$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/435a4520-90a7-4288-a55a-b74a6879fd02.roa File: 435a4520-90a7-4288-a55a-b74a6879fd02.roa (raw, json) Hash identifier: Rjooz/brPm6JcnjCvCNvvdr8DGbRqIXFZI+fiAuTWlI= Subject key identifier: 74:3A:D2:41:6E:9E:60:B1:22:09:FD:12:B3:0B:38:D8:7A:34:7C:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18AAA0B59AF1968FE37B766C2A5BFB19632B89D2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/435a4520-90a7-4288-a55a-b74a6879fd02.roa Signing time: Thu 08 Oct 2026 00:41:35 +0000 ROA not before: Thu 08 Oct 2026 00:41:35 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:aa:a0:b5:9a:f1:96:8f:e3:7b:76:6c:2a:5b:fb:19:63:2b:89:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:41:35 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=535746d3410df8175f04a4cab8ccb5c4c35c54a0de4c50b76c5e8a2b8aee7173, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:aa:a4:9f:d9:48:ab:c0:12:84:06:a1:d5: 52:e5:20:de:e3:df:b6:64:25:3f:e2:f9:f7:f3:da: ed:e6:04:7b:7b:24:55:c3:66:27:fd:e4:05:3d:17: 6b:a7:f8:5d:87:ef:c2:2b:42:a3:54:00:8a:86:b2: cc:36:65:4f:ea:f3:24:9c:1d:19:70:d2:05:31:d1: 60:c0:0f:60:60:1c:b8:c0:cc:a0:57:2a:df:77:ef: 4f:e8:75:a4:eb:ad:d1:a3:95:45:d1:f5:97:84:48: ab:0f:81:50:1a:e8:e9:2f:1c:14:7f:0f:ae:cd:78: 2d:54:26:0b:49:fe:8c:6f:ec:07:14:24:69:54:dc: d7:b6:72:4e:6b:da:33:16:4f:c3:cc:38:70:1a:9f: ba:c7:18:b7:69:51:ae:19:4c:92:b4:97:f2:06:4b: 03:4a:2c:e9:cb:87:c0:ba:c0:e4:14:1d:34:9d:d2: 9a:df:9b:f7:fd:83:9f:96:89:91:b3:71:cf:02:25: 5b:e6:80:cb:ab:9e:01:7b:55:57:c1:a3:a7:60:d7: ca:cf:5b:9e:13:56:7f:74:9b:2f:17:32:1d:28:db: d3:0b:ea:1a:84:f8:64:e1:87:c1:f2:a9:88:ce:4e: 7c:2b:23:13:b9:b8:99:f4:f0:e6:b9:bf:8b:08:af: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3A:D2:41:6E:9E:60:B1:22:09:FD:12:B3:0B:38:D8:7A:34:7C:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/435a4520-90a7-4288-a55a-b74a6879fd02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.128.0/19 Signature Algorithm: sha256WithRSAEncryption 64:55:29:d0:05:13:47:8b:f4:29:23:c4:d0:9b:93:5d:72:08: 98:ee:30:cb:d1:06:f8:43:fb:5e:7e:b3:6a:8f:89:af:a0:27: ee:a5:88:f6:3f:01:97:80:a4:20:d3:67:24:3a:2b:2a:a3:43: 90:f4:41:ed:80:db:c7:cf:e3:3f:b1:d8:8a:95:d4:40:ae:58: 43:22:a7:7d:d6:57:9f:0f:67:85:66:f8:13:d5:88:92:d9:a5: de:8e:09:b0:b3:0e:0e:f2:85:82:54:58:27:95:35:9c:f3:f6: ec:07:ce:d5:40:e9:7f:d3:0b:ec:5a:37:6f:18:14:6a:f4:e6: e1:9f:bd:d0:8f:1b:d8:21:ea:50:6b:7b:84:c0:97:f2:43:38: 03:97:03:be:49:9e:6e:11:66:46:49:8e:18:85:e6:45:26:ab: 94:1b:47:f9:11:b3:6d:3a:4f:7a:a0:c7:52:49:93:36:fd:58: 08:57:9d:7a:a2:0d:13:4d:fc:a5:52:f1:58:98:db:95:96:00: 01:fb:df:6d:4e:60:f4:8d:2e:e6:ce:01:7b:c4:78:42:f9:0d: bd:a7:ed:f6:ae:be:9d:36:99:1a:cc:0d:93:74:88:f4:46:cc: 26:7d:81:75:24:1e:ff:6e:0f:57:34:4b:d1:43:bf:83:83:11: f1:35:05:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGKqgtZrxlo/je3ZsKlv7GWMridIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDA0MTM1WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzU3NDZkMzQxMGRmODE3NWYwNGE0Y2FiOGNjYjVjNGMz NWM1NGEwZGU0YzUwYjc2YzVlOGEyYjhhZWU3MTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt3qqkn9lIq8AShAah1VLlIN7j37ZkJT/i+ffz2u3mBHt7 JFXDZif95AU9F2un+F2H78IrQqNUAIqGssw2ZU/q8yScHRlw0gUx0WDAD2BgHLjA zKBXKt9370/odaTrrdGjlUXR9ZeESKsPgVAa6OkvHBR/D67NeC1UJgtJ/oxv7AcU JGlU3Ne2ck5r2jMWT8PMOHAan7rHGLdpUa4ZTJK0l/IGSwNKLOnLh8C6wOQUHTSd 0prfm/f9g5+WiZGzcc8CJVvmgMurngF7VVfBo6dg18rPW54TVn90my8XMh0o29ML 6hqE+GThh8HyqYjOTnwrIxO5uJn08Oa5v4sIr8cZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdDrSQW6eYLEiCf0Ssws42Ho0fHUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzNWE0NTIwLTkwYTctNDI4OC1hNTVhLWI3NGE2ODc5ZmQwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVM34AwDQYJKoZIhvcNAQELBQADggEBAGRVKdAFE0eL9CkjxNCbk11yCJju MMvRBvhD+15+s2qPia+gJ+6liPY/AZeApCDTZyQ6KyqjQ5D0Qe2A28fP4z+x2IqV 1ECuWEMip33WV58PZ4Vm+BPViJLZpd6OCbCzDg7yhYJUWCeVNZzz9uwHztVA6X/T C+xaN28YFGr05uGfvdCPG9gh6lBre4TAl/JDOAOXA75Jnm4RZkZJjhiF5kUmq5Qb R/kRs206T3qgx1JJkzb9WAhXnXqiDRNN/KVS8ViY25WWAAH7321OYPSNLubOAXvE eEL5Db2n7fauvp02mRrMDZN0iPRGzCZ9gXUkHv9uD1c0S9FDv4ODEfE1BQk= -----END CERTIFICATE-----Generated at Wed Nov 4 16:52:38 2026 by rpki-client