$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298d72e4-354c-46bd-a3f9-9f69844f1676.roa File: 298d72e4-354c-46bd-a3f9-9f69844f1676.roa (raw, json) Hash identifier: OANq5P1m2XYzk0nOOxTRp4k0RbZYRVwDFeOhsKD90sk= Subject key identifier: E3:5A:22:C1:B1:E1:A4:BD:6D:EC:F4:7F:1B:7F:F0:CD:76:17:81:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EA5F9EDC8DA39996AFFFE0B74D70FDED2BCF25B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298d72e4-354c-46bd-a3f9-9f69844f1676.roa Signing time: Tue 06 Oct 2026 00:51:09 +0000 ROA not before: Tue 06 Oct 2026 00:51:09 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.177.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a5:f9:ed:c8:da:39:99:6a:ff:fe:0b:74:d7:0f:de:d2:bc:f2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:51:09 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=bac699c0317aab511523c7d5313e4b84d988dd9f38842add64fe0c8a42c420e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:8d:e9:ae:71:1c:08:c4:f3:5d:b8:f2:47: 4f:b0:75:75:8d:9a:6d:2e:61:b5:7b:f1:fe:b1:23: 14:d3:aa:8d:15:83:ec:2e:2d:71:e4:22:10:58:0c: b4:1e:5d:0d:80:2d:96:81:b3:6e:6f:ec:41:6c:2b: be:69:e5:1e:63:31:79:e5:20:d4:61:05:ae:42:53: d4:15:d5:b6:eb:35:5c:97:d9:ad:23:13:d0:88:c7: 17:58:03:9f:8f:ff:a9:7a:36:a8:c5:e5:a0:94:ea: 39:6d:9a:e3:33:23:52:2f:23:79:61:cc:55:32:1a: 3c:82:b5:b2:74:10:2c:b9:80:53:a6:ec:c4:ae:29: 1f:da:21:35:a5:2c:43:48:8a:91:24:b5:01:91:cb: 74:fb:85:63:9d:cb:9b:4b:ac:00:de:41:87:22:27: 1f:60:01:b2:79:2b:c4:3d:c3:9d:7c:bf:c8:1b:a5: 28:18:e1:1d:48:a5:de:10:bb:76:f2:ae:96:89:ed: 95:2b:f1:ae:4a:34:c1:52:1a:b1:9d:f8:1e:25:2d: 13:57:c0:62:d8:ed:f7:11:9a:9e:6f:5f:86:d5:0c: 1e:e3:8e:8a:74:6e:03:47:95:bb:35:1e:05:c9:1a: 9e:6b:87:30:48:ea:1c:37:05:ed:66:90:90:f4:08: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5A:22:C1:B1:E1:A4:BD:6D:EC:F4:7F:1B:7F:F0:CD:76:17:81:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298d72e4-354c-46bd-a3f9-9f69844f1676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.177.20.0/22 Signature Algorithm: sha256WithRSAEncryption 27:15:30:45:f1:ea:08:af:e7:49:ff:f9:68:6f:54:3b:f3:d2: ac:3e:58:b4:4f:e9:21:bc:d7:13:3d:1f:44:07:ff:59:09:2d: 57:a0:16:20:2c:16:3c:ea:d6:91:fd:15:65:3f:00:24:cf:d0: d3:99:08:13:dd:b5:4c:d3:95:ba:35:8c:79:2a:d2:9d:96:16: 79:14:4a:88:31:af:05:1b:b1:44:5f:3f:c4:c8:0e:f0:1a:a6: aa:1e:4d:62:0b:9b:ad:11:ab:c1:aa:05:91:69:87:94:84:f7: f0:c2:a2:09:6a:53:ce:4b:e3:de:cb:ea:24:a6:dd:e3:fb:3f: 96:93:5d:09:0f:95:d3:22:c7:ab:d7:ef:9a:99:8b:90:10:86: 91:c2:2d:4e:45:4d:8f:7b:82:b2:6a:8a:ae:b5:7a:62:39:71: 67:70:84:f7:01:67:c5:41:7a:99:ba:e7:9d:cd:33:a2:a3:ca: 59:84:c2:eb:bb:d3:ba:16:fa:9f:3f:81:fa:a0:2a:55:ff:b0: 2f:71:22:f2:4b:7a:70:77:c1:6c:26:e2:d5:39:83:95:38:dc: 2d:2a:ed:27:eb:4f:42:d1:65:a1:cb:76:b7:e9:cf:88:08:7d: bf:d0:2c:d2:2d:0b:51:73:f1:cc:a3:4f:e3:8a:31:b0:f3:95: cb:af:a1:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULqX57cjaOZlq//4LdNcP3tK88lswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA1MTA5WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWM2OTljMDMxN2FhYjUxMTUyM2M3ZDUzMTNlNGI4NGQ5 ODhkZDlmMzg4NDJhZGQ2NGZlMGM4YTQyYzQyMGUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU6Y3prnEcCMTzXbjyR0+wdXWNmm0uYbV78f6xIxTTqo0V g+wuLXHkIhBYDLQeXQ2ALZaBs25v7EFsK75p5R5jMXnlINRhBa5CU9QV1bbrNVyX 2a0jE9CIxxdYA5+P/6l6NqjF5aCU6jltmuMzI1IvI3lhzFUyGjyCtbJ0ECy5gFOm 7MSuKR/aITWlLENIipEktQGRy3T7hWOdy5tLrADeQYciJx9gAbJ5K8Q9w518v8gb pSgY4R1Ipd4Qu3byrpaJ7ZUr8a5KNMFSGrGd+B4lLRNXwGLY7fcRmp5vX4bVDB7j jop0bgNHlbs1HgXJGp5rhzBI6hw3Be1mkJD0CEW5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU41oiwbHhpL1t7PR/G3/wzXYXgc8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5OGQ3MmU0LTM1NGMtNDZiZC1hM2Y5LTlmNjk4NDRmMTY3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRsRQwDQYJKoZIhvcNAQELBQADggEBACcVMEXx6giv50n/+WhvVDvz0qw+ WLRP6SG81xM9H0QH/1kJLVegFiAsFjzq1pH9FWU/ACTP0NOZCBPdtUzTlbo1jHkq 0p2WFnkUSogxrwUbsURfP8TIDvAapqoeTWILm60Rq8GqBZFph5SE9/DCoglqU85L 497L6iSm3eP7P5aTXQkPldMix6vX75qZi5AQhpHCLU5FTY97grJqiq61emI5cWdw hPcBZ8VBepm6553NM6KjylmEwuu707oW+p8/gfqgKlX/sC9xIvJLenB3wWwm4tU5 g5U43C0q7SfrT0LRZaHLdrfpz4gIfb/QLNItC1Fz8cyjT+OKMbDzlcuvoTU= -----END CERTIFICATE-----Generated at Tue Nov 3 08:20:38 2026 by rpki-client