$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa File: 58c78734-91d9-4994-9461-7b6172f0caa6.roa (raw, json) Hash identifier: ZiFl5aZ6+U6seS4tcdsnAIyMx5lVSuqrmjFk54GkQxw= Subject key identifier: 9D:64:B1:50:51:0C:4E:10:54:DB:BB:FD:D8:90:1B:79:68:1A:9D:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A4D0DA49C29D60F783FC0D3E4990B8B134143DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa Signing time: Sat 24 Oct 2026 00:30:11 +0000 ROA not before: Sat 24 Oct 2026 00:30:11 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 67.202.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4d:0d:a4:9c:29:d6:0f:78:3f:c0:d3:e4:99:0b:8b:13:41:43:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:30:11 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=fae4af65cb39f89ace27a15623cded914684720c8c0519fa35659434c0c9b0a1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:51:e0:1d:bd:ac:31:4b:d0:79:53:93:ac: 9e:df:ea:3e:03:28:33:fa:e1:69:a8:c5:e8:aa:aa: 49:a9:e4:b3:90:68:ec:84:ee:88:5b:a7:72:2c:44: 87:79:14:bc:ed:ff:82:21:63:c5:2f:45:77:2c:ab: 29:a7:d8:ba:10:32:8b:0b:be:94:9f:aa:1d:90:ae: 1b:8f:76:09:0e:08:9f:f6:9a:da:79:55:6d:d9:fb: 03:df:04:d1:51:67:ff:b5:96:9f:f2:40:36:92:8b: 8d:99:32:6c:e1:c4:e3:c3:5a:20:7f:cc:2a:c5:e6: 89:31:a0:2e:68:c5:49:0f:8a:28:4c:1e:ea:d0:a3: 0c:83:1c:c2:a3:23:ba:93:ca:35:69:f9:7f:be:00: 1f:9b:d0:90:77:b8:8d:0e:d4:de:5d:b0:46:b3:40: ce:c1:ad:c4:58:6c:d2:f4:1e:ed:8a:57:2f:00:38: 39:34:18:fd:90:fe:ea:8d:77:fc:da:1a:7d:68:62: 5b:90:97:7d:bb:92:33:7a:fb:32:47:a6:04:24:71: 20:72:30:ab:7e:aa:a7:5f:f8:71:34:ad:5b:5c:52: 15:52:60:fb:9d:7b:b0:25:d3:23:f9:58:0c:4f:bf: b7:aa:38:b8:a5:b0:b6:2b:66:82:0e:37:03:80:c1: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:64:B1:50:51:0C:4E:10:54:DB:BB:FD:D8:90:1B:79:68:1A:9D:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.202.0.0/18 Signature Algorithm: sha256WithRSAEncryption cf:4e:f8:ed:7f:40:5d:a6:2f:22:55:a5:84:9e:c8:91:be:ad: e8:f4:a1:f5:a1:22:d6:6e:1a:09:22:15:d1:ee:1e:b0:32:89: 4d:d0:fe:28:6f:ed:13:5a:44:ff:91:b0:cc:93:26:dd:99:74: c6:62:8b:24:a2:41:fe:52:b0:13:3d:bc:c0:df:d3:65:7c:18: a5:7a:7d:5a:2e:f6:e8:1c:c1:93:ea:39:96:14:5b:ab:10:85: 6d:c0:90:cc:bc:39:6b:42:94:e6:f6:b1:7b:c1:d9:8b:06:5f: a0:dc:66:a0:2a:93:8b:6f:26:49:ec:3c:10:27:09:08:22:73: 26:8b:54:54:ea:b4:94:20:19:cd:c2:4d:cc:cc:d3:9e:e0:93: 1a:e4:1e:29:b5:eb:e4:58:e7:4b:ad:e6:50:46:99:fe:40:4b: 1a:b3:db:af:16:bd:e6:11:4f:24:44:05:91:25:dd:bb:f6:d8: f9:48:e4:0a:69:e3:9d:aa:7e:85:92:38:95:c3:4a:c9:ae:42: cb:9d:8a:46:44:a7:c4:b8:39:2f:66:b2:81:97:74:a8:51:56: 99:27:a6:64:a0:9c:b0:1d:72:e7:d6:02:cf:6c:e1:64:0b:15: 63:09:7a:47:16:2e:1d:eb:fd:77:6a:71:da:5f:ef:90:d9:13: c9:9e:79:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSk0NpJwp1g94P8DT5JkLixNBQ98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAzMDExWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWU0YWY2NWNiMzlmODlhY2UyN2ExNTYyM2NkZWQ5MTQ2 ODQ3MjBjOGMwNTE5ZmEzNTY1OTQzNGMwYzliMGExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9UlHgHb2sMUvQeVOTrJ7f6j4DKDP64Wmoxeiqqkmp5LOQ aOyE7ohbp3IsRId5FLzt/4IhY8UvRXcsqymn2LoQMosLvpSfqh2QrhuPdgkOCJ/2 mtp5VW3Z+wPfBNFRZ/+1lp/yQDaSi42ZMmzhxOPDWiB/zCrF5okxoC5oxUkPiihM HurQowyDHMKjI7qTyjVp+X++AB+b0JB3uI0O1N5dsEazQM7BrcRYbNL0Hu2KVy8A ODk0GP2Q/uqNd/zaGn1oYluQl327kjN6+zJHpgQkcSByMKt+qqdf+HE0rVtcUhVS YPude7Al0yP5WAxPv7eqOLilsLYrZoIONwOAwcjVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnWSxUFEMThBU27v92JAbeWganQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Yzc4NzM0LTkxZDktNDk5NC05NDYxLTdiNjE3MmYwY2FhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZDygAwDQYJKoZIhvcNAQELBQADggEBAM9O+O1/QF2mLyJVpYSeyJG+rej0 ofWhItZuGgkiFdHuHrAyiU3Q/ihv7RNaRP+RsMyTJt2ZdMZiiySiQf5SsBM9vMDf 02V8GKV6fVou9ugcwZPqOZYUW6sQhW3AkMy8OWtClOb2sXvB2YsGX6DcZqAqk4tv JknsPBAnCQgicyaLVFTqtJQgGc3CTczM057gkxrkHim16+RY50ut5lBGmf5ASxqz 268WveYRTyREBZEl3bv22PlI5App452qfoWSOJXDSsmuQsudikZEp8S4OS9msoGX dKhRVpknpmSgnLAdcufWAs9s4WQLFWMJekcWLh3r/Xdqcdpf75DZE8meeRo= -----END CERTIFICATE-----Generated at Tue Nov 3 12:05:59 2026 by rpki-client