$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa File: 67b9adc9-cd45-4063-bd3b-110c018322fe.roa (raw, json) Hash identifier: bWiGpM0bTj9R8uJfL3gd+sw/OhsdncCpBrkpSU0PBeo= Subject key identifier: 11:E4:21:F0:79:CB:7B:04:76:0A:D3:AB:69:B6:09:58:D8:14:D3:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E23E784967096221F4CA53BAAAFA2953DD08288 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa Signing time: Fri 23 Oct 2026 00:21:03 +0000 ROA not before: Fri 23 Oct 2026 00:21:03 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:23:e7:84:96:70:96:22:1f:4c:a5:3b:aa:af:a2:95:3d:d0:82:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:21:03 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=fa1c56f89286484617e5f1f1115ab7fd6fe22c10472ea63b247b5e8c80f4182b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:89:dd:b7:8c:5d:f1:b0:5f:c6:bc:0e:a7: 13:74:ed:a5:8a:7e:41:f6:e4:53:58:d0:9b:12:44: 96:76:f8:0c:79:d3:fa:fd:2a:54:1a:60:d3:6a:dc: fd:d1:c2:d8:9a:67:ac:10:f6:0d:15:09:eb:95:6f: e2:1a:ae:18:76:cc:7b:b0:d3:1a:f4:47:82:22:48: f0:44:74:71:39:81:46:99:b1:48:e2:63:fe:bb:d7: e0:0d:c1:b2:f8:16:53:2b:62:72:f5:0c:65:68:a5: 80:c1:ab:12:c3:c4:9f:80:97:61:e6:a5:52:88:57: 05:d3:93:1b:ad:d7:52:80:27:45:ea:42:65:8c:fd: 62:ab:01:b5:78:27:c4:bb:ea:90:b1:02:ec:26:0d: a4:c0:4d:69:0d:00:44:0e:c2:0f:a6:62:90:ba:11: a8:0f:eb:91:9a:af:8e:6f:e8:69:7e:fa:47:56:ab: 2b:be:cc:ae:96:70:3d:df:00:65:94:ba:11:db:02: 43:c1:01:2a:2d:42:26:74:11:43:50:1a:e7:69:cf: 2c:ee:6a:c0:21:de:59:68:d8:f2:46:f0:b1:9c:81: 4e:14:e9:25:fb:92:66:b8:a0:91:ed:7d:d9:bc:c1: 9d:65:06:a1:7e:e0:db:60:2e:09:aa:79:f1:f9:a4: 55:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E4:21:F0:79:CB:7B:04:76:0A:D3:AB:69:B6:09:58:D8:14:D3:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.40.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:91:f2:af:4d:55:eb:5c:6a:47:dd:ab:18:92:c7:12:c3:0c: d0:b8:de:fd:fe:6e:ac:7f:36:f2:34:76:d9:4c:91:14:32:88: 32:ab:97:92:4e:1f:d2:e3:1e:e9:90:77:91:12:50:41:8e:d4: 93:3c:c9:ef:90:88:cd:51:c6:ae:2f:f3:d7:1a:b6:e5:f8:9d: da:14:86:49:20:48:fd:a5:a8:73:64:13:7b:8e:0b:cc:0d:8a: b5:36:55:8e:9f:42:46:1b:23:3c:b6:cf:1e:e7:00:64:79:5e: 62:78:20:10:fc:64:1a:cd:5f:42:0a:3a:e6:8b:61:c6:56:b6: b8:a6:b9:a6:5b:13:91:d6:5f:9e:87:88:b1:0b:23:25:2b:17: 92:87:fe:67:c6:87:dc:58:0a:84:4d:8e:90:2b:5a:0d:67:06: d4:7b:b1:45:f6:a1:fa:67:e0:0d:b2:21:96:68:4e:2a:b8:83: 52:40:49:52:8d:ea:0d:c7:75:9c:af:03:b1:c9:10:4c:d8:f5: 2b:a3:56:76:ee:6c:9a:87:1f:3d:c1:47:55:b6:23:0f:ad:b8: 2d:45:e0:b9:1c:20:c3:38:c4:62:67:7d:50:f4:1f:c5:b0:0c: c0:bb:8c:9d:5c:28:9f:dd:eb:42:7b:90:f8:5e:83:77:6b:f4: 70:3d:50:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPiPnhJZwliIfTKU7qq+ilT3QgogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAyMTAzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTFjNTZmODkyODY0ODQ2MTdlNWYxZjExMTVhYjdmZDZm ZTIyYzEwNDcyZWE2M2IyNDdiNWU4YzgwZjQxODJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9vondt4xd8bBfxrwOpxN07aWKfkH25FNY0JsSRJZ2+Ax5 0/r9KlQaYNNq3P3RwtiaZ6wQ9g0VCeuVb+Iarhh2zHuw0xr0R4IiSPBEdHE5gUaZ sUjiY/671+ANwbL4FlMrYnL1DGVopYDBqxLDxJ+Al2HmpVKIVwXTkxut11KAJ0Xq QmWM/WKrAbV4J8S76pCxAuwmDaTATWkNAEQOwg+mYpC6EagP65Gar45v6Gl++kdW qyu+zK6WcD3fAGWUuhHbAkPBASotQiZ0EUNQGudpzyzuasAh3llo2PJG8LGcgU4U 6SX7kma4oJHtfdm8wZ1lBqF+4NtgLgmqefH5pFWlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEeQh8HnLewR2CtOrabYJWNgU02cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3YjlhZGM5LWNkNDUtNDA2My1iZDNiLTExMGMwMTgzMjJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMXFSgwDQYJKoZIhvcNAQELBQADggEBAIuR8q9NVetcakfdqxiSxxLDDNC4 3v3+bqx/NvI0dtlMkRQyiDKrl5JOH9LjHumQd5ESUEGO1JM8ye+QiM1Rxq4v89ca tuX4ndoUhkkgSP2lqHNkE3uOC8wNirU2VY6fQkYbIzy2zx7nAGR5XmJ4IBD8ZBrN X0IKOuaLYcZWtrimuaZbE5HWX56HiLELIyUrF5KH/mfGh9xYCoRNjpArWg1nBtR7 sUX2ofpn4A2yIZZoTiq4g1JASVKN6g3HdZyvA7HJEEzY9SujVnbubJqHHz3BR1W2 Iw+tuC1F4LkcIMM4xGJnfVD0H8WwDMC7jJ1cKJ/d60J7kPheg3dr9HA9UOc= -----END CERTIFICATE-----Generated at Tue Nov 3 19:21:55 2026 by rpki-client