$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a070258-c4d8-4a71-a4cb-deb5af52939b.roa File: 4a070258-c4d8-4a71-a4cb-deb5af52939b.roa (raw, json) Hash identifier: lFgBewzAFlicBROI1qQA1I0q45pk9TWoJHBfi+I5fXg= Subject key identifier: 88:AC:48:25:C2:30:2D:4D:9B:23:52:2A:A7:78:B7:0A:F2:4E:09:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28E612E87A8EA0DEB1B7565AB013F7067AD64D22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a070258-c4d8-4a71-a4cb-deb5af52939b.roa Signing time: Sat 24 Oct 2026 01:03:00 +0000 ROA not before: Sat 24 Oct 2026 01:03:00 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.91.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e6:12:e8:7a:8e:a0:de:b1:b7:56:5a:b0:13:f7:06:7a:d6:4d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 01:03:00 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=b7b92de42e497aaba9d913817158e7be65b519a2fa8a80ba572dd1dc518b7193, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:81:7b:39:0b:37:96:71:97:d9:c3:96:b2: c2:50:35:1f:18:5c:80:bd:77:11:c8:0b:37:0b:80: a3:4e:6b:26:90:cf:b5:42:3d:5b:6c:27:46:62:74: 0b:c7:3a:ac:73:fd:84:1f:3c:99:72:7a:a1:47:dd: 8e:df:06:3a:55:be:34:4e:a7:b6:fe:b0:3e:d6:1e: 67:5d:77:be:8f:39:bb:f1:87:a5:96:6f:46:3b:eb: 4e:f3:55:7b:36:ab:29:01:e2:70:10:28:34:20:5c: 88:3e:01:1c:d4:83:ce:4d:c9:a3:69:d0:64:37:c1: 1b:49:e6:df:dc:67:29:b2:45:70:37:b5:05:fa:e1: 7a:da:8d:47:de:af:78:b9:75:37:e3:88:89:94:95: f4:9b:50:e3:f5:bd:8e:91:fe:6e:6f:ae:a1:20:52: c3:f3:4e:88:d8:3b:d0:f9:02:8d:14:b0:1e:cc:a5: 24:b3:3c:22:b1:19:a6:0c:82:db:fd:9d:67:85:3b: 3c:22:92:b9:c3:45:32:74:af:e8:3c:74:d2:e9:46: f5:75:d6:b1:31:9a:52:1a:19:d1:0b:d0:64:5a:d3: 61:f7:af:03:f1:d8:16:76:d1:65:18:ea:09:20:54: 91:2d:48:9c:56:0a:d3:a0:ba:26:1b:65:7f:c3:11: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AC:48:25:C2:30:2D:4D:9B:23:52:2A:A7:78:B7:0A:F2:4E:09:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a070258-c4d8-4a71-a4cb-deb5af52939b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3a:db:f7:cc:f7:b4:ba:b2:19:e0:a2:d5:76:a3:64:c3:b1:00: ac:48:64:c6:c8:d5:43:c6:f4:d8:f1:85:7b:db:9d:97:d2:89: 73:5d:08:eb:93:67:75:47:ec:8d:d6:4e:e4:8c:96:d4:51:cd: ba:b8:39:48:f3:f4:44:9f:85:81:da:1b:42:cd:f6:35:b6:95: 23:e7:a5:9e:40:64:84:c1:c8:fc:93:36:2e:29:ac:73:f5:20: 15:e3:cf:3e:64:51:7a:8e:5e:6c:57:f2:0b:7d:ad:74:06:81: 45:9d:dc:fd:cf:05:e6:40:8f:01:a3:3b:ad:bd:d7:06:d9:ab: e8:0f:0a:23:b8:d1:b1:93:57:87:18:1a:79:a6:42:2f:3a:1f: 73:86:21:96:96:22:0f:3b:2b:5c:e8:2f:e6:fa:79:e3:ec:36: 04:34:4a:47:a2:ea:24:40:72:7d:04:16:68:60:59:a3:a9:17: 7d:eb:07:a2:99:33:7a:a5:b1:b7:5e:72:79:01:77:37:8d:9d: 7b:8b:aa:c8:bb:64:27:e8:11:13:1e:be:88:99:4f:73:fe:8c: c3:23:d6:d0:ee:1f:99:60:bb:24:2b:63:ef:4f:c1:3a:52:dc: 13:81:92:52:88:b2:c3:4a:a6:ac:2e:c9:16:0f:86:1c:36:4d: 2e:11:1d:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKOYS6HqOoN6xt1ZasBP3BnrWTSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDEwMzAwWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2I5MmRlNDJlNDk3YWFiYTlkOTEzODE3MTU4ZTdiZTY1 YjUxOWEyZmE4YTgwYmE1NzJkZDFkYzUxOGI3MTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ/YF7OQs3lnGX2cOWssJQNR8YXIC9dxHICzcLgKNOayaQ z7VCPVtsJ0ZidAvHOqxz/YQfPJlyeqFH3Y7fBjpVvjROp7b+sD7WHmddd76PObvx h6WWb0Y7607zVXs2qykB4nAQKDQgXIg+ARzUg85NyaNp0GQ3wRtJ5t/cZymyRXA3 tQX64XrajUfer3i5dTfjiImUlfSbUOP1vY6R/m5vrqEgUsPzTojYO9D5Ao0UsB7M pSSzPCKxGaYMgtv9nWeFOzwikrnDRTJ0r+g8dNLpRvV11rExmlIaGdEL0GRa02H3 rwPx2BZ20WUY6gkgVJEtSJxWCtOguiYbZX/DET0LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiKxIJcIwLU2bI1Iqp3i3CvJOCcAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMDcwMjU4LWM0ZDgtNGE3MS1hNGNiLWRlYjVhZjUyOTM5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4WzANBgkqhkiG9w0BAQsFAAOCAQEAOtv3zPe0urIZ4KLVdqNkw7EArEhk xsjVQ8b02PGFe9udl9KJc10I65NndUfsjdZO5IyW1FHNurg5SPP0RJ+FgdobQs32 NbaVI+elnkBkhMHI/JM2Limsc/UgFePPPmRReo5ebFfyC32tdAaBRZ3c/c8F5kCP AaM7rb3XBtmr6A8KI7jRsZNXhxgaeaZCLzofc4YhlpYiDzsrXOgv5vp54+w2BDRK R6LqJEByfQQWaGBZo6kXfesHopkzeqWxt15yeQF3N42de4uqyLtkJ+gREx6+iJlP c/6MwyPW0O4fmWC7JCtj70/BOlLcE4GSUoiyw0qmrC7JFg+GHDZNLhEdSg== -----END CERTIFICATE-----Generated at Mon Nov 2 14:55:33 2026 by rpki-client