$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a715747-9f74-4dac-b63a-385bc9e292ee.roa File: 4a715747-9f74-4dac-b63a-385bc9e292ee.roa (raw, json) Hash identifier: OdRX/M7a9XL6/H0zn/0ug+OxzeZJAwvGhfghpptbrm4= Subject key identifier: 27:A4:05:93:1E:E0:ED:99:D8:DC:57:EA:2C:D5:DD:6B:60:D6:E7:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E7FF20B006E4C8A7220E80D654BCAAE6FC6C6F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a715747-9f74-4dac-b63a-385bc9e292ee.roa Signing time: Mon 19 Oct 2026 00:40:05 +0000 ROA not before: Mon 19 Oct 2026 00:40:05 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7f:f2:0b:00:6e:4c:8a:72:20:e8:0d:65:4b:ca:ae:6f:c6:c6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:40:05 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=50e5441e7aba6b042dc1a2c21c91e1ec6c260f8199c91b9578474b84bac77992, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2e:b7:0d:42:4d:18:1f:e1:a0:4d:46:55:9e: df:d6:c6:2f:86:a6:af:96:9e:96:53:a7:dd:73:16: 3e:15:14:52:30:2e:0f:9d:19:ab:65:47:d6:c3:35: 5e:2b:81:2a:59:39:16:67:f7:a1:a9:f6:9d:41:62: e4:d2:b8:34:c8:28:93:ea:98:48:da:25:89:ae:38: ec:e4:dc:1e:8f:f5:48:35:f2:9b:96:18:46:b3:c4: 37:ff:96:32:17:3d:c2:fc:be:13:11:d2:2d:cb:47: c7:0e:dd:cc:1d:30:83:3e:57:84:3e:9b:19:54:dc: 14:07:54:ba:02:c8:58:9e:16:b8:3a:27:6e:37:3c: e4:db:f7:31:9e:35:c8:66:89:48:27:ff:b4:b5:5e: 86:ff:f3:78:5b:4f:60:8d:68:18:d5:94:6c:2e:c6: 7d:24:98:82:66:7f:1f:97:6b:77:e1:ff:2c:35:35: e9:82:12:3f:c9:bb:9c:9d:d2:f2:b1:3b:c6:ff:f9: 69:08:9f:a9:d2:05:4b:21:cf:92:2d:b3:e1:3d:b3: 52:14:32:5a:60:12:ce:66:06:18:4a:02:0d:0d:82: de:93:80:25:4d:f8:ec:c6:41:47:d0:f0:72:00:37: b1:41:68:5b:48:0e:66:ab:96:24:78:67:c5:e4:45: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A4:05:93:1E:E0:ED:99:D8:DC:57:EA:2C:D5:DD:6B:60:D6:E7:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a715747-9f74-4dac-b63a-385bc9e292ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.113.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:d4:8f:19:49:56:2b:e3:ea:91:92:2c:05:fb:b0:38:b1:02: 45:e8:df:bf:e4:c7:ec:ce:d0:0a:42:64:cc:ad:f6:9c:8f:83: 27:89:f5:85:50:bd:2f:59:9b:be:61:73:90:a6:98:b5:ff:42: 10:aa:1c:f5:d9:ac:96:75:a0:f3:9f:d2:60:55:d1:3f:fb:ce: 98:60:b3:48:61:4a:f6:2e:ac:ec:ab:e9:8a:df:05:0e:0a:74: e9:10:81:ca:6c:a7:37:ae:4a:94:a9:cc:2e:ff:ff:74:b2:b4: 80:14:1b:36:d1:b6:56:ce:01:cb:56:19:36:9d:ab:9c:87:b0: df:91:d3:f2:6e:e6:c3:fc:ed:ce:36:d2:2c:71:3d:af:8a:18: 83:bb:60:fe:64:de:e1:00:db:47:94:2a:a8:54:d8:4a:61:5e: ae:1d:29:1f:05:f8:5b:37:7f:e5:a3:63:52:5e:8e:64:25:73: 30:53:21:11:f3:3f:40:40:3e:58:b0:06:29:e6:db:6b:61:5e: d4:c1:7d:3c:85:c5:80:e7:3b:f4:ae:cb:15:45:66:e3:7f:6b: 55:4f:a0:2c:6d:60:11:e4:ac:16:3d:cf:1c:23:10:44:2f:41: 52:df:8f:cf:d0:f9:4c:d2:be:ee:c4:55:70:bd:b3:21:8a:eb: 05:60:05:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfn/yCwBuTIpyIOgNZUvKrm/GxvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA0MDA1WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGU1NDQxZTdhYmE2YjA0MmRjMWEyYzIxYzkxZTFlYzZj MjYwZjgxOTljOTFiOTU3ODQ3NGI4NGJhYzc3OTkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKLrcNQk0YH+GgTUZVnt/Wxi+Gpq+WnpZTp91zFj4VFFIw Lg+dGatlR9bDNV4rgSpZORZn96Gp9p1BYuTSuDTIKJPqmEjaJYmuOOzk3B6P9Ug1 8puWGEazxDf/ljIXPcL8vhMR0i3LR8cO3cwdMIM+V4Q+mxlU3BQHVLoCyFieFrg6 J243POTb9zGeNchmiUgn/7S1Xob/83hbT2CNaBjVlGwuxn0kmIJmfx+Xa3fh/yw1 NemCEj/Ju5yd0vKxO8b/+WkIn6nSBUshz5Its+E9s1IUMlpgEs5mBhhKAg0Ngt6T gCVN+OzGQUfQ8HIAN7FBaFtIDmarliR4Z8XkRWA/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ6QFkx7g7ZnY3FfqLNXda2DW55EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhNzE1NzQ3LTlmNzQtNGRhYy1iNjNhLTM4NWJjOWUyOTJlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmHEwDQYJKoZIhvcNAQELBQADggEBABzUjxlJVivj6pGSLAX7sDixAkXo 37/kx+zO0ApCZMyt9pyPgyeJ9YVQvS9Zm75hc5CmmLX/QhCqHPXZrJZ1oPOf0mBV 0T/7zphgs0hhSvYurOyr6YrfBQ4KdOkQgcpspzeuSpSpzC7//3SytIAUGzbRtlbO ActWGTadq5yHsN+R0/Ju5sP87c420ixxPa+KGIO7YP5k3uEA20eUKqhU2EphXq4d KR8F+Fs3f+WjY1JejmQlczBTIRHzP0BAPliwBinm22thXtTBfTyFxYDnO/SuyxVF ZuN/a1VPoCxtYBHkrBY9zxwjEEQvQVLfj8/Q+UzSvu7EVXC9syGK6wVgBdg= -----END CERTIFICATE-----Generated at Wed Nov 4 03:36:26 2026 by rpki-client