$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c29752d-7d77-4f56-8e5b-26b774e15275.roa File: 4c29752d-7d77-4f56-8e5b-26b774e15275.roa (raw, json) Hash identifier: NHdW2bNjbYExOYDXbA5369VGERGdeX/YbeEWHtdbWj4= Subject key identifier: 96:A2:B9:50:A1:BA:5E:9C:6A:64:E6:E8:27:BE:5C:DF:97:63:17:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A27373CD5017A7E5D61F6B629E8A735C2F3C0AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c29752d-7d77-4f56-8e5b-26b774e15275.roa Signing time: Thu 29 Oct 2026 21:52:28 +0000 ROA not before: Thu 29 Oct 2026 21:52:28 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 72.150.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:27:37:3c:d5:01:7a:7e:5d:61:f6:b6:29:e8:a7:35:c2:f3:c0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 21:52:28 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=3dce42fb88637f28393b91eeb2ad89f7b1e5b56e79426fdeedcdf37655dc99eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:dc:87:6a:30:95:6d:ca:ee:d9:9a:33:6a: 8d:96:1b:79:f3:4d:f6:40:20:d9:64:b4:68:bf:97: 87:7c:a9:da:47:5e:7d:6e:f8:d9:6c:5e:8b:26:54: 7f:2c:67:4a:82:c6:27:c7:39:88:61:4b:30:9d:45: 4b:32:74:eb:9e:97:e7:94:d1:d2:d1:88:90:f4:05: 8f:3d:a1:97:27:19:b1:b2:3c:48:2e:ff:6b:c9:c7: fd:21:ce:9a:ed:61:69:50:c7:04:de:70:2e:34:4c: c8:e1:a9:10:2a:e3:eb:74:23:87:7c:0d:f8:5b:de: 41:39:b5:76:d8:cf:60:82:e7:4d:10:9b:70:7a:37: 56:4e:d2:62:fb:c4:90:2b:fa:08:66:68:07:00:eb: 4e:7d:46:ad:df:af:8e:fc:cf:8d:b9:c2:0d:3c:9c: ce:89:c5:4d:57:e4:01:60:f9:f6:97:ed:5f:6b:ac: d0:a7:1f:4a:1e:bc:a2:4a:bf:9a:2d:38:c8:9a:cc: 5e:c9:89:26:0d:bd:b1:33:34:1a:0d:b6:af:27:0a: a3:6c:b7:e4:7c:ae:13:1c:2b:fa:37:49:2f:ec:d8: 52:ee:4e:bb:41:0b:9d:8e:79:01:1a:96:da:3a:8a: 06:0e:1a:c4:2f:e7:a5:9f:82:a4:27:5d:9a:44:a5: 6f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A2:B9:50:A1:BA:5E:9C:6A:64:E6:E8:27:BE:5C:DF:97:63:17:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c29752d-7d77-4f56-8e5b-26b774e15275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.150.12.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:49:42:87:b3:d7:6f:08:dc:26:44:0f:9c:da:1d:ac:e4:a4: 23:71:3a:8d:8d:93:e1:7c:c5:15:47:2b:42:c5:8e:ee:72:ff: d5:a3:be:70:fd:96:14:d9:40:02:fd:39:cb:14:4e:ea:cf:96: fe:20:aa:d2:d6:0e:7a:9c:bf:0c:8c:ae:cc:74:f0:f2:f4:70: 26:78:06:b6:5d:aa:b5:5e:9f:56:65:de:9c:17:29:3b:92:1e: e0:e5:e9:d2:93:ba:04:70:7f:22:04:91:5b:ab:d7:e1:db:01: 61:28:8c:c7:42:ce:53:31:a1:4b:81:a8:1c:b8:43:4c:46:fe: 5b:bc:20:62:94:64:31:b2:56:83:a9:b6:a1:fb:81:f3:9b:f5: 1e:5e:0b:1c:c1:49:1d:65:dd:4c:9a:b8:71:c2:8f:68:99:48: bc:f2:f0:8e:6c:3e:67:9c:8f:b8:c0:68:6f:c9:e5:5f:4f:00: b1:7f:54:44:b2:37:c0:52:ba:34:78:5a:4c:e8:2d:3c:49:08: 10:3e:ba:61:d5:d9:a9:4f:fa:5a:94:67:da:61:8c:8f:a1:43: 59:98:07:93:15:5f:ab:70:6c:58:07:78:e6:3a:a6:0d:ff:a1: a6:1b:e0:a4:80:72:10:cd:26:96:94:56:57:25:86:c5:8a:4c: 31:db:1d:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCic3PNUBen5dYfa2KeinNcLzwK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MjE1MjI4WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGNlNDJmYjg4NjM3ZjI4MzkzYjkxZWViMmFkODlmN2Ix ZTViNTZlNzk0MjZmZGVlZGNkZjM3NjU1ZGM5OWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3ldyHajCVbcru2Zozao2WG3nzTfZAINlktGi/l4d8qdpH Xn1u+NlsXosmVH8sZ0qCxifHOYhhSzCdRUsydOuel+eU0dLRiJD0BY89oZcnGbGy PEgu/2vJx/0hzprtYWlQxwTecC40TMjhqRAq4+t0I4d8Dfhb3kE5tXbYz2CC500Q m3B6N1ZO0mL7xJAr+ghmaAcA6059Rq3fr478z425wg08nM6JxU1X5AFg+faX7V9r rNCnH0oevKJKv5otOMiazF7JiSYNvbEzNBoNtq8nCqNst+R8rhMcK/o3SS/s2FLu TrtBC52OeQEalto6igYOGsQv56WfgqQnXZpEpW/RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlqK5UKG6XpxqZOboJ75c35djF6wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMjk3NTJkLTdkNzctNGY1Ni04ZTViLTI2Yjc3NGUxNTI3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFIlgwwDQYJKoZIhvcNAQELBQADggEBAB5JQoez128I3CZED5zaHazkpCNx Oo2Nk+F8xRVHK0LFju5y/9WjvnD9lhTZQAL9OcsUTurPlv4gqtLWDnqcvwyMrsx0 8PL0cCZ4BrZdqrVen1Zl3pwXKTuSHuDl6dKTugRwfyIEkVur1+HbAWEojMdCzlMx oUuBqBy4Q0xG/lu8IGKUZDGyVoOptqH7gfOb9R5eCxzBSR1l3UyauHHCj2iZSLzy 8I5sPmecj7jAaG/J5V9PALF/VESyN8BSujR4WkzoLTxJCBA+umHV2alP+lqUZ9ph jI+hQ1mYB5MVX6twbFgHeOY6pg3/oaYb4KSAchDNJpaUVlclhsWKTDHbHWg= -----END CERTIFICATE-----Generated at Wed Nov 4 05:35:44 2026 by rpki-client