$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa File: 611a9329-2af8-483e-ade2-291c7456d663.roa (raw, json) Hash identifier: YrVF7IkY2l9Jqh1QXl0CNZglSEe+cGwqdjGhLcYrTO0= Subject key identifier: C3:ED:B9:47:E3:F7:2C:DB:BF:ED:88:07:BD:C4:F1:DC:00:4E:B0:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E4EB11ABCC87BBFA8DC60CD45B31ED9CFB9B776 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa Signing time: Thu 15 Oct 2026 00:31:28 +0000 ROA not before: Thu 15 Oct 2026 00:31:28 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.191.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4e:b1:1a:bc:c8:7b:bf:a8:dc:60:cd:45:b3:1e:d9:cf:b9:b7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:31:28 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=044c66b8bf1c6cd306288a1ddfb10861374150eb81e18a5728f91127408d551f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8b:c7:aa:ad:38:96:80:ca:cb:6b:c6:59:da: 00:7a:38:56:c8:10:e7:01:87:7f:00:53:a8:23:de: 43:c0:2b:f5:af:34:d5:72:32:1a:f2:28:3f:df:42: b5:31:03:9c:68:90:2b:b7:0c:54:81:86:be:66:2c: b4:98:a8:15:8b:f2:20:09:4a:77:dc:fc:13:88:46: 5a:3c:19:e2:6c:55:49:d7:ed:32:70:67:3f:4d:96: dd:89:d8:7e:be:fb:8b:4e:4b:a4:59:f8:1c:dc:2e: c8:db:05:52:67:fb:20:fe:80:3e:f5:2c:b2:36:fb: 88:f1:c2:ca:67:8e:20:61:ba:a3:6c:7f:0b:4a:f9: d5:bc:b3:f8:59:a8:41:39:f0:ec:ac:96:aa:4c:a5: 10:c7:0b:d6:fc:64:b9:b1:4b:8e:21:ff:70:df:39: b2:10:fe:c1:fc:f1:8f:22:2f:e1:57:07:fe:09:87: 47:c2:87:b2:5e:45:9e:db:64:32:77:f6:ae:df:97: 9b:18:92:13:b7:c0:de:97:31:23:8f:da:82:04:0b: 84:28:ad:82:13:4d:b5:90:0b:30:86:32:22:2f:23: 89:a7:3a:7a:8d:c8:f9:1f:a3:bb:f1:fc:a7:a7:ea: 67:86:b8:67:56:65:1a:94:5c:d5:74:85:10:b2:67: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:ED:B9:47:E3:F7:2C:DB:BF:ED:88:07:BD:C4:F1:DC:00:4E:B0:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.191.152.0/22 Signature Algorithm: sha256WithRSAEncryption b6:12:74:10:1c:19:77:5f:00:ca:8c:09:1c:e4:02:2c:0b:4b: 77:a0:d9:ff:f5:d8:01:e6:21:71:62:09:b7:4f:8d:29:7c:f6: 36:a4:a7:25:a7:6e:90:bf:73:4a:e1:4f:28:e5:28:81:ef:fe: 2f:64:18:ac:40:d4:c9:59:15:0a:30:94:eb:23:c4:43:d8:3d: ab:34:94:7d:a9:46:ae:99:3d:6e:7e:36:1a:14:07:85:2e:2f: a5:45:d2:e1:42:4f:2d:dc:3b:c3:3d:3d:78:81:95:3c:90:f0: 94:2f:6d:5d:e2:a0:19:48:04:ab:4f:97:3e:c1:82:d6:a0:e7: 2b:71:36:53:77:2e:b4:28:67:87:51:66:12:8f:4b:54:c4:10: 41:43:d2:e2:89:d8:12:64:b2:88:3e:a8:44:58:f7:0b:70:ea: db:31:71:64:46:22:36:28:fb:c1:f3:2a:c9:40:60:07:9b:86: 21:f1:39:64:e4:2a:31:48:5e:d7:6d:f0:8d:71:8d:a6:cc:2d: 12:d3:70:98:66:35:da:7b:74:91:34:4d:7d:f2:48:97:ed:36: 59:e7:f8:d8:94:82:1e:3a:52:52:bb:d8:bc:37:86:d7:56:f7: 47:25:7c:24:9a:a0:f6:32:ff:b2:fa:2b:1a:14:d2:11:32:8e: 4b:4c:6d:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHk6xGrzIe7+o3GDNRbMe2c+5t3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAzMTI4WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDRjNjZiOGJmMWM2Y2QzMDYyODhhMWRkZmIxMDg2MTM3 NDE1MGViODFlMThhNTcyOGY5MTEyNzQwOGQ1NTFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJi8eqrTiWgMrLa8ZZ2gB6OFbIEOcBh38AU6gj3kPAK/Wv NNVyMhryKD/fQrUxA5xokCu3DFSBhr5mLLSYqBWL8iAJSnfc/BOIRlo8GeJsVUnX 7TJwZz9Nlt2J2H6++4tOS6RZ+BzcLsjbBVJn+yD+gD71LLI2+4jxwspnjiBhuqNs fwtK+dW8s/hZqEE58OyslqpMpRDHC9b8ZLmxS44h/3DfObIQ/sH88Y8iL+FXB/4J h0fCh7JeRZ7bZDJ39q7fl5sYkhO3wN6XMSOP2oIEC4QorYITTbWQCzCGMiIvI4mn OnqNyPkfo7vx/Ken6meGuGdWZRqUXNV0hRCyZydxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw+25R+P3LNu/7YgHvcTx3ABOsNIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxMWE5MzI5LTJhZjgtNDgzZS1hZGUyLTI5MWM3NDU2ZDY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRv5gwDQYJKoZIhvcNAQELBQADggEBALYSdBAcGXdfAMqMCRzkAiwLS3eg 2f/12AHmIXFiCbdPjSl89jakpyWnbpC/c0rhTyjlKIHv/i9kGKxA1MlZFQowlOsj xEPYPas0lH2pRq6ZPW5+NhoUB4UuL6VF0uFCTy3cO8M9PXiBlTyQ8JQvbV3ioBlI BKtPlz7Bgtag5ytxNlN3LrQoZ4dRZhKPS1TEEEFD0uKJ2BJksog+qERY9wtw6tsx cWRGIjYo+8HzKslAYAebhiHxOWTkKjFIXtdt8I1xjabMLRLTcJhmNdp7dJE0TX3y SJftNlnn+NiUgh46UlK72Lw3htdW90clfCSaoPYy/7L6KxoU0hEyjktMbVg= -----END CERTIFICATE-----Generated at Thu Nov 5 05:00:57 2026 by rpki-client