$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/551a8cec-52d6-4dbd-88f2-983bdf3935b2.roa File: 551a8cec-52d6-4dbd-88f2-983bdf3935b2.roa (raw, json) Hash identifier: HY/8ZCu4Vhqy20LlZcU2MSLPT+zgT0Q1e9BNv2gAHIE= Subject key identifier: CC:88:6A:91:C0:E1:A4:1C:CB:A3:48:83:93:F9:78:55:CB:9F:52:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 164E2DD1131B442A8B96A6D3C2C8C783BB31CB71 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/551a8cec-52d6-4dbd-88f2-983bdf3935b2.roa Signing time: Thu 24 Sep 2026 00:01:40 +0000 ROA not before: Thu 24 Sep 2026 00:01:40 +0000 ROA not after: Wed 23 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.185.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4e:2d:d1:13:1b:44:2a:8b:96:a6:d3:c2:c8:c7:83:bb:31:cb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 24 00:01:40 2026 GMT Not After : Dec 23 23:59:59 2026 GMT Subject: serialNumber=ca183314985f66d1014d468c73de37536cef1ca3df2c07560a6286a61ee2872c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:d3:41:8a:c8:92:91:86:28:61:5a:d9:22: a4:b0:c7:77:1f:13:17:cd:8b:63:00:42:83:73:d5: 3f:94:97:21:2f:41:54:df:5d:54:0c:30:aa:fe:b1: d0:e8:e8:cd:2f:7d:68:ab:0a:74:e0:56:5f:ce:1b: 68:3c:ea:4a:41:3d:65:1e:c5:36:bc:78:e1:d0:dd: 91:ba:0c:ea:25:9e:26:2d:bb:cc:d6:3f:3a:b3:c4: 5b:be:3a:36:b3:18:c5:f2:ce:7f:d1:c7:fa:ed:f3: c9:67:ff:8f:9b:d8:f4:26:c3:7b:1a:bd:94:3d:62: 6e:14:82:dc:f6:f6:e7:7e:55:a8:b6:8a:0a:3c:53: 9c:14:35:08:2c:e3:5e:19:df:ea:74:ae:b6:1e:7d: 1e:68:27:28:d0:0d:79:6b:c0:ab:28:dd:48:0f:7c: ee:52:14:87:0b:bf:65:5e:80:2b:ca:d6:41:28:68: f6:08:ff:8a:3e:7c:49:73:a0:31:24:e8:17:4a:ea: 0b:57:ad:57:18:5c:e0:7e:0f:8a:e8:0a:09:8a:0b: 3a:cd:cb:07:d8:8d:69:ec:12:7c:1d:2c:38:6e:bc: a3:6b:fa:20:a1:0f:e2:da:bc:5a:7b:c5:4d:f6:bb: 20:11:de:2a:04:38:4f:da:80:9e:c2:52:65:2b:28: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:88:6A:91:C0:E1:A4:1C:CB:A3:48:83:93:F9:78:55:CB:9F:52:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/551a8cec-52d6-4dbd-88f2-983bdf3935b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.185.200.0/21 Signature Algorithm: sha256WithRSAEncryption c1:f3:a4:a6:32:0a:9d:0b:28:0c:26:af:74:52:42:ff:15:67: 9b:bf:59:58:4b:20:63:b3:41:6c:3d:2e:98:f6:86:08:c3:57: 8d:65:e7:76:81:11:77:77:9a:13:14:b1:ea:d0:2e:ff:c7:35: c4:84:00:8a:7f:bf:56:2d:79:4d:f7:89:75:32:97:18:d0:94: 14:b8:4b:68:7c:ba:85:79:be:af:4a:3b:84:89:60:49:cc:8c: d3:f7:3d:08:5d:80:73:48:f2:61:a0:0c:7c:4e:2d:22:c8:e5: 35:6d:98:10:45:d2:d5:62:62:e8:1a:ba:31:96:07:28:71:ad: 64:94:12:80:91:46:f3:e4:19:a7:a8:78:4d:ec:7c:a3:18:93: 14:12:d5:c3:9d:39:23:d5:1d:cc:23:de:3c:b7:f4:fa:f7:2e: 37:f9:12:c7:12:4b:3b:1d:ed:ef:23:a7:4a:c3:3b:d6:b8:a9: 5f:70:c5:e7:e1:1d:fb:e1:8c:d9:54:7d:0c:ae:1a:89:76:91: c9:35:d9:af:33:ea:aa:43:2f:81:f9:a0:8a:5a:06:f8:bd:27: 0c:e8:0c:61:c1:d3:d0:a8:14:ca:18:83:d1:62:9e:2e:53:0d: 2f:76:fc:60:01:c3:bd:4c:f0:45:57:95:bf:a3:a5:78:95:5a: 55:91:35:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFk4t0RMbRCqLlqbTwsjHg7sxy3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTI0MDAwMTQwWhcNMjYxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTE4MzMxNDk4NWY2NmQxMDE0ZDQ2OGM3M2RlMzc1MzZj ZWYxY2EzZGYyYzA3NTYwYTYyODZhNjFlZTI4NzJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0v9NBisiSkYYoYVrZIqSwx3cfExfNi2MAQoNz1T+UlyEv QVTfXVQMMKr+sdDo6M0vfWirCnTgVl/OG2g86kpBPWUexTa8eOHQ3ZG6DOolniYt u8zWPzqzxFu+OjazGMXyzn/Rx/rt88ln/4+b2PQmw3savZQ9Ym4Ugtz29ud+Vai2 igo8U5wUNQgs414Z3+p0rrYefR5oJyjQDXlrwKso3UgPfO5SFIcLv2VegCvK1kEo aPYI/4o+fElzoDEk6BdK6gtXrVcYXOB+D4roCgmKCzrNywfYjWnsEnwdLDhuvKNr +iChD+LavFp7xU32uyAR3ioEOE/agJ7CUmUrKB+DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzIhqkcDhpBzLo0iDk/l4VcufUmowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1MWE4Y2VjLTUyZDYtNGRiZC04OGYyLTk4M2JkZjM5MzViMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPNucgwDQYJKoZIhvcNAQELBQADggEBAMHzpKYyCp0LKAwmr3RSQv8VZ5u/ WVhLIGOzQWw9Lpj2hgjDV41l53aBEXd3mhMUserQLv/HNcSEAIp/v1YteU33iXUy lxjQlBS4S2h8uoV5vq9KO4SJYEnMjNP3PQhdgHNI8mGgDHxOLSLI5TVtmBBF0tVi YugaujGWByhxrWSUEoCRRvPkGaeoeE3sfKMYkxQS1cOdOSPVHcwj3jy39Pr3Ljf5 EscSSzsd7e8jp0rDO9a4qV9wxefhHfvhjNlUfQyuGol2kck12a8z6qpDL4H5oIpa Bvi9JwzoDGHB09CoFMoYg9Fini5TDS92/GABw71M8EVXlb+jpXiVWlWRNUI= -----END CERTIFICATE-----Generated at Tue Nov 3 20:13:13 2026 by rpki-client