$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa File: 3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa (raw, json) Hash identifier: IfQHhrl4kWKx2+RaXs5VtFWLJApKNj3Qkw9Zbcu/S4c= Subject key identifier: 32:00:7A:9E:AB:02:12:1A:C5:83:68:91:24:51:88:01:FB:D6:92:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 245859C1FEA97C3FEF5E2B614E5E47A7CF0E4FCD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa Signing time: Sat 24 Oct 2026 00:40:49 +0000 ROA not before: Sat 24 Oct 2026 00:40:49 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 63.34.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:58:59:c1:fe:a9:7c:3f:ef:5e:2b:61:4e:5e:47:a7:cf:0e:4f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:40:49 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=79457c4c0d067fcdd5c838f3adb1d544b74a51d74147a3e7360835f2c7e6243d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a7:09:05:48:14:2b:dd:a0:a1:d5:78:7c:d1: 06:ac:ea:51:e4:95:e1:f8:30:d6:4a:24:4a:1b:64: f5:06:2d:be:ed:97:81:d7:0d:94:c6:17:03:8c:3c: bc:79:21:75:4a:2b:55:ab:dc:17:b1:3c:1c:f7:73: 45:f0:05:6a:a8:bb:71:2f:55:fd:ab:97:05:8e:d9: 75:47:7a:69:9c:2d:97:dc:28:00:2a:d3:4d:13:a5: e8:ea:10:e0:fd:5e:1f:a1:ad:16:c8:30:98:da:a5: 72:1e:12:00:9c:4e:df:ea:8f:ae:3d:a4:31:8d:05: 50:c2:60:f1:35:18:d1:d4:3f:ae:3f:01:bc:46:d1: b3:a7:5b:20:e8:5b:0e:6a:c3:fb:40:38:3a:34:8a: b2:a4:a3:5b:03:b4:86:da:8b:c0:e0:f4:db:14:a9: 35:69:8a:4f:61:d3:91:da:35:f3:77:ae:54:b2:44: 46:3f:8e:8d:dd:ee:fa:34:09:0c:53:1d:1a:ac:66: f1:ed:4d:14:94:21:86:38:5a:ea:33:81:e3:55:6f: bf:14:20:e6:42:bc:9f:66:9d:0e:ef:43:61:d3:5b: bc:1c:06:ba:d4:7e:e9:30:ec:e5:6b:c0:3b:c9:0e: da:5c:10:e0:d0:09:f1:9c:0d:d7:19:79:32:01:f1: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:00:7A:9E:AB:02:12:1A:C5:83:68:91:24:51:88:01:FB:D6:92:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.34.60.0/22 Signature Algorithm: sha256WithRSAEncryption d8:82:56:51:dd:eb:2c:11:da:c7:2a:79:22:28:29:83:bd:f2: 32:63:79:b3:21:60:c6:7e:f5:bc:cf:b6:7e:c4:a7:9b:cd:41: f6:30:09:8b:25:38:cf:a9:bf:73:d6:57:14:f6:2c:a7:d4:8e: 44:c7:56:16:fa:4e:06:89:a2:5c:20:3f:58:8a:81:69:21:95: 50:cd:bb:3c:98:d0:43:f4:4c:a6:37:e3:96:a8:26:10:85:39: a5:52:33:f0:b5:1b:e6:aa:3a:df:5a:20:3e:f9:a0:49:24:f1: 28:c1:0b:9b:25:2a:28:88:0c:93:53:70:a8:0b:86:27:6f:8e: b4:db:a8:b0:18:02:56:52:25:a6:3b:d3:a7:97:e3:4a:38:45: f5:75:f2:eb:17:e7:43:c9:c8:ef:e3:1c:76:72:df:19:70:32: 45:ef:70:99:c1:0f:b0:aa:ae:94:49:ca:b1:27:19:36:76:98: f6:77:98:7d:a2:17:3a:e5:20:e0:e7:d2:ff:6e:cd:01:72:cf: 22:52:fc:00:3a:36:2d:d8:49:2a:52:27:fb:43:dd:54:e1:49: e9:53:70:13:f6:17:2a:ba:5a:d5:3f:f3:fe:da:a7:03:8f:58: 06:b1:d8:fd:cf:1f:01:33:e8:27:d9:c3:ed:76:96:29:47:0f: 6c:e7:0e:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJFhZwf6pfD/vXithTl5Hp88OT80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDA0MDQ5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTQ1N2M0YzBkMDY3ZmNkZDVjODM4ZjNhZGIxZDU0NGI3 NGE1MWQ3NDE0N2EzZTczNjA4MzVmMmM3ZTYyNDNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUpwkFSBQr3aCh1Xh80Qas6lHkleH4MNZKJEobZPUGLb7t l4HXDZTGFwOMPLx5IXVKK1Wr3BexPBz3c0XwBWqou3EvVf2rlwWO2XVHemmcLZfc KAAq000TpejqEOD9Xh+hrRbIMJjapXIeEgCcTt/qj649pDGNBVDCYPE1GNHUP64/ AbxG0bOnWyDoWw5qw/tAODo0irKko1sDtIbai8Dg9NsUqTVpik9h05HaNfN3rlSy REY/jo3d7vo0CQxTHRqsZvHtTRSUIYY4WuozgeNVb78UIOZCvJ9mnQ7vQ2HTW7wc BrrUfukw7OVrwDvJDtpcEODQCfGcDdcZeTIB8RPbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMgB6nqsCEhrFg2iRJFGIAfvWkgMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmZGQ0NmFlLWJhMDUtNGU1Yi1hYTlhLWJkYTRhYzQ0OGEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI/IjwwDQYJKoZIhvcNAQELBQADggEBANiCVlHd6ywR2scqeSIoKYO98jJj ebMhYMZ+9bzPtn7Ep5vNQfYwCYslOM+pv3PWVxT2LKfUjkTHVhb6TgaJolwgP1iK gWkhlVDNuzyY0EP0TKY345aoJhCFOaVSM/C1G+aqOt9aID75oEkk8SjBC5slKiiI DJNTcKgLhidvjrTbqLAYAlZSJaY706eX40o4RfV18usX50PJyO/jHHZy3xlwMkXv cJnBD7CqrpRJyrEnGTZ2mPZ3mH2iFzrlIODn0v9uzQFyzyJS/AA6Ni3YSSpSJ/tD 3VThSelTcBP2Fyq6WtU/8/7apwOPWAax2P3PHwEz6CfZw+12lilHD2znDp0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:30 2026 by rpki-client