$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b35d10-4128-4c80-92a2-801f07198be4.roa File: 22b35d10-4128-4c80-92a2-801f07198be4.roa (raw, json) Hash identifier: VlowOhfMpkaJEnnu0CuG0Go2DitPadAlULOecng9DS4= Subject key identifier: 48:81:D1:9A:0D:69:E1:B3:7B:9A:EB:01:19:76:E4:E4:12:6A:D1:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C1B3CCF19542DD17DAF8E15AE8E1E0DC8957860 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b35d10-4128-4c80-92a2-801f07198be4.roa Signing time: Thu 22 Oct 2026 02:11:08 +0000 ROA not before: Thu 22 Oct 2026 02:11:08 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 1.178.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1b:3c:cf:19:54:2d:d1:7d:af:8e:15:ae:8e:1e:0d:c8:95:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:11:08 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=db955071c7a7ae890a383373ea4b099f980402cd63c3bc75e981c942c8d9e9ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:ca:f9:81:2a:d4:b3:8e:15:ad:05:69:43: 91:fb:a9:0d:d1:03:ab:8a:9c:52:80:f2:53:cc:a6: c1:26:e5:32:a2:0c:bd:43:56:e8:40:6e:15:ae:89: b5:6d:7b:06:29:5e:c3:f4:d0:ac:e9:9d:a4:e2:4a: 17:61:3d:6c:dc:c4:cb:1a:e7:82:fd:93:6a:65:59: 13:57:20:b4:88:6d:93:27:8f:e9:02:f9:91:83:b1: 43:31:e0:65:14:05:ac:61:3c:08:74:b4:6c:2c:d1: 85:44:86:7a:42:5a:e3:56:f3:2f:b4:f5:6c:56:e1: b9:10:62:c4:de:39:76:c3:c3:a7:09:16:ec:13:50: 2e:34:34:39:45:54:16:0a:8d:f6:12:b7:d0:0e:30: b6:88:bd:8a:e4:18:dc:49:27:46:9d:92:57:63:04: b0:b1:20:3b:9f:7e:88:68:bd:5d:91:e2:61:1d:4b: 73:81:88:98:a9:b3:28:d3:17:b5:74:e1:9d:7b:8d: 8d:36:3d:4a:8c:e6:d2:8b:84:23:bd:74:84:d0:b4: 40:b2:32:59:ad:cb:37:17:8d:45:dc:4c:90:67:88: bc:6d:ad:37:df:17:fe:d1:4c:ae:ba:5e:2d:f8:e8: fc:6b:5b:3d:04:2b:ea:ea:f2:3d:fa:9a:ca:91:86: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:81:D1:9A:0D:69:E1:B3:7B:9A:EB:01:19:76:E4:E4:12:6A:D1:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b35d10-4128-4c80-92a2-801f07198be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.8.0/22 Signature Algorithm: sha256WithRSAEncryption c6:d0:95:1a:15:58:e2:58:53:0f:c1:90:e3:f0:a7:0c:fe:cc: 6f:2d:c5:31:9c:65:73:c8:e2:b2:4d:0a:74:46:8f:84:d7:ea: 01:ec:ba:23:13:80:d9:f5:eb:87:a4:83:e8:df:fd:2a:83:97: 43:e7:a2:5a:92:e9:94:bc:a4:9d:5a:32:2b:8c:f5:99:a1:12: ee:1f:35:95:4d:09:50:38:c6:37:00:8e:38:13:6a:a3:54:cc: fc:4a:15:1c:92:4d:9f:fd:19:43:26:ea:56:e2:c9:b7:ac:1a: 5b:c3:40:82:da:18:96:19:c9:32:b2:fa:86:96:a9:47:28:93: 40:b2:60:c7:0d:7a:25:ff:80:d6:5a:0a:0d:6e:cd:05:91:9e: d8:91:fd:3c:6d:91:88:75:f6:fb:ff:5f:6c:ce:25:e4:f2:97: 55:6b:67:dc:bf:90:83:5c:4e:a2:e1:35:02:a6:c4:69:b3:12: a7:31:18:13:f5:c3:11:65:96:c0:f7:86:d9:77:c7:01:ea:f3: a5:b1:71:21:01:45:20:f7:bc:96:e3:6a:b5:37:a4:42:2f:dc: 63:c7:fa:e8:ea:97:2b:f6:1d:7b:a5:34:0e:e9:89:67:ce:6a: 16:5f:d2:6b:9e:d6:c1:7c:c9:7e:68:0e:67:61:70:76:29:c7: 78:b0:78:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPBs8zxlULdF9r44Vro4eDciVeGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIxMTA4WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjk1NTA3MWM3YTdhZTg5MGEzODMzNzNlYTRiMDk5Zjk4 MDQwMmNkNjNjM2JjNzVlOTgxYzk0MmM4ZDllOWFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV1Mr5gSrUs44VrQVpQ5H7qQ3RA6uKnFKA8lPMpsEm5TKi DL1DVuhAbhWuibVtewYpXsP00KzpnaTiShdhPWzcxMsa54L9k2plWRNXILSIbZMn j+kC+ZGDsUMx4GUUBaxhPAh0tGws0YVEhnpCWuNW8y+09WxW4bkQYsTeOXbDw6cJ FuwTUC40NDlFVBYKjfYSt9AOMLaIvYrkGNxJJ0adkldjBLCxIDuffohovV2R4mEd S3OBiJipsyjTF7V04Z17jY02PUqM5tKLhCO9dITQtECyMlmtyzcXjUXcTJBniLxt rTffF/7RTK66Xi346PxrWz0EK+rq8j36msqRhgNrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSIHRmg1p4bN7musBGXbk5BJq0ZAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYjM1ZDEwLTQxMjgtNGM4MC05MmEyLTgwMWYwNzE5OGJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBsggwDQYJKoZIhvcNAQELBQADggEBAMbQlRoVWOJYUw/BkOPwpwz+zG8t xTGcZXPI4rJNCnRGj4TX6gHsuiMTgNn164ekg+jf/SqDl0PnolqS6ZS8pJ1aMiuM 9ZmhEu4fNZVNCVA4xjcAjjgTaqNUzPxKFRySTZ/9GUMm6lbiybesGlvDQILaGJYZ yTKy+oaWqUcok0CyYMcNeiX/gNZaCg1uzQWRntiR/TxtkYh19vv/X2zOJeTyl1Vr Z9y/kINcTqLhNQKmxGmzEqcxGBP1wxFllsD3htl3xwHq86WxcSEBRSD3vJbjarU3 pEIv3GPH+ujqlyv2HXulNA7piWfOahZf0mue1sF8yX5oDmdhcHYpx3iweIw= -----END CERTIFICATE-----Generated at Wed Nov 4 05:43:03 2026 by rpki-client