$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa File: 24d921c1-9e96-4ec0-8d95-a45b8c083105.roa (raw, json) Hash identifier: Xv3YFSfftmdKqKJEhnXy3sIYu/Q+mEnJpOO3uzX1rTU= Subject key identifier: 62:54:1A:1C:E5:BF:5B:1C:1B:4D:E4:0B:75:70:4D:47:0B:17:99:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 659C0E70230E154DA46FF0069C756EB9DB0BD046 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa Signing time: Thu 22 Oct 2026 02:20:06 +0000 ROA not before: Thu 22 Oct 2026 02:20:06 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 168.242.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9c:0e:70:23:0e:15:4d:a4:6f:f0:06:9c:75:6e:b9:db:0b:d0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:20:06 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=ccabd70f4a383653cc09e97cd29f91059d6a7c7b15d8a8717783d13f3177e69d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:5f:0f:1e:e4:5d:3d:e0:92:32:2a:29:4d: 79:4e:ba:98:06:49:8f:9a:ba:cf:82:60:30:f9:f9: 89:e5:c3:cf:a2:e2:b6:4e:57:ff:05:18:d8:41:c9: 43:c0:af:e2:93:de:60:0d:5f:50:dd:23:46:16:dd: 6e:7a:6c:aa:9e:84:92:0b:e0:a1:e4:5c:58:8f:26: a3:24:62:dd:93:e2:5b:cd:f6:24:49:4b:bf:c2:30: 97:d5:d6:10:05:12:73:6d:fa:df:11:4b:9e:9e:d7: 7b:94:24:29:9e:ae:ab:07:20:2b:b7:f6:ea:f3:d8: 97:0e:30:ec:54:f7:da:02:6e:bf:17:07:22:ea:f3: af:fe:bf:a6:58:a6:9f:c9:21:19:26:70:30:c1:d8: 89:45:55:15:06:cc:34:d8:c9:82:c8:71:46:3b:4a: 27:0b:05:1b:11:e3:ff:6b:04:36:8c:71:0d:4d:6e: 15:c2:45:63:68:95:a7:15:ef:d3:69:2d:9f:79:ee: 88:b5:3c:66:88:87:50:9c:67:50:01:f0:b5:df:03: 38:19:f0:cd:10:ec:24:e0:2a:66:27:37:4d:2b:24: 5d:6c:51:ce:36:1a:13:0b:b7:2f:05:9b:99:ed:ca: b6:84:db:9c:f7:2a:a8:68:8c:2b:8f:4f:c1:a5:80: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:54:1A:1C:E5:BF:5B:1C:1B:4D:E4:0B:75:70:4D:47:0B:17:99:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:e7:05:19:60:5a:cb:00:bb:42:5b:c4:c7:3b:ec:00:98:bd: ce:3d:40:15:88:16:cc:db:b4:fe:9d:dc:9e:0c:ad:4d:f6:83: 37:07:e3:c2:0f:4b:80:f5:71:90:28:87:dc:c7:b7:9d:0b:f0: 07:55:19:5b:fd:c1:ac:0a:3d:ad:db:10:29:8f:55:3c:51:20: f6:cd:49:b0:1f:f8:ce:37:af:f0:be:0c:b9:0a:4e:8b:e4:7c: 45:5b:45:cb:15:81:0d:40:da:bb:30:8b:02:86:a4:e3:2a:8c: 1c:ec:c9:bf:12:37:8b:3b:0d:24:26:c6:bb:0f:c3:de:55:81: df:8a:04:7a:f0:fd:e4:6e:d6:36:f0:ee:55:4d:52:6c:eb:30: 10:6d:da:6c:23:81:c4:6a:b1:e6:b6:27:f4:cf:40:cd:b4:25: e8:eb:ef:9c:b9:42:79:19:48:a1:14:d3:cd:cf:71:03:3b:2a: f0:39:f1:c9:61:72:aa:92:63:ad:b1:a7:d8:99:bf:81:f0:91: 6a:80:17:ac:88:ab:60:5f:80:45:f5:3d:80:0c:e7:53:4f:30: 2f:54:af:e6:f2:f6:95:5f:a6:a5:0b:9a:5b:b6:b6:02:d8:7e: 52:47:0f:8e:ca:da:f3:0c:53:c4:1d:f3:c2:f9:a7:3c:65:05: 9a:ab:dc:98 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZZwOcCMOFU2kb/AGnHVuudsL0EYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIyMDA2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2FiZDcwZjRhMzgzNjUzY2MwOWU5N2NkMjlmOTEwNTlk NmE3YzdiMTVkOGE4NzE3NzgzZDEzZjMxNzdlNjlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjAl8PHuRdPeCSMiopTXlOupgGSY+aus+CYDD5+Ynlw8+i 4rZOV/8FGNhByUPAr+KT3mANX1DdI0YW3W56bKqehJIL4KHkXFiPJqMkYt2T4lvN 9iRJS7/CMJfV1hAFEnNt+t8RS56e13uUJCmerqsHICu39urz2JcOMOxU99oCbr8X ByLq86/+v6ZYpp/JIRkmcDDB2IlFVRUGzDTYyYLIcUY7SicLBRsR4/9rBDaMcQ1N bhXCRWNolacV79NpLZ957oi1PGaIh1CcZ1AB8LXfAzgZ8M0Q7CTgKmYnN00rJF1s Uc42GhMLty8Fm5ntyraE25z3KqhojCuPT8GlgB+ZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYlQaHOW/WxwbTeQLdXBNRwsXmRYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0ZDkyMWMxLTllOTYtNGVjMC04ZDk1LWE0NWI4YzA4MzEwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCo8jANBgkqhkiG9w0BAQsFAAOCAQEAb+cFGWBaywC7QlvExzvsAJi9zj1A FYgWzNu0/p3cngytTfaDNwfjwg9LgPVxkCiH3Me3nQvwB1UZW/3BrAo9rdsQKY9V PFEg9s1JsB/4zjev8L4MuQpOi+R8RVtFyxWBDUDauzCLAoak4yqMHOzJvxI3izsN JCbGuw/D3lWB34oEevD95G7WNvDuVU1SbOswEG3abCOBxGqx5rYn9M9AzbQl6Ovv nLlCeRlIoRTTzc9xAzsq8DnxyWFyqpJjrbGn2Jm/gfCRaoAXrIirYF+ARfU9gAzn U08wL1Sv5vL2lV+mpQuaW7a2Ath+UkcPjsra8wxTxB3zwvmnPGUFmqvcmA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:49 2026 by rpki-client