$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa File: 3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa (raw, json) Hash identifier: Z4RPYpEJ47TBpLdJTHMr5HFwWAG+IRM69vYZHOdj6rQ= Subject key identifier: 6A:BF:8A:7C:ED:A0:A3:89:51:D8:4A:CE:51:D7:91:CA:14:2D:36:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5347FA6BB2DB86D26E2F02B6A47395C0A826AD14 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa Signing time: Sat 24 Oct 2026 01:04:40 +0000 ROA not before: Sat 24 Oct 2026 01:04:40 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.68.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:47:fa:6b:b2:db:86:d2:6e:2f:02:b6:a4:73:95:c0:a8:26:ad:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 01:04:40 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=71c3499cce5edd439aac749ddb8278370119a79cf6a2f202a3e1a0772ed75658, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:29:29:35:23:ca:e7:9f:1c:b2:a1:9f:78: 83:af:2d:86:72:5c:77:26:71:73:71:74:b2:39:60: 42:db:6e:27:91:df:47:fe:1a:96:0f:aa:9b:db:7c: 7e:c5:b3:f7:b9:2e:1e:89:88:bf:51:86:54:45:23: af:82:06:7a:b9:86:8a:df:4a:17:0a:73:cf:bc:2b: fc:3d:61:ac:25:95:68:b5:28:d7:ee:78:ef:dc:5b: bb:21:5b:bd:cc:b0:fa:64:3f:1e:41:d6:09:96:7d: 6e:72:4e:fb:2a:8a:dd:e2:92:87:91:38:12:20:d3: 8b:f2:25:40:b8:32:83:29:5d:80:50:82:22:c4:36: 05:c5:cc:53:1e:a5:85:e9:3c:ea:e6:a0:51:55:f1: d6:b1:da:91:e6:ff:8a:3b:8a:a4:36:98:23:8e:b3: 5b:3f:9c:7d:b7:5d:ae:f1:45:b3:a6:c2:70:c6:ab: b7:6e:82:01:92:6a:48:2f:b8:4b:f5:76:ec:89:1d: 4c:f5:13:a6:a0:66:e6:2a:65:c5:73:c7:9a:0b:11: 75:df:9a:ec:82:5f:94:9e:2f:83:22:7a:ee:7f:50: 55:e6:ab:eb:06:9a:62:78:69:46:b8:5e:a7:19:07: 1a:01:c9:23:1c:2e:67:14:c5:98:53:ad:65:c8:45: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BF:8A:7C:ED:A0:A3:89:51:D8:4A:CE:51:D7:91:CA:14:2D:36:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.68.0.0/17 Signature Algorithm: sha256WithRSAEncryption d9:3b:ac:37:7b:2f:79:da:12:8a:e8:eb:d1:ae:36:36:5b:2c: 3e:da:32:d4:e8:c5:6b:86:cd:e5:b7:8f:87:cf:1b:ca:f2:1d: 7c:c0:87:dd:84:bb:2b:7a:16:68:09:90:31:9e:d0:16:30:59: 1a:86:df:bf:32:52:dc:26:93:32:11:ae:b3:57:96:37:3f:a3: e6:70:46:34:6c:5e:7c:24:33:39:3b:5b:c7:98:09:f2:0d:e8: fb:b7:e7:44:30:53:a0:24:10:25:c3:40:6e:ad:bf:79:e1:22: 40:bc:45:91:81:22:ac:1d:dc:90:3a:4c:8a:60:be:8b:b5:d9: fc:ad:0d:85:58:4f:1a:39:8a:4c:e4:c8:92:e2:0f:5d:2e:6b: e5:ad:a8:47:43:e4:2a:74:e5:b6:21:46:df:28:81:08:14:8f: 77:5b:ab:c6:b9:5a:14:db:e2:78:a9:8d:e3:34:e3:d6:89:fb: 34:9a:c1:f8:d2:95:a7:49:1f:62:74:76:84:ba:f4:1c:5d:52: f0:1f:7a:1d:50:50:08:ea:2a:a2:59:96:c0:3b:e5:91:81:89: 21:25:55:3d:f7:c7:cb:18:e9:1e:38:93:cb:9c:4e:27:85:d6: 58:b3:47:1d:bb:a4:43:fe:aa:ad:be:2b:d2:b0:56:e3:10:db: 30:2b:cb:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU0f6a7LbhtJuLwK2pHOVwKgmrRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDEwNDQwWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWMzNDk5Y2NlNWVkZDQzOWFhYzc0OWRkYjgyNzgzNzAx MTlhNzljZjZhMmYyMDJhM2UxYTA3NzJlZDc1NjU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxJykpNSPK558csqGfeIOvLYZyXHcmcXNxdLI5YELbbieR 30f+GpYPqpvbfH7Fs/e5Lh6JiL9RhlRFI6+CBnq5horfShcKc8+8K/w9YawllWi1 KNfueO/cW7shW73MsPpkPx5B1gmWfW5yTvsqit3ikoeROBIg04vyJUC4MoMpXYBQ giLENgXFzFMepYXpPOrmoFFV8dax2pHm/4o7iqQ2mCOOs1s/nH23Xa7xRbOmwnDG q7duggGSakgvuEv1duyJHUz1E6agZuYqZcVzx5oLEXXfmuyCX5SeL4Mieu5/UFXm q+sGmmJ4aUa4XqcZBxoBySMcLmcUxZhTrWXIRRJRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUar+KfO2go4lR2ErOUdeRyhQtNiEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMWMwMjBkLTQxMzEtNDdmMC1hM2Y3LWIwNTU1Y2YwMjZlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc4RAAwDQYJKoZIhvcNAQELBQADggEBANk7rDd7L3naEoro69GuNjZbLD7a MtToxWuGzeW3j4fPG8ryHXzAh92Euyt6FmgJkDGe0BYwWRqG378yUtwmkzIRrrNX ljc/o+ZwRjRsXnwkMzk7W8eYCfIN6Pu350QwU6AkECXDQG6tv3nhIkC8RZGBIqwd 3JA6TIpgvou12fytDYVYTxo5ikzkyJLiD10ua+WtqEdD5Cp05bYhRt8ogQgUj3db q8a5WhTb4nipjeM049aJ+zSawfjSladJH2J0doS69BxdUvAfeh1QUAjqKqJZlsA7 5ZGBiSElVT33x8sY6R44k8ucTieF1lizRx27pEP+qq2+K9KwVuMQ2zAry00= -----END CERTIFICATE-----Generated at Wed Nov 4 12:34:20 2026 by rpki-client