$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa File: 3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa (raw, json) Hash identifier: OFxOwJeYq1MVWZanjOQHhXQ68eOrPgNMPbgR5XE7OI8= Subject key identifier: 5F:1E:F6:FA:5A:80:BD:12:48:05:EB:8A:E4:3E:8E:E4:2D:56:65:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 648CB63C1BA7B07542A4F4F9B77650A058F35F55 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa Signing time: Fri 09 Oct 2026 00:51:23 +0000 ROA not before: Fri 09 Oct 2026 00:51:23 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 216.216.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8c:b6:3c:1b:a7:b0:75:42:a4:f4:f9:b7:76:50:a0:58:f3:5f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 00:51:23 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=874cdf3117cc06ca9f6cbdb60661ddf11b570811434c4c56d3d00b4abac60ed7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:71:19:d4:7c:bd:99:92:b8:d5:c8:ae:3e: 06:06:e4:9c:19:09:23:8a:1f:e9:20:48:62:91:a6: ee:3f:ed:2f:db:11:f5:41:ff:75:5a:4f:62:a5:9f: 9a:e2:48:dc:41:ab:b1:1f:56:b2:74:cf:f5:0b:29: 1e:a2:76:32:81:f3:55:df:cb:b0:f2:8b:3a:77:90: e4:94:92:5f:b3:9f:1d:85:c2:94:99:0f:3e:21:a1: 18:fe:0c:46:fb:91:70:cb:9f:2c:0b:bd:2b:30:46: 01:33:f4:d4:30:d4:8d:8d:7a:ad:f2:64:45:0f:1b: 08:de:79:e3:ed:89:d6:45:2f:30:41:cb:2d:58:ba: 24:51:63:2b:4f:83:59:45:dc:84:54:e5:22:ae:0d: 63:2d:61:ec:62:4d:3e:ee:28:8c:88:a9:50:db:66: c6:0d:18:43:48:9e:72:4f:c7:44:a6:34:91:c7:65: 6d:9a:82:e9:c3:81:df:c2:fe:40:8b:23:69:7a:5d: 5d:17:97:f3:43:0a:c7:3a:3b:9e:86:38:c3:21:0f: d8:b8:45:c8:8f:50:fb:ab:ff:ff:0f:e2:5c:3a:ec: b5:42:d4:f3:48:7a:bc:a0:7a:c9:c5:04:8b:af:92: 47:69:3b:7f:fc:a4:ca:8b:e0:0a:76:9e:5a:c5:f3: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1E:F6:FA:5A:80:BD:12:48:05:EB:8A:E4:3E:8E:E4:2D:56:65:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.216.0.0/15 Signature Algorithm: sha256WithRSAEncryption 08:b8:16:ec:f6:20:bc:9b:14:35:7f:c3:7e:c5:90:b9:f9:a1: d0:54:ed:e8:f9:63:fb:69:57:1b:01:33:aa:f9:a6:01:d3:8a: e0:71:61:90:ce:91:62:fd:1c:e3:30:94:bb:fd:53:10:5a:aa: 14:e6:45:b2:e8:22:2c:eb:bd:26:51:f9:54:3e:31:82:06:43: 5a:6e:e9:b0:1a:1a:f9:09:b5:b5:c0:96:de:a5:6b:e0:9d:f9: 15:3c:44:1d:68:e7:23:da:b2:9d:a2:6f:0f:76:f3:21:fb:8a: a8:1c:5e:e2:8a:a6:e3:e2:d2:38:fd:4a:c3:1c:42:47:4b:01: 68:ae:d2:3e:a8:04:eb:ef:36:0b:d4:9d:51:88:00:16:90:03: be:70:e2:09:f9:be:ba:6f:75:be:50:29:f7:aa:02:15:00:22: bb:ff:d5:a3:3e:a2:b3:2f:d2:b5:5b:20:4e:a9:e6:79:2b:18: 16:80:a0:a0:1f:dd:0e:b4:32:0f:0e:24:50:fb:78:9c:08:4a: 5b:3e:e8:91:9a:48:31:5a:20:af:99:bf:87:7d:04:c0:6b:9e: af:49:a3:06:74:76:10:a3:de:e2:78:f3:b1:7c:b2:37:d1:0e: 9d:6b:c6:f8:53:80:01:89:56:c1:30:87:9a:f7:86:98:c2:58: cc:f5:93:be -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZIy2PBunsHVCpPT5t3ZQoFjzX1UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDA1MTIzWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzRjZGYzMTE3Y2MwNmNhOWY2Y2JkYjYwNjYxZGRmMTFi NTcwODExNDM0YzRjNTZkM2QwMGI0YWJhYzYwZWQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTp3EZ1Hy9mZK41ciuPgYG5JwZCSOKH+kgSGKRpu4/7S/b EfVB/3VaT2Kln5riSNxBq7EfVrJ0z/ULKR6idjKB81Xfy7Dyizp3kOSUkl+znx2F wpSZDz4hoRj+DEb7kXDLnywLvSswRgEz9NQw1I2Neq3yZEUPGwjeeePtidZFLzBB yy1YuiRRYytPg1lF3IRU5SKuDWMtYexiTT7uKIyIqVDbZsYNGENInnJPx0SmNJHH ZW2agunDgd/C/kCLI2l6XV0Xl/NDCsc6O56GOMMhD9i4RciPUPur//8P4lw67LVC 1PNIerygesnFBIuvkkdpO3/8pMqL4Ap2nlrF8+W1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXx72+lqAvRJIBeuK5D6O5C1WZc0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlNzJlNjJiLTY4OTEtNDVmNC1hOGM3LWQ2YjJmY2Y2MDg5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwHY2DANBgkqhkiG9w0BAQsFAAOCAQEACLgW7PYgvJsUNX/DfsWQufmh0FTt 6Plj+2lXGwEzqvmmAdOK4HFhkM6RYv0c4zCUu/1TEFqqFOZFsugiLOu9JlH5VD4x ggZDWm7psBoa+Qm1tcCW3qVr4J35FTxEHWjnI9qynaJvD3bzIfuKqBxe4oqm4+LS OP1KwxxCR0sBaK7SPqgE6+82C9SdUYgAFpADvnDiCfm+um91vlAp96oCFQAiu//V oz6isy/StVsgTqnmeSsYFoCgoB/dDrQyDw4kUPt4nAhKWz7okZpIMVogr5m/h30E wGuer0mjBnR2EKPe4njzsXyyN9EOnWvG+FOAAYlWwTCHmveGmMJYzPWTvg== -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:58 2026 by rpki-client