d:50:03: 99:50:49:e7:61:75:d8:2e:85:60:e2:78:80:90:14: 76:a3:a5:df:69:b5:e7:c8:15:a0:9e:c1:18:4f:32: 2d:2f:25:18:1a:d3:53:03:04:9a:d0:a4:ce:f9:28: 03:ef:ba:85:c7:d7:2d:92:b3:2d:88:3f:f3:6e:79: ef:a4:aa:47:5a:fb:0c:11:88:e4:47:79:ff:e3:04: ac:6f:1d:ea:fd:94:3e:a4:e3:ac:44:84:ce:1c:18: cc:71:68:32:a3:17:29:d9:12:07:6d:10:07:5e:98: 82:38:c5:1a:63:f2:96:74:90:b8:2e:ae:bd:d5:dc: f0:11:7e:3c:1c:90:1a:f4:6f:06:d5:43:6e:56:cf: 25:3a:36:22:0b:58:2d:18:78:64:a8:4f:48:bd:b7: 7a:9d:ce:c9:0e:6a:87:af:ed:87:96:08:01:f9:35: cf:67:32:97:3e:c0:48:84:c7:f2:f6:a6:9a:a8:71: 83:97:eb:81:5e:23:5d:b0:7e:00:ea:cd:16:f7:7c: 75:e9:13:25:92:61:4b:e0:0e:f5:65:d2:82:84:1b: 24:70:3d:1b:c8:ed:18:ac:23:89:75:e2:00:8e:d0: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FF:8C:29:12:5F:05:84:AD:A2:B2:F1:3E:D6:53:06:2F:FE:B5:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.246.112.0/24 Signature Algorithm: sha256WithRSAEncryption 77:e1:9b:36:7a:f0:84:ef:29:7e:d1:e5:9b:48:a1:92:c7:17: 2e:db:2f:f8:0f:ce:6a:d4:e8:43:d9:a0:e6:e9:22:ae:6e:62: 9e:f6:a6:52:db:17:68:81:62:84:86:94:88:d2:f5:80:fd:35: 58:b6:23:fd:3b:b6:d5:3b:8f:84:a2:49:fd:ef:d5:15:38:ee: f9:5a:68:11:04:0c:d7:b1:a9:a6:0d:81:a2:75:cf:b7:ae:b3: 71:43:54:ca:dd:b5:ad:03:ce:3b:77:ae:7e:46:91:09:59:e4: 8a:ed:74:c3:bb:55:0e:a4:86:b7:96:01:17:ca:75:bf:d9:d8: 24:bd:ed:fa:02:df:bd:a2:d0:3f:fd:99:ac:2f:05:dc:d4:49: de:94:af:e4:2e:d3:14:cf:e5:54:e3:38:2e:4f:01:30:95:07: 3a:df:18:6d:bf:48:a6:84:f2:91:44:32:92:cd:68:ed:55:21: 29:09:1f:a5:1e:11:08:08:ad:40:48:30:ca:2f:de:b6:99:e3: 05:36:f4:b8:ed:5d:54:70:9d:52:74:83:48:5a:49:37:84:66: 7a:0f:0a:25:ae:2b:bc:1b:3c:a8:45:92:1a:e8:e3:31:59:6d: 2e:78:99:72:4a:b4:2c:fb:f5:d1:da:d1:f2:16:57:da:1e:8e: a7:db:19:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN5oyBCqqxjX9nQ7CzDBjV0fI+ogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAxMTE3WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDBiOTVlMjFiMmI2NWRlZDc0ODZmMjBlODU2OWU5MjIy NjE4NTU3ZWEwMTZkMjk4ZmMwNjdkMjBhMDViNTA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7q0AkgjOS8MZBYlDEHLiWp0UmuD9z7AkVOg1QA5lQSedh ddguhWDieICQFHajpd9ptefIFaCewRhPMi0vJRga01MDBJrQpM75KAPvuoXH1y2S sy2IP/Nuee+kqkda+wwRiORHef/jBKxvHer9lD6k46xEhM4cGMxxaDKjFynZEgdt EAdemII4xRpj8pZ0kLgurr3V3PARfjwckBr0bwbVQ25WzyU6NiILWC0YeGSoT0i9 t3qdzskOaoev7YeWCAH5Nc9nMpc+wEiEx/L2ppqocYOX64FeI12wfgDqzRb3fHXp EyWSYUvgDvVl0oKEGyRwPRvI7RisI4l14gCO0CbDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUev+MKRJfBYStorLxPtZTBi/+tRcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjYjk1YTlhLTY4OGMtNGU3ZC04OTgzLTYxOWExYTY0YmMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA/9nAwDQYJKoZIhvcNAQELBQADggEBAHfhmzZ68ITvKX7R5ZtIoZLHFy7b L/gPzmrU6EPZoObpIq5uYp72plLbF2iBYoSGlIjS9YD9NVi2I/07ttU7j4SiSf3v 1RU47vlaaBEEDNexqaYNgaJ1z7eus3FDVMrdta0Dzjt3rn5GkQlZ5IrtdMO7VQ6k hreWARfKdb/Z2CS97foC372i0D/9mawvBdzUSd6Ur+Qu0xTP5VTjOC5PATCVBzrf GG2/SKaE8pFEMpLNaO1VISkJH6UeEQgIrUBIMMov3raZ4wU29LjtXVRwnVJ0g0ha STeEZnoPCiWuK7wbPKhFkhro4zFZbS54mXJKtCz79dHa0fIWV9oejqfbGVU= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:10 2026 by rpki-client