$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa File: 49e7f049-4165-46be-93c5-a7a2d7f454dd.roa (raw, json) Hash identifier: EQHCZKSSZG0Lx/1GT8WIQmfCd0NPmquG1e6ezn6pyFE= Subject key identifier: 21:CA:3D:E0:4D:55:A1:C3:1A:16:EE:24:95:FD:C1:59:73:2A:E9:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D530C429F08179F489B54EA45DE7FD7A73CBE3C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa Signing time: Mon 12 Oct 2026 00:40:08 +0000 ROA not before: Mon 12 Oct 2026 00:40:08 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:53:0c:42:9f:08:17:9f:48:9b:54:ea:45:de:7f:d7:a7:3c:be:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:40:08 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=42a318af066fb01022e88c94aadd304bc357dcca00e08d2e94e268bae58e52de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:55:55:96:dc:d1:f9:7f:a3:94:5b:ee:08: c0:c3:f1:43:f5:64:a3:7a:d9:c4:1e:ed:6d:6e:71: 88:87:0d:6c:95:b6:0d:1a:84:88:6c:ae:b9:18:57: ea:50:bf:b5:bd:7d:5b:63:9e:6e:98:a5:f1:6d:cb: 33:c4:53:1e:e4:43:06:14:9b:3b:ba:8f:6d:62:45: a3:9f:cf:21:72:58:7b:c6:98:c9:48:80:f1:4c:40: 27:93:65:c8:c8:b0:3c:3e:16:31:bf:d2:17:25:67: f6:7c:d5:32:3e:20:a5:c1:53:d3:e8:9c:24:c5:a7: ac:86:56:17:ea:61:77:6d:64:75:d7:68:83:5f:e1: f8:61:b7:dd:ae:fd:f2:59:21:af:32:5b:2c:60:b2: f0:34:2c:83:b0:98:5b:b8:53:5d:7a:94:eb:2a:9c: 6b:8a:60:1d:a3:7f:ff:47:42:ba:2a:c9:4b:c0:98: d0:f6:b0:7d:89:0e:db:96:e4:1a:a9:65:8a:1d:73: 42:17:82:a7:c0:15:e1:ba:10:d9:f4:7a:46:de:d8: 59:59:18:82:95:43:10:a3:77:d2:bc:e8:de:87:94: 27:00:cd:21:8f:94:b7:99:7b:9c:75:46:23:d2:10: d2:0d:1f:04:f7:84:d8:0f:ee:ed:8d:2b:16:6e:25: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CA:3D:E0:4D:55:A1:C3:1A:16:EE:24:95:FD:C1:59:73:2A:E9:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.224.0/19 Signature Algorithm: sha256WithRSAEncryption 90:60:f9:51:bc:b6:a9:54:39:c9:4e:82:cf:2c:77:b0:c2:42: ed:01:84:77:d4:8b:43:e3:56:13:57:df:4a:76:27:ea:f1:bb: ec:b5:c3:dc:d5:38:99:e1:32:82:3a:16:8b:74:0b:aa:10:40: 0b:4a:d1:90:d0:c0:03:ef:34:aa:d6:d1:bd:12:bd:37:9c:e5: 89:95:eb:08:00:4b:bd:6f:85:ef:17:7b:d2:54:1a:92:01:cf: 7b:da:b9:cb:a7:a0:84:da:2e:70:1f:bf:bf:9b:ca:7c:f4:ea: f2:a3:0b:3c:05:c1:c7:21:27:3c:de:69:ed:57:08:e2:c5:b1: 88:6c:f4:7f:39:d6:77:95:cb:67:6f:e2:06:98:c7:3a:77:31: 1c:48:a0:3b:30:b7:9c:cd:22:1e:22:52:97:ad:cd:6e:aa:b7: 2b:bc:f9:e9:37:2f:f1:52:80:66:6e:c3:c4:0a:ed:33:f8:57: ba:77:f4:46:ea:dd:ab:01:45:1a:57:02:35:33:63:3a:5b:b8: 00:3e:32:77:9b:08:eb:3c:05:c7:8d:09:91:11:a1:4e:db:7d: 60:64:51:ce:2b:3a:fc:a9:02:e6:fb:78:9a:98:45:1f:13:e0: ea:80:18:79:46:58:bd:ab:9c:c7:a8:87:9d:49:2f:1a:60:2c: 7c:e3:44:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDVMMQp8IF59Im1TqRd5/16c8vjwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA0MDA4WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmEzMThhZjA2NmZiMDEwMjJlODhjOTRhYWRkMzA0YmMz NTdkY2NhMDBlMDhkMmU5NGUyNjhiYWU1OGU1MmRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU91VVltzR+X+jlFvuCMDD8UP1ZKN62cQe7W1ucYiHDWyV tg0ahIhsrrkYV+pQv7W9fVtjnm6YpfFtyzPEUx7kQwYUmzu6j21iRaOfzyFyWHvG mMlIgPFMQCeTZcjIsDw+FjG/0hclZ/Z81TI+IKXBU9PonCTFp6yGVhfqYXdtZHXX aINf4fhht92u/fJZIa8yWyxgsvA0LIOwmFu4U116lOsqnGuKYB2jf/9HQroqyUvA mND2sH2JDtuW5BqpZYodc0IXgqfAFeG6ENn0ekbe2FlZGIKVQxCjd9K86N6HlCcA zSGPlLeZe5x1RiPSENINHwT3hNgP7u2NKxZuJSSBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIco94E1VocMaFu4klf3BWXMq6dQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5ZTdmMDQ5LTQxNjUtNDZiZS05M2M1LWE3YTJkN2Y0NTRkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAW4SOAwDQYJKoZIhvcNAQELBQADggEBAJBg+VG8tqlUOclOgs8sd7DCQu0B hHfUi0PjVhNX30p2J+rxu+y1w9zVOJnhMoI6Fot0C6oQQAtK0ZDQwAPvNKrW0b0S vTec5YmV6wgAS71vhe8Xe9JUGpIBz3vaucunoITaLnAfv7+bynz06vKjCzwFwcch Jzzeae1XCOLFsYhs9H851neVy2dv4gaYxzp3MRxIoDswt5zNIh4iUpetzW6qtyu8 +ek3L/FSgGZuw8QK7TP4V7p39Ebq3asBRRpXAjUzYzpbuAA+MnebCOs8BceNCZER oU7bfWBkUc4rOvypAub7eJqYRR8T4OqAGHlGWL2rnMeoh51JLxpgLHzjRFM= -----END CERTIFICATE-----Generated at Tue Nov 3 20:30:34 2026 by rpki-client