$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa File: 2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa (raw, json) Hash identifier: bSFxI36CbWTKzbEvkfyX2BqFoNMC0nSsg6bAFFgWxd4= Subject key identifier: 8B:C4:EE:E1:2E:FA:75:F5:75:3C:14:80:58:39:77:EC:E4:FE:D2:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52470DA640BDBD437D25BA1975D9B341196C25AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa Signing time: Tue 13 Oct 2026 00:40:35 +0000 ROA not before: Tue 13 Oct 2026 00:40:35 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:47:0d:a6:40:bd:bd:43:7d:25:ba:19:75:d9:b3:41:19:6c:25:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:40:35 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=dda72b7d652f410d65d1fcff6862276a42c6c5997a7f199b83153e010e608b5f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:d2:df:9d:cd:7c:c5:9a:ab:e8:6f:95:68: 43:27:ab:3c:b0:d1:2a:07:d9:ac:ff:5d:6e:20:cc: e9:85:71:c1:74:f4:06:aa:08:93:2e:2c:60:df:c1: c5:f3:45:c0:0d:d6:08:1d:c7:01:c6:d4:32:34:7c: 03:c2:c4:77:c0:f0:fc:43:d3:e5:5a:f5:3b:6c:8c: 3b:8a:9a:a7:47:58:19:e0:71:1f:08:e4:4d:06:3b: 47:61:ea:bd:dc:d5:ec:dd:a2:83:1a:08:38:18:9d: 38:1c:98:d1:d6:42:d5:d4:cb:2b:09:47:35:40:7b: bf:ef:f9:0d:af:08:b6:b5:87:35:4f:d7:60:3d:92: 92:94:71:7b:7e:c3:06:f0:be:1f:ac:0e:a7:07:a9: 42:af:f3:78:a2:10:61:8a:c6:46:3c:8a:04:39:0d: 43:3b:9d:47:74:9f:7e:c6:ac:13:f4:00:1f:46:fd: e8:6c:46:a0:86:42:1b:15:b1:0e:b4:e1:8c:9d:e6: 64:41:11:69:15:f1:81:d9:20:82:d0:c2:2f:fd:f1: 11:45:aa:92:61:f0:49:17:b8:2d:2b:72:e4:82:24: e7:7b:c0:7d:b5:16:7a:78:57:23:04:e2:b5:bb:d5: 8e:5f:8d:f2:81:d4:61:c5:c5:e3:a0:fa:7d:ad:5a: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C4:EE:E1:2E:FA:75:F5:75:3C:14:80:58:39:77:EC:E4:FE:D2:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.48.0/23 Signature Algorithm: sha256WithRSAEncryption ba:e5:06:89:ae:da:73:cb:0b:00:3d:2a:61:34:7c:e8:df:f4: 68:a4:62:77:e1:3f:41:73:5a:d2:79:76:93:71:9c:f5:29:92: 1a:fe:bc:d0:5f:a1:91:87:cc:c9:38:a3:47:83:59:cb:e8:8d: 9a:21:90:0b:f3:b9:e1:78:81:12:0e:cf:1b:bb:6a:55:4f:04: 45:17:8c:ec:f6:19:27:f2:14:fa:e8:bd:26:15:3d:35:f1:a2: 2e:36:94:65:de:07:14:d4:8c:96:fe:bb:59:a8:05:9d:d8:77: fc:13:99:d1:ef:76:2c:66:27:9f:0b:d9:0f:f7:08:5e:26:88: 7e:6f:c2:5c:e7:2b:89:b5:99:4c:6a:fc:3e:82:fb:ca:45:bb: fb:45:97:cb:b0:98:ed:6d:ab:b8:7c:83:36:f9:e1:60:e2:84: 41:eb:da:41:f4:5e:dd:08:2b:4f:38:cf:a2:6a:38:73:16:05: f3:7a:53:7e:03:fa:9d:79:1b:d1:bf:54:7c:19:5c:cb:2b:2c: 12:59:33:21:a6:a2:90:55:7b:16:16:76:2a:9f:36:c7:05:cd: 89:a3:a7:d9:5a:2f:55:db:3f:3e:1e:b2:bd:54:32:08:57:88: e8:ee:e7:04:3c:cb:bc:61:ca:2b:d7:7a:8d:59:6e:5c:04:a6: 13:b5:33:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUkcNpkC9vUN9JboZddmzQRlsJa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDA0MDM1WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGE3MmI3ZDY1MmY0MTBkNjVkMWZjZmY2ODYyMjc2YTQy YzZjNTk5N2E3ZjE5OWI4MzE1M2UwMTBlNjA4YjVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGd9Lfnc18xZqr6G+VaEMnqzyw0SoH2az/XW4gzOmFccF0 9AaqCJMuLGDfwcXzRcAN1ggdxwHG1DI0fAPCxHfA8PxD0+Va9TtsjDuKmqdHWBng cR8I5E0GO0dh6r3c1ezdooMaCDgYnTgcmNHWQtXUyysJRzVAe7/v+Q2vCLa1hzVP 12A9kpKUcXt+wwbwvh+sDqcHqUKv83iiEGGKxkY8igQ5DUM7nUd0n37GrBP0AB9G /ehsRqCGQhsVsQ604Yyd5mRBEWkV8YHZIILQwi/98RFFqpJh8EkXuC0rcuSCJOd7 wH21Fnp4VyME4rW71Y5fjfKB1GHFxeOg+n2tWg7vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi8Tu4S76dfV1PBSAWDl37OT+0s4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiNDk2M2Q4LWUyYWMtNDkxNC1iMTlhLTM4Yzk1ZWJlMmU4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjljAwDQYJKoZIhvcNAQELBQADggEBALrlBomu2nPLCwA9KmE0fOjf9Gik YnfhP0FzWtJ5dpNxnPUpkhr+vNBfoZGHzMk4o0eDWcvojZohkAvzueF4gRIOzxu7 alVPBEUXjOz2GSfyFProvSYVPTXxoi42lGXeBxTUjJb+u1moBZ3Yd/wTmdHvdixm J58L2Q/3CF4miH5vwlznK4m1mUxq/D6C+8pFu/tFl8uwmO1tq7h8gzb54WDihEHr 2kH0Xt0IK084z6JqOHMWBfN6U34D+p15G9G/VHwZXMsrLBJZMyGmopBVexYWdiqf NscFzYmjp9laL1XbPz4esr1UMghXiOju5wQ8y7xhyivXeo1ZblwEphO1M+0= -----END CERTIFICATE-----Generated at Tue Nov 3 14:59:51 2026 by rpki-client