$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25a2a1f5-39ea-4ba2-baae-12dbee75f582.roa File: 25a2a1f5-39ea-4ba2-baae-12dbee75f582.roa (raw, json) Hash identifier: owI7i3LNVGyEn11AyJiDEZIsGQLUAoNHSDv+lMAzqcM= Subject key identifier: 7B:05:7C:BF:39:02:3A:56:22:BF:65:60:1C:9D:95:5F:8F:5D:6B:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E78E3FE940A5AB96322BC0029364851C7E3B624 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25a2a1f5-39ea-4ba2-baae-12dbee75f582.roa Signing time: Sat 24 Oct 2026 00:03:35 +0000 ROA not before: Sat 24 Oct 2026 00:03:35 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:78:e3:fe:94:0a:5a:b9:63:22:bc:00:29:36:48:51:c7:e3:b6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:03:35 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=338dcc996b1951bb6e7f31b2c16f797d75ea8f7fdaa058976930f9e4353dadd0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:87:05:65:a0:63:59:2f:3f:45:03:3f:a9: 1c:63:2e:3b:9a:d2:25:81:54:e0:0f:1c:4b:9e:33: 3a:e3:d3:a8:2e:5b:6d:e1:75:12:88:53:c4:a6:91: bf:fa:c2:2d:0d:a0:d0:58:ef:0f:b8:21:70:d6:30: e7:f7:18:eb:aa:dd:d0:cf:ca:76:1e:2d:b8:f5:07: 0d:5e:ba:f6:cc:96:d0:0e:4e:33:1f:3e:2a:67:86: 17:0d:80:af:1b:fa:90:6c:88:a1:54:95:58:56:f5: 9c:5f:94:31:27:13:02:40:cf:e7:1e:d7:eb:68:bd: fe:c5:e9:f9:7e:f1:2a:a8:9c:1f:cc:f4:61:7b:9e: 75:69:6e:ac:f6:e3:27:fc:ab:14:f8:e9:bf:19:4c: 56:50:2d:92:f8:72:c6:ef:bd:db:0a:5a:25:b6:5f: ba:d8:c6:4f:ea:e9:9c:ef:e1:ed:72:73:5b:e7:d3: b9:ab:a4:c4:7d:0a:22:f2:13:ca:ea:6b:11:57:e1: 5f:53:d7:9a:ef:10:b8:ee:11:bb:b6:62:16:f3:fb: 46:34:0b:4e:d4:78:67:39:06:97:5e:1b:22:d5:94: 20:9b:f2:42:51:b5:d8:0b:68:24:f4:7f:f8:b9:6c: 80:5d:26:46:b3:92:ed:04:6b:01:be:ff:9b:ae:8f: c9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:05:7C:BF:39:02:3A:56:22:BF:65:60:1C:9D:95:5F:8F:5D:6B:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25a2a1f5-39ea-4ba2-baae-12dbee75f582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.193.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:c7:db:7f:c6:74:0b:09:66:e7:cf:15:8d:06:9e:0c:9e:6f: 4d:7c:7b:37:74:12:7c:42:29:13:1d:ae:34:2f:a8:bf:63:48: 79:48:77:74:f7:bf:80:89:9b:25:a1:c0:4c:70:b1:e9:89:e8: 73:d6:02:1d:ec:0b:dd:54:bc:24:4c:87:eb:0b:73:c8:e5:5b: 5f:9d:a7:26:8a:b5:7c:36:40:ad:e6:b2:59:b2:1d:9b:d0:19: 68:60:fb:da:e3:9e:4e:9f:0f:47:92:41:2d:b1:16:3e:6b:ac: e1:27:24:e6:66:b2:8b:4b:dc:29:6f:84:73:7e:ce:b9:13:1c: df:27:8b:f2:89:e5:da:12:7d:45:e3:b2:06:66:33:0b:c2:83: 5f:2b:3a:87:2a:c3:09:54:93:ba:13:bb:4b:22:13:c6:67:1e: 8f:bc:36:4c:70:67:63:13:59:02:9e:02:09:81:3c:50:f4:40: 85:3b:d0:df:ab:7d:90:6d:8b:17:3e:e4:f0:e8:79:4e:f4:04: e4:ac:d7:db:ba:b9:14:89:9d:2e:da:db:17:97:bd:a4:13:35: 6a:09:15:56:58:58:3b:8c:8d:4e:94:f5:dc:62:67:ff:3d:fd: ea:f6:03:28:94:35:03:1a:99:32:41:81:a2:d0:a3:39:85:90: 09:47:d7:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPnjj/pQKWrljIrwAKTZIUcfjtiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAwMzM1WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzhkY2M5OTZiMTk1MWJiNmU3ZjMxYjJjMTZmNzk3ZDc1 ZWE4ZjdmZGFhMDU4OTc2OTMwZjllNDM1M2RhZGQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGP4cFZaBjWS8/RQM/qRxjLjua0iWBVOAPHEueMzrj06gu W23hdRKIU8Smkb/6wi0NoNBY7w+4IXDWMOf3GOuq3dDPynYeLbj1Bw1euvbMltAO TjMfPipnhhcNgK8b+pBsiKFUlVhW9ZxflDEnEwJAz+ce1+tovf7F6fl+8SqonB/M 9GF7nnVpbqz24yf8qxT46b8ZTFZQLZL4csbvvdsKWiW2X7rYxk/q6Zzv4e1yc1vn 07mrpMR9CiLyE8rqaxFX4V9T15rvELjuEbu2Yhbz+0Y0C07UeGc5BpdeGyLVlCCb 8kJRtdgLaCT0f/i5bIBdJkazku0EawG+/5uuj8lzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUewV8vzkCOlYiv2VgHJ2VX49da7AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1YTJhMWY1LTM5ZWEtNGJhMi1iYWFlLTEyZGJlZTc1ZjU4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABG4MEwDQYJKoZIhvcNAQELBQADggEBAB7H23/GdAsJZufPFY0Gngyeb018 ezd0EnxCKRMdrjQvqL9jSHlId3T3v4CJmyWhwExwsemJ6HPWAh3sC91UvCRMh+sL c8jlW1+dpyaKtXw2QK3mslmyHZvQGWhg+9rjnk6fD0eSQS2xFj5rrOEnJOZmsotL 3ClvhHN+zrkTHN8ni/KJ5doSfUXjsgZmMwvCg18rOocqwwlUk7oTu0siE8ZnHo+8 NkxwZ2MTWQKeAgmBPFD0QIU70N+rfZBtixc+5PDoeU70BOSs19u6uRSJnS7a2xeX vaQTNWoJFVZYWDuMjU6U9dxiZ/89/er2AyiUNQMamTJBgaLQozmFkAlH14I= -----END CERTIFICATE-----Generated at Sun Nov 1 13:03:25 2026 by rpki-client