$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c6e49e-bce9-4ebb-9950-5ea922e648dd.roa File: 64c6e49e-bce9-4ebb-9950-5ea922e648dd.roa (raw, json) Hash identifier: 8222+hlnF2WuCxYSUD9Dw2t6n88Q25IPiV4Y8FrY7rY= Subject key identifier: 5F:DB:84:D4:B5:4D:A2:0C:4B:72:B0:89:FA:5E:98:6F:44:F4:C3:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 701CB4218427665ABC5C807472BCECA6D7B90448 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c6e49e-bce9-4ebb-9950-5ea922e648dd.roa Signing time: Fri 23 Oct 2026 00:50:43 +0000 ROA not before: Fri 23 Oct 2026 00:50:43 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 208.110.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1c:b4:21:84:27:66:5a:bc:5c:80:74:72:bc:ec:a6:d7:b9:04:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:50:43 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=e4bd1729d4e47dd353d9e6cb0481fea0c4288edbf2d6f6863f8edba68cb37342, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:f5:a2:a8:63:30:16:9c:94:6f:92:0b:05: ea:c1:9d:43:a1:e0:f1:f4:10:07:c7:a8:e2:be:52: dc:98:6e:ad:65:69:77:9b:db:ba:f4:0e:b1:30:8e: 3a:6d:0a:b7:f7:cb:4a:6f:0e:f5:0c:62:f9:88:8f: 43:4a:c6:62:9a:4d:df:6c:5d:a3:c0:b4:01:c7:55: d2:93:b6:a0:53:a4:bc:94:1a:d2:26:0c:42:90:1b: ff:e2:67:b7:40:f0:3e:15:b0:a9:4b:46:e3:88:46: de:f3:09:ad:7e:1e:05:4e:39:f4:99:02:63:bc:f1: 41:a0:81:0c:89:f4:40:db:bb:f5:9d:dc:49:74:1d: ac:ea:53:97:67:12:20:48:5e:13:56:bd:3d:17:a8: cd:e4:00:72:89:67:4e:c7:77:33:4c:8c:44:b5:2f: a2:c3:36:19:e9:a2:28:8f:fd:76:92:c8:aa:ef:4a: b5:be:cf:b9:66:18:5a:2b:d7:4c:57:a7:09:08:b1: d3:cd:71:58:65:8c:a5:2b:51:ec:fc:f9:49:b9:0e: 88:b2:e0:bc:99:14:90:67:e5:60:e9:5d:d5:a3:4a: 07:39:b3:b0:71:ee:6d:8b:b5:59:b3:74:0e:19:32: 63:e8:ad:d0:e0:3b:5d:e5:cb:b3:58:56:be:ad:8e: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DB:84:D4:B5:4D:A2:0C:4B:72:B0:89:FA:5E:98:6F:44:F4:C3:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c6e49e-bce9-4ebb-9950-5ea922e648dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.110.48.0/20 Signature Algorithm: sha256WithRSAEncryption 94:4a:97:1f:a9:c2:f5:f3:5a:19:ec:32:0e:e3:f7:ee:80:f6: 47:9f:d3:c9:c6:c6:da:c3:df:6d:0e:4b:7f:43:3d:aa:5f:db: f4:26:5c:a0:5c:25:9c:2a:47:f5:cc:f6:ce:0d:bc:f8:89:50: b4:cf:4e:0f:17:3b:d9:e4:7c:7c:ca:bc:ad:6a:db:41:a1:b7: 31:57:22:11:8d:96:a5:f4:bb:32:fd:24:25:0d:a1:87:80:2b: 17:cd:35:f1:a9:b7:76:14:6f:48:e6:bd:bf:87:38:40:dd:06: 73:3d:7a:88:15:ab:14:fa:78:d1:3e:2c:52:68:f4:0a:b9:41: dd:da:c0:37:eb:ef:63:ba:1f:50:75:f5:5a:28:77:b3:2e:2d: cf:31:c5:c5:74:3a:26:b9:d4:aa:97:0c:c6:6f:95:7e:d0:bf: 80:fc:81:d5:0e:6d:d4:ea:01:2f:e4:f5:e9:01:21:23:31:3c: 12:50:9b:0c:dd:b2:7d:1c:71:e0:06:87:49:49:f7:68:4a:c4: 76:b7:b0:3b:a4:4a:d4:ac:57:32:74:cc:53:e7:a1:79:2c:80: 2e:d3:06:72:93:53:9a:f5:d3:5f:f0:5c:43:d2:3c:4f:e7:3c: 84:bd:25:a7:52:f6:0a:dc:bb:3e:48:9f:87:82:40:49:7f:ae: 84:e0:67:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcBy0IYQnZlq8XIB0crzspte5BEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDA1MDQzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGJkMTcyOWQ0ZTQ3ZGQzNTNkOWU2Y2IwNDgxZmVhMGM0 Mjg4ZWRiZjJkNmY2ODYzZjhlZGJhNjhjYjM3MzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7i/WiqGMwFpyUb5ILBerBnUOh4PH0EAfHqOK+UtyYbq1l aXeb27r0DrEwjjptCrf3y0pvDvUMYvmIj0NKxmKaTd9sXaPAtAHHVdKTtqBTpLyU GtImDEKQG//iZ7dA8D4VsKlLRuOIRt7zCa1+HgVOOfSZAmO88UGggQyJ9EDbu/Wd 3El0HazqU5dnEiBIXhNWvT0XqM3kAHKJZ07HdzNMjES1L6LDNhnpoiiP/XaSyKrv SrW+z7lmGFor10xXpwkIsdPNcVhljKUrUez8+Um5Doiy4LyZFJBn5WDpXdWjSgc5 s7Bx7m2LtVmzdA4ZMmPordDgO13ly7NYVr6tjt/DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX9uE1LVNogxLcrCJ+l6Yb0T0w+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0YzZlNDllLWJjZTktNGViYi05OTUwLTVlYTkyMmU2NDhkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATQbjAwDQYJKoZIhvcNAQELBQADggEBAJRKlx+pwvXzWhnsMg7j9+6A9kef 08nGxtrD320OS39DPapf2/QmXKBcJZwqR/XM9s4NvPiJULTPTg8XO9nkfHzKvK1q 20GhtzFXIhGNlqX0uzL9JCUNoYeAKxfNNfGpt3YUb0jmvb+HOEDdBnM9eogVqxT6 eNE+LFJo9Aq5Qd3awDfr72O6H1B19Vood7MuLc8xxcV0Oia51KqXDMZvlX7Qv4D8 gdUObdTqAS/k9ekBISMxPBJQmwzdsn0cceAGh0lJ92hKxHa3sDukStSsVzJ0zFPn oXksgC7TBnKTU5r101/wXEPSPE/nPIS9JadS9grcuz5In4eCQEl/roTgZ+A= -----END CERTIFICATE-----Generated at Wed Nov 4 18:52:27 2026 by rpki-client