$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23698cc0-0544-464f-bf24-b043449a56bb.roa File: 23698cc0-0544-464f-bf24-b043449a56bb.roa (raw, json) Hash identifier: FeTyeevgU+HkexbYdFGU5+1cPQ9Ex9tAB5YZVGXAULo= Subject key identifier: 8A:25:12:E3:19:C4:30:8A:20:28:00:C8:72:A5:2D:D2:A6:07:6D:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FBCE6C95E6E42660458CEC83BBFC947B680774A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23698cc0-0544-464f-bf24-b043449a56bb.roa Signing time: Mon 05 Oct 2026 00:31:37 +0000 ROA not before: Mon 05 Oct 2026 00:31:37 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.74.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bc:e6:c9:5e:6e:42:66:04:58:ce:c8:3b:bf:c9:47:b6:80:77:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:31:37 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=b736ef0a61587d6c88eb0d6fcb98dcaf708915046fc34782e8e68eb48dba1a80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:63:e2:67:4a:46:27:e3:8e:78:f9:fe:8b: c0:8f:76:3f:ed:4b:24:7c:ea:a2:f4:1e:03:55:4a: e6:8b:c4:2d:9a:e3:06:1c:3c:a7:e4:04:e3:5d:52: 23:1d:60:61:1a:26:9b:29:8b:22:25:cd:e3:6d:9a: a6:85:f7:3d:a1:71:07:e1:b1:26:f1:dc:bc:2b:0a: 6f:f1:1a:a3:e1:93:42:3d:01:63:99:6f:0c:cd:dd: 8f:59:67:39:a3:dd:ca:bb:de:46:3b:d6:b4:2c:22: 75:c4:c3:24:4a:df:f0:81:60:f4:7c:fa:5c:04:6c: d3:78:0e:84:64:b6:1b:e7:8e:ea:82:39:ad:34:c2: 16:85:a9:0c:39:77:ba:2a:62:e5:25:b7:b5:1d:5f: 8e:62:30:df:63:c2:76:67:ab:04:ca:26:68:bb:5c: 7c:0c:9e:50:3f:6a:5e:fc:7d:5b:7c:6f:2f:0e:db: ef:15:42:3c:89:ad:c8:62:61:2c:b4:fe:8c:7f:ca: b2:71:eb:bd:02:22:50:ce:a4:9b:fc:ce:91:40:69: c9:cd:35:d7:2e:46:5d:c0:e3:be:22:5e:f7:c6:d7: 41:2f:cb:e0:bb:c6:6e:9b:60:3a:c8:b3:8f:25:66: 1e:cc:90:7d:ba:8b:b6:a0:00:b0:aa:a4:60:65:ab: a9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:12:E3:19:C4:30:8A:20:28:00:C8:72:A5:2D:D2:A6:07:6D:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23698cc0-0544-464f-bf24-b043449a56bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.74.0.0/16 Signature Algorithm: sha256WithRSAEncryption cd:c9:c4:c6:88:7d:94:12:b4:af:6d:f8:cb:34:71:a2:ff:13: 76:5c:57:ee:ec:1b:49:d8:ee:4e:ca:3a:df:75:47:3b:3f:96: b0:44:22:bc:9b:d2:7d:73:11:03:0d:84:c8:41:02:25:5b:85: 90:cb:70:04:53:f8:9a:06:43:2a:b6:24:bd:c4:b3:89:e1:ac: 1a:80:fe:b5:ce:5e:5b:7f:05:8f:49:ac:61:d3:ae:b3:9e:a0: 59:ba:51:4e:38:67:db:b5:d7:94:32:6b:d6:47:64:23:ae:bf: 13:25:89:97:48:a9:aa:56:69:f1:78:ae:fb:d4:da:08:56:3c: 4b:c1:76:ee:8f:b8:6f:78:02:a0:f2:d6:4c:5b:47:e2:bf:87: 17:15:49:9a:59:dc:29:0a:80:fe:07:a6:f5:14:e3:45:2c:72: cb:a4:d8:45:ca:32:4b:0c:5c:69:62:37:37:e0:bd:1d:eb:c6: f6:0c:d9:47:09:2f:92:f8:21:09:5a:e0:8c:c5:ca:59:27:b1: 0c:79:b6:1b:6a:04:d4:a9:05:01:fe:a3:e0:72:83:d5:10:62: 0b:cf:d3:dd:4e:44:16:dc:6d:70:b7:e8:3a:63:d1:4d:1b:4c: ac:b0:62:a9:4d:d5:cd:9e:49:f2:ac:64:a8:d3:11:1e:08:b8: c4:20:62:ac -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUL7zmyV5uQmYEWM7IO7/JR7aAd0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAzMTM3WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzM2ZWYwYTYxNTg3ZDZjODhlYjBkNmZjYjk4ZGNhZjcw ODkxNTA0NmZjMzQ3ODJlOGU2OGViNDhkYmExYTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuDmPiZ0pGJ+OOePn+i8CPdj/tSyR86qL0HgNVSuaLxC2a 4wYcPKfkBONdUiMdYGEaJpspiyIlzeNtmqaF9z2hcQfhsSbx3LwrCm/xGqPhk0I9 AWOZbwzN3Y9ZZzmj3cq73kY71rQsInXEwyRK3/CBYPR8+lwEbNN4DoRkthvnjuqC Oa00whaFqQw5d7oqYuUlt7UdX45iMN9jwnZnqwTKJmi7XHwMnlA/al78fVt8by8O 2+8VQjyJrchiYSy0/ox/yrJx670CIlDOpJv8zpFAacnNNdcuRl3A474iXvfG10Ev y+C7xm6bYDrIs48lZh7MkH26i7agALCqpGBlq6nhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiiUS4xnEMIogKADIcqUt0qYHbeAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNjk4Y2MwLTA1NDQtNDY0Zi1iZjI0LWIwNDM0NDlhNTZiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQSjANBgkqhkiG9w0BAQsFAAOCAQEAzcnExoh9lBK0r234yzRxov8TdlxX 7uwbSdjuTso633VHOz+WsEQivJvSfXMRAw2EyEECJVuFkMtwBFP4mgZDKrYkvcSz ieGsGoD+tc5eW38Fj0msYdOus56gWbpRTjhn27XXlDJr1kdkI66/EyWJl0ipqlZp 8Xiu+9TaCFY8S8F27o+4b3gCoPLWTFtH4r+HFxVJmlncKQqA/gem9RTjRSxyy6TY RcoySwxcaWI3N+C9HevG9gzZRwkvkvghCVrgjMXKWSexDHm2G2oE1KkFAf6j4HKD 1RBiC8/T3U5EFtxtcLfoOmPRTRtMrLBiqU3VzZ5J8qxkqNMRHgi4xCBirA== -----END CERTIFICATE-----Generated at Sat Oct 31 08:15:36 2026 by rpki-client