$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa File: 27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa (raw, json) Hash identifier: p7Sz/eiHfMldzYNiwLfq6cWo5Z+ia0Q9LZF4jCcZXjo= Subject key identifier: 71:76:77:13:A4:B1:39:7F:74:B5:C3:3F:94:AD:F4:AF:60:64:D3:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16CDD80701B417FAE2A55BC52F39338F16E47579 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa Signing time: Tue 06 Oct 2026 01:00:54 +0000 ROA not before: Tue 06 Oct 2026 01:00:54 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 70.240.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cd:d8:07:01:b4:17:fa:e2:a5:5b:c5:2f:39:33:8f:16:e4:75:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 01:00:54 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=35cfee996fa44fbf06e2e9bcc626331c3c81b0c242a4be40fcc82090a0f229a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:58:3b:07:fe:76:bd:79:2e:e0:a5:e3:a6: 71:4f:6e:aa:3c:7e:7f:bf:02:07:ed:5a:ec:49:93: 0a:a9:f5:43:4e:55:ec:32:e2:ab:b3:8c:ef:b6:8e: d3:75:99:60:9c:f4:b8:48:3d:58:83:57:0d:39:90: 0b:9a:54:96:51:b8:26:95:b9:d6:88:95:75:4a:a8: e8:a5:de:22:4d:c4:fb:6c:73:a9:d2:8b:ed:da:14: 0e:21:96:c1:b6:e0:a3:b0:23:40:9b:fc:7d:82:61: 95:67:22:68:bf:3d:b2:0e:56:8d:cf:23:5c:77:ee: c7:f8:6b:15:9c:92:c6:ad:21:7a:64:85:af:bf:04: 9b:3f:83:31:26:cf:17:01:3f:02:25:1e:22:f2:57: 4a:a7:44:f4:54:35:ba:d7:f1:4d:05:cc:94:9d:e7: 35:56:a7:3a:b4:36:2d:b3:f7:7e:d4:70:59:2b:78: 91:d1:41:08:d5:af:39:61:b9:98:25:12:43:6f:e0: c9:49:b1:6c:b4:f3:cb:b2:e3:5c:c0:b1:bc:b0:bc: fa:a6:90:1b:d5:e2:98:26:cd:68:a8:d8:97:4d:9b: 89:74:71:24:36:79:ed:56:c1:27:bd:1b:42:04:3b: fd:9b:16:f0:f6:b4:f0:a8:9f:62:6a:4a:d3:2b:51: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:77:13:A4:B1:39:7F:74:B5:C3:3F:94:AD:F4:AF:60:64:D3:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.240.64.0/18 Signature Algorithm: sha256WithRSAEncryption 1d:cd:90:76:c8:cb:7a:a1:08:6d:80:97:84:a9:95:7f:ac:cd: d5:49:a3:5f:cf:bc:96:b5:48:a6:2d:fd:b7:7c:9b:10:c3:9a: 0d:23:40:64:25:3e:4f:df:2d:e7:54:7d:db:9c:8f:25:c4:00: 0c:94:53:dd:d4:d6:51:43:85:e1:96:f0:15:a2:fd:17:ad:44: 37:85:cd:78:3c:68:b8:3f:9c:21:02:09:f9:47:13:63:c9:db: d4:83:24:58:04:09:c5:04:95:9a:43:50:2e:92:5e:8b:9d:b3: 86:5a:fa:69:cb:87:bb:b8:1f:74:b4:55:fa:c2:c3:1d:1a:4f: e9:01:69:3f:0a:25:61:d3:60:8c:aa:8d:59:dc:6f:ee:54:f6: 40:de:1c:93:ec:6c:52:f1:df:62:1b:83:ed:37:47:30:75:41: d8:c1:9f:3a:7b:a3:0a:5a:f8:07:a4:69:9e:01:74:e5:0e:9b: d0:1c:4e:c6:79:a5:54:10:1e:16:41:d1:db:a8:63:06:47:a7: 67:8b:45:d8:87:94:21:fe:f9:40:42:31:21:40:04:8c:f0:ee: ec:e9:d3:92:3d:a7:7d:dc:4b:e2:2b:07:88:49:d2:43:13:6c: 96:11:cd:54:9e:c9:f3:4c:c8:8d:f9:ff:ba:17:20:46:f3:9d: f6:49:ae:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFs3YBwG0F/ripVvFLzkzjxbkdXkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDEwMDU0WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWNmZWU5OTZmYTQ0ZmJmMDZlMmU5YmNjNjI2MzMxYzNj ODFiMGMyNDJhNGJlNDBmY2M4MjA5MGEwZjIyOWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMSFg7B/52vXku4KXjpnFPbqo8fn+/AgftWuxJkwqp9UNO Vewy4quzjO+2jtN1mWCc9LhIPViDVw05kAuaVJZRuCaVudaIlXVKqOil3iJNxPts c6nSi+3aFA4hlsG24KOwI0Cb/H2CYZVnImi/PbIOVo3PI1x37sf4axWcksatIXpk ha+/BJs/gzEmzxcBPwIlHiLyV0qnRPRUNbrX8U0FzJSd5zVWpzq0Ni2z937UcFkr eJHRQQjVrzlhuZglEkNv4MlJsWy088uy41zAsbywvPqmkBvV4pgmzWio2JdNm4l0 cSQ2ee1WwSe9G0IEO/2bFvD2tPCon2JqStMrUWfPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcXZ3E6SxOX90tcM/lK30r2Bk0xcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3YzhhNjFlLTRiNTQtNDllNi05YThlLWUzMjI5NjU2YTlhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG8EAwDQYJKoZIhvcNAQELBQADggEBAB3NkHbIy3qhCG2Al4SplX+szdVJ o1/PvJa1SKYt/bd8mxDDmg0jQGQlPk/fLedUfducjyXEAAyUU93U1lFDheGW8BWi /RetRDeFzXg8aLg/nCECCflHE2PJ29SDJFgECcUElZpDUC6SXouds4Za+mnLh7u4 H3S0VfrCwx0aT+kBaT8KJWHTYIyqjVncb+5U9kDeHJPsbFLx32Ibg+03RzB1QdjB nzp7owpa+AekaZ4BdOUOm9AcTsZ5pVQQHhZB0duoYwZHp2eLRdiHlCH++UBCMSFA BIzw7uzp05I9p33cS+IrB4hJ0kMTbJYRzVSeyfNMyI35/7oXIEbznfZJrpA= -----END CERTIFICATE-----Generated at Wed Oct 28 18:44:43 2026 by rpki-client