$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bb8da11-c4a1-4bb3-a505-deb0ccdbb4ba.roa File: 4bb8da11-c4a1-4bb3-a505-deb0ccdbb4ba.roa (raw, json) Hash identifier: 1PISiVPgnM7NOG4pXH3aqMdL98RMLbhKjHp6Uhip47g= Subject key identifier: 92:B1:6F:6B:23:35:AA:2D:28:03:0B:FA:21:DF:7D:C6:B4:0F:4E:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B1AD06C5B663BC2264D7D838D824E03CCDC9F02 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bb8da11-c4a1-4bb3-a505-deb0ccdbb4ba.roa Signing time: Tue 20 Oct 2026 00:40:32 +0000 ROA not before: Tue 20 Oct 2026 00:40:32 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1a:d0:6c:5b:66:3b:c2:26:4d:7d:83:8d:82:4e:03:cc:dc:9f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 20 00:40:32 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=24ad8f3cd4cfa95825df25f89620bfda239255445d5d6146e5f689e009d3ca24, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:95:b8:5e:44:d4:21:c5:49:47:38:1e:ca: 2f:47:41:94:e0:38:71:d1:f6:8a:90:9d:d5:f4:dd: 33:80:61:5a:4e:9f:14:0b:1c:91:e2:96:e7:63:4a: 55:2f:5c:63:59:ce:1a:c1:2d:af:92:1c:12:39:02: cf:f0:44:b0:ad:2a:10:8b:25:3d:f2:bb:c4:97:a6: 75:4c:11:1b:ee:b5:8f:7f:fe:c9:70:8c:be:42:24: da:1a:89:aa:ed:7e:ba:09:e8:f7:43:45:7a:aa:fd: 6f:bf:b3:79:33:76:24:d9:38:8d:07:87:c5:6e:21: c7:a9:2b:3f:40:6b:d1:92:4d:f1:ff:03:aa:b2:90: 94:44:27:1b:b9:05:2c:59:b8:e2:b0:19:1d:da:49: 5c:89:60:fd:c8:46:27:17:92:47:16:f7:be:ac:26: ce:90:0e:90:54:39:42:f5:a4:36:1d:94:ff:6e:6c: 04:c5:6b:f1:d1:b2:6c:57:6a:52:98:39:6e:be:32: 36:7b:34:6e:9b:8d:2e:e2:29:d6:a4:d8:d7:b4:74: d8:96:c2:62:21:32:cd:75:53:25:81:48:22:38:22: ec:e1:db:24:7d:50:c9:1b:62:da:ff:e2:50:24:f0: ad:fb:32:97:6b:04:f8:a0:7b:0c:f5:e9:76:cc:b1: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:6F:6B:23:35:AA:2D:28:03:0B:FA:21:DF:7D:C6:B4:0F:4E:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bb8da11-c4a1-4bb3-a505-deb0ccdbb4ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.140.0/22 Signature Algorithm: sha256WithRSAEncryption 82:86:69:85:9b:9a:9d:86:0a:dc:26:75:2d:c3:d2:76:cd:bc: 8a:6a:e5:95:49:a8:61:8b:78:e3:98:ac:7a:02:ea:7b:f8:cf: 7a:c0:14:c5:4f:13:cd:26:17:03:af:36:89:dc:82:4b:ce:3e: b8:ec:e9:e0:98:40:d9:01:b3:8a:80:a5:b9:77:58:db:2f:9c: 53:61:f7:0a:b3:43:13:8a:2c:77:6d:a6:15:9e:83:1e:c4:bd: c1:a3:21:99:0b:c5:3b:b4:39:56:0c:c3:64:45:3c:df:2e:0d: 7b:53:3e:10:f5:02:48:7f:30:28:ab:b2:95:1b:83:fc:b3:df: 3e:42:25:5c:7d:76:17:81:35:46:fc:89:b4:5b:bf:3a:bb:e4: ce:d0:8a:10:8d:15:05:e0:ad:6d:4b:f2:83:b4:9b:2e:81:aa: 68:77:67:64:e1:44:e9:8a:e1:2d:c1:8c:7a:a7:f3:e8:57:12: 43:7d:04:84:42:94:17:f6:0d:d8:17:8c:0c:4a:3e:64:11:a8: 45:df:7e:df:75:52:df:1c:3b:03:2c:5b:d4:61:0a:58:cb:df: e3:ea:70:ca:5c:3a:67:d1:54:d8:a7:ef:2a:5f:80:b4:1b:22: dd:9c:36:25:b1:90:60:3d:63:e3:34:d8:c4:64:9a:63:cf:ef: 62:5d:35:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaxrQbFtmO8ImTX2DjYJOA8zcnwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIwMDA0MDMyWhcNMjcwMTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGFkOGYzY2Q0Y2ZhOTU4MjVkZjI1Zjg5NjIwYmZkYTIz OTI1NTQ0NWQ1ZDYxNDZlNWY2ODllMDA5ZDNjYTI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM2pW4XkTUIcVJRzgeyi9HQZTgOHHR9oqQndX03TOAYVpO nxQLHJHiludjSlUvXGNZzhrBLa+SHBI5As/wRLCtKhCLJT3yu8SXpnVMERvutY9/ /slwjL5CJNoaiartfroJ6PdDRXqq/W+/s3kzdiTZOI0Hh8VuIcepKz9Aa9GSTfH/ A6qykJREJxu5BSxZuOKwGR3aSVyJYP3IRicXkkcW976sJs6QDpBUOUL1pDYdlP9u bATFa/HRsmxXalKYOW6+MjZ7NG6bjS7iKdak2Ne0dNiWwmIhMs11UyWBSCI4Iuzh 2yR9UMkbYtr/4lAk8K37MpdrBPigewz16XbMsXMJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkrFvayM1qi0oAwv6Id99xrQPTlYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiYjhkYTExLWM0YTEtNGJiMy1hNTA1LWRlYjBjY2RiYjRiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRXIwwDQYJKoZIhvcNAQELBQADggEBAIKGaYWbmp2GCtwmdS3D0nbNvIpq 5ZVJqGGLeOOYrHoC6nv4z3rAFMVPE80mFwOvNoncgkvOPrjs6eCYQNkBs4qApbl3 WNsvnFNh9wqzQxOKLHdtphWegx7EvcGjIZkLxTu0OVYMw2RFPN8uDXtTPhD1Akh/ MCirspUbg/yz3z5CJVx9dheBNUb8ibRbvzq75M7QihCNFQXgrW1L8oO0my6Bqmh3 Z2ThROmK4S3BjHqn8+hXEkN9BIRClBf2DdgXjAxKPmQRqEXfft91Ut8cOwMsW9Rh CljL3+PqcMpcOmfRVNin7ypfgLQbIt2cNiWxkGA9Y+M02MRkmmPP72JdNRs= -----END CERTIFICATE-----Generated at Mon Nov 2 21:09:26 2026 by rpki-client