$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee700d9-7b01-4fc8-8073-984647ef7fe6.roa File: 1ee700d9-7b01-4fc8-8073-984647ef7fe6.roa (raw, json) Hash identifier: 68Tnv4rLefASfX6+9uNuOBP5+0jCq0xrlbTTxq1j82Y= Subject key identifier: 9E:4F:25:97:98:C7:23:3D:FF:B4:17:89:ED:17:21:31:37:E3:E0:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57F1A6F340F7DF5EF6EBBCF47590B77AA8EA6347 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee700d9-7b01-4fc8-8073-984647ef7fe6.roa Signing time: Thu 15 Oct 2026 00:10:39 +0000 ROA not before: Thu 15 Oct 2026 00:10:39 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 74.217.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f1:a6:f3:40:f7:df:5e:f6:eb:bc:f4:75:90:b7:7a:a8:ea:63:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:10:39 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=bb76df299e8a5effa07617389c3d5b64f8c3a705e02df5d83c387a6912adde21, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:9a:29:43:41:0a:8e:b4:30:03:b5:e6:7b: 0b:83:3d:e6:55:10:d6:6a:98:ed:7a:16:4b:c6:c2: 30:05:cf:5b:bd:17:0c:0f:0c:0e:22:e6:fc:13:bf: 91:a9:96:44:6b:f4:03:58:59:08:3a:43:cb:3d:b6: 70:8d:fe:d9:6c:6e:39:1a:89:d3:eb:ec:26:69:02: e1:9d:8b:10:c7:9a:da:03:89:29:f8:c7:75:80:d0: 06:e6:ef:f7:46:1d:fb:f6:8e:df:11:10:d9:d3:d6: a0:63:a4:f7:4b:31:6a:bc:ad:18:d8:39:b3:e4:1c: 6d:dd:eb:bc:51:14:cb:b2:b8:fa:6b:b7:73:35:41: 26:57:00:6d:c8:46:ce:f9:6f:d4:6a:c4:ac:66:a3: d2:48:d9:34:d9:c4:17:47:9e:19:7a:68:f0:0a:cb: 06:af:8b:ef:85:ef:7a:16:5f:65:95:a1:c5:57:1d: 39:5a:d5:a9:ec:11:4a:3c:b4:bb:ea:f1:40:fc:ca: ea:3c:69:33:ea:b8:2e:4c:9e:67:0a:0a:f0:2d:07: 40:37:c5:17:83:18:f5:ef:a2:95:fd:d8:59:61:5e: 03:ff:2a:eb:85:f8:55:ba:ab:a7:5b:a5:cb:4f:e4: d0:9d:a7:2e:9c:9a:14:43:39:88:bb:bb:a4:49:5a: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4F:25:97:98:C7:23:3D:FF:B4:17:89:ED:17:21:31:37:E3:E0:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee700d9-7b01-4fc8-8073-984647ef7fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.217.16.0/21 Signature Algorithm: sha256WithRSAEncryption d5:71:a3:af:48:38:2d:a8:19:25:43:90:7b:98:4e:d0:69:e4: f1:87:5f:ef:be:40:2a:88:00:ec:a9:8c:9b:2d:39:c4:fe:aa: 45:df:27:c3:25:ab:cd:19:27:de:b8:86:65:e4:ed:c9:ea:ee: 4e:fd:65:e1:0c:bd:16:c0:03:bd:28:94:00:b6:fe:6f:50:a4: d1:6a:20:7a:3e:44:28:45:6c:33:ab:9d:53:7a:fe:35:1b:39: 8d:b4:35:76:00:02:d4:d5:92:40:ee:9d:08:fb:ed:33:0f:24: ba:3d:ca:84:21:04:43:7b:b6:96:d2:72:8a:d6:0c:bd:3d:aa: c6:58:83:5d:a5:2e:2f:3b:ef:f7:e4:07:d2:89:14:3f:61:f4: 27:7a:cc:7a:f3:7a:47:69:9d:fd:0c:6f:2b:d3:74:a4:10:53: d3:be:f7:58:8f:65:2e:4d:c1:a5:4b:89:db:7d:ed:ee:c5:c0: 1b:d9:ba:aa:22:05:f0:4e:cc:02:12:cc:84:5e:45:b2:17:8f: 32:9b:9a:39:1c:d7:6d:48:66:db:af:0c:97:b4:35:ea:54:a7: 45:fd:da:8f:1c:25:45:0f:0b:f6:0c:a6:f2:85:ba:b8:86:7e: 22:67:d8:a8:18:be:d3:b8:06:65:26:5a:0a:08:c8:54:b3:25: fe:73:fc:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV/Gm80D3317267z0dZC3eqjqY0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAxMDM5WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjc2ZGYyOTllOGE1ZWZmYTA3NjE3Mzg5YzNkNWI2NGY4 YzNhNzA1ZTAyZGY1ZDgzYzM4N2E2OTEyYWRkZTIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTeJopQ0EKjrQwA7XmewuDPeZVENZqmO16FkvGwjAFz1u9 FwwPDA4i5vwTv5GplkRr9ANYWQg6Q8s9tnCN/tlsbjkaidPr7CZpAuGdixDHmtoD iSn4x3WA0Abm7/dGHfv2jt8RENnT1qBjpPdLMWq8rRjYObPkHG3d67xRFMuyuPpr t3M1QSZXAG3IRs75b9RqxKxmo9JI2TTZxBdHnhl6aPAKywavi++F73oWX2WVocVX HTla1ansEUo8tLvq8UD8yuo8aTPquC5MnmcKCvAtB0A3xReDGPXvopX92FlhXgP/ KuuF+FW6q6dbpctP5NCdpy6cmhRDOYi7u6RJWqoPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnk8ll5jHIz3/tBeJ7RchMTfj4JAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlZTcwMGQ5LTdiMDEtNGZjOC04MDczLTk4NDY0N2VmN2ZlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANK2RAwDQYJKoZIhvcNAQELBQADggEBANVxo69IOC2oGSVDkHuYTtBp5PGH X+++QCqIAOypjJstOcT+qkXfJ8Mlq80ZJ964hmXk7cnq7k79ZeEMvRbAA70olAC2 /m9QpNFqIHo+RChFbDOrnVN6/jUbOY20NXYAAtTVkkDunQj77TMPJLo9yoQhBEN7 tpbScorWDL09qsZYg12lLi877/fkB9KJFD9h9Cd6zHrzekdpnf0MbyvTdKQQU9O+ 91iPZS5NwaVLidt97e7FwBvZuqoiBfBOzAISzIReRbIXjzKbmjkc121IZtuvDJe0 NepUp0X92o8cJUUPC/YMpvKFuriGfiJn2KgYvtO4BmUmWgoIyFSzJf5z/J4= -----END CERTIFICATE-----Generated at Fri Oct 30 23:13:36 2026 by rpki-client