$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4df343be-0016-484d-b1b8-90282c66c533.roa File: 4df343be-0016-484d-b1b8-90282c66c533.roa (raw, json) Hash identifier: Cbg7P2IF4CWguG0WuOb1C09ZGJ8ZpXM4dysEjo5Jn9Q= Subject key identifier: CC:EE:E9:32:1C:D3:6C:9B:74:6C:A7:1E:8A:FC:28:2A:D1:C0:05:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5DC34FDE1946CC9DDA79C685269D657EB4B2C7E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4df343be-0016-484d-b1b8-90282c66c533.roa Signing time: Thu 24 Sep 2026 00:00:15 +0000 ROA not before: Thu 24 Sep 2026 00:00:15 +0000 ROA not after: Wed 23 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.107.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c3:4f:de:19:46:cc:9d:da:79:c6:85:26:9d:65:7e:b4:b2:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 24 00:00:15 2026 GMT Not After : Dec 23 23:59:59 2026 GMT Subject: serialNumber=779d18fe3b8b3c863eb05e6defdfcff4183171e5986eeb768b47c799c9ac2cba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:37:8e:63:ff:58:ad:1f:42:1d:50:3b:36: 21:99:4a:cf:4d:3c:9d:63:4f:f8:ea:99:aa:bd:2e: e4:77:80:4a:a8:4f:73:c0:07:f4:1c:ed:c5:b1:8f: be:05:d2:67:4c:b1:87:9c:51:16:ae:26:ca:e9:80: 17:80:37:1e:1e:b1:f7:94:19:62:40:82:48:ba:ac: 55:93:a6:58:ab:5f:dc:44:a1:f8:3f:c1:69:a3:5b: 1c:d0:d5:5d:c4:2f:a1:9d:37:d6:d3:96:6b:01:fb: 86:7e:d7:98:1b:a6:a2:ba:1f:f1:10:99:96:3b:d7: da:99:f3:48:c3:08:75:e1:10:1c:00:bd:45:a1:ff: 1d:60:a8:36:92:14:7f:32:1a:fd:52:bf:19:0a:74: 15:9f:ca:1c:65:6c:bf:83:dc:bd:89:17:e3:39:5e: bd:2b:86:7a:07:15:56:3d:db:09:bd:0f:7b:7a:31: ae:74:41:05:2d:8d:f7:20:61:d2:5a:ec:5e:48:bf: 8d:ad:6e:70:83:73:4c:19:ed:c0:1f:16:f4:e6:84: bf:1c:37:5b:39:c7:8e:12:f7:ff:5f:27:89:7e:7f: a0:22:85:22:53:3b:27:38:1a:44:58:09:66:cb:16: bd:75:28:32:b0:f1:a5:8e:6c:17:ef:32:2a:ea:e4: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EE:E9:32:1C:D3:6C:9B:74:6C:A7:1E:8A:FC:28:2A:D1:C0:05:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4df343be-0016-484d-b1b8-90282c66c533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.107.205.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ae:da:4e:66:e2:de:46:99:f8:63:e9:f5:1a:52:9f:1f:d3: ab:e8:1f:06:59:36:77:cb:c6:c1:2f:48:61:bd:af:cf:53:51: 3a:5a:8b:e3:b7:94:e6:50:54:05:7f:d2:b8:47:24:5b:67:3c: 78:3d:ee:3a:ad:bc:b4:aa:fc:41:13:41:96:ad:e7:1f:16:9e: d4:b9:c8:55:6d:d8:82:19:8b:81:06:7c:86:db:2f:29:82:51: 99:89:b4:cb:1f:fa:66:4f:b9:e9:34:74:3f:3e:4b:9d:04:af: da:49:27:1f:22:24:9c:09:d0:0a:38:47:e9:97:ae:fa:41:b5: a7:77:1f:79:87:3d:66:3b:dc:53:18:e7:d9:45:b8:98:3f:95: 7f:21:d2:6d:74:c7:23:c6:13:50:3c:30:2a:cf:55:a2:af:e9: 95:d2:6c:82:7d:89:73:21:0d:b1:4f:21:bc:ce:c5:92:6f:95: 4d:1a:10:b8:f4:1f:17:02:dd:75:d9:0d:99:f7:64:99:7b:7f: 13:c8:5d:07:57:42:6f:e3:59:70:f7:f9:03:68:7e:c9:d9:9f: 90:90:76:b4:d7:1f:c0:ac:c6:5f:49:6f:be:cc:d1:b2:7f:26: 6c:6e:f6:4f:31:fb:be:75:ae:5b:92:12:24:51:e1:2a:05:a6: cd:9b:22:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXcNP3hlGzJ3aecaFJp1lfrSyx+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTI0MDAwMDE1WhcNMjYxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzlkMThmZTNiOGIzYzg2M2ViMDVlNmRlZmRmY2ZmNDE4 MzE3MWU1OTg2ZWViNzY4YjQ3Yzc5OWM5YWMyY2JhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo6jeOY/9YrR9CHVA7NiGZSs9NPJ1jT/jqmaq9LuR3gEqo T3PAB/Qc7cWxj74F0mdMsYecURauJsrpgBeANx4esfeUGWJAgki6rFWTplirX9xE ofg/wWmjWxzQ1V3EL6GdN9bTlmsB+4Z+15gbpqK6H/EQmZY719qZ80jDCHXhEBwA vUWh/x1gqDaSFH8yGv1SvxkKdBWfyhxlbL+D3L2JF+M5Xr0rhnoHFVY92wm9D3t6 Ma50QQUtjfcgYdJa7F5Iv42tbnCDc0wZ7cAfFvTmhL8cN1s5x44S9/9fJ4l+f6Ai hSJTOyc4GkRYCWbLFr11KDKw8aWObBfvMirq5NnFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzO7pMhzTbJt0bKceivwoKtHABQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkZjM0M2JlLTAwMTYtNDg0ZC1iMWI4LTkwMjgyYzY2YzUzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADRa80wDQYJKoZIhvcNAQELBQADggEBABKu2k5m4t5Gmfhj6fUaUp8f06vo HwZZNnfLxsEvSGG9r89TUTpai+O3lOZQVAV/0rhHJFtnPHg97jqtvLSq/EETQZat 5x8WntS5yFVt2IIZi4EGfIbbLymCUZmJtMsf+mZPuek0dD8+S50Er9pJJx8iJJwJ 0Ao4R+mXrvpBtad3H3mHPWY73FMY59lFuJg/lX8h0m10xyPGE1A8MCrPVaKv6ZXS bIJ9iXMhDbFPIbzOxZJvlU0aELj0HxcC3XXZDZn3ZJl7fxPIXQdXQm/jWXD3+QNo fsnZn5CQdrTXH8Csxl9Jb77M0bJ/Jmxu9k8x+751rluSEiRR4SoFps2bIss= -----END CERTIFICATE-----Generated at Wed Nov 4 11:15:01 2026 by rpki-client