$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c024a47-7c98-464a-8556-eaf88725802b.roa File: 3c024a47-7c98-464a-8556-eaf88725802b.roa (raw, json) Hash identifier: PAiARiqUfG0obEfD1QRYgbTC311iVjab1NZrCerQc+A= Subject key identifier: 7D:5F:C8:A1:9C:2F:0C:D1:F3:25:D6:9F:22:37:0E:7C:FC:82:32:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C6D88BD0CCC7F571590B56DEA7C3947810DB772 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c024a47-7c98-464a-8556-eaf88725802b.roa Signing time: Thu 22 Oct 2026 02:11:44 +0000 ROA not before: Thu 22 Oct 2026 02:11:44 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 107.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6d:88:bd:0c:cc:7f:57:15:90:b5:6d:ea:7c:39:47:81:0d:b7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:11:44 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=545cde2337b4aae73bc01937bafc3ff2ec82cf195ee480a7a3055c4483846f7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:f9:51:4e:04:1a:34:cc:55:6e:fa:dc:e7: 84:38:d0:08:bc:30:fb:65:a0:37:fc:9d:66:21:d1: aa:04:cc:bf:28:f7:46:ba:b7:c8:14:7e:6e:0b:61: 9e:06:12:8c:5b:37:28:b9:95:68:d0:07:9e:2a:f1: bf:ed:7b:fe:b7:d1:e5:1c:46:c7:09:ee:ba:b0:21: 09:3e:87:b4:79:63:02:c3:f6:6c:e7:b7:41:ff:a7: 67:e5:20:a0:d3:4e:d4:e2:43:4b:ba:3f:12:a8:35: d8:89:2b:ee:20:86:46:bd:ae:f5:4d:2d:fc:a8:32: 28:ca:e3:a4:7b:97:01:3d:fd:12:03:9e:96:82:60: 08:84:48:29:d4:b3:14:be:42:19:83:43:84:a5:37: c8:02:a7:54:d1:8e:e9:86:70:69:f5:ba:75:57:67: 60:03:98:da:0d:f0:85:e7:5e:41:fb:3d:1b:cd:4a: 3a:ed:72:f5:01:24:8a:d9:86:38:1e:ea:ce:79:c5: ec:3a:9d:5d:67:8f:9d:51:23:a1:ca:22:65:7b:b5: 72:93:40:da:7c:65:3a:a4:27:0f:31:d7:90:45:96: 15:43:15:c2:80:2e:6b:73:3b:1e:2b:dd:78:41:80: f9:19:a0:54:9d:d0:57:5a:15:6b:1a:d5:13:60:07: c7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5F:C8:A1:9C:2F:0C:D1:F3:25:D6:9F:22:37:0E:7C:FC:82:32:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c024a47-7c98-464a-8556-eaf88725802b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption cd:97:da:5c:a4:3e:d9:b0:b8:d4:df:3f:d1:0e:ca:02:b6:77: ef:ee:a4:1d:5b:96:73:b7:fb:18:90:26:52:c6:f3:65:d3:23: db:64:d8:1b:88:93:51:88:eb:b3:46:e7:7a:4f:ac:42:1a:0e: 58:35:06:45:21:fe:31:ae:81:2f:38:a0:ac:cf:70:60:72:66: 56:4f:a9:05:6e:c7:ef:0f:e4:29:b6:4d:95:1b:1c:ec:93:dd: 55:2f:28:8c:f9:6b:11:a1:1b:36:bd:63:3e:85:c1:56:bd:c9: ea:1a:3b:ba:20:f4:d9:6e:ad:ce:e8:8e:8c:8a:d8:64:20:a7: ef:a7:b6:55:4d:2f:ed:fe:ea:54:0e:44:94:11:ac:b6:2a:fd: bd:70:c0:d2:d1:1e:3c:7f:ae:7d:96:1c:db:0d:cc:d8:6f:75: 17:8f:2c:ba:53:6b:5b:7c:a8:18:61:3a:d1:14:a1:d6:e8:82: 90:80:30:1e:bc:bc:6b:02:fc:95:d7:3a:60:36:4b:05:e9:ac: ea:b5:ab:36:f4:8a:fd:ad:95:14:b7:c4:b2:44:2e:f7:4f:ef: d9:cd:f7:67:bc:cf:2c:69:c9:28:21:2b:a9:0c:5b:7e:8e:c4: e4:18:9d:e9:24:1e:94:70:f1:95:ad:3d:5a:03:f2:25:c3:4e: 32:7f:2a:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPG2IvQzMf1cVkLVt6nw5R4ENt3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIxMTQ0WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDVjZGUyMzM3YjRhYWU3M2JjMDE5MzdiYWZjM2ZmMmVj ODJjZjE5NWVlNDgwYTdhMzA1NWM0NDgzODQ2ZjdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNDvlRTgQaNMxVbvrc54Q40Ai8MPtloDf8nWYh0aoEzL8o 90a6t8gUfm4LYZ4GEoxbNyi5lWjQB54q8b/te/630eUcRscJ7rqwIQk+h7R5YwLD 9mznt0H/p2flIKDTTtTiQ0u6PxKoNdiJK+4ghka9rvVNLfyoMijK46R7lwE9/RID npaCYAiESCnUsxS+QhmDQ4SlN8gCp1TRjumGcGn1unVXZ2ADmNoN8IXnXkH7PRvN SjrtcvUBJIrZhjge6s55xew6nV1nj51RI6HKImV7tXKTQNp8ZTqkJw8x15BFlhVD FcKALmtzOx4r3XhBgPkZoFSd0FdaFWsa1RNgB8dfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfV/IoZwvDNHzJdafIjcOfPyCMpowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjMDI0YTQ3LTdjOTgtNDY0YS04NTU2LWVhZjg4NzI1ODAyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABrFp4wDQYJKoZIhvcNAQELBQADggEBAM2X2lykPtmwuNTfP9EOygK2d+/u pB1blnO3+xiQJlLG82XTI9tk2BuIk1GI67NG53pPrEIaDlg1BkUh/jGugS84oKzP cGByZlZPqQVux+8P5Cm2TZUbHOyT3VUvKIz5axGhGza9Yz6FwVa9yeoaO7og9Nlu rc7ojoyK2GQgp++ntlVNL+3+6lQORJQRrLYq/b1wwNLRHjx/rn2WHNsNzNhvdReP LLpTa1t8qBhhOtEUodbogpCAMB68vGsC/JXXOmA2SwXprOq1qzb0iv2tlRS3xLJE LvdP79nN92e8zyxpySghK6kMW36OxOQYnekkHpRw8ZWtPVoD8iXDTjJ/KpQ= -----END CERTIFICATE-----Generated at Tue Nov 3 16:17:12 2026 by rpki-client