$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa File: 0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa (raw, json) Hash identifier: FewUQprVnPBIXvkn7EZXAzj/5WS7SxxwAUwFMS4v/2s= Subject key identifier: 06:F7:32:25:CB:38:2A:92:1E:B2:9A:18:B1:CA:72:F2:11:53:4C:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1325FCB936805F20910A6A44FCC66EF2E19ED6F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa Signing time: Sat 24 Oct 2026 00:20:16 +0000 ROA not before: Sat 24 Oct 2026 00:20:16 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 75.3.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:25:fc:b9:36:80:5f:20:91:0a:6a:44:fc:c6:6e:f2:e1:9e:d6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:20:16 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=e1ae051841b4714e6f31be3da726848b979c4b7970a2d1a41d0711981a9cc939, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:ec:0d:24:d7:03:47:da:8e:9f:b2:63:43: aa:b1:c6:66:84:64:9d:1e:8d:d1:f8:48:19:9f:dd: 88:b0:c3:d6:c4:90:7a:19:76:5d:ea:b1:3d:63:fc: 76:01:8b:5b:bc:94:68:31:07:3d:85:b4:e3:44:35: b5:1d:16:78:f9:be:7b:4e:bd:03:73:02:b8:b8:e4: 85:4e:fa:e3:5f:e9:7b:6d:00:07:8a:c1:e0:12:18: 2c:09:9b:d0:fb:7b:52:88:ca:f0:eb:7c:05:67:68: 41:95:2d:e8:76:97:2d:55:51:d8:f9:1e:d1:cf:18: bc:05:d6:e7:46:b9:dc:4a:47:1c:85:05:67:c9:e5: 05:1a:8d:71:d1:23:5d:3b:e1:7a:1e:5f:65:3a:36: c4:f0:73:45:08:4b:66:58:d4:69:a1:fe:5e:71:2b: fe:8d:47:e6:9c:a1:6a:fe:db:77:a9:da:8b:8e:aa: 11:55:05:8d:59:83:70:5d:2e:65:1e:eb:73:5c:65: 43:fb:1d:17:a3:84:92:77:59:2c:b5:6b:6b:cb:e4: 26:f1:58:3b:60:96:43:f9:34:8f:96:82:8d:f2:df: a7:21:57:db:e3:87:ca:ce:3f:59:8f:6c:1e:98:9e: aa:7d:5a:a6:a7:db:82:b6:ec:db:67:b8:44:80:9f: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F7:32:25:CB:38:2A:92:1E:B2:9A:18:B1:CA:72:F2:11:53:4C:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.3.128.0/19 Signature Algorithm: sha256WithRSAEncryption 40:3e:e2:27:34:9a:90:a8:99:f6:ed:54:19:cc:5f:5e:06:cc: 5d:be:df:ea:98:18:00:31:e0:66:9e:42:74:dd:bf:82:03:af: 35:d8:a9:72:5f:2e:dc:a5:a6:9c:39:fe:74:7b:71:7f:72:e8: 5d:d4:25:9b:93:5d:34:6d:74:8b:a1:44:7c:c2:6d:89:c0:42: 83:bd:44:d3:9e:08:41:f3:2f:3f:b2:8d:8c:ae:b0:58:65:80: b6:7c:26:7a:5c:6d:03:e5:a0:2e:f7:3a:fd:00:e4:de:9c:9b: 93:7e:5e:3e:ab:a2:d2:fe:4e:21:0f:36:bc:51:41:c3:c2:ea: 51:1c:eb:95:5a:34:ae:62:9c:ea:25:8c:72:a6:f9:c4:69:75: 63:e8:44:22:ad:e1:5f:95:39:92:ce:a5:21:f2:74:f3:88:66: 69:42:60:3a:da:18:8e:1b:92:9d:31:3d:fb:c8:a8:a5:98:39: 62:81:05:cf:18:51:51:e9:f3:09:55:67:81:4e:32:39:b3:07: ea:66:fe:d3:ad:79:58:c6:77:fc:d0:8a:cc:55:cb:24:44:57: 19:f9:b3:78:3e:5a:60:0a:91:98:1b:ba:84:cc:08:48:3a:9b: 3c:97:f9:fe:74:9a:c2:8f:9c:bc:cf:1a:1e:0d:6e:8e:f7:1b: 37:58:80:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEyX8uTaAXyCRCmpE/MZu8uGe1vQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAyMDE2WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWFlMDUxODQxYjQ3MTRlNmYzMWJlM2RhNzI2ODQ4Yjk3 OWM0Yjc5NzBhMmQxYTQxZDA3MTE5ODFhOWNjOTM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBWewNJNcDR9qOn7JjQ6qxxmaEZJ0ejdH4SBmf3Yiww9bE kHoZdl3qsT1j/HYBi1u8lGgxBz2FtONENbUdFnj5vntOvQNzAri45IVO+uNf6Xtt AAeKweASGCwJm9D7e1KIyvDrfAVnaEGVLeh2ly1VUdj5HtHPGLwF1udGudxKRxyF BWfJ5QUajXHRI1074XoeX2U6NsTwc0UIS2ZY1Gmh/l5xK/6NR+acoWr+23ep2ouO qhFVBY1Zg3BdLmUe63NcZUP7HRejhJJ3WSy1a2vL5CbxWDtglkP5NI+Wgo3y36ch V9vjh8rOP1mPbB6Ynqp9Wqan24K27NtnuESAn2lnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBvcyJcs4KpIespoYscpy8hFTTLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmYmI2ZjFmLTk5YmMtNDM1Yy05Y2ViLWJhNTQ4ZWUzYTU1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVLA4AwDQYJKoZIhvcNAQELBQADggEBAEA+4ic0mpComfbtVBnMX14GzF2+ 3+qYGAAx4GaeQnTdv4IDrzXYqXJfLtylppw5/nR7cX9y6F3UJZuTXTRtdIuhRHzC bYnAQoO9RNOeCEHzLz+yjYyusFhlgLZ8JnpcbQPloC73Ov0A5N6cm5N+Xj6rotL+ TiEPNrxRQcPC6lEc65VaNK5inOoljHKm+cRpdWPoRCKt4V+VOZLOpSHydPOIZmlC YDraGI4bkp0xPfvIqKWYOWKBBc8YUVHp8wlVZ4FOMjmzB+pm/tOteVjGd/zQisxV yyREVxn5s3g+WmAKkZgbuoTMCEg6mzyX+f50msKPnLzPGh4Nbo73GzdYgKc= -----END CERTIFICATE-----Generated at Tue Nov 3 09:14:56 2026 by rpki-client