$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa File: 12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa (raw, json) Hash identifier: +xanLUp/FNOdyLW4AEERJA1PbnHBFzRg3+xD5l6XVk0= Subject key identifier: E7:30:6F:A4:E1:DF:3B:61:28:97:F4:03:FC:7A:FF:76:14:F3:C0:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36C9A6BFDB51B4BC25916DF1FABB8E77AD1FFFA3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa Signing time: Fri 16 Oct 2026 00:31:45 +0000 ROA not before: Fri 16 Oct 2026 00:31:45 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 216.198.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c9:a6:bf:db:51:b4:bc:25:91:6d:f1:fa:bb:8e:77:ad:1f:ff:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:31:45 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=5adc122ed1f3d1c36e0a08ee598b382275d85b1429e3ba428cf9d458834d6cb8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:3c:6c:71:e4:7d:24:95:c0:2a:a7:59:70: 17:d6:5b:09:8c:73:05:c1:d8:8b:de:55:1b:a4:8a: 6a:16:17:57:44:ae:4d:f1:d6:ee:f0:25:88:7a:5a: f3:7c:9a:dd:65:85:d4:81:12:4a:52:ab:9c:92:82: 58:d5:87:4a:46:0d:e0:02:c9:fe:8b:e8:9a:53:16: b4:b6:38:5e:cc:8a:7e:7d:2d:99:47:14:08:f7:0a: 0e:5c:d4:dd:e6:73:9d:06:96:98:2d:b7:36:bd:bd: fb:e0:a6:72:ed:c2:12:03:66:49:ff:3d:8a:8b:86: a2:50:d2:c9:51:45:12:b4:15:3d:08:76:ab:cd:9c: 04:2f:b7:fb:89:5d:e6:c3:29:41:1d:dd:4d:73:b6: 62:66:53:fc:29:16:49:0a:2a:20:24:e2:25:38:af: 0c:94:50:9e:93:cd:4a:ad:28:39:de:1a:ef:1b:ef: 45:05:55:75:c5:c0:24:f7:81:2d:4e:fe:e2:b4:2c: 95:6a:38:59:08:36:72:ea:ae:eb:d5:a8:25:cd:0d: f7:2b:36:fb:9c:6b:32:12:61:ef:ed:03:b0:49:55: 35:4b:79:2f:13:16:cd:07:6c:89:c5:1a:75:7d:f6: 46:8f:43:1f:cb:3f:8f:2a:90:1c:54:7b:99:09:65: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:30:6F:A4:E1:DF:3B:61:28:97:F4:03:FC:7A:FF:76:14:F3:C0:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.198.68.0/23 Signature Algorithm: sha256WithRSAEncryption 32:9f:cf:85:b5:89:d3:38:0a:0c:bc:50:95:fa:e5:08:28:70: b1:f0:41:a9:cf:f2:af:6a:0d:8e:57:2d:ed:e0:7c:d5:8a:95: 59:3b:ab:89:15:9a:f6:d5:a6:02:cb:c1:e0:81:82:0d:eb:cc: e9:e8:1b:d6:cb:d8:6d:28:f3:61:b1:54:cf:32:49:c2:fc:da: 47:24:6f:f1:f7:8d:62:49:bf:1e:b1:19:51:77:22:0c:cb:db: 49:f2:3a:14:93:f1:41:df:f4:1c:9a:52:cb:b3:ab:f2:7a:8a: 6c:a5:99:eb:e8:a0:04:b1:b4:48:f5:f8:bb:2c:db:92:d1:86: a3:02:fc:f9:3d:8b:e9:93:e9:9d:ad:e4:76:d4:9f:63:12:b6: 11:aa:03:38:d4:36:ab:c3:16:bb:b5:b1:1c:c0:68:d1:55:a8: 6a:68:44:5e:b4:e4:0d:89:61:b7:a2:e9:4d:5b:3d:3d:75:a5: a9:7d:32:84:b5:5c:34:0a:67:74:97:4f:c1:67:1f:4c:9b:96: a2:2d:85:07:11:23:54:c8:76:8f:cc:20:3c:ee:42:b5:fd:30: c7:04:4b:7f:ee:9f:3e:d9:79:30:e8:a4:ff:df:19:b2:9d:31: 85:86:f8:ca:52:6d:e0:ef:9c:1a:bb:61:98:84:70:64:d5:8a: 9a:cb:67:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNsmmv9tRtLwlkW3x+ruOd60f/6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAzMTQ1WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWRjMTIyZWQxZjNkMWMzNmUwYTA4ZWU1OThiMzgyMjc1 ZDg1YjE0MjllM2JhNDI4Y2Y5ZDQ1ODgzNGQ2Y2I4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC51DxsceR9JJXAKqdZcBfWWwmMcwXB2IveVRukimoWF1dE rk3x1u7wJYh6WvN8mt1lhdSBEkpSq5ySgljVh0pGDeACyf6L6JpTFrS2OF7Min59 LZlHFAj3Cg5c1N3mc50Glpgttza9vfvgpnLtwhIDZkn/PYqLhqJQ0slRRRK0FT0I dqvNnAQvt/uJXebDKUEd3U1ztmJmU/wpFkkKKiAk4iU4rwyUUJ6TzUqtKDneGu8b 70UFVXXFwCT3gS1O/uK0LJVqOFkINnLqruvVqCXNDfcrNvucazISYe/tA7BJVTVL eS8TFs0HbInFGnV99kaPQx/LP48qkBxUe5kJZWdBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5zBvpOHfO2Eol/QD/Hr/dhTzwGowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyYWFiNjViLTQxZmUtNGU0NC05OGU0LWEzYmZlYWI4YzliMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYxkQwDQYJKoZIhvcNAQELBQADggEBADKfz4W1idM4Cgy8UJX65QgocLHw QanP8q9qDY5XLe3gfNWKlVk7q4kVmvbVpgLLweCBgg3rzOnoG9bL2G0o82GxVM8y ScL82kckb/H3jWJJvx6xGVF3IgzL20nyOhST8UHf9ByaUsuzq/J6imylmevooASx tEj1+Lss25LRhqMC/Pk9i+mT6Z2t5HbUn2MSthGqAzjUNqvDFru1sRzAaNFVqGpo RF605A2JYbei6U1bPT11pal9MoS1XDQKZ3SXT8FnH0yblqIthQcRI1TIdo/MIDzu QrX9MMcES3/unz7ZeTDopP/fGbKdMYWG+MpSbeDvnBq7YZiEcGTViprLZ2w= -----END CERTIFICATE-----Generated at Wed Nov 4 18:50:56 2026 by rpki-client