$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1797dbef-f227-4903-b2a2-fb0685917fc9.roa File: 1797dbef-f227-4903-b2a2-fb0685917fc9.roa (raw, json) Hash identifier: 9y49LjoTBy4WiqWhLM43pedj+A3QFSeKshUvIcWdtQc= Subject key identifier: 2E:BB:29:5B:BA:58:B2:B6:F4:8C:49:68:A1:8A:60:58:BC:C5:3F:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E5682144CC48CE15A1C1F241CCA5E8E826FCCBF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1797dbef-f227-4903-b2a2-fb0685917fc9.roa Signing time: Mon 12 Oct 2026 00:50:37 +0000 ROA not before: Mon 12 Oct 2026 00:50:37 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:56:82:14:4c:c4:8c:e1:5a:1c:1f:24:1c:ca:5e:8e:82:6f:cc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:50:37 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=ad22e75ceb2847819b7c807ba67b8072c2ed82828d343e62f5a8a370f8cd5de8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:ec:5f:7c:cd:8d:a8:95:e9:2a:1b:b7:a4: 31:77:c8:1d:e3:a4:3d:c9:c0:c5:f0:4f:a7:80:e5: 12:e9:ee:e5:21:49:b3:54:c4:a0:f7:5e:b6:ff:b3: 8f:5b:d9:74:85:45:97:ea:ce:7b:e6:3b:fa:d6:13: 55:4b:f8:ab:e5:36:c3:ed:cd:f3:3d:22:cc:b1:9c: 2d:d5:80:c9:67:28:5f:8e:ab:12:e6:2a:36:f0:81: 50:18:e3:19:ba:57:34:af:89:ca:98:2a:2e:30:e0: 9c:1a:52:31:88:f3:66:0b:3e:d1:a8:92:99:47:b6: bc:58:d6:aa:6d:39:f7:ea:57:ea:58:a0:1e:c7:04: 09:da:7e:b4:8f:8b:aa:f2:34:49:46:60:60:66:5a: 08:72:f1:0f:89:e0:d0:cb:65:b1:24:30:53:31:a9: a7:30:61:bf:9a:45:56:07:d1:78:b5:fa:26:00:3a: e0:28:7a:9a:6f:d3:1d:8b:82:1c:5e:dc:d6:3b:68: dc:99:a1:d8:77:54:d6:25:39:0b:02:26:b5:30:03: 3d:b3:28:2c:c3:25:b4:b6:2e:75:ab:d3:74:51:db: 36:bc:0a:50:c4:af:e7:4e:96:2d:8c:9c:14:b2:31: ad:58:e9:4a:4d:60:fa:02:c5:2b:e5:b4:fb:94:e1: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BB:29:5B:BA:58:B2:B6:F4:8C:49:68:A1:8A:60:58:BC:C5:3F:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1797dbef-f227-4903-b2a2-fb0685917fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.144.0/22 Signature Algorithm: sha256WithRSAEncryption 57:22:6c:89:b7:8d:f8:54:97:77:97:2d:20:8d:ed:f6:5d:11: a7:3d:a1:84:92:33:41:77:70:83:ab:e4:98:13:8c:52:3a:b3: 0e:e8:b4:10:2b:13:4f:a7:1a:a6:ab:05:cd:0a:ac:b5:bd:2f: 9a:2d:9a:35:5b:2d:6b:80:b8:3d:e4:4d:3b:60:c4:56:21:16: 67:78:0d:31:c8:5f:f9:51:98:3e:1d:96:32:7f:27:d6:90:d0: 0c:cc:60:e4:da:ea:76:38:92:5a:e0:58:a1:86:7a:1f:96:2a: 97:24:ad:3a:a6:43:06:25:26:0e:bc:6b:fd:04:00:db:0a:29: 97:84:ea:67:80:b9:b2:e5:b5:40:54:22:35:bd:cf:23:83:70: cc:51:a9:84:cb:b9:28:db:31:e4:f6:5b:89:21:5c:b7:b3:22: aa:af:c4:10:dd:ae:5c:a9:75:cb:ef:18:43:e6:6e:c4:e7:c1: 73:fc:60:33:fe:97:68:dd:91:0b:a2:f3:6b:b9:03:fc:9b:46: 94:27:e8:90:61:ba:f1:08:0c:73:5d:ba:a5:22:f5:0c:c4:92: e5:be:f0:4a:28:18:53:70:37:1b:72:61:f3:ba:09:76:3c:cb: 23:a5:fa:3f:9e:7a:e1:b1:a1:b8:0e:56:08:a8:4e:77:a7:42: 43:12:74:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULlaCFEzEjOFaHB8kHMpejoJvzL8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MDM3WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDIyZTc1Y2ViMjg0NzgxOWI3YzgwN2JhNjdiODA3MmMy ZWQ4MjgyOGQzNDNlNjJmNWE4YTM3MGY4Y2Q1ZGU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC58exffM2NqJXpKhu3pDF3yB3jpD3JwMXwT6eA5RLp7uUh SbNUxKD3Xrb/s49b2XSFRZfqznvmO/rWE1VL+KvlNsPtzfM9IsyxnC3VgMlnKF+O qxLmKjbwgVAY4xm6VzSvicqYKi4w4JwaUjGI82YLPtGokplHtrxY1qptOffqV+pY oB7HBAnafrSPi6ryNElGYGBmWghy8Q+J4NDLZbEkMFMxqacwYb+aRVYH0Xi1+iYA OuAoeppv0x2Lghxe3NY7aNyZodh3VNYlOQsCJrUwAz2zKCzDJbS2LnWr03RR2za8 ClDEr+dOli2MnBSyMa1Y6UpNYPoCxSvltPuU4Qo3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULrspW7pYsrb0jElooYpgWLzFP7kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3OTdkYmVmLWYyMjctNDkwMy1iMmEyLWZiMDY4NTkxN2ZjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKIEpAwDQYJKoZIhvcNAQELBQADggEBAFcibIm3jfhUl3eXLSCN7fZdEac9 oYSSM0F3cIOr5JgTjFI6sw7otBArE0+nGqarBc0KrLW9L5otmjVbLWuAuD3kTTtg xFYhFmd4DTHIX/lRmD4dljJ/J9aQ0AzMYOTa6nY4klrgWKGGeh+WKpckrTqmQwYl Jg68a/0EANsKKZeE6meAubLltUBUIjW9zyODcMxRqYTLuSjbMeT2W4khXLezIqqv xBDdrlypdcvvGEPmbsTnwXP8YDP+l2jdkQui82u5A/ybRpQn6JBhuvEIDHNduqUi 9QzEkuW+8EooGFNwNxtyYfO6CXY8yyOl+j+eeuGxobgOVgioTnenQkMSdJY= -----END CERTIFICATE-----Generated at Mon Nov 2 18:51:01 2026 by rpki-client