$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa File: 38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa (raw, json) Hash identifier: dEStn4Vny+OxPLG/xxADKMCqAQBtoQZh5XmiTFLtIOU= Subject key identifier: BD:F5:C8:DF:0E:96:C0:D5:3F:0D:CE:E9:C7:14:7C:04:01:DA:5E:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5045FCADE6EC27D26B4B1A7CE77CAA7415448D70 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa Signing time: Thu 08 Oct 2026 00:40:10 +0000 ROA not before: Thu 08 Oct 2026 00:40:10 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:45:fc:ad:e6:ec:27:d2:6b:4b:1a:7c:e7:7c:aa:74:15:44:8d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:40:10 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=c64c63dc79daa7dd978c93778925564fc87b459a520fa8aed53437a357d2547d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2c:32:ea:20:77:e2:4e:0c:77:ef:c1:e4:f3: d4:07:0a:24:e7:43:14:f9:a5:ed:0c:13:03:25:08: dd:9d:1f:93:be:19:e5:9c:3f:7b:5a:98:9b:64:dd: c0:bd:a3:a1:55:d0:0e:4b:d1:90:e9:dd:4c:6d:b3: 6d:e7:37:34:c9:4b:5c:e7:2f:7e:d5:1e:40:06:11: 75:61:d6:70:64:c3:ea:7d:a8:a8:ca:01:56:60:86: 89:ce:1f:2e:5e:ae:7c:87:33:42:42:f0:e1:70:30: 4a:75:23:8a:ed:c7:33:b9:8f:50:14:84:87:b3:2f: ad:7b:4e:8b:89:c1:e5:91:24:84:a6:95:3e:e1:b4: 16:51:ee:3b:7e:5e:8e:9d:bf:3e:b8:86:5e:85:00: 65:f6:cb:7b:34:0f:66:62:ee:bd:43:75:37:04:48: 30:a9:1b:7f:3c:b5:a0:4d:53:eb:6b:41:3b:db:06: 29:44:a0:b7:dc:b8:91:73:29:2e:9d:83:97:f2:37: 99:51:fe:8b:91:b6:08:aa:9b:47:f8:1c:4f:92:2f: 53:72:89:a5:fb:f2:93:40:f5:2e:22:11:1c:ec:a3: f4:85:61:c9:ea:d6:33:9a:d4:51:d1:72:00:6f:07: e8:2e:21:67:15:d6:56:69:3d:c7:97:24:7e:28:08: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:C8:DF:0E:96:C0:D5:3F:0D:CE:E9:C7:14:7C:04:01:DA:5E:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:87:41:21:f9:7d:7a:3a:c8:9d:7f:6e:69:9a:5d:f6:80:3e: fc:b4:1b:84:55:fb:42:5e:61:0e:00:a9:68:1c:58:a1:46:6a: a9:5c:b3:1e:b0:15:cb:50:df:8a:36:e7:f9:7b:ea:a2:01:0c: b5:3e:87:41:7a:fd:c8:a0:06:aa:d7:19:d7:02:57:5c:71:1f: b9:22:26:36:c7:2c:dd:28:19:c0:e9:34:ad:11:9c:04:db:cb: cb:89:cb:0b:58:6e:3f:ca:26:1b:ba:f4:2b:92:52:ba:16:3b: 6b:55:aa:ef:4f:75:64:8e:6a:b8:fd:1e:3a:ac:aa:fc:93:aa: a6:0b:6d:3b:fe:10:24:9a:5f:3b:47:0e:cf:a2:85:79:42:0c: fd:23:17:69:f5:da:2a:53:71:b8:7e:b5:87:b6:a1:a3:0f:be: 40:31:cf:16:8b:1a:8d:98:86:8f:0f:c0:5e:b9:83:1c:88:91: af:ac:61:03:5d:29:8b:ea:3b:c7:2c:e3:45:06:cb:1a:01:55: 9d:18:70:2f:b3:47:fa:20:ec:98:e0:df:7c:bf:f3:3b:aa:be: 0d:f3:16:d8:bf:94:cc:41:28:17:85:15:cf:68:66:2d:fc:22: d3:09:9e:f1:53:1d:14:ea:6e:6e:23:17:e2:d8:04:83:4b:dd: 37:1c:46:91 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUEX8rebsJ9JrSxp853yqdBVEjXAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDA0MDEwWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjRjNjNkYzc5ZGFhN2RkOTc4YzkzNzc4OTI1NTY0ZmM4 N2I0NTlhNTIwZmE4YWVkNTM0MzdhMzU3ZDI1NDdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKLDLqIHfiTgx378Hk89QHCiTnQxT5pe0MEwMlCN2dH5O+ GeWcP3tamJtk3cC9o6FV0A5L0ZDp3Uxts23nNzTJS1znL37VHkAGEXVh1nBkw+p9 qKjKAVZghonOHy5ernyHM0JC8OFwMEp1I4rtxzO5j1AUhIezL617TouJweWRJISm lT7htBZR7jt+Xo6dvz64hl6FAGX2y3s0D2Zi7r1DdTcESDCpG388taBNU+trQTvb BilEoLfcuJFzKS6dg5fyN5lR/ouRtgiqm0f4HE+SL1NyiaX78pNA9S4iERzso/SF Ycnq1jOa1FHRcgBvB+guIWcV1lZpPceXJH4oCJP1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvfXI3w6WwNU/Dc7pxxR8BAHaXpkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4ZTBhMWViLTMwMzQtNDEwYi05MGUzLWUxOWZmYjQ4ZmMxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4IzANBgkqhkiG9w0BAQsFAAOCAQEAmIdBIfl9ejrInX9uaZpd9oA+/LQb hFX7Ql5hDgCpaBxYoUZqqVyzHrAVy1Dfijbn+XvqogEMtT6HQXr9yKAGqtcZ1wJX XHEfuSImNscs3SgZwOk0rRGcBNvLy4nLC1huP8omG7r0K5JSuhY7a1Wq7091ZI5q uP0eOqyq/JOqpgttO/4QJJpfO0cOz6KFeUIM/SMXafXaKlNxuH61h7ahow++QDHP FosajZiGjw/AXrmDHIiRr6xhA10pi+o7xyzjRQbLGgFVnRhwL7NH+iDsmODffL/z O6q+DfMW2L+UzEEoF4UVz2hmLfwi0wme8VMdFOpubiMX4tgEg0vdNxxGkQ== -----END CERTIFICATE-----Generated at Sat Oct 31 22:49:13 2026 by rpki-client