$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa File: 34c14701-b1a8-4d3d-af67-4746f890a015.roa (raw, json) Hash identifier: 4ePdWiWKER3oCYTn+6zW9P55aBojqOZoZzcBL/fByWU= Subject key identifier: 30:30:E9:D3:1E:BB:70:F6:57:6B:D5:E4:F3:A5:5D:EE:2C:1D:E2:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01C2371004DBF656F875800A0DAA9AFAF64007E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa Signing time: Mon 12 Oct 2026 00:50:57 +0000 ROA not before: Mon 12 Oct 2026 00:50:57 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c2:37:10:04:db:f6:56:f8:75:80:0a:0d:aa:9a:fa:f6:40:07:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:50:57 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=7069d6fe5ab5f2184af10387fd57cb309d39a20b6b7301a63908d0a2a85ad0a8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:92:ae:fa:c5:17:fc:a0:3c:43:50:bc:ed: 20:d6:d4:f0:28:47:51:24:30:a5:82:d2:79:a6:bd: 04:08:c4:5d:97:f3:50:fe:2e:e2:fe:b8:3a:6e:3f: 6c:31:7a:c6:a6:07:2c:63:d4:35:8f:17:52:35:9a: c0:c4:49:73:20:71:28:57:3c:a4:5b:63:70:cf:5a: aa:b9:65:84:34:cc:d3:4c:96:ff:a5:94:0d:46:7c: a0:82:62:53:f0:34:ae:5a:1d:5f:c9:e5:47:9e:22: 89:8b:7f:7a:cb:7a:31:8e:31:9c:96:ce:ce:b5:75: 7e:8a:6e:d2:07:de:a2:35:d3:95:a7:a3:19:5d:24: cb:18:b8:57:c8:cf:60:20:57:2e:ef:e4:67:8e:35: a6:77:46:15:9f:d7:5b:30:36:ed:6f:91:db:f8:2c: ea:ba:d1:3e:2f:5b:c6:be:44:ee:2b:26:05:bf:38: 53:a0:ad:09:14:ab:8b:71:00:da:3f:72:5e:d1:77: 02:c6:6b:59:89:bb:3d:87:e2:3a:d2:f0:b6:bf:d1: da:14:15:73:ad:25:a4:3f:2a:ca:7b:bd:10:9b:df: 6b:f4:72:4e:57:c6:32:1d:6b:40:67:ae:13:6b:e8: b6:f0:67:22:d4:02:26:c6:b7:7f:0c:58:21:12:40: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:30:E9:D3:1E:BB:70:F6:57:6B:D5:E4:F3:A5:5D:EE:2C:1D:E2:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.134.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:ee:8a:49:e0:3d:39:3f:34:11:99:3a:1c:07:af:29:65:55: c9:63:0c:3e:7a:26:ad:c4:e8:9a:b3:16:05:12:9b:65:8b:9a: cb:72:be:fe:c7:c1:fa:ce:bd:b9:fa:16:af:c5:6a:56:a1:15: 1e:ab:ea:95:b8:08:ab:7f:7e:16:bb:6d:6f:9c:d6:62:0a:62: b3:28:b5:3a:d3:84:e4:17:d6:2b:07:16:12:9d:be:85:39:00: 13:fc:4b:10:0a:cf:83:9c:ec:b5:04:f6:f4:0c:78:0d:2b:ec: a0:db:24:d9:c9:8a:36:85:51:71:43:d8:44:33:43:5f:4b:30: fa:b7:88:a7:62:7d:18:5f:39:09:7e:c9:c8:bf:c1:1f:02:3b: ce:bd:00:d5:47:3b:50:fa:f3:b9:9e:dd:4f:86:11:25:ad:3b: 77:e8:7b:b2:7e:14:83:74:dc:72:74:be:fa:03:20:40:f5:39: 6f:d7:21:23:4f:f0:d6:9b:3c:e3:53:fb:7b:78:c1:4a:5b:7a: 53:2c:e3:88:51:9d:4a:05:93:fd:5e:a6:dd:05:1d:4f:76:c3: ae:ae:c2:24:6a:bd:de:f6:1f:ce:8c:3d:76:7b:81:29:b6:4b: 38:82:52:62:9b:a1:f3:77:1f:7b:9f:f0:bf:0c:c6:be:4a:e5: 21:3e:33:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAcI3EATb9lb4dYAKDaqa+vZAB+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MDU3WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDY5ZDZmZTVhYjVmMjE4NGFmMTAzODdmZDU3Y2IzMDlk MzlhMjBiNmI3MzAxYTYzOTA4ZDBhMmE4NWFkMGE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr25Ku+sUX/KA8Q1C87SDW1PAoR1EkMKWC0nmmvQQIxF2X 81D+LuL+uDpuP2wxesamByxj1DWPF1I1msDESXMgcShXPKRbY3DPWqq5ZYQ0zNNM lv+llA1GfKCCYlPwNK5aHV/J5UeeIomLf3rLejGOMZyWzs61dX6KbtIH3qI105Wn oxldJMsYuFfIz2AgVy7v5GeONaZ3RhWf11swNu1vkdv4LOq60T4vW8a+RO4rJgW/ OFOgrQkUq4txANo/cl7RdwLGa1mJuz2H4jrS8La/0doUFXOtJaQ/Ksp7vRCb32v0 ck5XxjIda0BnrhNr6LbwZyLUAibGt38MWCESQMA9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMDDp0x67cPZXa9Xk86Vd7iwd4hMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0YzE0NzAxLWIxYTgtNGQzZC1hZjY3LTQ3NDZmODkwYTAxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoYwDQYJKoZIhvcNAQELBQADggEBAF3uikngPTk/NBGZOhwHryllVclj DD56Jq3E6JqzFgUSm2WLmstyvv7HwfrOvbn6Fq/FalahFR6r6pW4CKt/fha7bW+c 1mIKYrMotTrThOQX1isHFhKdvoU5ABP8SxAKz4Oc7LUE9vQMeA0r7KDbJNnJijaF UXFD2EQzQ19LMPq3iKdifRhfOQl+yci/wR8CO869ANVHO1D687me3U+GESWtO3fo e7J+FIN03HJ0vvoDIED1OW/XISNP8NabPONT+3t4wUpbelMs44hRnUoFk/1ept0F HU92w66uwiRqvd72H86MPXZ7gSm2SziCUmKbofN3H3uf8L8Mxr5K5SE+M/0= -----END CERTIFICATE-----Generated at Wed Nov 4 05:55:49 2026 by rpki-client