$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2468224a-586c-4b15-b2f7-6aab1f7b768d.roa File: 2468224a-586c-4b15-b2f7-6aab1f7b768d.roa (raw, json) Hash identifier: 1YUMsyh+HSuGXrGFoCw/bNhV0HaXe2hae1nbw8w1Gno= Subject key identifier: 30:D6:5E:4A:D5:EF:44:E6:57:49:CE:D0:56:CB:01:FC:E7:B1:51:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 442FFFB9C130B904D07A81F6D127E07B41DD037F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2468224a-586c-4b15-b2f7-6aab1f7b768d.roa Signing time: Mon 26 Oct 2026 00:41:32 +0000 ROA not before: Mon 26 Oct 2026 00:41:32 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 198.74.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2f:ff:b9:c1:30:b9:04:d0:7a:81:f6:d1:27:e0:7b:41:dd:03:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:41:32 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ff8c334f6d6e4da8f65bc8190d0ad70241f10699a141df5e95e0ab41d620d981, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:5d:6c:fa:ec:d5:3f:59:80:b3:88:b4:1f: f8:94:a5:a5:37:25:6c:07:97:d9:fa:77:bc:68:76: de:d3:dd:46:5f:b9:20:77:6c:6e:68:f9:6f:69:08: 0b:ff:67:81:6e:4f:0c:0e:50:8a:a1:31:ee:29:f9: d3:45:b2:05:e4:49:36:5a:f8:77:43:97:b9:d5:bf: db:7a:bd:cc:db:59:df:1e:e1:44:14:61:af:c9:71: 8f:c2:7a:18:95:fd:ce:e3:e1:d9:04:d1:66:dd:58: 05:73:25:5e:e3:6c:8d:15:3d:c4:f8:b1:d8:37:02: 82:d2:56:d7:49:b3:53:62:12:0e:6f:43:d4:ac:50: ed:ef:75:3c:9f:12:a8:d9:4a:f0:81:61:fe:1a:cb: df:a6:6f:54:af:0b:f1:3f:b4:ca:08:3f:74:b1:0a: cd:1f:9a:7d:96:94:64:fa:d3:7a:56:df:17:17:a5: d2:96:b4:0c:ea:1a:40:cb:32:ef:18:75:1e:4a:c3: b6:58:10:b5:27:d9:eb:ac:43:63:30:1d:e9:99:19: fe:c2:90:92:23:35:f5:01:ef:45:b2:e7:94:4d:dd: 2d:af:d5:82:ae:d9:c8:c5:95:47:c1:12:2a:1a:b4: d4:38:c8:49:1e:d8:25:2d:ff:cf:bd:00:23:a0:2f: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D6:5E:4A:D5:EF:44:E6:57:49:CE:D0:56:CB:01:FC:E7:B1:51:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2468224a-586c-4b15-b2f7-6aab1f7b768d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.74.96.0/19 Signature Algorithm: sha256WithRSAEncryption d8:a4:f4:08:c6:9c:17:8c:43:9f:3c:c7:cb:79:1b:e5:37:e9: f0:ed:d3:91:ac:fc:51:3d:3a:02:2f:ae:31:79:6e:fb:98:b3: 73:3b:a8:4f:a2:08:e9:05:e2:1f:01:b4:ea:d3:41:de:83:ed: f0:73:66:75:27:15:bd:aa:e2:86:06:d9:53:cd:57:f8:69:a9: e0:dd:fc:91:52:fb:6c:cf:ee:94:c3:da:f9:05:ac:14:d6:01: a3:cc:89:33:6b:45:ab:a0:97:17:99:5c:cc:d5:69:d1:58:df: 5d:6c:df:13:d8:ee:8c:9f:79:0e:95:76:1d:f2:5a:61:c1:69: 61:ed:57:c7:83:33:37:d6:57:67:b1:af:26:16:5d:20:1e:89: f8:d5:7a:55:6a:96:b3:08:58:d0:19:94:bd:bc:72:f8:69:79: ce:cd:1e:5b:1a:fd:56:11:19:ca:66:8d:dd:9e:5d:d9:dc:3d: 6a:d3:b8:a2:63:34:44:7d:7b:15:27:1b:de:7a:59:49:f9:4e: fe:78:b1:2c:6c:0e:25:3e:1a:25:6a:3b:b5:68:8a:9b:5c:ac: 34:90:2c:af:9a:f1:e7:fb:68:a5:ef:67:51:7a:13:a9:9f:d1: d6:08:12:bf:5a:c8:f0:15:1b:19:4c:6f:6e:7f:91:38:4b:d6: 10:73:40:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURC//ucEwuQTQeoH20Sfge0HdA38wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDA0MTMyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjhjMzM0ZjZkNmU0ZGE4ZjY1YmM4MTkwZDBhZDcwMjQx ZjEwNjk5YTE0MWRmNWU5NWUwYWI0MWQ2MjBkOTgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLpF1s+uzVP1mAs4i0H/iUpaU3JWwHl9n6d7xodt7T3UZf uSB3bG5o+W9pCAv/Z4FuTwwOUIqhMe4p+dNFsgXkSTZa+HdDl7nVv9t6vczbWd8e 4UQUYa/JcY/CehiV/c7j4dkE0WbdWAVzJV7jbI0VPcT4sdg3AoLSVtdJs1NiEg5v Q9SsUO3vdTyfEqjZSvCBYf4ay9+mb1SvC/E/tMoIP3SxCs0fmn2WlGT603pW3xcX pdKWtAzqGkDLMu8YdR5Kw7ZYELUn2eusQ2MwHemZGf7CkJIjNfUB70Wy55RN3S2v 1YKu2cjFlUfBEioatNQ4yEke2CUt/8+9ACOgL8hDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMNZeStXvROZXSc7QVssB/OexUZ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0NjgyMjRhLTU4NmMtNGIxNS1iMmY3LTZhYWIxZjdiNzY4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGSmAwDQYJKoZIhvcNAQELBQADggEBANik9AjGnBeMQ588x8t5G+U36fDt 05Gs/FE9OgIvrjF5bvuYs3M7qE+iCOkF4h8BtOrTQd6D7fBzZnUnFb2q4oYG2VPN V/hpqeDd/JFS+2zP7pTD2vkFrBTWAaPMiTNrRauglxeZXMzVadFY311s3xPY7oyf eQ6Vdh3yWmHBaWHtV8eDMzfWV2exryYWXSAeifjVelVqlrMIWNAZlL28cvhpec7N Hlsa/VYRGcpmjd2eXdncPWrTuKJjNER9exUnG956WUn5Tv54sSxsDiU+GiVqO7Vo iptcrDSQLK+a8ef7aKXvZ1F6E6mf0dYIEr9ayPAVGxlMb25/kThL1hBzQEE= -----END CERTIFICATE-----Generated at Tue Nov 3 22:38:05 2026 by rpki-client