$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa File: 46d95802-c80e-48cb-8f8e-746d414d0f7f.roa (raw, json) Hash identifier: oQYSwGzJ4BktC+RFn/47C06fi8U8x4f/8RICTDtnveM= Subject key identifier: D7:B9:4E:24:4D:7A:34:58:8C:D6:46:AA:97:A3:AA:E8:6A:D1:7D:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 201745EC6A4B20265E64ACC7BB2176EA8D47F0B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa Signing time: Tue 27 Oct 2026 00:03:00 +0000 ROA not before: Tue 27 Oct 2026 00:03:00 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:17:45:ec:6a:4b:20:26:5e:64:ac:c7:bb:21:76:ea:8d:47:f0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:03:00 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=62ab03c86f125a24443b345c52c91030dd9ea7a7f2bbb45a158eed8c6dd8dacd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:4d:a5:dc:c5:74:50:93:cc:0d:83:ef:49: 04:ba:47:03:a7:02:f0:aa:60:4e:0e:90:bf:53:9d: b4:b7:f7:a8:d1:a3:f6:9f:5b:e0:94:88:6e:2a:95: c0:12:f0:62:c9:0a:bc:90:43:46:e1:f3:a6:33:93: 29:9a:6d:f2:3d:ad:39:74:4d:ad:6a:6a:ea:47:3d: ec:b1:a6:14:97:47:ad:b9:8c:d3:e3:da:44:3a:70: a8:f0:ea:a5:e4:2b:e8:59:3a:ae:33:b6:b6:9f:55: c4:ba:08:e3:4b:d5:13:42:f0:20:7f:b8:e7:4b:a4: c1:07:28:64:1b:5e:15:35:b2:a2:d6:28:b0:11:96: 48:a1:58:cc:c0:be:c3:c7:d1:f8:78:3f:d2:50:44: 02:b5:bf:d4:89:0e:0e:97:ce:4e:3f:d4:0b:95:5b: 03:b7:5f:2f:ba:40:a9:1a:d8:20:c7:54:c7:40:6b: 10:85:b6:c2:16:df:29:0b:ca:b4:6e:ea:5f:f5:f7: ba:e3:7e:e7:ad:d1:e1:17:68:0c:c9:1a:27:ba:0e: 67:a4:ee:f6:30:29:71:56:95:bd:01:7d:67:e0:fb: 06:d4:d7:be:b0:ce:8d:61:17:87:87:d4:3e:7e:70: 89:1d:08:7c:53:ae:1f:b8:bd:d3:e0:6c:ea:a4:d0: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B9:4E:24:4D:7A:34:58:8C:D6:46:AA:97:A3:AA:E8:6A:D1:7D:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.237.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d3:02:be:bb:a2:23:3a:0c:cf:cc:f9:a2:75:6f:19:74:ef: dc:c8:b7:b7:37:b1:fa:96:62:bb:44:36:c4:3e:e0:c8:7c:d9: 1b:d1:e1:ff:64:39:ed:e9:0b:12:85:e4:46:3c:2b:37:5f:10: eb:e4:3f:19:de:a1:5b:2c:ce:3d:a5:85:33:45:bd:c8:86:b5: 10:bb:c8:d1:c6:49:f9:25:e6:84:1e:a8:90:c0:f8:ef:80:e5: 87:f7:ac:65:72:de:f3:c6:1b:41:32:2a:c3:bb:16:6b:41:d3: e1:69:6f:cf:33:84:97:04:01:e7:21:ac:f9:81:0f:8a:e5:51: c2:23:c5:e3:9b:c5:b3:af:76:47:21:cf:e0:62:89:7e:65:22: eb:66:c5:92:bd:65:d5:d0:0d:c7:78:bf:fb:04:1e:d8:9e:44: e7:0d:5e:ad:aa:a4:78:c1:47:db:81:f4:b9:5e:b5:a0:f1:b0: 5c:a2:fe:f2:c3:a2:a8:9b:0f:e2:29:39:61:28:b8:f6:37:02: 09:01:f5:c1:6e:96:96:d9:e0:7d:1e:af:08:61:dc:39:9d:49: 4f:0c:77:b1:76:b4:75:cb:b2:59:9a:64:bf:10:ec:b9:c6:f8: 4d:7c:34:41:95:cc:90:5c:25:d8:49:36:87:2d:9c:09:9b:c6: 6a:9e:d4:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIBdF7GpLICZeZKzHuyF26o1H8LEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAwMzAwWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmFiMDNjODZmMTI1YTI0NDQzYjM0NWM1MmM5MTAzMGRk OWVhN2E3ZjJiYmI0NWExNThlZWQ4YzZkZDhkYWNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1o02l3MV0UJPMDYPvSQS6RwOnAvCqYE4OkL9TnbS396jR o/afW+CUiG4qlcAS8GLJCryQQ0bh86YzkymabfI9rTl0Ta1qaupHPeyxphSXR625 jNPj2kQ6cKjw6qXkK+hZOq4ztrafVcS6CONL1RNC8CB/uOdLpMEHKGQbXhU1sqLW KLARlkihWMzAvsPH0fh4P9JQRAK1v9SJDg6Xzk4/1AuVWwO3Xy+6QKka2CDHVMdA axCFtsIW3ykLyrRu6l/197rjfuet0eEXaAzJGie6Dmek7vYwKXFWlb0BfWfg+wbU 176wzo1hF4eH1D5+cIkdCHxTrh+4vdPgbOqk0BV1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU17lOJE16NFiM1kaql6Oq6GrRfcwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2ZDk1ODAyLWM4MGUtNDhjYi04ZjhlLTc0NmQ0MTRkMGY3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTe0wDQYJKoZIhvcNAQELBQADggEBAFjTAr67oiM6DM/M+aJ1bxl079zI t7c3sfqWYrtENsQ+4Mh82RvR4f9kOe3pCxKF5EY8KzdfEOvkPxneoVsszj2lhTNF vciGtRC7yNHGSfkl5oQeqJDA+O+A5Yf3rGVy3vPGG0EyKsO7FmtB0+Fpb88zhJcE AechrPmBD4rlUcIjxeObxbOvdkchz+BiiX5lIutmxZK9ZdXQDcd4v/sEHtieROcN Xq2qpHjBR9uB9LletaDxsFyi/vLDoqibD+IpOWEouPY3AgkB9cFulpbZ4H0erwhh 3DmdSU8Md7F2tHXLslmaZL8Q7LnG+E18NEGVzJBcJdhJNoctnAmbxmqe1HQ= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:59 2026 by rpki-client