$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa File: 0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa (raw, json) Hash identifier: XDQj5WyXT2FH4Ji75asu+iRbvDO9sK7xV7ntBYLacbM= Subject key identifier: 16:5F:69:6A:82:1E:52:01:DD:DF:2A:76:19:C1:12:26:79:63:64:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 611A1FA33CF091DF8269A4D2F7AB5D5A47B1B4B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa Signing time: Tue 06 Oct 2026 00:50:39 +0000 ROA not before: Tue 06 Oct 2026 00:50:39 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 207.240.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1a:1f:a3:3c:f0:91:df:82:69:a4:d2:f7:ab:5d:5a:47:b1:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:50:39 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=62b9c3e6d95b32be046e6e0a95eca14c669d74332dd0ebb6489899bcc2eee489, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:ff:53:f8:93:ba:e5:40:2a:82:4c:ba:0a: 3e:ae:51:d7:db:1a:10:e7:a3:90:46:f3:c3:51:72: 63:ce:36:02:00:af:b4:ed:b4:16:83:db:e4:e2:d5: 75:8c:37:6e:cb:83:38:34:06:8c:01:0c:2f:a1:57: 16:70:99:c9:f1:15:1b:86:8b:e1:f6:49:3a:21:3a: 6c:cb:1c:aa:96:7a:9a:d4:f5:8d:bc:45:03:99:09: de:34:b0:62:a6:98:09:0e:71:76:09:33:99:fe:38: a6:3a:2b:69:45:79:d8:d8:7f:2a:0d:da:d4:6e:b2: 38:b9:53:75:57:9e:8b:72:7f:a1:e7:2e:fe:25:80: d2:c1:a5:78:9c:78:49:93:38:18:2b:9e:ff:dc:70: 41:93:2c:33:61:a6:9c:9b:71:e8:df:e4:eb:68:58: 97:91:e4:36:2b:11:8e:91:d6:ac:dc:8d:59:6c:b0: d7:1b:a5:a0:ef:43:8b:b3:da:14:07:f0:7d:be:5a: 20:b2:fa:6d:b0:9b:c4:0b:5b:54:7b:30:83:4d:df: e1:cd:55:d6:a6:53:91:8a:67:24:9e:81:20:5d:7d: da:76:40:5c:29:68:4d:3e:b5:c2:fd:7b:1f:a9:9c: 92:99:b9:00:07:2b:de:68:0f:1e:62:e4:17:e6:be: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5F:69:6A:82:1E:52:01:DD:DF:2A:76:19:C1:12:26:79:63:64:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption 10:dd:c8:9f:e1:d4:be:ff:a2:cc:ad:8e:63:85:4c:87:70:76: 63:cb:5e:62:29:22:dd:42:49:24:62:87:14:c8:69:c5:3a:ec: 6b:46:b2:aa:ef:fb:dd:76:02:39:12:ae:53:61:3c:ec:13:92: f6:73:42:7a:80:07:ef:f8:2c:93:d7:fb:dd:b5:ec:38:c9:b5: 49:41:9a:4f:e0:26:02:04:80:3b:da:49:bd:08:c7:42:b6:1b: 47:00:68:91:ad:4b:24:7d:a9:75:21:df:de:02:fe:e4:57:69: 87:ab:77:d1:45:b0:d3:3f:7b:74:64:ab:e1:04:14:f6:77:75: 92:7b:6a:0c:3a:a3:ac:e7:07:7d:1f:7e:2f:9a:1c:f5:35:0c: d4:de:1e:2d:9b:89:80:11:39:7e:ef:2a:0c:de:22:37:de:12: 58:6f:01:a2:ef:9f:57:45:e5:7a:2d:de:73:a1:0b:71:cf:f3: e4:22:11:71:87:de:f9:cb:14:fe:fc:0c:cd:27:94:b7:4e:fe: 18:e9:36:86:1d:ac:e8:79:0a:95:64:e2:24:b7:cd:04:0a:0b: 73:85:9b:94:45:84:b2:ab:5e:cc:44:49:0a:6a:e8:6e:a6:ec: 41:1e:68:34:b2:de:99:6b:ae:1b:1d:6b:af:2e:76:fe:21:64: 3f:fe:28:f5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYRofozzwkd+CaaTS96tdWkextLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA1MDM5WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmI5YzNlNmQ5NWIzMmJlMDQ2ZTZlMGE5NWVjYTE0YzY2 OWQ3NDMzMmRkMGViYjY0ODk4OTliY2MyZWVlNDg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaov9T+JO65UAqgky6Cj6uUdfbGhDno5BG88NRcmPONgIA r7TttBaD2+Ti1XWMN27Lgzg0BowBDC+hVxZwmcnxFRuGi+H2STohOmzLHKqWeprU 9Y28RQOZCd40sGKmmAkOcXYJM5n+OKY6K2lFedjYfyoN2tRusji5U3VXnotyf6Hn Lv4lgNLBpXiceEmTOBgrnv/ccEGTLDNhppybcejf5OtoWJeR5DYrEY6R1qzcjVls sNcbpaDvQ4uz2hQH8H2+WiCy+m2wm8QLW1R7MINN3+HNVdamU5GKZySegSBdfdp2 QFwpaE0+tcL9ex+pnJKZuQAHK95oDx5i5Bfmvpp7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFl9paoIeUgHd3yp2GcESJnljZGAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkY2Q5MWRiLThmOWEtNGExNS05YjZiLTIwZDZkZjhkYTg4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDP8DANBgkqhkiG9w0BAQsFAAOCAQEAEN3In+HUvv+izK2OY4VMh3B2Y8te Yiki3UJJJGKHFMhpxTrsa0ayqu/73XYCORKuU2E87BOS9nNCeoAH7/gsk9f73bXs OMm1SUGaT+AmAgSAO9pJvQjHQrYbRwBoka1LJH2pdSHf3gL+5Fdph6t30UWw0z97 dGSr4QQU9nd1kntqDDqjrOcHfR9+L5oc9TUM1N4eLZuJgBE5fu8qDN4iN94SWG8B ou+fV0Xlei3ec6ELcc/z5CIRcYfe+csU/vwMzSeUt07+GOk2hh2s6HkKlWTiJLfN BAoLc4WblEWEsqtezERJCmrobqbsQR5oNLLemWuuGx1rry52/iFkP/4o9Q== -----END CERTIFICATE-----Generated at Tue Nov 3 20:13:06 2026 by rpki-client