$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a73d67c-de8c-4c38-90e1-e79c432aca01.roa File: 5a73d67c-de8c-4c38-90e1-e79c432aca01.roa (raw, json) Hash identifier: 7D6rhzbBOjKRN3YuARLWa+O0xBIO6wOBX9I7ef0Hf78= Subject key identifier: 66:FB:33:9A:E9:56:EB:0F:5B:7E:9C:59:AC:FF:D9:C9:54:6E:8C:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B424E6266093396152212BA828EEE1EB6E59A1C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a73d67c-de8c-4c38-90e1-e79c432aca01.roa Signing time: Mon 26 Oct 2026 00:02:35 +0000 ROA not before: Mon 26 Oct 2026 00:02:35 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 98.80.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:42:4e:62:66:09:33:96:15:22:12:ba:82:8e:ee:1e:b6:e5:9a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:02:35 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=c6b7ec61ca6651f8b5dc8472ddfd2753f861c6d4c2900b74e35036fd303deed6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:58:37:dd:12:26:12:1e:72:d6:ee:a7:d2:28: 13:68:16:fb:92:73:05:60:2b:1a:e4:de:b1:46:07: 73:af:42:fc:eb:fb:0c:6b:45:6e:89:2b:27:ca:25: 44:9e:a0:69:fd:f1:78:1c:8c:ed:cd:e8:3e:15:df: 7e:e6:98:93:b3:a9:be:dc:b4:14:f3:01:b9:4c:df: 5e:32:ef:f6:89:ed:06:88:c2:0d:12:88:26:da:61: 26:71:d4:ed:40:40:42:6d:10:4e:d9:12:cc:da:80: 07:c5:bb:82:bb:d9:7c:0f:c5:d7:e8:62:f4:8d:39: d8:7a:33:fd:49:72:cc:2e:71:60:8a:2d:72:64:b4: 27:02:9b:35:10:fc:54:e8:e7:4a:95:5e:14:5f:c7: 64:86:03:35:8e:3d:f3:8b:4d:f3:92:c5:e5:0e:05: ca:1c:5b:e1:e6:92:d9:b1:e8:6e:e2:e4:47:36:f1: 21:b7:bf:83:3e:5d:5b:4f:6f:76:d0:a1:5f:9c:d4: 51:20:22:f1:44:b7:bc:84:ef:6b:2b:0c:57:7f:ac: 96:48:b5:36:a1:4e:b4:7d:00:69:72:b6:a2:e8:05: 8f:2e:33:22:b4:19:44:46:49:ca:67:9d:f9:03:cc: e7:9e:ca:55:66:72:12:6a:c0:45:44:42:a3:bb:e2: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FB:33:9A:E9:56:EB:0F:5B:7E:9C:59:AC:FF:D9:C9:54:6E:8C:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a73d67c-de8c-4c38-90e1-e79c432aca01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.80.238.0/23 Signature Algorithm: sha256WithRSAEncryption 07:2b:b1:44:10:ea:f0:d1:f3:e0:fc:a3:41:e7:0e:2c:f6:c3: c1:de:4a:cd:be:40:2c:4e:fe:d8:1c:b5:37:b9:99:86:f7:67: eb:9e:ae:d9:04:20:ed:63:7e:58:5f:ad:76:4a:f7:64:0a:0e: d4:86:75:18:d3:dd:d3:fb:8e:72:7e:0a:20:9e:90:58:55:bc: 10:28:25:3c:16:82:29:d1:60:dc:5f:56:bb:27:36:7b:ee:1d: 56:47:1f:13:cb:8d:72:11:22:ec:62:79:18:b5:36:ad:26:00: d1:0d:c8:8d:b0:0f:02:78:5e:7c:11:48:a7:2e:a4:7c:f9:b8: 3f:b3:ac:34:5a:d0:0b:71:15:c3:78:8d:24:26:3c:aa:e7:0a: 89:3a:8a:9b:e2:aa:a1:25:bb:76:01:c7:48:61:50:62:0d:fc: c0:14:10:fe:ae:77:fc:9f:74:5c:ab:e3:b0:b9:fc:ce:6e:e3: a0:7f:05:ba:3d:b4:8e:46:63:32:c6:c3:0c:46:34:91:bb:26: d9:54:d3:44:33:25:ee:f8:53:9a:b0:f0:eb:b5:f1:9d:85:97: 5e:1d:3d:d5:b1:3e:da:73:ba:24:23:9e:c9:4f:34:70:0e:0f: cf:e5:08:ba:b2:a3:bf:2d:c1:2e:5e:83:0c:dc:cb:c5:6b:c5: 0e:6a:ae:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS0JOYmYJM5YVIhK6go7uHrblmhwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAwMjM1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmI3ZWM2MWNhNjY1MWY4YjVkYzg0NzJkZGZkMjc1M2Y4 NjFjNmQ0YzI5MDBiNzRlMzUwMzZmZDMwM2RlZWQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiWDfdEiYSHnLW7qfSKBNoFvuScwVgKxrk3rFGB3OvQvzr +wxrRW6JKyfKJUSeoGn98XgcjO3N6D4V337mmJOzqb7ctBTzAblM314y7/aJ7QaI wg0SiCbaYSZx1O1AQEJtEE7ZEszagAfFu4K72XwPxdfoYvSNOdh6M/1JcswucWCK LXJktCcCmzUQ/FTo50qVXhRfx2SGAzWOPfOLTfOSxeUOBcocW+Hmktmx6G7i5Ec2 8SG3v4M+XVtPb3bQoV+c1FEgIvFEt7yE72srDFd/rJZItTahTrR9AGlytqLoBY8u MyK0GURGScpnnfkDzOeeylVmchJqwEVEQqO74hdxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZvszmulW6w9bfpxZrP/ZyVRujOcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhNzNkNjdjLWRlOGMtNGMzOC05MGUxLWU3OWM0MzJhY2EwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUO4wDQYJKoZIhvcNAQELBQADggEBAAcrsUQQ6vDR8+D8o0HnDiz2w8He Ss2+QCxO/tgctTe5mYb3Z+uertkEIO1jflhfrXZK92QKDtSGdRjT3dP7jnJ+CiCe kFhVvBAoJTwWginRYNxfVrsnNnvuHVZHHxPLjXIRIuxieRi1Nq0mANENyI2wDwJ4 XnwRSKcupHz5uD+zrDRa0AtxFcN4jSQmPKrnCok6ipviqqElu3YBx0hhUGIN/MAU EP6ud/yfdFyr47C5/M5u46B/Bbo9tI5GYzLGwwxGNJG7JtlU00QzJe74U5qw8Ou1 8Z2Fl14dPdWxPtpzuiQjnslPNHAOD8/lCLqyo78twS5egwzcy8VrxQ5qrsc= -----END CERTIFICATE-----Generated at Mon Nov 2 16:47:07 2026 by rpki-client