$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e408e79-5dd1-440c-8f7a-e5775088ee1d.roa File: 1e408e79-5dd1-440c-8f7a-e5775088ee1d.roa (raw, json) Hash identifier: 1btRnowmG2Oy1NytDSyDGP9xng22pmmTNjsSoKRYIgA= Subject key identifier: 93:CF:6D:46:35:77:3E:72:15:82:CA:31:FD:3B:E3:6D:93:E2:C4:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78095740D24B864FB8F39B3DB55A78BCC16780DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e408e79-5dd1-440c-8f7a-e5775088ee1d.roa Signing time: Tue 06 Oct 2026 00:10:10 +0000 ROA not before: Tue 06 Oct 2026 00:10:10 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:09:57:40:d2:4b:86:4f:b8:f3:9b:3d:b5:5a:78:bc:c1:67:80:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:10:10 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=2d055c85a2702e5ecec9c3ffc26d7e0e5fa854e05a4616018843812fe70080bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:ff:35:c5:52:94:5a:28:08:94:41:f8:5d: f4:f4:21:82:cb:0f:4f:5b:09:b2:07:e7:18:3a:90: c9:0e:23:ae:88:d1:3f:f0:b3:d3:fb:10:31:45:1d: 13:e5:ac:78:08:30:d4:0f:bc:3d:d1:46:24:91:27: 90:a1:01:9e:b8:7d:6e:2f:30:bd:a7:24:ff:c5:e0: c7:a6:5f:2c:bc:36:63:ed:49:6a:5f:41:75:92:b2: 52:6e:d1:a3:1e:09:86:cb:c7:f5:78:c2:99:13:c2: a4:5b:83:d2:cb:87:df:c7:a0:f8:eb:91:4d:af:07: 93:ff:c5:0d:02:95:2c:0e:61:69:4f:cc:b3:3e:db: f2:21:e0:5a:e5:30:84:14:73:9f:80:4d:ea:95:02: d9:79:91:d9:a7:a8:71:a5:b3:34:99:68:45:43:15: 77:2a:a5:ad:72:ad:f2:e3:87:7f:07:3b:6d:cf:70: 86:f3:4e:53:b7:76:c3:73:4e:ea:dd:87:01:81:ed: ed:2a:f4:da:74:27:f0:7c:4d:e7:48:e4:6c:4b:96: 07:0b:75:89:4d:b9:bd:06:7c:94:d9:ae:44:03:e8: 79:fa:b7:94:67:85:1e:cc:db:30:49:93:74:bc:42: bc:ee:8f:bc:6e:59:f3:95:81:64:f2:96:19:13:bd: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CF:6D:46:35:77:3E:72:15:82:CA:31:FD:3B:E3:6D:93:E2:C4:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e408e79-5dd1-440c-8f7a-e5775088ee1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:25:5d:e8:fa:02:93:a6:f5:f7:7b:53:d9:ca:44:17:a8:24: 1b:75:25:ab:53:47:67:0c:ee:b5:ee:6a:f6:4d:21:d1:80:a2: fd:7e:d6:2e:95:be:2c:4f:0b:a1:82:f7:44:7b:5d:f2:09:08: dd:8b:a4:af:78:7a:e5:7e:ca:7a:63:19:08:59:45:8d:14:2c: d8:6b:17:b0:55:e7:03:7e:48:42:2d:45:a8:15:af:62:cd:9c: 11:a8:4c:81:70:eb:86:23:9e:c1:cf:24:c7:ec:e8:d4:c3:60: 2f:b1:f1:a1:aa:77:63:3f:50:d5:c9:2a:d4:a2:7c:a0:66:5b: 5d:ab:56:73:a4:b9:16:59:21:be:f6:14:db:d3:08:39:c0:76: b7:4c:27:76:bb:e4:71:ba:91:a6:f0:0f:5a:85:ae:5c:31:ab: 6e:87:37:85:de:2a:83:2d:94:aa:74:b2:fa:bd:b8:09:cc:98: b0:32:86:71:e1:23:29:9c:7d:79:ef:77:c6:52:d9:36:3a:fb: 14:52:f3:a2:36:1c:24:1d:dd:46:27:e0:6c:ba:4a:59:56:29: 14:82:41:18:be:7d:fb:15:83:36:2d:23:2c:4e:59:c0:c5:32: 50:87:c5:4e:76:3a:7c:41:5d:fe:c6:c0:ac:4a:b5:eb:c2:e6: 8c:e3:3b:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeAlXQNJLhk+485s9tVp4vMFngN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAxMDEwWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDA1NWM4NWEyNzAyZTVlY2VjOWMzZmZjMjZkN2UwZTVm YTg1NGUwNWE0NjE2MDE4ODQzODEyZmU3MDA4MGJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCctf81xVKUWigIlEH4XfT0IYLLD09bCbIH5xg6kMkOI66I 0T/ws9P7EDFFHRPlrHgIMNQPvD3RRiSRJ5ChAZ64fW4vML2nJP/F4MemXyy8NmPt SWpfQXWSslJu0aMeCYbLx/V4wpkTwqRbg9LLh9/HoPjrkU2vB5P/xQ0ClSwOYWlP zLM+2/Ih4FrlMIQUc5+ATeqVAtl5kdmnqHGlszSZaEVDFXcqpa1yrfLjh38HO23P cIbzTlO3dsNzTurdhwGB7e0q9Np0J/B8TedI5GxLlgcLdYlNub0GfJTZrkQD6Hn6 t5RnhR7M2zBJk3S8Qrzuj7xuWfOVgWTylhkTvditAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUk89tRjV3PnIVgsox/TvjbZPixE0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlNDA4ZTc5LTVkZDEtNDQwYy04ZjdhLWU1Nzc1MDg4ZWUxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4YDANBgkqhkiG9w0BAQsFAAOCAQEACiVd6PoCk6b193tT2cpEF6gkG3Ul q1NHZwzute5q9k0h0YCi/X7WLpW+LE8LoYL3RHtd8gkI3Yukr3h65X7KemMZCFlF jRQs2GsXsFXnA35IQi1FqBWvYs2cEahMgXDrhiOewc8kx+zo1MNgL7Hxoap3Yz9Q 1ckq1KJ8oGZbXatWc6S5FlkhvvYU29MIOcB2t0wndrvkcbqRpvAPWoWuXDGrboc3 hd4qgy2UqnSy+r24CcyYsDKGceEjKZx9ee93xlLZNjr7FFLzojYcJB3dRifgbLpK WVYpFIJBGL59+xWDNi0jLE5ZwMUyUIfFTnY6fEFd/sbArEq168LmjOM7Tg== -----END CERTIFICATE-----Generated at Sun Nov 1 13:03:21 2026 by rpki-client