$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fa354da-deef-4ef4-8608-88cced029ec6.roa File: 2fa354da-deef-4ef4-8608-88cced029ec6.roa (raw, json) Hash identifier: 8yUUxXcraJOC3g+xtUHgvPCTVclQWo/35dlz1wjqkkg= Subject key identifier: FE:D9:8F:9E:FF:32:D4:2F:A2:E0:A1:A2:D2:8B:5B:6A:80:52:AC:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E489B138D3B3B51D8C652F5F24EBEA9346A9B22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fa354da-deef-4ef4-8608-88cced029ec6.roa Signing time: Thu 15 Oct 2026 00:40:51 +0000 ROA not before: Thu 15 Oct 2026 00:40:51 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 66.245.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:48:9b:13:8d:3b:3b:51:d8:c6:52:f5:f2:4e:be:a9:34:6a:9b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:40:51 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=69e8648f6bc4c0b4bd818c9cb7f0b8b45c87634bf21ec5e4241cf54fda1d4136, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:6c:21:5e:22:67:7a:84:cb:e2:7b:b3:50: b1:e3:d7:e1:d1:fe:41:dd:c2:46:d0:08:02:ac:0d: a3:79:64:ad:36:7d:1f:ce:14:6b:a7:0d:7b:cb:9f: ba:a1:39:56:9a:e1:8c:fc:e7:70:95:43:0f:f4:1d: 0c:c9:b1:9c:99:3a:5c:32:a8:52:e7:73:da:b3:2c: 88:81:d2:a1:c4:1c:ff:a9:0a:5a:a7:9b:fc:bf:86: 49:7d:33:ca:60:1a:7b:00:32:1a:cc:91:a2:d9:4f: f4:aa:58:66:ed:37:a5:f7:16:43:e9:67:ab:0d:c7: d5:5e:12:a5:51:ba:ce:80:49:8d:9c:5c:ce:cc:54: e4:6f:d2:67:d0:09:56:ac:3f:52:07:1f:c2:0f:5e: 8a:dc:13:cf:26:3c:05:4a:cd:13:2d:93:7e:e0:e4: 72:7e:40:e2:fb:d6:c1:81:7f:14:b6:10:61:aa:ef: e8:18:24:61:47:62:88:55:cf:e1:4c:78:70:bd:68: 8a:02:c4:a0:6e:d6:0f:bc:96:15:d5:12:0e:b4:a8: a7:f5:1c:6c:17:b0:1f:a5:77:79:ef:62:2a:f7:71: 70:65:c1:4c:87:23:16:e5:9f:67:f6:7c:92:35:70: da:9c:a5:ff:7d:8b:45:87:b0:58:d5:34:6a:eb:e2: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D9:8F:9E:FF:32:D4:2F:A2:E0:A1:A2:D2:8B:5B:6A:80:52:AC:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fa354da-deef-4ef4-8608-88cced029ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.245.0.0/17 Signature Algorithm: sha256WithRSAEncryption 31:b2:68:50:50:b4:56:29:d6:94:64:04:2a:a3:ed:c4:28:6a: d7:84:20:fc:12:ae:86:76:60:c5:3b:54:88:45:eb:30:76:c6: 42:2b:17:87:bb:d7:21:77:eb:c9:c3:65:c9:2f:8d:02:76:fa: 8e:06:17:c6:21:19:04:51:e4:7a:ab:d1:0b:f2:21:5e:fa:67: f0:e7:ba:cc:59:f1:2e:e0:5e:5d:9a:56:8e:ec:01:e6:d9:3a: 9f:70:30:14:bb:e4:b3:ba:e6:15:50:f5:6e:26:85:ca:71:fb: 5c:9a:2e:91:d7:16:1a:83:7a:e3:bf:a7:41:e3:70:f0:67:bd: de:02:4b:56:41:4d:6c:8a:c0:3b:f0:c1:b6:6c:ec:99:d0:63: 81:f5:37:fa:12:fe:76:1a:d3:c0:d4:36:66:e1:19:d1:e5:a5: 96:05:34:c0:70:d1:84:44:5f:02:29:8c:53:10:2a:7d:d9:3b: 8f:ad:9a:4b:80:61:69:cb:b2:b9:05:bb:5f:10:61:f0:a5:9f: 11:b2:94:34:b1:cb:8d:0c:6c:c3:99:36:9c:67:58:de:df:4f: 8e:31:3d:e9:01:79:88:c6:fa:27:f7:1a:82:cb:83:9c:e0:d0: 9f:83:14:2a:55:2d:0a:cd:e4:e2:61:0a:03:19:11:3a:11:ad: 9c:d9:93:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPkibE407O1HYxlL18k6+qTRqmyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDA0MDUxWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWU4NjQ4ZjZiYzRjMGI0YmQ4MThjOWNiN2YwYjhiNDVj ODc2MzRiZjIxZWM1ZTQyNDFjZjU0ZmRhMWQ0MTM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcs2whXiJneoTL4nuzULHj1+HR/kHdwkbQCAKsDaN5ZK02 fR/OFGunDXvLn7qhOVaa4Yz853CVQw/0HQzJsZyZOlwyqFLnc9qzLIiB0qHEHP+p Clqnm/y/hkl9M8pgGnsAMhrMkaLZT/SqWGbtN6X3FkPpZ6sNx9VeEqVRus6ASY2c XM7MVORv0mfQCVasP1IHH8IPXorcE88mPAVKzRMtk37g5HJ+QOL71sGBfxS2EGGq 7+gYJGFHYohVz+FMeHC9aIoCxKBu1g+8lhXVEg60qKf1HGwXsB+ld3nvYir3cXBl wUyHIxbln2f2fJI1cNqcpf99i0WHsFjVNGrr4gYjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/tmPnv8y1C+i4KGi0otbaoBSrLIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmYTM1NGRhLWRlZWYtNGVmNC04NjA4LTg4Y2NlZDAyOWVjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdC9QAwDQYJKoZIhvcNAQELBQADggEBADGyaFBQtFYp1pRkBCqj7cQoateE IPwSroZ2YMU7VIhF6zB2xkIrF4e71yF368nDZckvjQJ2+o4GF8YhGQRR5Hqr0Qvy IV76Z/DnusxZ8S7gXl2aVo7sAebZOp9wMBS75LO65hVQ9W4mhcpx+1yaLpHXFhqD euO/p0HjcPBnvd4CS1ZBTWyKwDvwwbZs7JnQY4H1N/oS/nYa08DUNmbhGdHlpZYF NMBw0YREXwIpjFMQKn3ZO4+tmkuAYWnLsrkFu18QYfClnxGylDSxy40MbMOZNpxn WN7fT44xPekBeYjG+if3GoLLg5zg0J+DFCpVLQrN5OJhCgMZEToRrZzZk2g= -----END CERTIFICATE-----Generated at Wed Nov 4 06:40:16 2026 by rpki-client