$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa File: 4f822f75-fc14-46c1-a803-e47f23928368.roa (raw, json) Hash identifier: uBt0INgZ8GVqXDvveebuex0e0wdrdH0GdGkwAY0C0ng= Subject key identifier: AE:7C:71:09:1F:A7:B3:FF:10:50:0A:D5:A2:30:BB:20:06:69:62:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55E7F7C77F331CEBC6D4AE7DFFC61AF7A92C3FE0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa Signing time: Mon 26 Oct 2026 00:21:09 +0000 ROA not before: Mon 26 Oct 2026 00:21:09 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e7:f7:c7:7f:33:1c:eb:c6:d4:ae:7d:ff:c6:1a:f7:a9:2c:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:21:09 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=1b81f6bb3b15fe96682b5f2f0f049e2ead8c3ab1124cd649a1ff687bc9e58af5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:c8:db:05:9c:2d:ac:d1:5c:64:f0:c0:36: c8:d5:42:9f:f1:e2:99:a4:84:4b:f2:13:20:05:31: 48:6c:4b:ec:1c:56:7e:72:8b:c8:f2:5e:97:a8:62: 56:50:a0:59:40:5b:af:8a:9b:83:d9:ba:fa:81:9b: 0b:f3:1c:66:4a:de:e1:f4:a2:98:a6:7d:20:8c:47: 69:29:9e:a1:f9:59:cb:d7:95:d7:55:31:9f:07:b5: d2:44:e5:d9:01:85:73:bc:0c:a0:b7:eb:dd:0d:27: 3b:c1:72:fa:5e:69:f7:1e:74:a7:0e:09:7f:5e:b6: 9a:23:46:5a:77:9e:9e:3f:8d:f3:51:76:a6:87:3a: 74:06:bb:88:b7:50:0d:e2:9f:e5:9f:bc:42:90:3c: 17:ef:c8:17:ef:63:63:02:00:25:ce:e6:97:95:3b: 7c:2c:57:42:6a:f0:c3:b5:e5:15:ae:a1:42:07:17: dc:0c:bc:65:13:d1:a3:70:9f:64:45:d6:7e:6a:e0: 9e:3c:4a:30:a2:13:13:a2:8d:87:e5:7d:cc:ad:33: f3:ad:7b:a8:75:91:e8:43:a7:5e:ed:49:7e:1c:f2: 82:66:3d:8d:48:13:8e:ee:ea:15:af:3c:52:27:ec: 4d:f0:5e:f3:e8:40:d7:aa:2f:24:2d:ce:17:c4:ab: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7C:71:09:1F:A7:B3:FF:10:50:0A:D5:A2:30:BB:20:06:69:62:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.131.0/24 Signature Algorithm: sha256WithRSAEncryption b4:69:c6:7d:58:c1:17:86:c8:a1:96:0d:60:43:c8:26:dd:7b: cb:91:61:9d:ce:e0:d1:a2:bc:8e:9b:d6:12:8c:52:e9:81:2c: 65:47:58:79:e3:9d:19:9d:5a:2d:2b:55:46:0d:a1:ba:d8:47: 07:b7:61:a3:3a:e3:bb:42:e5:55:67:b5:d9:7b:d1:a2:0f:ba: ba:78:a6:35:7f:a1:73:dc:fb:90:b6:56:2f:29:f9:dd:44:c6: 32:cf:97:dd:90:08:42:01:12:b2:e9:82:61:15:96:5f:45:fa: 5c:ed:b7:24:f2:fd:ce:2c:f3:fc:25:96:4a:1a:1f:41:c5:2c: 26:d7:29:85:d4:c5:a5:c5:80:0b:ae:1b:18:83:66:6d:26:9f: 06:4c:fc:91:cc:d8:af:e4:17:b9:37:af:c6:9a:0e:e5:5a:e6: 23:b2:ce:4f:29:eb:23:3f:15:68:f7:42:08:54:cc:83:8d:1f: 6e:b4:ff:1a:b5:d8:c6:81:fb:18:2c:a8:02:2a:13:7a:8e:9a: ff:d8:ea:16:9f:08:b8:ab:b5:0c:bc:e1:7c:f5:fa:c6:e6:4a: 16:34:d2:dc:f9:98:6f:12:b0:96:ce:e3:da:c9:1c:88:d2:b6: d1:07:6e:a2:30:8a:01:02:93:06:57:17:b7:d7:f4:6f:ee:56: ce:1e:f1:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVef3x38zHOvG1K59/8Ya96ksP+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAyMTA5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjgxZjZiYjNiMTVmZTk2NjgyYjVmMmYwZjA0OWUyZWFk OGMzYWIxMTI0Y2Q2NDlhMWZmNjg3YmM5ZTU4YWY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5J8jbBZwtrNFcZPDANsjVQp/x4pmkhEvyEyAFMUhsS+wc Vn5yi8jyXpeoYlZQoFlAW6+Km4PZuvqBmwvzHGZK3uH0opimfSCMR2kpnqH5WcvX lddVMZ8HtdJE5dkBhXO8DKC3690NJzvBcvpeafcedKcOCX9etpojRlp3np4/jfNR dqaHOnQGu4i3UA3in+WfvEKQPBfvyBfvY2MCACXO5peVO3wsV0Jq8MO15RWuoUIH F9wMvGUT0aNwn2RF1n5q4J48SjCiExOijYflfcytM/Ote6h1kehDp17tSX4c8oJm PY1IE47u6hWvPFIn7E3wXvPoQNeqLyQtzhfEq1lFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrnxxCR+ns/8QUArVojC7IAZpYvUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmODIyZjc1LWZjMTQtNDZjMS1hODAzLWU0N2YyMzkyODM2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKroMwDQYJKoZIhvcNAQELBQADggEBALRpxn1YwReGyKGWDWBDyCbde8uR YZ3O4NGivI6b1hKMUumBLGVHWHnjnRmdWi0rVUYNobrYRwe3YaM647tC5VVntdl7 0aIPurp4pjV/oXPc+5C2Vi8p+d1ExjLPl92QCEIBErLpgmEVll9F+lzttyTy/c4s 8/wllkoaH0HFLCbXKYXUxaXFgAuuGxiDZm0mnwZM/JHM2K/kF7k3r8aaDuVa5iOy zk8p6yM/FWj3QghUzIONH260/xq12MaB+xgsqAIqE3qOmv/Y6hafCLirtQy84Xz1 +sbmShY00tz5mG8SsJbO49rJHIjSttEHbqIwigECkwZXF7fX9G/uVs4e8UA= -----END CERTIFICATE-----Generated at Mon Nov 2 23:39:29 2026 by rpki-client