$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d98916-94ab-49fc-a073-76f25fab61e9.roa File: 44d98916-94ab-49fc-a073-76f25fab61e9.roa (raw, json) Hash identifier: 80i789ecRbvqAXdOwwkRjPCNQYfcCTCbfoo7nNx1Wt0= Subject key identifier: CB:3B:8B:A5:FC:EC:09:61:F4:0C:60:F6:AF:B3:48:36:CB:80:34:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 277334ECD2FE1E13AF5678718C23FB48264DF20E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d98916-94ab-49fc-a073-76f25fab61e9.roa Signing time: Tue 06 Oct 2026 00:10:38 +0000 ROA not before: Tue 06 Oct 2026 00:10:38 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 40.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:73:34:ec:d2:fe:1e:13:af:56:78:71:8c:23:fb:48:26:4d:f2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:10:38 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=f88b3993ceaa8df3d557a389d2ed42e39dacdec776a033dceac2c2056d00816d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:7e:78:9f:d6:9d:2b:4f:50:0b:d0:e7:98: 0f:49:97:22:1b:b6:d6:da:32:27:6a:19:0f:1d:af: 52:02:83:8b:29:b8:1c:9e:a0:c5:db:04:21:df:c7: 0f:f7:01:d6:e7:ef:8c:fc:d5:8f:b4:85:84:4c:07: 3b:12:72:c9:5d:54:02:81:cb:c5:6a:de:88:e1:23: e6:82:ec:b8:4f:57:d4:2b:17:5d:1e:ad:9e:a1:4a: 97:ad:84:d1:45:5a:3f:d4:00:63:7c:e7:d4:2e:29: 6d:f1:2d:a4:a7:62:b8:54:96:5e:e4:58:e8:b7:82: be:c8:e0:82:01:5f:48:ce:53:dc:73:e4:ed:67:17: 74:a6:38:0e:24:57:07:d7:04:65:1c:b6:3f:ba:72: fc:d0:1b:7a:70:ee:37:c1:c4:7b:80:a5:22:5a:9b: 49:9d:ca:18:db:d6:79:18:aa:88:5a:e3:53:01:ab: 6a:b5:83:23:9b:85:91:6e:23:9c:e1:ed:42:4e:2d: 16:8c:81:e6:c1:9d:61:54:69:2e:20:c2:3f:4c:08: 8f:91:51:1e:5a:13:54:9f:65:b1:cb:be:40:02:d5: c3:f1:1c:d7:d1:50:1e:d5:0a:16:69:88:bb:ae:22: 60:21:40:7e:da:89:40:5d:40:1b:10:76:53:f3:23: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3B:8B:A5:FC:EC:09:61:F4:0C:60:F6:AF:B3:48:36:CB:80:34:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d98916-94ab-49fc-a073-76f25fab61e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:54:4b:1e:31:33:be:3c:2b:4a:37:f9:c8:10:31:ad:c4:6b: 96:e8:b5:a6:05:31:02:5e:81:bc:a4:d8:bd:fc:c6:f1:7d:37: a7:9b:00:62:7f:51:13:f7:a6:22:e4:77:56:c1:9c:54:11:ea: ed:6f:78:86:52:73:0d:87:fa:44:f2:71:28:3f:b4:c2:d1:3a: 45:db:e1:32:7f:ed:30:2c:78:44:22:04:8b:26:9e:f1:09:de: eb:93:1c:32:ff:96:60:5c:37:e0:6d:0d:2b:c2:fe:ef:ec:e8: 2f:73:c4:06:73:cd:4b:f0:9e:59:0f:cf:79:73:35:e7:e4:d7: 66:e3:d0:a4:f1:6b:48:81:29:06:6f:c3:e7:49:f2:1f:a9:98: d1:6c:95:d8:0a:11:4c:47:33:db:e7:68:2a:a0:e5:bd:ff:de: 0e:2a:f5:3d:25:c1:a6:92:30:b1:f0:9e:a5:46:2e:03:5f:d9: e6:88:c9:2d:10:69:ea:1c:08:20:84:f5:27:18:01:f4:e9:6b: 7d:f2:aa:f1:c3:64:68:fc:8a:eb:d4:81:4a:c0:06:a2:b0:5b: 97:06:8e:93:c6:d5:a3:34:5f:7a:9a:40:20:fb:c9:22:57:d2: a4:03:6f:9b:4d:7c:85:03:42:d1:fe:6b:9d:ba:91:da:85:29: 82:82:42:dc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJ3M07NL+HhOvVnhxjCP7SCZN8g4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAxMDM4WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODhiMzk5M2NlYWE4ZGYzZDU1N2EzODlkMmVkNDJlMzlk YWNkZWM3NzZhMDMzZGNlYWMyYzIwNTZkMDA4MTZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6rn54n9adK09QC9DnmA9JlyIbttbaMidqGQ8dr1ICg4sp uByeoMXbBCHfxw/3Adbn74z81Y+0hYRMBzsScsldVAKBy8Vq3ojhI+aC7LhPV9Qr F10erZ6hSpethNFFWj/UAGN859QuKW3xLaSnYrhUll7kWOi3gr7I4IIBX0jOU9xz 5O1nF3SmOA4kVwfXBGUctj+6cvzQG3pw7jfBxHuApSJam0mdyhjb1nkYqoha41MB q2q1gyObhZFuI5zh7UJOLRaMgebBnWFUaS4gwj9MCI+RUR5aE1SfZbHLvkAC1cPx HNfRUB7VChZpiLuuImAhQH7aiUBdQBsQdlPzI9C5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyzuLpfzsCWH0DGD2r7NINsuANOUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0ZDk4OTE2LTk0YWItNDlmYy1hMDczLTc2ZjI1ZmFiNjFlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo3DANBgkqhkiG9w0BAQsFAAOCAQEABFRLHjEzvjwrSjf5yBAxrcRrlui1 pgUxAl6BvKTYvfzG8X03p5sAYn9RE/emIuR3VsGcVBHq7W94hlJzDYf6RPJxKD+0 wtE6RdvhMn/tMCx4RCIEiyae8Qne65McMv+WYFw34G0NK8L+7+zoL3PEBnPNS/Ce WQ/PeXM15+TXZuPQpPFrSIEpBm/D50nyH6mY0WyV2AoRTEcz2+doKqDlvf/eDir1 PSXBppIwsfCepUYuA1/Z5ojJLRBp6hwIIIT1JxgB9OlrffKq8cNkaPyK69SBSsAG orBblwaOk8bVozRfeppAIPvJIlfSpANvm018hQNC0f5rnbqR2oUpgoJC3A== -----END CERTIFICATE-----Generated at Wed Nov 4 01:13:39 2026 by rpki-client