$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/640db256-ea3a-41a0-b252-1d52034e7dfa.roa File: 640db256-ea3a-41a0-b252-1d52034e7dfa.roa (raw, json) Hash identifier: A0jVeUS8HLFzG39N7hmDGe4E1/oBx8C3BvgesOSKjIA= Subject key identifier: 73:25:B8:44:30:23:06:52:50:F3:77:AF:59:1A:4F:4B:7F:58:F8:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 718D2A59419D22A1FB2D42D86E80EE0EFB1D336C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/640db256-ea3a-41a0-b252-1d52034e7dfa.roa Signing time: Fri 23 Oct 2026 02:30:14 +0000 ROA not before: Fri 23 Oct 2026 02:30:14 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8d:2a:59:41:9d:22:a1:fb:2d:42:d8:6e:80:ee:0e:fb:1d:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:30:14 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=b914c840704e2964fb64d8bb0b0348bd710f82df548f7a250abd48a301b1173d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:38:cb:91:a7:24:d3:48:9b:8d:3d:fe:b4:e9: ac:81:61:da:69:12:62:f8:e1:29:5e:b1:9c:72:4c: 44:de:0e:91:af:1c:76:17:f5:c8:cb:bd:c9:25:64: 36:8e:5b:34:28:c7:e4:5a:7d:e1:2c:ec:a6:5a:55: f8:84:de:5d:08:e0:1f:ce:4e:e3:61:7e:6e:33:69: 7f:9f:d8:b6:6c:02:bf:72:11:af:a6:df:c0:2f:a6: fb:f6:01:de:7a:f4:82:89:0b:68:df:99:e5:2d:d4: 95:6d:34:ee:0f:6e:6d:6c:16:ad:b0:ba:af:63:e8: 43:b5:d0:71:b1:4e:07:3d:be:76:e5:19:06:5f:40: 95:f7:b6:00:06:27:bd:f1:e5:2f:2b:98:67:de:91: 20:40:e7:9b:97:28:fe:03:8a:3f:8c:88:9b:53:93: 8b:7e:92:39:dc:37:b7:29:dc:6f:18:7e:fe:c2:18: 2a:be:14:e6:2f:ea:1b:d3:f5:21:22:73:91:8f:67: 3b:d3:a8:56:fc:86:88:d9:4c:9a:6b:a2:15:a8:38: 59:77:38:95:6d:3f:c9:12:7d:a9:11:0c:17:78:c9: 53:87:00:d7:45:93:38:0d:1f:16:a0:83:8d:5c:3b: 9d:5a:5b:30:43:f4:9c:5f:e8:3c:a9:48:e1:3a:f2: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:25:B8:44:30:23:06:52:50:F3:77:AF:59:1A:4F:4B:7F:58:F8:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/640db256-ea3a-41a0-b252-1d52034e7dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.29.0/24 Signature Algorithm: sha256WithRSAEncryption 99:0d:3e:0e:75:98:5e:c4:8c:cd:3c:1d:0b:20:3d:28:41:ea: d0:47:dd:fa:eb:1a:dc:51:d1:c8:98:33:2d:66:49:b8:4b:8d: db:c8:de:35:ad:58:f0:a7:35:e8:a6:a7:e7:8d:5f:f2:aa:e3: c7:68:71:65:53:de:39:07:07:5e:1d:e8:37:e5:84:2e:be:72: cc:08:f8:25:ed:55:91:6a:33:92:be:30:15:f8:c5:f4:c3:e2: 28:83:66:2d:8c:70:ad:12:a5:a2:4d:ba:8b:e2:35:35:39:a2: 23:54:98:01:94:67:1e:a4:b1:8b:18:b3:c4:60:16:c6:3c:92: 8b:18:a2:3f:4a:63:e4:ea:f5:eb:dd:72:57:c7:c0:33:8b:22: b2:e4:0d:c5:ae:d6:70:fe:7b:80:56:1b:89:9e:7b:42:92:cf: 12:8d:4b:b9:a1:4b:53:15:c5:fa:63:7e:5e:cd:58:e0:fb:f4: 40:21:e6:0a:bd:40:cd:b8:e4:a4:1e:95:7d:76:fd:68:62:cc: df:c9:42:25:20:cc:b4:34:cc:1f:d6:b7:0a:85:61:55:b7:41: 6d:3f:91:c5:25:77:30:e5:58:e3:b5:e7:34:87:50:28:d9:6e: 4e:c3:ed:bd:c3:a7:9b:ba:96:22:65:3b:51:b7:97:87:fc:71: 76:9e:f3:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcY0qWUGdIqH7LULYboDuDvsdM2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIzMDE0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTE0Yzg0MDcwNGUyOTY0ZmI2NGQ4YmIwYjAzNDhiZDcx MGY4MmRmNTQ4ZjdhMjUwYWJkNDhhMzAxYjExNzNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqOMuRpyTTSJuNPf606ayBYdppEmL44SlesZxyTETeDpGv HHYX9cjLvcklZDaOWzQox+RafeEs7KZaVfiE3l0I4B/OTuNhfm4zaX+f2LZsAr9y Ea+m38Avpvv2Ad569IKJC2jfmeUt1JVtNO4Pbm1sFq2wuq9j6EO10HGxTgc9vnbl GQZfQJX3tgAGJ73x5S8rmGfekSBA55uXKP4Dij+MiJtTk4t+kjncN7cp3G8Yfv7C GCq+FOYv6hvT9SEic5GPZzvTqFb8hojZTJprohWoOFl3OJVtP8kSfakRDBd4yVOH ANdFkzgNHxagg41cO51aWzBD9Jxf6DypSOE68i4BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcyW4RDAjBlJQ83evWRpPS39Y+AowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0MGRiMjU2LWVhM2EtNDFhMC1iMjUyLTFkNTIwMzRlN2RmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABu7x0wDQYJKoZIhvcNAQELBQADggEBAJkNPg51mF7EjM08HQsgPShB6tBH 3frrGtxR0ciYMy1mSbhLjdvI3jWtWPCnNeimp+eNX/Kq48docWVT3jkHB14d6Dfl hC6+cswI+CXtVZFqM5K+MBX4xfTD4iiDZi2McK0SpaJNuoviNTU5oiNUmAGUZx6k sYsYs8RgFsY8kosYoj9KY+Tq9evdclfHwDOLIrLkDcWu1nD+e4BWG4mee0KSzxKN S7mhS1MVxfpjfl7NWOD79EAh5gq9QM245KQelX12/WhizN/JQiUgzLQ0zB/WtwqF YVW3QW0/kcUldzDlWOO15zSHUCjZbk7D7b3Dp5u6liJlO1G3l4f8cXae8/U= -----END CERTIFICATE-----Generated at Mon Nov 2 21:09:55 2026 by rpki-client