$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa File: 3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa (raw, json) Hash identifier: doOwovjslqAueZtmEAkIcc5yTSRCHo4SHQnMbPokokI= Subject key identifier: EA:19:43:AF:18:7E:38:83:C9:8C:6F:86:DC:15:47:EC:75:64:98:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 466252B70EC9678D4EE79B0E580BC8EA4177DB41 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa Signing time: Fri 23 Oct 2026 02:21:45 +0000 ROA not before: Fri 23 Oct 2026 02:21:45 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:62:52:b7:0e:c9:67:8d:4e:e7:9b:0e:58:0b:c8:ea:41:77:db:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:21:45 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=2c537c734b30e6cbb39bf6a84d17d562180d779611dc5dd1df49374e5c825534, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:b2:02:cf:0f:39:5f:60:6f:d6:d2:05:b6: 46:3d:24:7b:7d:b8:21:9d:0a:05:6b:70:45:22:90: 5b:5e:22:52:a0:64:4b:5c:ef:ef:76:ed:15:38:93: 6a:68:70:df:f2:27:e6:ca:d8:16:80:be:c2:8b:3e: cf:c0:99:43:cc:1e:f3:f9:d9:18:eb:9d:bc:82:a7: 0f:de:f8:17:e5:6c:49:b9:8c:16:1c:e6:56:90:69: a4:80:91:72:0c:ef:fd:e1:16:be:37:b9:8a:92:a0: 8b:38:ff:fa:0b:2c:5d:57:f7:22:b4:18:ef:cf:55: 41:2f:2f:99:b6:30:65:17:b8:c5:36:1f:b4:62:22: a4:f6:7e:81:99:1e:e1:51:27:fc:95:90:fd:ad:fb: a6:cd:e2:c9:82:a0:9a:e0:7d:dc:b6:18:fc:bb:fc: a0:77:b8:09:96:79:27:99:6d:bd:99:37:70:aa:6c: 63:2d:e7:11:b5:71:d6:88:31:ce:c5:51:15:69:41: 82:85:9d:e8:b1:62:5e:93:ae:18:81:09:6a:aa:6d: 3a:4f:e9:e8:9f:62:88:2c:e6:20:82:88:1c:9d:4e: 92:d4:3a:39:05:2b:9e:f3:80:d2:3e:80:5e:bf:9a: 8e:d7:ef:7d:8d:ac:20:53:03:3a:30:be:93:98:ca: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:19:43:AF:18:7E:38:83:C9:8C:6F:86:DC:15:47:EC:75:64:98:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.0.0/22 Signature Algorithm: sha256WithRSAEncryption 15:06:a1:4b:7c:e2:cf:f8:c1:13:e7:0f:f8:6f:9c:ad:d2:95: b3:df:cd:71:f9:ca:1e:3a:bd:32:a1:40:a5:51:92:47:8c:7c: 42:79:a0:78:4f:c8:d1:3f:ad:ed:e8:58:df:77:e6:e4:c5:cf: f8:0a:eb:0b:79:45:d4:b4:02:92:77:64:9b:ca:38:7b:20:21: 1b:f6:bd:cf:02:79:10:d7:da:54:80:19:f6:7a:33:19:c5:c4: 4a:90:1f:5b:6a:6f:1b:54:73:59:d0:7a:32:6f:ec:65:30:2f: 99:31:57:af:25:3d:ca:4d:ab:ea:8c:ec:f4:33:b5:65:9a:50: 51:99:f5:8c:e1:2a:b7:32:53:2b:0b:69:e6:4f:77:9e:8f:37: cb:48:08:fc:9d:91:37:2c:c0:70:f6:b4:4f:30:67:45:ad:28: 18:70:da:41:4b:bd:a1:8a:7a:ec:f7:37:62:1d:e3:97:ce:f4: 2f:cd:3b:c5:33:26:eb:bc:47:24:76:e4:35:17:05:12:3a:79: f9:df:d8:31:29:bb:25:98:29:0b:f6:5d:43:e7:83:c0:f7:6b: 7d:9d:82:cc:41:02:f4:53:e0:6c:01:ae:9b:d3:f5:e0:8f:8d: 4d:fb:40:27:96:62:9d:de:20:7d:73:ee:22:f2:9a:63:8b:21: 08:73:81:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURmJStw7JZ41O55sOWAvI6kF320EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIyMTQ1WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzUzN2M3MzRiMzBlNmNiYjM5YmY2YTg0ZDE3ZDU2MjE4 MGQ3Nzk2MTFkYzVkZDFkZjQ5Mzc0ZTVjODI1NTM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYqbICzw85X2Bv1tIFtkY9JHt9uCGdCgVrcEUikFteIlKg ZEtc7+927RU4k2pocN/yJ+bK2BaAvsKLPs/AmUPMHvP52RjrnbyCpw/e+BflbEm5 jBYc5laQaaSAkXIM7/3hFr43uYqSoIs4//oLLF1X9yK0GO/PVUEvL5m2MGUXuMU2 H7RiIqT2foGZHuFRJ/yVkP2t+6bN4smCoJrgfdy2GPy7/KB3uAmWeSeZbb2ZN3Cq bGMt5xG1cdaIMc7FURVpQYKFneixYl6TrhiBCWqqbTpP6eifYogs5iCCiBydTpLU OjkFK57zgNI+gF6/mo7X732NrCBTAzowvpOYysB7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6hlDrxh+OIPJjG+G3BVH7HVkmN0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkZWZhOWUzLTJkM2YtNDdkOC05OWNkLTYzMWQxNWZhOTM5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/gAwDQYJKoZIhvcNAQELBQADggEBABUGoUt84s/4wRPnD/hvnK3SlbPf zXH5yh46vTKhQKVRkkeMfEJ5oHhPyNE/re3oWN935uTFz/gK6wt5RdS0ApJ3ZJvK OHsgIRv2vc8CeRDX2lSAGfZ6MxnFxEqQH1tqbxtUc1nQejJv7GUwL5kxV68lPcpN q+qM7PQztWWaUFGZ9YzhKrcyUysLaeZPd56PN8tICPydkTcswHD2tE8wZ0WtKBhw 2kFLvaGKeuz3N2Id45fO9C/NO8UzJuu8RyR25DUXBRI6efnf2DEpuyWYKQv2XUPn g8D3a32dgsxBAvRT4GwBrpvT9eCPjU37QCeWYp3eIH1z7iLymmOLIQhzgaw= -----END CERTIFICATE-----Generated at Mon Nov 2 18:48:13 2026 by rpki-client