$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f411c68-ebfc-4434-921b-0dd430a31cfb.roa File: 1f411c68-ebfc-4434-921b-0dd430a31cfb.roa (raw, json) Hash identifier: BApImUnIRtCxXMK8FaHu+gfSbxauNughw6XNqUkSLX0= Subject key identifier: 88:C9:FA:96:92:51:DB:F7:DA:6A:FD:4B:1C:6D:89:8D:10:6F:47:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3635DD4176D7C5B4E5B60248D3410AFFECFDF69B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f411c68-ebfc-4434-921b-0dd430a31cfb.roa Signing time: Thu 22 Oct 2026 01:50:07 +0000 ROA not before: Thu 22 Oct 2026 01:50:07 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 159.174.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:35:dd:41:76:d7:c5:b4:e5:b6:02:48:d3:41:0a:ff:ec:fd:f6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:50:07 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=d22755610bea902e6006cfe51aad0d70cc6cb873d5a0bd8da25a0a6e5ffc39b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:eb:d0:c0:0d:bb:58:a7:9f:9d:17:04:74: 0a:70:fb:55:f5:26:a3:00:7c:3e:0d:31:21:a1:85: 9d:4b:cb:75:a1:d6:b0:1a:ab:c6:39:6d:d1:36:ab: 05:b0:4d:6d:df:e6:f7:1b:63:62:a9:39:bd:df:55: c5:88:03:d6:c7:40:62:80:3a:95:9b:c3:41:b0:8f: 24:c9:e0:6c:70:35:c3:11:b7:89:bb:2f:85:41:cb: 17:f3:c4:25:52:2e:f6:cc:67:6e:52:dd:21:bf:29: 37:c1:94:23:73:4d:68:d8:a1:f5:32:7b:5f:7a:31: 98:80:e3:e4:35:9d:7d:45:78:07:54:23:2b:4f:5b: 98:b8:3b:1b:26:af:9b:31:9b:ef:30:bf:4a:ae:28: 5b:c5:8a:c9:bc:8a:30:3d:b0:6f:03:0e:96:74:cb: 25:96:ca:f8:6a:6c:49:46:6a:83:a3:7a:95:4a:3e: f8:c0:90:aa:8e:b9:c0:b4:ed:48:2b:31:3f:94:4a: ef:2a:ba:b7:9d:28:d2:bf:3f:fb:2a:cd:63:ff:06: 90:a6:ce:b4:bf:86:4f:32:fd:0a:84:72:4a:98:ac: aa:30:59:45:32:8e:2b:d4:d3:5a:17:d9:ba:7a:01: 06:29:db:90:43:a1:d8:cb:e7:17:5d:84:95:53:41: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:FA:96:92:51:DB:F7:DA:6A:FD:4B:1C:6D:89:8D:10:6F:47:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f411c68-ebfc-4434-921b-0dd430a31cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.174.0.0/16 Signature Algorithm: sha256WithRSAEncryption 91:d1:18:35:1c:ee:05:b4:08:cd:ce:ac:a7:d3:0e:2d:9d:ec: dd:94:a8:77:91:1e:a7:a4:d4:e3:ef:a1:07:b5:74:b3:3f:0e: da:97:33:6d:a3:38:ea:43:6d:4f:88:e9:7f:42:a2:53:81:54: 88:54:0c:f1:42:00:af:ed:dc:52:d8:33:ac:fa:28:c5:c3:76: 3b:70:23:c8:7b:43:ee:71:5d:d4:97:56:6c:99:f2:fa:85:b9: 45:38:f1:3a:b8:c8:8e:be:81:35:ea:c9:7d:5b:55:5b:07:76: f6:ec:5d:d2:12:10:4f:fe:b1:c2:e0:23:ef:00:8f:48:b7:18: bd:fa:78:e2:b4:c6:30:a1:3e:27:b2:d2:df:57:29:b0:ab:fb: ff:ac:33:66:6a:a8:3e:f7:98:ed:fd:e9:e9:7a:a9:3c:42:c8: da:26:5e:a9:b6:3e:30:92:ff:20:32:6d:91:e4:a4:c9:83:ab: d8:ef:cc:ed:90:09:a5:69:a5:64:82:c7:62:59:dd:73:25:40: df:66:b1:7e:c4:96:26:ac:e9:8a:91:a9:2c:3d:9e:78:f3:99: 0a:74:f9:4b:ec:e4:35:e7:09:35:39:1f:53:2b:65:5a:73:f0: ba:2f:d6:bb:71:e8:9e:16:d4:52:c3:7b:73:96:3f:30:b0:35: 20:90:83:1c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNjXdQXbXxbTltgJI00EK/+z99pswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDE1MDA3WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjI3NTU2MTBiZWE5MDJlNjAwNmNmZTUxYWFkMGQ3MGNj NmNiODczZDVhMGJkOGRhMjVhMGE2ZTVmZmMzOWI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwYevQwA27WKefnRcEdApw+1X1JqMAfD4NMSGhhZ1Ly3Wh 1rAaq8Y5bdE2qwWwTW3f5vcbY2KpOb3fVcWIA9bHQGKAOpWbw0GwjyTJ4GxwNcMR t4m7L4VByxfzxCVSLvbMZ25S3SG/KTfBlCNzTWjYofUye196MZiA4+Q1nX1FeAdU IytPW5i4Oxsmr5sxm+8wv0quKFvFism8ijA9sG8DDpZ0yyWWyvhqbElGaoOjepVK PvjAkKqOucC07UgrMT+USu8quredKNK/P/sqzWP/BpCmzrS/hk8y/QqEckqYrKow WUUyjivU01oX2bp6AQYp25BDodjL5xddhJVTQSDbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiMn6lpJR2/faav1LHG2JjRBvR0gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmNDExYzY4LWViZmMtNDQzNC05MjFiLTBkZDQzMGEzMWNmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCfrjANBgkqhkiG9w0BAQsFAAOCAQEAkdEYNRzuBbQIzc6sp9MOLZ3s3ZSo d5Eep6TU4++hB7V0sz8O2pczbaM46kNtT4jpf0KiU4FUiFQM8UIAr+3cUtgzrPoo xcN2O3AjyHtD7nFd1JdWbJny+oW5RTjxOrjIjr6BNerJfVtVWwd29uxd0hIQT/6x wuAj7wCPSLcYvfp44rTGMKE+J7LS31cpsKv7/6wzZmqoPveY7f3p6XqpPELI2iZe qbY+MJL/IDJtkeSkyYOr2O/M7ZAJpWmlZILHYlndcyVA32axfsSWJqzpipGpLD2e ePOZCnT5S+zkNecJNTkfUytlWnPwui/Wu3HonhbUUsN7c5Y/MLA1IJCDHA== -----END CERTIFICATE-----Generated at Wed Nov 4 01:13:35 2026 by rpki-client