$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa File: 171a8b54-dde7-4dd4-8e61-d987c2870176.roa (raw, json) Hash identifier: qRC96n/SJ68squHzM57uWvd6goYkp8yUIAlW60+ses4= Subject key identifier: B8:0C:ED:EE:35:B6:15:50:2B:70:16:CB:48:E1:55:16:B2:B8:30:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D71DF688EBB4C78F3647495246EEFCA6DA1D3DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa Signing time: Fri 16 Oct 2026 00:21:50 +0000 ROA not before: Fri 16 Oct 2026 00:21:50 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:71:df:68:8e:bb:4c:78:f3:64:74:95:24:6e:ef:ca:6d:a1:d3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:21:50 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=d4da1f4cc879c5cc81e31bd3419d57d1303f6a69138335744627b04b7988e8de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:e6:04:6c:2b:49:0e:b9:e9:0b:23:33:64: eb:24:b0:8c:3a:91:1d:62:73:07:b8:a8:07:4d:0c: 66:92:b2:1b:b9:fe:8f:6c:e1:80:5f:56:a7:e6:2c: aa:85:72:ca:92:f6:44:36:ea:56:d7:08:56:b7:33: 85:59:8f:91:83:1c:41:4d:3f:b9:6a:40:5b:cb:e2: 13:06:f0:36:32:15:a2:7f:8a:c6:26:2c:24:c7:fe: b1:73:ae:e1:f0:33:75:15:ef:e1:c0:7d:af:11:6b: a7:ce:d0:13:68:bd:b5:60:5f:2a:0d:69:81:eb:5c: 79:db:8b:55:96:55:d5:fc:3b:90:0c:3b:67:e5:86: cb:0f:9f:11:c0:e8:8b:17:98:4e:00:f7:cd:09:c5: 53:46:b0:57:cc:35:73:29:b4:41:a2:23:02:47:d5: 53:d5:88:03:14:52:4f:cb:7d:3b:62:23:78:67:a3: cc:80:18:b1:cc:e2:58:5a:12:96:61:97:ab:73:18: 52:19:4a:ed:17:46:66:f1:34:73:54:ca:d4:6b:ef: 3e:fb:83:f9:1f:db:ea:e0:a6:7d:15:af:57:ea:8f: a4:29:c6:2d:77:75:cc:38:f7:10:75:6c:2a:8c:d7: 85:23:11:1e:f3:73:41:5f:09:2a:4e:5a:ca:7e:5c: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0C:ED:EE:35:B6:15:50:2B:70:16:CB:48:E1:55:16:B2:B8:30:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.224.0/20 Signature Algorithm: sha256WithRSAEncryption 27:86:c5:cc:08:a1:bd:a0:b5:27:2b:5c:79:40:33:2d:7f:05: 11:e9:73:82:83:8b:2e:42:a3:6f:50:58:c2:bd:cb:ca:a3:09: 99:72:52:90:8f:4a:85:ff:c0:f6:42:74:82:db:fd:4e:10:fa: 6c:2e:b3:3b:64:c1:01:4d:e6:44:8c:e0:69:a7:84:c4:3c:bc: 22:1c:c3:4b:a4:ac:3a:47:ac:ae:e3:52:84:3d:2f:e0:c5:74: ea:57:1d:4a:dc:30:f2:38:f8:ce:6e:8b:f7:a3:8b:53:46:8b: e7:10:18:c7:e2:6e:69:bb:28:22:22:45:5c:2d:7a:44:2e:22: 57:c4:00:54:e1:6d:7d:12:e8:ed:bc:22:ea:0e:08:df:7b:6d: 14:20:ad:c4:4e:64:af:be:c3:d9:5d:55:a0:28:c1:e6:cc:0e: c4:64:72:6d:3f:e9:2a:67:1f:14:db:57:fd:78:18:ba:ec:f2: cb:0f:d0:b8:43:6f:24:02:83:a4:51:aa:cb:60:75:77:ce:ca: 0b:d2:1c:f2:65:61:cd:05:25:51:34:fa:9d:ab:23:3e:d1:b4: 0e:fc:54:eb:93:97:57:4a:22:4d:22:9b:7f:9f:48:bd:c8:10: 7f:3c:7a:8a:46:66:e1:01:b2:74:b2:ff:e8:fd:66:77:08:6d: fe:8a:cb:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbXHfaI67THjzZHSVJG7vym2h098wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAyMTUwWhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGRhMWY0Y2M4NzljNWNjODFlMzFiZDM0MTlkNTdkMTMw M2Y2YTY5MTM4MzM1NzQ0NjI3YjA0Yjc5ODhlOGRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL3uYEbCtJDrnpCyMzZOsksIw6kR1icwe4qAdNDGaSshu5 /o9s4YBfVqfmLKqFcsqS9kQ26lbXCFa3M4VZj5GDHEFNP7lqQFvL4hMG8DYyFaJ/ isYmLCTH/rFzruHwM3UV7+HAfa8Ra6fO0BNovbVgXyoNaYHrXHnbi1WWVdX8O5AM O2flhssPnxHA6IsXmE4A980JxVNGsFfMNXMptEGiIwJH1VPViAMUUk/LfTtiI3hn o8yAGLHM4lhaEpZhl6tzGFIZSu0XRmbxNHNUytRr7z77g/kf2+rgpn0Vr1fqj6Qp xi13dcw49xB1bCqM14UjER7zc0FfCSpOWsp+XCH7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuAzt7jW2FVArcBbLSOFVFrK4MAUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3MWE4YjU0LWRkZTctNGRkNC04ZTYxLWQ5ODdjMjg3MDE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFAOAwDQYJKoZIhvcNAQELBQADggEBACeGxcwIob2gtScrXHlAMy1/BRHp c4KDiy5Co29QWMK9y8qjCZlyUpCPSoX/wPZCdILb/U4Q+mwusztkwQFN5kSM4Gmn hMQ8vCIcw0ukrDpHrK7jUoQ9L+DFdOpXHUrcMPI4+M5ui/eji1NGi+cQGMfibmm7 KCIiRVwtekQuIlfEAFThbX0S6O28IuoOCN97bRQgrcROZK++w9ldVaAowebMDsRk cm0/6SpnHxTbV/14GLrs8ssP0LhDbyQCg6RRqstgdXfOygvSHPJlYc0FJVE0+p2r Iz7RtA78VOuTl1dKIk0im3+fSL3IEH88eopGZuEBsnSy/+j9ZncIbf6Kyxw= -----END CERTIFICATE-----Generated at Fri Oct 30 23:13:15 2026 by rpki-client