$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa File: 4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa (raw, json) Hash identifier: 2WhgiCVXHvSmkOxqCS8pOLa9hZtU+utP+qsoprWs9H8= Subject key identifier: 24:BD:6B:04:D1:67:BA:82:07:E8:82:73:36:31:6A:56:8E:9D:89:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C2BEF1D48E416E3D116B1D5A838A166FCC1B699 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa Signing time: Tue 27 Oct 2026 00:21:18 +0000 ROA not before: Tue 27 Oct 2026 00:21:18 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 203.110.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2b:ef:1d:48:e4:16:e3:d1:16:b1:d5:a8:38:a1:66:fc:c1:b6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:21:18 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=9c02d09af8a2dc2f33d1e4f8e27790dd6abc2fb7d6333dcfd31d0a5726f21cd5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:96:9f:b6:2f:a8:ea:72:0f:ad:0a:0d:17: 17:09:f0:89:2f:97:42:b2:cd:62:c2:2b:98:10:2e: 99:b5:85:0b:2d:f7:03:bf:18:0c:81:be:de:ad:6c: 44:79:4b:47:9c:8d:55:44:7c:4a:0e:c0:97:d3:29: 47:b4:52:57:d5:09:a7:3b:d9:03:d1:81:25:2d:96: 49:ea:d2:d3:8e:d4:0b:fd:3e:a5:06:3e:3d:a7:70: ac:98:06:0a:1b:b9:f0:a0:63:61:86:48:a0:19:2e: 74:62:a2:20:a8:71:67:d0:bd:bb:a9:e3:73:09:1e: e7:35:d0:ae:99:7d:c6:0d:43:8a:d4:f5:c3:ab:ed: 6b:2c:48:b6:98:ea:e5:47:14:fc:03:dc:99:3d:17: 67:2d:cb:d9:63:0a:0a:43:32:02:87:fa:3f:44:0d: 17:76:31:c1:38:a5:3e:88:75:ca:16:39:2a:9e:cc: b1:10:0c:69:65:e6:d8:25:06:58:63:34:78:2e:86: 04:11:d5:9f:70:b5:20:21:3d:d5:a0:13:23:07:a5: bb:08:6d:48:09:f8:50:b2:21:0c:85:16:fc:db:4c: 69:0b:83:d6:61:16:d4:09:a1:6b:9f:81:80:e6:92: e9:5a:6b:54:f9:99:b0:e3:4f:cb:87:f7:25:20:b3: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BD:6B:04:D1:67:BA:82:07:E8:82:73:36:31:6A:56:8E:9D:89:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.110.206.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:ab:ae:e0:9b:6f:ac:e1:ba:67:c1:80:c2:a7:ab:b8:c9:61: d1:ed:a3:87:11:8d:4c:f7:de:fa:7e:97:18:f7:48:5f:58:88: 1f:d8:8e:59:76:db:a4:8d:67:ea:2e:f5:21:68:7b:7a:d3:63: 20:14:57:4a:90:e7:5d:c1:28:ab:a1:ad:7a:94:f0:28:aa:ea: 06:b3:f4:f3:a4:ad:f7:b3:39:ed:bf:da:7f:d2:75:51:50:e9: c9:d8:91:80:00:e4:19:88:1d:0d:d5:e0:f6:a2:85:1a:2a:af: ba:da:6d:18:e9:04:cd:69:88:1f:22:cb:aa:b4:e2:6b:78:27: 19:3b:66:32:49:1a:4b:eb:e5:60:89:a0:aa:46:a0:63:ec:64: 89:a0:ca:48:89:19:c2:34:db:ee:26:d2:7c:58:5b:e4:77:b8: c4:af:a2:3a:35:ba:b1:8d:65:4d:92:2e:0d:fe:5f:2e:76:f5: 34:3e:4d:ac:3e:99:05:02:62:47:2e:20:5b:fc:3e:48:31:1d: f0:e9:fb:58:da:8c:a6:41:c8:3c:2b:d6:2c:54:86:1c:88:17: 8b:95:e5:c8:b2:eb:35:1f:a4:eb:42:b1:7e:95:f5:4c:9b:64: f3:57:94:93:05:a7:99:61:8c:ca:7c:32:80:43:5a:b4:ca:cb: 5f:b4:00:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHCvvHUjkFuPRFrHVqDihZvzBtpkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAyMTE4WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzAyZDA5YWY4YTJkYzJmMzNkMWU0ZjhlMjc3OTBkZDZh YmMyZmI3ZDYzMzNkY2ZkMzFkMGE1NzI2ZjIxY2Q1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVYZafti+o6nIPrQoNFxcJ8Ikvl0KyzWLCK5gQLpm1hQst 9wO/GAyBvt6tbER5S0ecjVVEfEoOwJfTKUe0UlfVCac72QPRgSUtlknq0tOO1Av9 PqUGPj2ncKyYBgobufCgY2GGSKAZLnRioiCocWfQvbup43MJHuc10K6ZfcYNQ4rU 9cOr7WssSLaY6uVHFPwD3Jk9F2cty9ljCgpDMgKH+j9EDRd2McE4pT6IdcoWOSqe zLEQDGll5tglBlhjNHguhgQR1Z9wtSAhPdWgEyMHpbsIbUgJ+FCyIQyFFvzbTGkL g9ZhFtQJoWufgYDmkulaa1T5mbDjT8uH9yUgs5q7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJL1rBNFnuoIH6IJzNjFqVo6diSowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkOGQzNGRhLTBjMTAtNDM2NC05ZDBmLWU1YzQ0YzhlOWEwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHLbs4wDQYJKoZIhvcNAQELBQADggEBAGurruCbb6zhumfBgMKnq7jJYdHt o4cRjUz33vp+lxj3SF9YiB/Yjll226SNZ+ou9SFoe3rTYyAUV0qQ513BKKuhrXqU 8Ciq6gaz9POkrfezOe2/2n/SdVFQ6cnYkYAA5BmIHQ3V4PaihRoqr7rabRjpBM1p iB8iy6q04mt4Jxk7ZjJJGkvr5WCJoKpGoGPsZImgykiJGcI02+4m0nxYW+R3uMSv ojo1urGNZU2SLg3+Xy529TQ+Taw+mQUCYkcuIFv8PkgxHfDp+1jajKZByDwr1ixU hhyIF4uV5ciy6zUfpOtCsX6V9UybZPNXlJMFp5lhjMp8MoBDWrTKy1+0APM= -----END CERTIFICATE-----Generated at Tue Nov 3 16:50:36 2026 by rpki-client