$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa File: 4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa (raw, json) Hash identifier: ISIcES+52jQMJM47f0/MRPX11waOGRQsrYVSy1LWFps= Subject key identifier: 1E:46:5F:63:26:55:D3:51:EA:15:40:E4:A1:EF:CB:AE:FC:79:BD:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BFE20720C58F1DB3CD2A834A48E0D7E65451FA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa Signing time: Thu 22 Oct 2026 01:07:17 +0000 ROA not before: Thu 22 Oct 2026 01:07:17 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fe:20:72:0c:58:f1:db:3c:d2:a8:34:a4:8e:0d:7e:65:45:1f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:07:17 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=848d1d97c8e1dd35c1b47660a14ef5748865a72c779d72bd80f7be217a8896b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f5:5b:ba:42:8e:73:f6:b7:06:cb:12:81:56: fb:69:60:ef:95:e2:57:fe:f8:ac:33:31:0e:8e:e8: 40:cb:ba:63:d1:b4:c2:6a:1c:e4:9f:ab:2e:53:87: 22:e2:8d:d7:80:48:1f:b3:ee:c2:33:bc:59:19:04: 35:97:75:83:88:78:4f:c9:e2:42:b9:19:67:11:a2: 2f:66:38:1d:1f:a3:40:12:b2:e4:55:a4:8e:0d:6f: d8:93:6e:72:45:24:2a:d5:f6:91:88:b6:7e:6e:6f: a2:09:0e:94:06:8a:a5:b2:f9:88:12:28:a5:b6:71: ff:6e:24:39:45:52:f3:5d:2e:01:06:b1:95:3a:fd: 9f:c0:a3:fe:fe:20:ca:3a:93:85:8b:a7:09:bd:94: f0:23:5a:00:c0:33:e4:f1:b2:7d:68:de:57:cc:8a: be:06:d3:cf:ae:af:2b:54:91:59:38:c6:03:27:16: 29:aa:5b:19:c1:8d:e2:4e:98:ca:7c:81:5c:8c:ea: 93:02:5f:0e:03:c2:be:9d:25:02:e4:76:5a:4b:07: 3d:6e:70:9c:08:1c:c7:18:e9:65:17:69:d0:a6:33: d2:d9:a1:5c:64:fd:24:b7:19:a2:35:4c:39:83:50: 83:bf:1a:67:09:19:b5:4b:b3:3d:95:b2:6e:7f:a8: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:46:5F:63:26:55:D3:51:EA:15:40:E4:A1:EF:CB:AE:FC:79:BD:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.64.0/18 Signature Algorithm: sha256WithRSAEncryption 87:71:4b:bb:cb:91:b3:39:7e:41:5c:88:23:4a:28:14:98:eb: 5f:40:88:49:72:32:27:19:39:67:99:8d:cc:4d:be:e9:6e:f3: 95:7d:b4:68:90:78:79:fc:6d:46:2c:80:ab:77:f8:f1:8d:56: f2:e3:83:8e:3a:cb:90:20:f7:50:1c:a6:b3:e0:58:ce:17:19: 8f:f9:eb:c2:3f:a9:3a:a2:c5:77:06:88:8e:f3:cf:1d:43:b1: c4:61:19:b7:40:f1:f1:4f:2c:fd:1f:98:50:f1:7d:aa:a9:f0: 3c:a6:ff:03:7b:56:43:6c:26:fd:87:17:d1:ca:46:e4:24:23: 32:18:e4:7a:74:e8:e1:ad:ad:33:a7:8d:b3:29:6d:23:ed:67: 30:e1:17:bd:b4:84:06:27:88:12:bc:cc:da:72:c2:38:14:d7: 17:b0:09:63:13:c3:c2:62:cf:da:c3:e3:58:bb:9c:76:37:92: 67:3b:5f:1b:c5:1d:a7:4c:8a:1b:e0:90:01:b2:5e:76:c3:09: 6c:69:f0:ce:07:67:d2:c1:c9:7e:31:e8:7c:ba:f3:43:34:01: 01:7a:b5:26:d3:18:0d:06:5d:4a:dd:30:90:25:2d:bd:60:c7: 94:6a:4f:fa:09:28:3f:68:51:64:3c:21:1e:10:9c:ab:d4:6c: 85:e1:b7:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC/4gcgxY8ds80qg0pI4NfmVFH6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEwNzE3WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDhkMWQ5N2M4ZTFkZDM1YzFiNDc2NjBhMTRlZjU3NDg4 NjVhNzJjNzc5ZDcyYmQ4MGY3YmUyMTdhODg5NmIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDw9Vu6Qo5z9rcGyxKBVvtpYO+V4lf++KwzMQ6O6EDLumPR tMJqHOSfqy5ThyLijdeASB+z7sIzvFkZBDWXdYOIeE/J4kK5GWcRoi9mOB0fo0AS suRVpI4Nb9iTbnJFJCrV9pGItn5ub6IJDpQGiqWy+YgSKKW2cf9uJDlFUvNdLgEG sZU6/Z/Ao/7+IMo6k4WLpwm9lPAjWgDAM+Txsn1o3lfMir4G08+urytUkVk4xgMn FimqWxnBjeJOmMp8gVyM6pMCXw4Dwr6dJQLkdlpLBz1ucJwIHMcY6WUXadCmM9LZ oVxk/SS3GaI1TDmDUIO/GmcJGbVLsz2Vsm5/qH2xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHkZfYyZV01HqFUDkoe/Lrvx5vTEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkNTZhZGY0LTRhMDgtNGI3Zi1iMjVkLWEyNzdjZWY5NDVhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFUAwDQYJKoZIhvcNAQELBQADggEBAIdxS7vLkbM5fkFciCNKKBSY619A iElyMicZOWeZjcxNvulu85V9tGiQeHn8bUYsgKt3+PGNVvLjg446y5Ag91AcprPg WM4XGY/568I/qTqixXcGiI7zzx1DscRhGbdA8fFPLP0fmFDxfaqp8Dym/wN7VkNs Jv2HF9HKRuQkIzIY5Hp06OGtrTOnjbMpbSPtZzDhF720hAYniBK8zNpywjgU1xew CWMTw8Jiz9rD41i7nHY3kmc7XxvFHadMihvgkAGyXnbDCWxp8M4HZ9LByX4x6Hy6 80M0AQF6tSbTGA0GXUrdMJAlLb1gx5RqT/oJKD9oUWQ8IR4QnKvUbIXht9s= -----END CERTIFICATE-----Generated at Wed Nov 4 05:39:22 2026 by rpki-client