$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/470f0ebc-7616-4541-a259-72a4b56f9e69.roa File: 470f0ebc-7616-4541-a259-72a4b56f9e69.roa (raw, json) Hash identifier: vSrLhJYUi0S5pXgEygvyD08Tf65ysqURUWMf9+aYdmw= Subject key identifier: 72:48:C6:74:D6:24:EA:7A:04:A5:11:5D:B5:6C:D7:7E:3A:15:36:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F2599975A298DB95CBD8F27CB1D6EC40CEF94E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/470f0ebc-7616-4541-a259-72a4b56f9e69.roa Signing time: Mon 19 Oct 2026 00:40:04 +0000 ROA not before: Mon 19 Oct 2026 00:40:04 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:25:99:97:5a:29:8d:b9:5c:bd:8f:27:cb:1d:6e:c4:0c:ef:94:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:40:04 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=1026e1c2fc790564d6f1cb9a962d9cf567b59f9ecc2af17a76fb13d6f6a478e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:d9:f7:91:d1:3e:5c:36:2a:fe:f0:46:cd: 15:1e:3d:ba:6c:9e:9f:cb:97:96:ce:63:60:89:9b: b7:6f:c3:48:6e:95:cb:d2:1e:c3:ad:32:b8:a6:3f: 35:b4:05:17:19:d2:e9:8b:a7:25:3c:4b:71:56:2a: 10:e7:87:d1:be:4f:ac:24:70:6a:ea:89:27:99:9e: 4c:72:d8:35:04:8f:47:6d:d8:30:a8:26:6a:1c:3c: 55:6f:53:a3:53:1e:aa:50:f1:5f:cf:dc:f7:4a:eb: 06:cc:e3:8e:f5:80:5c:3d:7a:90:08:fd:33:81:81: 31:12:4b:71:45:fd:49:ed:f6:e6:54:ef:de:9d:36: 85:59:24:9c:74:f0:c1:d1:01:44:fd:c0:d0:5b:f6: 01:3e:1c:c3:9f:b5:ab:fa:5f:20:6c:a4:95:8a:fc: f9:b1:84:1d:6b:86:f9:56:42:b2:59:2a:6e:c3:b8: c3:46:d8:dc:9c:7c:6d:0b:bb:28:a8:63:18:50:7d: 41:c2:f3:4e:09:f8:ce:d1:ee:b5:73:b1:52:4e:6e: f5:b6:45:24:f7:84:6c:60:e3:dd:48:58:bd:71:86: 52:38:ed:f9:aa:be:5d:71:71:3a:0c:9d:05:d6:31: fc:41:c0:cb:5c:86:89:30:ec:12:2a:c7:97:4b:c3: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:48:C6:74:D6:24:EA:7A:04:A5:11:5D:B5:6C:D7:7E:3A:15:36:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/470f0ebc-7616-4541-a259-72a4b56f9e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.6.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ad:fd:c9:37:53:eb:c3:eb:6f:01:4c:35:95:18:ac:1b:d2: 40:db:19:aa:89:3b:16:d0:77:1f:15:20:f1:88:08:43:09:d9: d5:67:1f:a5:6f:57:95:be:83:a1:ae:b4:01:d9:c8:e2:b9:0f: b3:db:16:de:98:cd:88:06:16:78:46:22:41:3a:39:e8:2b:d7: 2b:42:8b:7d:49:f9:e0:50:0a:f4:8e:71:a9:0a:33:0a:60:4e: 75:0d:f6:3c:e8:70:0e:80:70:74:cf:97:e6:75:05:c3:70:d8: d1:76:e6:d4:af:7b:ed:e5:89:e1:4c:bf:70:ab:d0:af:d6:39: c2:20:5c:e1:4f:54:73:e9:5c:bc:71:be:e3:a9:1c:d0:bd:cc: 6d:47:78:f6:a2:e4:38:5b:ac:1f:2d:e7:2a:46:34:08:5a:0b: 9d:2d:6a:98:46:b0:1f:cd:5d:80:f7:e8:49:96:80:15:cb:ea: 7a:0f:5f:fa:e3:33:3f:f1:5d:a3:cf:98:e4:7b:ea:23:de:3a: 0f:6d:c5:15:75:59:c2:a9:f4:07:91:00:8d:03:bd:d8:d5:5d: 7f:b9:c0:36:6b:f8:cd:4d:a5:36:a5:9e:04:7e:37:b3:77:2a: 16:53:47:52:96:d3:60:d5:ab:dd:91:93:68:99:83:4f:01:98: d3:42:5a:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDyWZl1opjblcvY8nyx1uxAzvlOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA0MDA0WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDI2ZTFjMmZjNzkwNTY0ZDZmMWNiOWE5NjJkOWNmNTY3 YjU5ZjllY2MyYWYxN2E3NmZiMTNkNmY2YTQ3OGUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLN9n3kdE+XDYq/vBGzRUePbpsnp/Ll5bOY2CJm7dvw0hu lcvSHsOtMrimPzW0BRcZ0umLpyU8S3FWKhDnh9G+T6wkcGrqiSeZnkxy2DUEj0dt 2DCoJmocPFVvU6NTHqpQ8V/P3PdK6wbM4471gFw9epAI/TOBgTESS3FF/Unt9uZU 796dNoVZJJx08MHRAUT9wNBb9gE+HMOftav6XyBspJWK/PmxhB1rhvlWQrJZKm7D uMNG2NycfG0LuyioYxhQfUHC804J+M7R7rVzsVJObvW2RST3hGxg491IWL1xhlI4 7fmqvl1xcToMnQXWMfxBwMtchokw7BIqx5dLw/CZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUckjGdNYk6noEpRFdtWzXfjoVNlgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3MGYwZWJjLTc2MTYtNDU0MS1hMjU5LTcyYTRiNTZmOWU2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmAYwDQYJKoZIhvcNAQELBQADggEBALWt/ck3U+vD628BTDWVGKwb0kDb GaqJOxbQdx8VIPGICEMJ2dVnH6VvV5W+g6GutAHZyOK5D7PbFt6YzYgGFnhGIkE6 Oegr1ytCi31J+eBQCvSOcakKMwpgTnUN9jzocA6AcHTPl+Z1BcNw2NF25tSve+3l ieFMv3Cr0K/WOcIgXOFPVHPpXLxxvuOpHNC9zG1HePai5DhbrB8t5ypGNAhaC50t aphGsB/NXYD36EmWgBXL6noPX/rjMz/xXaPPmOR76iPeOg9txRV1WcKp9AeRAI0D vdjVXX+5wDZr+M1NpTalngR+N7N3KhZTR1KW02DVq92Rk2iZg08BmNNCWp4= -----END CERTIFICATE-----Generated at Wed Nov 4 20:11:04 2026 by rpki-client