$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ce7ecc-b8c0-4b3d-be7a-e06291e3cde2.roa File: 28ce7ecc-b8c0-4b3d-be7a-e06291e3cde2.roa (raw, json) Hash identifier: Q/dQjZS/EaNAC/AMzJWq+p8IGHYBdSPp3oEZuVLSWrU= Subject key identifier: 3D:32:0D:4E:AA:1E:3A:0E:04:67:8D:4A:DB:0C:E7:2D:2D:2E:6A:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6086C12D23A20CAAAD3FBE903690E12905DCF63B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ce7ecc-b8c0-4b3d-be7a-e06291e3cde2.roa Signing time: Tue 27 Oct 2026 00:40:08 +0000 ROA not before: Tue 27 Oct 2026 00:40:08 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 184.208.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:86:c1:2d:23:a2:0c:aa:ad:3f:be:90:36:90:e1:29:05:dc:f6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:40:08 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=0f3df6d3b1ae624ebcaa9c38fdde500e9697535b610909f41ba6f9a5f5b8924c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:ab:67:01:ec:ff:52:69:b2:18:11:75:f5: 89:0d:dd:05:6a:d0:a5:69:fa:a9:f5:34:b5:d0:ee: 10:3e:3c:4f:95:d2:13:4f:79:bc:b3:52:02:2d:5a: 98:d4:79:05:65:b9:44:ec:48:32:a7:9b:b3:d6:5a: 4e:98:bb:a9:0a:c1:4e:45:8d:7a:d3:2a:2c:01:c7: 51:d7:8b:1a:ef:b2:5b:40:f8:9a:db:d7:d3:2d:78: 67:4d:83:24:bc:d0:0e:83:7d:55:c1:68:22:a2:9d: ea:0b:f1:f4:0f:2f:cb:d4:4b:82:b1:ac:63:08:ed: c2:d0:ff:ce:7b:5c:4e:57:77:47:ae:f6:2b:72:7f: e6:e7:a6:0d:52:3a:f3:97:86:e6:f0:63:75:13:0c: 4e:0b:0a:20:66:98:75:80:78:ec:da:99:c7:bd:7d: aa:db:57:5e:1b:27:9f:8b:14:55:96:9e:65:d2:4d: b3:30:0f:d8:be:16:fa:aa:78:d2:07:e5:37:dc:21: d8:6b:e2:69:f9:c9:87:96:f7:1b:a5:e3:8a:f6:b7: f2:50:67:d6:77:10:c1:d6:69:02:fc:55:58:b9:6e: f6:20:28:13:66:90:c7:c9:39:80:96:e2:80:be:eb: be:b7:32:27:68:8f:3c:7b:36:26:a9:8a:f3:9a:30: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:32:0D:4E:AA:1E:3A:0E:04:67:8D:4A:DB:0C:E7:2D:2D:2E:6A:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ce7ecc-b8c0-4b3d-be7a-e06291e3cde2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.208.0.0/12 Signature Algorithm: sha256WithRSAEncryption 15:62:c7:60:8d:db:a6:e8:04:1c:23:a6:ab:30:19:20:ed:f0: 99:aa:fe:5f:76:a4:ae:29:d8:dc:d0:52:04:13:06:42:4f:73: 4f:41:ad:0f:9d:1d:57:5c:0f:f9:c0:1c:00:4d:7b:2e:37:5b: 90:ef:d5:7b:22:1b:a7:ac:6a:8b:d3:a0:ac:cf:30:83:96:06: d5:7d:a2:13:23:83:bc:3a:7f:18:3d:10:31:bd:fa:a8:a1:f1: 3d:5f:17:de:75:4a:49:1d:17:c3:ef:92:ee:16:74:b4:91:e3: d8:0b:58:4f:7c:1e:9d:fc:f3:16:a8:f9:e9:c9:dd:a0:53:6b: 64:fc:30:74:71:87:03:6e:e6:80:08:cc:a1:46:49:47:c8:ad: 88:b0:85:86:45:7c:86:4c:cc:a5:f2:e7:40:22:a7:78:c2:ef: 16:8b:92:11:ac:6f:00:90:28:af:1d:36:21:b3:59:6a:9b:56: b0:65:5a:88:23:61:6e:8a:11:a5:51:60:be:87:72:93:d7:59: e9:ae:04:84:12:b6:2a:48:e7:3c:40:8e:de:18:c7:77:d6:3d: 49:60:8a:8e:cd:91:70:0b:3a:96:fc:79:a7:d7:52:73:7e:a1: a6:e7:e6:c1:3c:bf:38:1b:5e:c6:c2:b1:9c:ce:c0:2b:74:b5: 2b:8a:5d:fa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYIbBLSOiDKqtP76QNpDhKQXc9jswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDA0MDA4WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjNkZjZkM2IxYWU2MjRlYmNhYTljMzhmZGRlNTAwZTk2 OTc1MzViNjEwOTA5ZjQxYmE2ZjlhNWY1Yjg5MjRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCBsKtnAez/UmmyGBF19YkN3QVq0KVp+qn1NLXQ7hA+PE+V 0hNPebyzUgItWpjUeQVluUTsSDKnm7PWWk6Yu6kKwU5FjXrTKiwBx1HXixrvsltA +Jrb19MteGdNgyS80A6DfVXBaCKineoL8fQPL8vUS4KxrGMI7cLQ/857XE5Xd0eu 9ityf+bnpg1SOvOXhubwY3UTDE4LCiBmmHWAeOzamce9farbV14bJ5+LFFWWnmXS TbMwD9i+FvqqeNIH5TfcIdhr4mn5yYeW9xul44r2t/JQZ9Z3EMHWaQL8VVi5bvYg KBNmkMfJOYCW4oC+6763Midojzx7NiapivOaMExnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPTINTqoeOg4EZ41K2wznLS0uavowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4Y2U3ZWNjLWI4YzAtNGIzZC1iZTdhLWUwNjI5MWUzY2RlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwS40DANBgkqhkiG9w0BAQsFAAOCAQEAFWLHYI3bpugEHCOmqzAZIO3wmar+ X3akrinY3NBSBBMGQk9zT0GtD50dV1wP+cAcAE17LjdbkO/VeyIbp6xqi9OgrM8w g5YG1X2iEyODvDp/GD0QMb36qKHxPV8X3nVKSR0Xw++S7hZ0tJHj2AtYT3wenfzz Fqj56cndoFNrZPwwdHGHA27mgAjMoUZJR8itiLCFhkV8hkzMpfLnQCKneMLvFouS EaxvAJAorx02IbNZaptWsGVaiCNhbooRpVFgvodyk9dZ6a4EhBK2KkjnPECO3hjH d9Y9SWCKjs2RcAs6lvx5p9dSc36hpufmwTy/OBtexsKxnM7AK3S1K4pd+g== -----END CERTIFICATE-----Generated at Wed Nov 4 00:45:15 2026 by rpki-client