$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c1bc95a-5d0c-487e-bf1d-56809964528a.roa File: 4c1bc95a-5d0c-487e-bf1d-56809964528a.roa (raw, json) Hash identifier: 6fTyrUK5qG9zznLBFPYlv5bbEkNkfUaIaea/cpbQL0A= Subject key identifier: 4B:98:03:B5:E4:09:52:81:67:CB:70:C6:F9:B1:F5:76:84:6B:80:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28B498F008D89BDE86A48EE76808A2C3F0184536 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c1bc95a-5d0c-487e-bf1d-56809964528a.roa Signing time: Mon 12 Oct 2026 00:40:06 +0000 ROA not before: Mon 12 Oct 2026 00:40:06 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 184.73.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b4:98:f0:08:d8:9b:de:86:a4:8e:e7:68:08:a2:c3:f0:18:45:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:40:06 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=d9dd464975f2261519acce791e8b21fc19a2a9150ae8926ad7f14fdc547a0c66, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:24:94:0f:7f:97:a1:c3:1d:c0:8d:9f:18: cb:42:49:7b:49:6e:6d:94:dc:ae:42:53:0f:d4:e7: 48:b8:23:b8:b6:c6:f7:8a:e2:5d:c9:39:91:91:be: dc:56:5a:85:82:af:bc:85:b5:b3:a0:72:b8:4e:ad: ed:e0:20:0a:07:3c:df:dc:64:a6:fd:2e:90:08:d5: cd:88:15:89:b1:ab:cf:42:4a:f1:eb:ec:16:ae:80: 44:33:d4:c7:8c:0d:c8:92:6e:d8:da:f8:a2:9b:1a: f0:91:ea:08:51:14:45:34:51:7d:ee:03:2a:c4:d0: 02:3f:d4:bf:31:d9:ed:dc:3d:de:06:e4:5a:79:fc: 8f:70:fb:04:72:47:54:97:44:3a:1e:e2:05:ba:42: 28:46:17:77:00:92:80:53:08:4e:d8:71:54:63:0b: ec:2e:5d:3d:8c:19:1b:77:c3:9a:56:24:12:7e:63: 54:e2:67:81:dd:53:ef:5e:db:85:97:63:af:b8:2a: 38:b6:10:05:5e:7f:20:e4:74:89:dd:8d:43:4b:79: 9d:af:fc:a1:e2:c9:b4:ab:9b:3d:2d:f8:14:b4:f0: e2:f3:10:c5:2c:a7:8d:7c:4e:a0:04:16:45:88:31: f1:19:65:48:96:fe:4b:9e:33:f0:4b:fa:b0:99:21: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:98:03:B5:E4:09:52:81:67:CB:70:C6:F9:B1:F5:76:84:6B:80:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c1bc95a-5d0c-487e-bf1d-56809964528a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.73.144.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:d4:e1:fb:3e:a2:b7:fb:90:bc:99:e8:3a:18:fc:9e:bd:b9: cb:54:c6:c0:12:5d:ce:ed:14:3a:49:f7:59:97:63:48:f7:1f: a3:62:cf:d6:18:cb:d1:8d:a2:5a:f6:df:47:f4:51:fd:35:30: bd:5b:5a:f5:88:1a:9b:1c:26:81:66:5c:24:d7:d2:e0:b8:6d: 2e:d0:9c:8b:03:c7:5e:11:88:cd:ea:b7:fa:47:9c:4e:0e:15: eb:5d:8d:7f:e0:b2:77:6d:5e:be:db:f1:24:4a:b7:68:d7:e4: b9:4d:da:d0:74:69:24:a7:e6:fe:d1:9c:d1:b2:d9:6f:5d:96: 17:a6:2f:ee:0d:d7:4e:ac:35:c5:05:2a:c1:b2:44:5a:8e:8a: e4:bd:42:8c:6a:07:84:d3:bd:85:ee:1f:21:a8:98:be:e1:52: cb:2a:7d:47:28:d5:35:5e:e9:6b:57:d8:ff:c9:95:08:d0:e4: d8:05:b6:21:40:20:2f:db:c3:ab:b6:bf:0b:8a:60:4d:a3:3e: 6f:c0:29:fb:eb:68:f7:3f:b8:e5:29:ad:40:7c:0b:25:b9:39: 94:03:96:e9:89:de:40:b9:d1:e3:a7:76:b4:0f:08:c3:2f:c0: 95:ef:65:ae:4a:6e:7f:07:ce:cd:fc:2c:51:e2:be:e0:94:c3: ee:2e:d8:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKLSY8AjYm96GpI7naAiiw/AYRTYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA0MDA2WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWRkNDY0OTc1ZjIyNjE1MTlhY2NlNzkxZThiMjFmYzE5 YTJhOTE1MGFlODkyNmFkN2YxNGZkYzU0N2EwYzY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5BiSUD3+XocMdwI2fGMtCSXtJbm2U3K5CUw/U50i4I7i2 xveK4l3JOZGRvtxWWoWCr7yFtbOgcrhOre3gIAoHPN/cZKb9LpAI1c2IFYmxq89C SvHr7BaugEQz1MeMDciSbtja+KKbGvCR6ghRFEU0UX3uAyrE0AI/1L8x2e3cPd4G 5Fp5/I9w+wRyR1SXRDoe4gW6QihGF3cAkoBTCE7YcVRjC+wuXT2MGRt3w5pWJBJ+ Y1TiZ4HdU+9e24WXY6+4Kji2EAVefyDkdIndjUNLeZ2v/KHiybSrmz0t+BS08OLz EMUsp418TqAEFkWIMfEZZUiW/kueM/BL+rCZIQubAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS5gDteQJUoFny3DG+bH1doRrgLgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMWJjOTVhLTVkMGMtNDg3ZS1iZjFkLTU2ODA5OTY0NTI4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SZAwDQYJKoZIhvcNAQELBQADggEBAIvU4fs+orf7kLyZ6DoY/J69uctU xsASXc7tFDpJ91mXY0j3H6Niz9YYy9GNolr230f0Uf01ML1bWvWIGpscJoFmXCTX 0uC4bS7QnIsDx14RiM3qt/pHnE4OFetdjX/gsndtXr7b8SRKt2jX5LlN2tB0aSSn 5v7RnNGy2W9dlhemL+4N106sNcUFKsGyRFqOiuS9QoxqB4TTvYXuHyGomL7hUssq fUco1TVe6WtX2P/JlQjQ5NgFtiFAIC/bw6u2vwuKYE2jPm/AKfvraPc/uOUprUB8 CyW5OZQDlumJ3kC50eOndrQPCMMvwJXvZa5Kbn8Hzs38LFHivuCUw+4u2Cg= -----END CERTIFICATE-----Generated at Tue Nov 3 19:21:52 2026 by rpki-client