$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4fee6d78-1728-44bd-b799-ca975927c66a.roa File: 4fee6d78-1728-44bd-b799-ca975927c66a.roa (raw, json) Hash identifier: qQaVCJ8iEY1/atXEu9siGGCIvm9oqoJytrHlbnCsCvI= Subject key identifier: FE:E1:E1:8E:16:7D:65:E9:D3:DB:EB:3C:A6:61:AE:0C:63:29:CE:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1158E075B5D4F903920A28CCF7FFBD8E65A3591A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4fee6d78-1728-44bd-b799-ca975927c66a.roa Signing time: Tue 06 Oct 2026 00:31:49 +0000 ROA not before: Tue 06 Oct 2026 00:31:49 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.186.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:58:e0:75:b5:d4:f9:03:92:0a:28:cc:f7:ff:bd:8e:65:a3:59:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:31:49 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=a950732dc91dc2fc01d459ab7bf1b910cbb217e1e9c8e468d7daae8af44dceb3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:02:5a:69:19:ac:1a:2c:1e:65:b0:fe:1f: d9:38:92:92:4f:e9:0e:56:2c:cb:5e:6b:20:e2:05: 4c:30:d1:ef:58:eb:0f:5a:71:21:f9:c5:f4:28:08: 4d:90:86:f5:a8:39:5b:08:41:1c:a4:4d:f6:bb:eb: ff:8f:b8:aa:6a:e2:aa:2a:c0:1e:b2:2c:f5:fb:03: 1f:05:d0:a1:a1:6c:2e:12:5d:f3:ef:62:ef:e5:62: 7a:9c:e2:fb:eb:fb:64:73:ec:da:f0:99:81:fa:d5: a7:cd:06:0a:83:8c:71:86:32:27:8b:7d:59:fb:83: c4:d3:33:79:40:0c:31:c6:df:60:ff:93:83:a1:d9: 23:5b:7a:bd:24:ce:3e:48:4b:9b:52:48:ea:b4:c9: 84:10:7a:6b:c2:bc:14:55:7c:80:47:bc:25:1a:c0: 58:70:2f:3f:96:3d:7b:4b:43:f2:e7:9e:25:8c:34: 29:63:aa:26:37:11:2b:63:d8:a3:0b:b4:ce:c9:94: b8:6b:a2:97:1b:30:8f:1f:80:7e:25:ad:ac:66:cf: 71:67:a8:98:9c:cb:49:c4:f6:56:48:7f:64:06:90: 6e:37:2e:1a:3b:e8:bb:05:c2:ec:64:e5:91:cf:1b: c1:ad:61:d9:cb:7b:ba:6f:f5:df:88:e1:0f:b8:64: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E1:E1:8E:16:7D:65:E9:D3:DB:EB:3C:A6:61:AE:0C:63:29:CE:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4fee6d78-1728-44bd-b799-ca975927c66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.186.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:22:a6:76:5b:7e:9e:13:6d:bd:68:d1:29:f7:c7:c2:2f:d8: 37:0e:3d:3f:ee:fb:48:dc:c5:d4:47:ed:6a:2d:c3:9d:da:fb: e8:3f:44:cd:7a:6b:10:e1:ad:6d:9c:fe:53:44:4b:6a:4c:14: d7:be:ce:b6:47:78:30:41:be:53:25:66:e8:af:9f:56:c5:f0: 7a:a1:25:fd:41:57:58:81:52:97:53:c4:63:b4:e0:a3:d7:e5: c0:a3:9b:eb:9b:5a:3b:d4:99:bb:d9:46:c5:cd:8f:82:21:28: 1b:5f:96:6a:6e:1d:12:ae:5b:e2:d4:e4:d0:b1:f3:51:01:84: d8:b0:85:2e:37:47:92:cd:2a:d6:85:86:6b:23:00:45:69:64: b6:4c:d8:e1:e4:54:63:fb:bc:8a:72:59:69:77:7b:00:68:e3: d4:1d:5f:61:91:f4:3e:65:fd:ce:86:7c:2d:19:b6:2b:c3:a2: 1e:53:e3:84:e2:0a:50:10:7f:98:67:69:7e:f0:72:63:f1:cd: cc:46:06:99:e9:c1:1a:15:bc:93:7d:e0:71:a3:7b:91:d4:83: 0c:1d:4a:63:88:c5:17:e6:84:18:fc:de:3e:0d:10:b6:2f:a4: f2:2d:18:ef:20:6a:76:52:f1:2f:3f:5c:8a:33:33:55:da:cf: c5:e4:b2:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEVjgdbXU+QOSCijM9/+9jmWjWRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAzMTQ5WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTUwNzMyZGM5MWRjMmZjMDFkNDU5YWI3YmYxYjkxMGNi YjIxN2UxZTljOGU0NjhkN2RhYWU4YWY0NGRjZWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCibgJaaRmsGiweZbD+H9k4kpJP6Q5WLMteayDiBUww0e9Y 6w9acSH5xfQoCE2QhvWoOVsIQRykTfa76/+PuKpq4qoqwB6yLPX7Ax8F0KGhbC4S XfPvYu/lYnqc4vvr+2Rz7NrwmYH61afNBgqDjHGGMieLfVn7g8TTM3lADDHG32D/ k4Oh2SNber0kzj5IS5tSSOq0yYQQemvCvBRVfIBHvCUawFhwLz+WPXtLQ/LnniWM NCljqiY3EStj2KMLtM7JlLhropcbMI8fgH4lraxmz3FnqJicy0nE9lZIf2QGkG43 Lho76LsFwuxk5ZHPG8GtYdnLe7pv9d+I4Q+4ZLbrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/uHhjhZ9ZenT2+s8pmGuDGMpzoAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmZWU2ZDc4LTE3MjgtNDRiZC1iNzk5LWNhOTc1OTI3YzY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ujANBgkqhkiG9w0BAQsFAAOCAQEAQiKmdlt+nhNtvWjRKffHwi/YNw49 P+77SNzF1Eftai3Dndr76D9EzXprEOGtbZz+U0RLakwU177Otkd4MEG+UyVm6K+f VsXweqEl/UFXWIFSl1PEY7Tgo9flwKOb65taO9SZu9lGxc2PgiEoG1+Wam4dEq5b 4tTk0LHzUQGE2LCFLjdHks0q1oWGayMARWlktkzY4eRUY/u8inJZaXd7AGjj1B1f YZH0PmX9zoZ8LRm2K8OiHlPjhOIKUBB/mGdpfvByY/HNzEYGmenBGhW8k33gcaN7 kdSDDB1KY4jFF+aEGPzePg0Qti+k8i0Y7yBqdlLxLz9cijMzVdrPxeSyow== -----END CERTIFICATE-----Generated at Tue Nov 3 12:02:23 2026 by rpki-client