$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/505b0a59-7db7-4e0a-81db-998576975c19.roa File: 505b0a59-7db7-4e0a-81db-998576975c19.roa (raw, json) Hash identifier: 8Nwki0e33zf2pNHVY8MHAaygvuoRzKC11QNX/2b4bcc= Subject key identifier: FB:AB:52:44:06:31:F6:13:B8:B4:35:C7:3D:93:05:21:A2:CD:BE:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4414AE26B45C0129A0C2B2D04EE1E70067308E92 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/505b0a59-7db7-4e0a-81db-998576975c19.roa Signing time: Thu 15 Oct 2026 00:11:25 +0000 ROA not before: Thu 15 Oct 2026 00:11:25 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:14:ae:26:b4:5c:01:29:a0:c2:b2:d0:4e:e1:e7:00:67:30:8e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:11:25 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=c4ee535bacb97a18989afd7b801e813940b2c81747e3bb832e576264ae77c74b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:0e:a4:c2:3c:e0:85:b7:f9:11:47:42:2f: 08:6b:8b:de:fb:c8:66:7d:56:33:74:ac:de:5e:fc: de:98:62:c2:e6:3a:15:bb:6f:27:f6:97:ed:20:19: f4:f6:fa:de:99:5b:3b:c1:6a:25:3f:b9:62:af:b3: 96:68:1c:31:6c:cc:9d:25:dd:3c:1b:e1:2d:dd:8b: 90:89:f8:b2:f3:38:c7:8c:50:bf:4d:24:14:e5:0b: 61:06:98:40:c0:5a:ab:fe:0a:97:bd:ea:60:a4:c7: 46:16:4e:1b:7d:c9:65:12:57:fa:77:1e:b0:b2:e9: 68:9c:b3:6a:5f:3a:5e:1d:0f:8c:30:44:b1:cb:e6: 7c:ec:22:63:9e:2a:fa:4c:dc:53:07:bd:68:28:44: 07:db:cd:e2:d0:96:7c:6f:c9:e4:a7:ca:82:eb:59: 16:3c:6f:aa:ed:c4:84:a9:63:f3:48:21:2b:fc:59: 4d:4e:8a:3a:72:64:7e:01:46:a8:15:8b:c4:c8:41: a7:5d:1d:cd:04:f3:a6:71:e1:87:04:f3:0e:4d:f9: 82:17:9b:4f:fe:d6:32:a0:44:3c:62:df:a4:da:25: 32:4b:b2:bd:8f:2c:7e:7b:1c:ec:9a:a8:19:0f:3d: c8:48:3f:be:84:85:7e:e7:73:bc:ea:50:b5:bf:72: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AB:52:44:06:31:F6:13:B8:B4:35:C7:3D:93:05:21:A2:CD:BE:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/505b0a59-7db7-4e0a-81db-998576975c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.32.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:60:7e:0b:8f:8a:fa:93:c7:0b:16:a9:bd:97:57:6e:a9:57: a6:86:a8:46:7e:92:64:42:d1:94:a4:1f:38:db:8d:55:a5:3f: e6:ba:09:da:e7:f0:99:34:25:ea:d2:d3:4a:da:56:bc:92:11: 11:a4:25:1a:f0:49:a9:67:f5:1f:91:16:04:b0:ce:bd:23:37: ee:36:fc:22:ae:f4:49:ce:12:18:62:67:9f:25:52:28:ca:d0: de:be:31:ec:19:4c:53:1a:94:8b:11:d4:2a:6a:32:a3:b1:35: 51:3e:8d:9b:e6:bf:35:f7:47:b2:4e:e2:55:2b:3f:88:d4:44: 54:93:8d:a7:f4:23:f3:67:e9:27:13:53:35:06:50:ac:1e:84: 22:ce:22:f6:99:96:63:37:d9:c7:c1:47:46:c6:15:79:7c:f2: f0:6c:60:4d:ad:51:8f:49:84:23:5a:8e:f8:9d:03:b1:68:d1: 37:28:1e:f2:a7:12:dc:1f:d1:0f:dd:69:18:63:2a:dc:0c:71: 83:b4:6a:07:82:d1:98:25:96:e4:4c:e8:fb:e9:17:54:fd:8e: c7:02:dd:42:fd:65:6b:39:7d:52:71:81:49:76:8b:6c:c7:87: c3:4a:b7:12:43:ca:fe:27:56:14:ab:01:8f:01:dc:6a:6b:19: f2:cc:52:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURBSuJrRcASmgwrLQTuHnAGcwjpIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAxMTI1WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNGVlNTM1YmFjYjk3YTE4OTg5YWZkN2I4MDFlODEzOTQw YjJjODE3NDdlM2JiODMyZTU3NjI2NGFlNzdjNzRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC22w6kwjzghbf5EUdCLwhri977yGZ9VjN0rN5e/N6YYsLm OhW7byf2l+0gGfT2+t6ZWzvBaiU/uWKvs5ZoHDFszJ0l3Twb4S3di5CJ+LLzOMeM UL9NJBTlC2EGmEDAWqv+Cpe96mCkx0YWTht9yWUSV/p3HrCy6Wics2pfOl4dD4ww RLHL5nzsImOeKvpM3FMHvWgoRAfbzeLQlnxvyeSnyoLrWRY8b6rtxISpY/NIISv8 WU1OijpyZH4BRqgVi8TIQaddHc0E86Zx4YcE8w5N+YIXm0/+1jKgRDxi36TaJTJL sr2PLH57HOyaqBkPPchIP76EhX7nc7zqULW/ckpTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+6tSRAYx9hO4tDXHPZMFIaLNvokwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUwNWIwYTU5LTdkYjctNGUwYS04MWRiLTk5ODU3Njk3NWMxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/iAwDQYJKoZIhvcNAQELBQADggEBAJ5gfguPivqTxwsWqb2XV26pV6aG qEZ+kmRC0ZSkHzjbjVWlP+a6Cdrn8Jk0JerS00raVrySERGkJRrwSaln9R+RFgSw zr0jN+42/CKu9EnOEhhiZ58lUijK0N6+MewZTFMalIsR1CpqMqOxNVE+jZvmvzX3 R7JO4lUrP4jURFSTjaf0I/Nn6ScTUzUGUKwehCLOIvaZlmM32cfBR0bGFXl88vBs YE2tUY9JhCNajvidA7Fo0TcoHvKnEtwf0Q/daRhjKtwMcYO0ageC0ZglluRM6Pvp F1T9jscC3UL9ZWs5fVJxgUl2i2zHh8NKtxJDyv4nVhSrAY8B3GprGfLMUiI= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:59 2026 by rpki-client