$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34136975-3039-4a02-91e5-6ea288798aa0.roa File: 34136975-3039-4a02-91e5-6ea288798aa0.roa (raw, json) Hash identifier: knUfoBlB5m3cTuRoMgSLQVFQjfztTGtq7753RnCyYWU= Subject key identifier: 0D:70:23:82:FB:F4:68:A4:3E:F7:86:AC:24:89:B1:1A:9C:27:CD:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66BA0DDBAB6ACA1D63B2CF6627D6DB46A9258E87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34136975-3039-4a02-91e5-6ea288798aa0.roa Signing time: Thu 08 Oct 2026 00:10:43 +0000 ROA not before: Thu 08 Oct 2026 00:10:43 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ba:0d:db:ab:6a:ca:1d:63:b2:cf:66:27:d6:db:46:a9:25:8e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:10:43 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=623d70ddd0ab35b0327abb3147d588e8bcbd1c1a6cef95b7eea8141f5e9a875e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:8b:25:b1:c7:b0:81:a2:e7:1e:08:1d:4d: f1:2f:eb:a0:f5:d8:9e:b4:bb:fd:f5:d3:d6:4a:35: 3c:c5:9a:7c:80:86:7b:67:71:f3:fc:80:d3:0d:f7: f3:dc:1c:96:1e:d2:73:b3:64:2a:fa:cb:ca:67:7d: 82:04:9b:22:7e:af:19:3d:94:5e:7e:64:2a:b9:85: e5:b4:07:79:4e:1b:52:e9:19:27:c2:fc:b9:b1:fc: 7f:32:4d:61:ae:9d:f4:d4:8f:a1:64:5a:f1:5d:62: 19:52:bd:44:41:ff:5a:23:27:97:8f:ed:e9:fd:93: 2c:0c:e3:f5:f5:41:4a:27:61:eb:9f:82:11:80:23: 97:0b:a9:7f:48:2d:24:90:d5:58:d4:0c:c9:8f:46: 78:48:0e:54:b7:aa:60:08:43:c8:50:35:cf:4f:04: 62:ed:28:48:a1:f4:f2:0a:14:23:62:f6:0e:ee:d1: ac:d4:89:dc:e6:71:8c:cb:24:c9:fc:cd:b0:d3:13: 54:1b:5a:9c:5c:31:c4:e0:39:c5:d4:31:3d:de:9f: 5e:41:d6:99:34:61:26:b4:45:cd:17:84:0f:1f:59: be:3b:a1:b8:78:d7:c8:41:8a:5c:49:42:1a:5d:ca: 4b:67:e2:45:4b:3f:9d:21:9e:36:d2:4a:68:81:83: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:23:82:FB:F4:68:A4:3E:F7:86:AC:24:89:B1:1A:9C:27:CD:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34136975-3039-4a02-91e5-6ea288798aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.187.0/24 Signature Algorithm: sha256WithRSAEncryption a6:26:f4:43:64:7f:9e:99:fb:ca:e9:6d:d3:9d:0c:83:03:44: d3:a1:ea:02:ac:28:97:7c:43:98:b5:59:0e:3b:08:21:b2:49: 0b:13:6a:fd:fd:ef:98:bc:f2:86:7d:6e:1e:b3:65:33:28:3e: 63:32:23:fb:df:ee:dc:03:a9:47:63:c9:6b:80:f1:1c:da:c8: 75:f8:b3:05:79:62:46:0e:1b:df:44:c5:de:e2:61:f5:5f:08: 0b:c1:2a:47:75:85:22:99:92:4d:58:21:ae:9d:9b:3c:e8:a9: 1c:af:39:08:a8:3b:4b:07:25:ea:71:b5:81:e9:13:c2:43:c7: a3:7b:5d:59:ab:c9:96:92:d8:60:81:7d:ba:dd:44:0c:a9:ae: 67:8a:ac:80:7c:43:dd:f5:c7:7f:69:f7:5f:71:3b:f0:88:a4: cf:c1:44:57:7c:e1:2e:8d:df:c7:3e:63:cf:3d:51:81:ef:65: 18:db:86:13:c7:e2:19:f6:2e:ea:9b:3e:98:72:0d:a8:34:e9: 67:02:44:0a:6c:6f:8c:1d:70:51:bc:02:23:be:b8:35:de:1f: da:4d:71:d6:3b:3c:16:f8:aa:29:63:06:ef:53:4a:4d:8d:c5: 56:10:30:89:1b:4d:ee:da:77:bc:4f:00:15:c8:01:27:1e:5a: 01:f2:43:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZroN26tqyh1jss9mJ9bbRqkljocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAxMDQzWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjNkNzBkZGQwYWIzNWIwMzI3YWJiMzE0N2Q1ODhlOGJj YmQxYzFhNmNlZjk1YjdlZWE4MTQxZjVlOWE4NzVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRb4slscewgaLnHggdTfEv66D12J60u/3109ZKNTzFmnyA hntncfP8gNMN9/PcHJYe0nOzZCr6y8pnfYIEmyJ+rxk9lF5+ZCq5heW0B3lOG1Lp GSfC/Lmx/H8yTWGunfTUj6FkWvFdYhlSvURB/1ojJ5eP7en9kywM4/X1QUonYeuf ghGAI5cLqX9ILSSQ1VjUDMmPRnhIDlS3qmAIQ8hQNc9PBGLtKEih9PIKFCNi9g7u 0azUidzmcYzLJMn8zbDTE1QbWpxcMcTgOcXUMT3en15B1pk0YSa0Rc0XhA8fWb47 obh418hBilxJQhpdyktn4kVLP50hnjbSSmiBgzdNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDXAjgvv0aKQ+94asJImxGpwnzfwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0MTM2OTc1LTMwMzktNGEwMi05MWU1LTZlYTI4ODc5OGFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTbswDQYJKoZIhvcNAQELBQADggEBAKYm9ENkf56Z+8rpbdOdDIMDRNOh 6gKsKJd8Q5i1WQ47CCGySQsTav3975i88oZ9bh6zZTMoPmMyI/vf7twDqUdjyWuA 8RzayHX4swV5YkYOG99Exd7iYfVfCAvBKkd1hSKZkk1YIa6dmzzoqRyvOQioO0sH JepxtYHpE8JDx6N7XVmryZaS2GCBfbrdRAyprmeKrIB8Q931x39p919xO/CIpM/B RFd84S6N38c+Y889UYHvZRjbhhPH4hn2LuqbPphyDag06WcCRApsb4wdcFG8AiO+ uDXeH9pNcdY7PBb4qiljBu9TSk2NxVYQMIkbTe7ad7xPABXIASceWgHyQ4o= -----END CERTIFICATE-----Generated at Sat Oct 31 09:40:38 2026 by rpki-client