$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa File: 3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa (raw, json) Hash identifier: AQ/hTDiuSqyR5OG9gdOfdBa+txF7EnVI62F7rD+Txd0= Subject key identifier: C7:23:CB:19:01:62:5C:6B:C4:C6:DD:34:15:4F:AA:28:7A:F7:86:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 281F44299ED0E436613E9E331CC737A9415707AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa Signing time: Thu 22 Oct 2026 01:20:40 +0000 ROA not before: Thu 22 Oct 2026 01:20:40 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1f:44:29:9e:d0:e4:36:61:3e:9e:33:1c:c7:37:a9:41:57:07:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:20:40 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=a48d6ac57cb87b519ca1123972460fe49ef1d6a6ac39dd1d0162ecb21b248418, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:2f:b4:8d:d1:52:dc:8f:f5:bd:69:bf:87: 81:f3:c9:b8:86:cc:b9:06:c3:16:2c:ca:88:22:ab: a9:46:53:c7:42:ba:d3:af:46:ca:23:b4:04:86:49: 94:9a:18:94:aa:2f:e4:99:48:17:03:a5:5f:98:5b: 56:eb:27:fa:bf:49:9e:52:e1:d0:53:09:a6:3a:9b: d7:38:33:08:d5:a1:81:59:a8:b7:ae:b5:4f:d5:65: d8:d7:68:f4:33:4b:82:48:c5:44:0c:42:3e:9d:54: f3:d8:4a:48:53:9e:2a:28:0f:93:e4:67:6a:c8:32: 4e:13:80:dd:e1:f4:51:88:91:2c:6c:04:89:c8:34: 6a:62:19:82:b2:b8:03:02:4c:9a:a2:de:f0:8c:77: cd:ac:9b:b8:26:56:1d:e1:e8:c3:8e:9c:91:d8:70: 70:c2:ee:48:e2:fd:d4:6c:45:0b:ab:e2:bc:63:2d: 40:15:74:e3:72:72:eb:0e:a6:2c:20:b1:fe:f3:89: 1d:c4:25:49:a3:69:4c:12:8e:a5:57:04:62:86:fa: 10:65:7f:13:1d:2c:a4:62:fb:1d:5f:1a:77:9b:0f: a1:66:ac:89:bb:ce:48:60:19:f8:3f:a8:4e:16:48: a9:20:cd:7d:d4:7b:52:78:cb:b6:ef:f5:eb:de:fc: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:23:CB:19:01:62:5C:6B:C4:C6:DD:34:15:4F:AA:28:7A:F7:86:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.80.0/21 Signature Algorithm: sha256WithRSAEncryption 05:87:0a:55:41:5b:55:56:e7:22:c6:db:ab:ba:b4:ab:f4:a9: f6:10:b0:a9:59:39:3e:f4:50:4d:c8:71:6a:c5:f0:c2:ab:b2: 36:10:c7:7a:f4:7f:03:56:1a:80:57:0d:53:9d:5d:32:57:cb: cf:06:79:05:f2:9d:03:38:22:ff:b7:ee:29:0d:32:35:fb:e7: d8:8c:f0:65:ae:12:dd:e8:d7:24:cb:b5:0c:c7:d2:39:d7:37: 98:aa:26:1d:88:26:b6:91:72:ed:b5:ab:68:f3:2c:ba:2b:2c: dc:62:e5:b1:8c:3f:c5:c0:08:67:cc:01:ce:ce:bd:85:7b:39: 1f:2e:84:4b:9b:d0:11:37:fd:26:86:69:b2:d5:a6:06:35:ad: 5b:1e:fb:a0:96:41:64:ce:f2:bd:28:18:26:c6:51:49:95:7c: c2:a1:7c:cd:c2:26:bb:63:98:01:b2:87:7e:84:d8:98:b2:74: 92:31:f1:39:29:fd:66:af:80:9a:9f:2d:1e:57:6e:aa:b2:16: 28:3f:68:a2:2a:63:0e:6e:e7:e4:8d:8d:e9:e1:69:fb:0c:73: 44:bb:90:ef:e8:59:12:d3:4f:75:bb:98:f2:60:71:d2:3c:3d: 70:18:ff:1c:f2:e9:a8:56:a7:ce:62:b5:43:13:e1:fd:6f:28: 2f:2e:13:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKB9EKZ7Q5DZhPp4zHMc3qUFXB6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEyMDQwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDhkNmFjNTdjYjg3YjUxOWNhMTEyMzk3MjQ2MGZlNDll ZjFkNmE2YWMzOWRkMWQwMTYyZWNiMjFiMjQ4NDE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1pi+0jdFS3I/1vWm/h4HzybiGzLkGwxYsyogiq6lGU8dC utOvRsojtASGSZSaGJSqL+SZSBcDpV+YW1brJ/q/SZ5S4dBTCaY6m9c4MwjVoYFZ qLeutU/VZdjXaPQzS4JIxUQMQj6dVPPYSkhTniooD5PkZ2rIMk4TgN3h9FGIkSxs BInINGpiGYKyuAMCTJqi3vCMd82sm7gmVh3h6MOOnJHYcHDC7kji/dRsRQur4rxj LUAVdONycusOpiwgsf7ziR3EJUmjaUwSjqVXBGKG+hBlfxMdLKRi+x1fGnebD6Fm rIm7zkhgGfg/qE4WSKkgzX3Ue1J4y7bv9eve/CE3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxyPLGQFiXGvExt00FU+qKHr3hpYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjNzFhZWY4LWRiMGEtNGNkMi1iM2YwLTlhMzc2OGViOTY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBs1AwDQYJKoZIhvcNAQELBQADggEBAAWHClVBW1VW5yLG26u6tKv0qfYQ sKlZOT70UE3IcWrF8MKrsjYQx3r0fwNWGoBXDVOdXTJXy88GeQXynQM4Iv+37ikN MjX759iM8GWuEt3o1yTLtQzH0jnXN5iqJh2IJraRcu21q2jzLLorLNxi5bGMP8XA CGfMAc7OvYV7OR8uhEub0BE3/SaGabLVpgY1rVse+6CWQWTO8r0oGCbGUUmVfMKh fM3CJrtjmAGyh36E2JiydJIx8Tkp/WavgJqfLR5XbqqyFig/aKIqYw5u5+SNjenh afsMc0S7kO/oWRLTT3W7mPJgcdI8PXAY/xzy6ahWp85itUMT4f1vKC8uEyo= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:36 2026 by rpki-client