$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa File: 3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa (raw, json) Hash identifier: JJSgzHlXrRzbG4HwUx40jBnCuASw62+AdqSymfVZjOk= Subject key identifier: 84:6A:88:BA:22:62:AF:91:60:29:D0:45:EB:A1:5C:D9:6B:39:50:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6157C1753EC2D403FADE1F7AA9ECD50FD25EA47F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa Signing time: Tue 06 Oct 2026 00:01:26 +0000 ROA not before: Tue 06 Oct 2026 00:01:26 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:57:c1:75:3e:c2:d4:03:fa:de:1f:7a:a9:ec:d5:0f:d2:5e:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:01:26 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=f279d7417dfde018382bc117b3adf471394525b115f10ce58e499c547b9f49f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:15:d7:95:ce:e7:37:b8:32:75:a7:be:7c: e0:df:9e:21:b7:7b:9b:4f:11:d8:ae:2a:3f:3b:c1: 6e:09:8e:47:f4:ee:46:bc:55:06:3e:dd:4c:76:d5: 60:ba:dd:93:10:b6:78:b3:bb:1d:c1:da:37:cb:e1: 24:ca:fe:e2:97:32:8c:67:72:5e:7b:0e:c6:57:d0: d7:8d:26:ff:39:82:a1:c2:06:0c:23:4f:5b:f7:97: 28:e6:b0:b0:fa:0e:75:42:19:a4:86:99:4f:cd:15: 9e:19:f9:af:8c:70:5f:d0:8f:a2:ae:81:dc:26:94: a0:3c:48:39:b3:f3:c8:36:bb:be:30:d7:37:27:03: ca:f6:f9:7c:f7:87:02:07:c7:10:bd:6e:f7:84:e4: 31:1b:a0:7f:24:dc:f9:c7:a7:d8:f6:28:78:b6:52: 2d:46:9d:ee:d8:e4:a3:79:73:7d:2d:45:77:2a:07: d0:bd:b7:f8:57:68:38:84:88:95:42:8d:ea:cc:1e: 81:a2:ab:37:7c:a3:98:04:d7:84:e2:30:12:75:b7: e8:1a:82:64:ef:30:3f:f1:8b:c6:84:49:58:6a:a9: c6:0d:4c:cd:e4:fb:8b:0b:8c:2e:04:5f:5d:ff:7f: b4:21:0b:94:21:e3:27:cd:eb:da:f5:3c:44:4a:3e: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6A:88:BA:22:62:AF:91:60:29:D0:45:EB:A1:5C:D9:6B:39:50:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.70.0/24 Signature Algorithm: sha256WithRSAEncryption b4:51:75:02:f8:35:bf:30:9c:30:b0:af:82:a0:68:23:59:c4: 9c:57:20:cc:ca:cf:15:f9:94:06:33:09:fe:b2:36:c7:84:59: 7f:73:26:1b:4b:32:84:90:ce:a8:62:88:25:c8:71:1e:b7:31: e3:03:28:97:0e:9e:2a:a9:c4:4a:0a:05:c1:8a:70:f4:46:4e: f4:ac:42:76:8c:e2:56:5a:74:9c:96:b4:60:fa:35:25:05:1a: fb:bc:58:ba:f3:16:71:53:b1:5b:f7:b9:8c:d5:78:ea:f5:33: f4:68:1e:d5:c9:33:c9:bd:73:90:33:04:aa:22:52:23:28:52: 80:1f:39:17:a5:15:ac:3e:ce:a5:50:5d:b6:47:1f:10:a0:20: 2b:d2:13:b4:b9:2f:3b:78:7f:11:f6:99:7d:c9:71:2a:a5:58: 07:87:70:9b:1b:1c:b0:7d:19:30:f9:d9:75:4d:02:71:4a:15: 98:37:f1:3a:a1:22:05:ec:05:db:4c:20:df:56:ba:ef:b3:a9: e2:1e:8b:e5:ad:4d:4c:27:bf:8e:84:21:8e:d1:1e:85:d1:11: 2c:df:25:f3:6d:c6:b8:ec:1f:6d:14:66:e8:2f:b8:54:b4:60: 7a:10:ec:53:e0:ec:8c:b1:82:c6:71:90:5a:e9:8e:f4:e6:21: 1c:4b:2c:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYVfBdT7C1AP63h96qezVD9JepH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAwMTI2WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjc5ZDc0MTdkZmRlMDE4MzgyYmMxMTdiM2FkZjQ3MTM5 NDUyNWIxMTVmMTBjZTU4ZTQ5OWM1NDdiOWY0OWYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK1xXXlc7nN7gydae+fODfniG3e5tPEdiuKj87wW4Jjkf0 7ka8VQY+3Ux21WC63ZMQtnizux3B2jfL4STK/uKXMoxncl57DsZX0NeNJv85gqHC BgwjT1v3lyjmsLD6DnVCGaSGmU/NFZ4Z+a+McF/Qj6KugdwmlKA8SDmz88g2u74w 1zcnA8r2+Xz3hwIHxxC9bveE5DEboH8k3PnHp9j2KHi2Ui1Gne7Y5KN5c30tRXcq B9C9t/hXaDiEiJVCjerMHoGiqzd8o5gE14TiMBJ1t+gagmTvMD/xi8aESVhqqcYN TM3k+4sLjC4EX13/f7QhC5Qh4yfN69r1PERKPtnDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhGqIuiJir5FgKdBF66Fc2Ws5UEMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlZDgxN2JjLWZlMzQtNDFmZC1iNWQ0LWI3ODA1ZWNkMmQ3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EYwDQYJKoZIhvcNAQELBQADggEBALRRdQL4Nb8wnDCwr4KgaCNZxJxX IMzKzxX5lAYzCf6yNseEWX9zJhtLMoSQzqhiiCXIcR63MeMDKJcOniqpxEoKBcGK cPRGTvSsQnaM4lZadJyWtGD6NSUFGvu8WLrzFnFTsVv3uYzVeOr1M/RoHtXJM8m9 c5AzBKoiUiMoUoAfORelFaw+zqVQXbZHHxCgICvSE7S5Lzt4fxH2mX3JcSqlWAeH cJsbHLB9GTD52XVNAnFKFZg38TqhIgXsBdtMIN9Wuu+zqeIei+WtTUwnv46EIY7R HoXRESzfJfNtxrjsH20UZugvuFS0YHoQ7FPg7IyxgsZxkFrpjvTmIRxLLKg= -----END CERTIFICATE-----Generated at Mon Nov 2 21:12:09 2026 by rpki-client