$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e111cab-b373-424b-a3a9-8c8fc7f71e17.roa File: 3e111cab-b373-424b-a3a9-8c8fc7f71e17.roa (raw, json) Hash identifier: fcxUxCWwhcm5RBcldJmL1zWDPtFEmvU3hxTP+21ZBe0= Subject key identifier: 68:CC:06:41:B5:F7:41:33:25:A4:04:32:E4:39:7D:FD:F7:DC:5A:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6397CA1D8D1DC00EE8730060436D049E82E6695B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e111cab-b373-424b-a3a9-8c8fc7f71e17.roa Signing time: Sun 11 Oct 2026 00:11:39 +0000 ROA not before: Sun 11 Oct 2026 00:11:39 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 37.203.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:97:ca:1d:8d:1d:c0:0e:e8:73:00:60:43:6d:04:9e:82:e6:69:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 00:11:39 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=a71c5c8486fa521f4a85d730cb243a3b647ff1879192f9cd5a8e860bcb0bae38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:d9:14:18:77:63:f6:11:1a:9f:18:37:59: c4:e5:4b:e4:09:30:63:a4:c5:46:a2:c4:d5:7c:3e: 70:ef:6a:e6:0e:d7:55:cb:62:bf:e8:f1:36:0a:a6: a3:a6:01:6d:1f:1a:b0:73:1f:cb:7e:90:a1:50:d4: ab:9d:0b:2b:11:c9:d9:35:ca:6f:23:5c:69:b9:a6: fe:bb:33:b6:19:8d:d7:cd:de:b2:30:5c:8a:ba:03: 96:01:33:5c:79:55:01:de:03:77:24:3c:b9:65:6a: a1:b4:8d:15:4b:6f:70:eb:46:41:fa:f1:b0:26:16: be:00:82:78:86:ad:16:08:97:2c:e0:57:b6:ef:04: d9:c5:9b:91:0b:fb:bf:20:d0:c0:91:65:22:2b:56: cc:78:3e:f6:24:66:aa:77:71:02:55:9a:d0:cf:cf: af:2b:f5:7f:a0:59:4b:ee:5c:66:fe:04:0d:00:4c: 2f:4e:3d:82:9e:19:c2:00:c3:06:87:a9:19:59:58: 16:55:1e:83:fe:4f:ab:78:f5:bf:f4:93:bb:89:11: 3a:97:1d:aa:86:bd:75:25:cf:fa:d1:78:c0:85:5d: 32:01:57:c5:b9:40:ad:1e:5c:3f:05:ba:ea:18:bc: b2:50:7d:b6:d6:c5:e4:64:cb:53:86:b1:4c:60:57: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CC:06:41:B5:F7:41:33:25:A4:04:32:E4:39:7D:FD:F7:DC:5A:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e111cab-b373-424b-a3a9-8c8fc7f71e17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.157.0/24 Signature Algorithm: sha256WithRSAEncryption b1:0e:2b:91:7c:a1:08:3d:78:8d:76:cb:92:d9:a1:11:fd:44: 7f:66:32:87:ce:4c:51:5b:8d:ab:ca:55:87:d0:6f:a6:21:cc: 58:d7:b1:cd:da:72:72:a3:40:f7:c3:8c:50:01:5e:9a:db:58: 62:1b:6e:6f:f0:d8:15:71:ff:72:a7:10:f6:d8:1e:3e:28:af: 84:2b:3d:c2:98:00:aa:b5:8d:60:a8:56:e4:07:a9:81:f9:f7: e9:d4:78:3f:31:be:28:72:0d:bc:3d:5d:92:81:7e:e1:b1:49: 7e:c3:8d:5e:ba:55:31:d4:8d:b9:61:52:0d:a4:92:6b:d8:b8: ee:90:79:8d:8b:a2:43:be:3e:a9:43:38:d6:d8:d7:81:0c:e4: b7:9f:ec:07:6a:eb:1c:a7:47:38:f6:bd:aa:84:41:51:fa:cb: 82:94:90:3b:ed:4b:ce:77:ea:76:25:a3:44:5d:bc:0e:92:6d: b9:3d:fd:45:b8:3c:df:f1:08:8e:22:57:d7:86:47:7e:12:02: 43:c2:6f:2f:3c:d1:3a:17:42:29:ea:23:dc:76:aa:15:69:8d: 10:ef:ac:f7:1c:c0:d5:ac:84:39:f2:82:37:65:3e:f9:b5:96: 7b:d2:55:c4:94:6b:cf:ee:71:ef:a6:3c:73:22:11:5c:a8:3a: 37:3b:87:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY5fKHY0dwA7ocwBgQ20EnoLmaVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAxMTM5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzFjNWM4NDg2ZmE1MjFmNGE4NWQ3MzBjYjI0M2EzYjY0 N2ZmMTg3OTE5MmY5Y2Q1YThlODYwYmNiMGJhZTM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE8dkUGHdj9hEanxg3WcTlS+QJMGOkxUaixNV8PnDvauYO 11XLYr/o8TYKpqOmAW0fGrBzH8t+kKFQ1KudCysRydk1ym8jXGm5pv67M7YZjdfN 3rIwXIq6A5YBM1x5VQHeA3ckPLllaqG0jRVLb3DrRkH68bAmFr4AgniGrRYIlyzg V7bvBNnFm5EL+78g0MCRZSIrVsx4PvYkZqp3cQJVmtDPz68r9X+gWUvuXGb+BA0A TC9OPYKeGcIAwwaHqRlZWBZVHoP+T6t49b/0k7uJETqXHaqGvXUlz/rReMCFXTIB V8W5QK0eXD8FuuoYvLJQfbbWxeRky1OGsUxgVz1JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaMwGQbX3QTMlpAQy5Dl9/ffcWn4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMTExY2FiLWIzNzMtNDI0Yi1hM2E5LThjOGZjN2Y3MWUxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAly50wDQYJKoZIhvcNAQELBQADggEBALEOK5F8oQg9eI12y5LZoRH9RH9m MofOTFFbjavKVYfQb6YhzFjXsc3acnKjQPfDjFABXprbWGIbbm/w2BVx/3KnEPbY Hj4or4QrPcKYAKq1jWCoVuQHqYH59+nUeD8xvihyDbw9XZKBfuGxSX7DjV66VTHU jblhUg2kkmvYuO6QeY2LokO+PqlDONbY14EM5Lef7Adq6xynRzj2vaqEQVH6y4KU kDvtS8536nYlo0RdvA6Sbbk9/UW4PN/xCI4iV9eGR34SAkPCby880ToXQinqI9x2 qhVpjRDvrPccwNWshDnygjdlPvm1lnvSVcSUa8/uce+mPHMiEVyoOjc7h/I= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:50 2026 by rpki-client