$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3959a7-6911-4246-baa0-2136c782f021.roa File: 1c3959a7-6911-4246-baa0-2136c782f021.roa (raw, json) Hash identifier: 4Dy66ttFRddX3IOJb32RyIohcLIAaeRhhyt0mwvttzo= Subject key identifier: 5E:02:7B:43:BF:EC:FC:C4:FC:EB:C9:C0:78:A4:0C:DB:B1:95:CA:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 679F6178F25C72B0C35B85B2CF5362BA42034A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3959a7-6911-4246-baa0-2136c782f021.roa Signing time: Fri 23 Oct 2026 01:02:52 +0000 ROA not before: Fri 23 Oct 2026 01:02:52 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.21.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9f:61:78:f2:5c:72:b0:c3:5b:85:b2:cf:53:62:ba:42:03:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:02:52 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=39bf17874868014428537fcebeed6a1068d042fadbb2ce8d45dae4fd0753bedb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:6a:c6:ea:96:f0:a0:24:65:a6:20:f2:ac: fc:1b:de:52:67:33:a8:b4:c4:89:21:b0:54:ef:f2: 77:e7:6b:74:14:2a:83:74:e4:03:5b:97:2e:c0:9b: 6b:c0:d7:4f:b4:48:af:a2:f2:64:94:16:87:ee:5c: 78:fa:1b:63:c8:62:37:ba:a6:bd:76:04:34:df:ef: b6:b8:b2:5d:11:64:36:24:96:dc:de:ad:0b:38:c1: b1:77:85:b4:19:fa:f6:4d:f7:53:de:f1:c8:a6:ee: ff:af:82:3f:21:3b:39:1b:12:f1:4d:b5:92:72:44: 59:1e:b2:12:4b:c9:1b:e4:90:34:86:a5:78:97:af: dd:16:82:68:b2:7f:29:4f:d3:b0:4d:90:c3:65:3b: d7:26:fd:76:e7:f4:c7:39:7c:f4:38:50:fe:10:e9: 5b:55:c4:61:2e:4f:35:82:96:df:2f:30:8a:23:75: 3f:83:6d:56:22:fc:67:8e:1a:6e:19:00:55:2f:b2: 04:b0:9a:e9:ae:0a:cc:10:ce:b3:0a:e2:3d:24:d8: 1d:1e:5c:d0:20:fe:4f:d7:71:88:a9:80:84:ba:37: 38:50:4b:ad:e6:9c:53:b2:f1:72:7c:d7:8a:dc:29: 46:56:45:2a:93:a0:57:04:00:ac:2d:16:7a:ce:56: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:02:7B:43:BF:EC:FC:C4:FC:EB:C9:C0:78:A4:0C:DB:B1:95:CA:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3959a7-6911-4246-baa0-2136c782f021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.0.0/19 Signature Algorithm: sha256WithRSAEncryption 7c:1e:d8:88:0a:bc:09:d7:9f:da:1d:d4:02:ff:e0:2a:3f:5b: 83:27:6c:f4:8d:ac:24:53:ec:7b:7a:c7:b0:f6:60:73:8d:d2: bc:c5:b4:b0:2e:67:7e:c9:57:1c:33:cd:21:d2:65:38:1d:a8: f1:4d:84:3c:0b:95:1b:01:9f:cf:2a:95:36:e8:a9:10:d3:da: 02:b4:8b:b3:0e:e8:3d:66:74:06:30:dc:f5:3b:e6:66:00:14: 7f:1a:d1:13:2e:c2:df:e6:66:b8:82:f1:ce:e8:a8:ce:c1:b7: 78:94:15:e2:6b:58:a6:15:a6:9b:07:f4:25:66:55:c1:16:e4: ba:80:26:bb:60:6d:84:a9:d2:bb:24:ed:3b:25:22:87:35:4c: fe:b8:a0:e4:8f:3c:9b:39:ab:ca:76:52:f0:42:52:bf:ef:80: 2c:7c:56:dd:35:90:31:12:78:68:92:56:0d:aa:2e:54:9b:48: 35:4f:d3:32:df:3a:7d:7e:90:e4:5c:c8:82:46:c4:ea:dc:7a: 7f:76:5b:f5:7b:9f:48:94:b9:3a:f3:d5:11:d9:79:1a:a2:2c: 38:84:63:24:37:9c:ab:6c:5c:8a:bc:8d:c1:67:ba:04:81:63: 18:df:a0:ae:02:f8:71:87:2c:4e:c4:56:da:d7:e1:cd:3c:eb: be:4d:cc:f9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITZ59hePJccrDDW4Wyz1NiukIDSjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMjMwMTAyNTJaFw0yNzAxMjEyMzU5NTla MHoxSTBHBgNVBAUTQDM5YmYxNzg3NDg2ODAxNDQyODUzN2ZjZWJlZWQ2YTEwNjhk MDQyZmFkYmIyY2U4ZDQ1ZGFlNGZkMDc1M2JlZGIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKgRasbqlvCgJGWmIPKs/BveUmczqLTEiSGwVO/yd+drdBQq g3TkA1uXLsCba8DXT7RIr6LyZJQWh+5cePobY8hiN7qmvXYENN/vtriyXRFkNiSW 3N6tCzjBsXeFtBn69k33U97xyKbu/6+CPyE7ORsS8U21knJEWR6yEkvJG+SQNIal eJev3RaCaLJ/KU/TsE2Qw2U71yb9duf0xzl89DhQ/hDpW1XEYS5PNYKW3y8wiiN1 P4NtViL8Z44abhkAVS+yBLCa6a4KzBDOswriPSTYHR5c0CD+T9dxiKmAhLo3OFBL reacU7LxcnzXitwpRlZFKpOgVwQArC0Wes5W5bUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBReAntDv+z8xPzrycB4pAzbsZXKOzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMWMzOTU5YTctNjkxMS00MjQ2LWJhYTAtMjEzNmM3ODJmMDIxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBRcVADANBgkqhkiG9w0BAQsFAAOCAQEAfB7YiAq8Cdef2h3UAv/gKj9bgyds 9I2sJFPse3rHsPZgc43SvMW0sC5nfslXHDPNIdJlOB2o8U2EPAuVGwGfzyqVNuip ENPaArSLsw7oPWZ0BjDc9TvmZgAUfxrREy7C3+ZmuILxzuiozsG3eJQV4mtYphWm mwf0JWZVwRbkuoAmu2BthKnSuyTtOyUihzVM/rig5I88mzmrynZS8EJSv++ALHxW 3TWQMRJ4aJJWDaouVJtINU/TMt86fX6Q5FzIgkbE6tx6f3Zb9XufSJS5OvPVEdl5 GqIsOIRjJDecq2xciryNwWe6BIFjGN+grgL4cYcsTsRW2tfhzTzrvk3M+Q== -----END CERTIFICATE-----Generated at Wed Nov 4 05:54:48 2026 by rpki-client