$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67c10bd1-e5ef-406b-b711-22234a109752.roa File: 67c10bd1-e5ef-406b-b711-22234a109752.roa (raw, json) Hash identifier: nPS0RiY1eLVpdrHXQl41NZ6jilIluhUGnxT18m8ERfU= Subject key identifier: 3E:B8:75:89:0B:2B:69:F9:6D:CD:FD:21:5C:F3:1F:12:F2:53:90:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50D6D1F0751F1EC74AD4F1B052249DABDC163513 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67c10bd1-e5ef-406b-b711-22234a109752.roa Signing time: Sat 10 Oct 2026 00:09:32 +0000 ROA not before: Sat 10 Oct 2026 00:09:32 +0000 ROA not after: Fri 08 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d6:d1:f0:75:1f:1e:c7:4a:d4:f1:b0:52:24:9d:ab:dc:16:35:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 10 00:09:32 2026 GMT Not After : Jan 8 23:59:59 2027 GMT Subject: serialNumber=baa46c2a378ca5e4e60be4cefe1c82a34f0be30a66998f6419f286a8aaf2c6e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b6:25:0c:63:b6:0e:fb:be:b7:f0:34:43:9b: 1b:59:85:a4:e9:20:48:b9:0a:07:59:b8:62:34:84: f3:ae:ff:7c:20:af:8f:77:22:27:6b:99:cc:a7:50: c9:e9:0b:82:ed:20:88:fb:6d:30:fe:69:fc:7c:d8: 4c:22:aa:ab:eb:06:17:a2:8e:45:5e:42:51:86:ae: 37:2e:ed:8d:ce:82:03:3e:1f:71:f6:0e:03:e8:09: 41:1f:a2:3c:a9:0b:55:ac:58:f0:00:44:01:71:a3: d0:ad:e5:5a:e1:cb:15:53:34:05:98:5a:45:1a:2f: 46:88:fb:12:03:06:d9:23:8c:ed:4f:d3:4b:25:b2: 07:a8:6e:10:59:4b:b5:9b:70:0d:61:9e:a8:3c:2c: b0:c1:63:01:b5:a1:2c:f4:5a:02:d7:48:04:6a:80: 4f:19:31:84:bc:48:57:24:55:69:34:1c:4a:41:cc: 3b:d8:c9:e7:ef:83:a4:8d:a3:07:60:8f:85:73:eb: 54:78:45:91:3d:09:eb:aa:70:f2:2c:e4:a5:d0:33: 30:70:c7:15:7a:36:77:f7:2f:e4:da:0a:a6:e4:dc: d3:8b:37:83:b3:5f:05:1c:fd:6f:8d:3f:3d:90:5f: a3:8f:1a:25:04:81:b7:02:b4:f5:56:11:a0:da:b3: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B8:75:89:0B:2B:69:F9:6D:CD:FD:21:5C:F3:1F:12:F2:53:90:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67c10bd1-e5ef-406b-b711-22234a109752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.184.0/24 Signature Algorithm: sha256WithRSAEncryption 86:68:7c:9b:62:1d:e2:22:21:12:77:f3:1a:15:33:94:99:73: 46:8b:a0:ea:fa:86:6e:f8:7c:84:0a:77:f4:6c:db:e7:ee:af: d8:ad:63:29:5b:fa:42:9f:d6:39:85:2a:a9:66:2a:6e:f3:18: 6d:71:5a:f5:7a:ee:c6:5b:bc:b6:a5:2f:77:5a:82:d1:84:b5: ff:28:ad:cd:e5:2c:bd:cf:36:27:6a:e0:b1:cd:37:82:5d:e4: 11:68:3a:00:47:55:a8:f5:82:b2:8d:8b:87:9d:ac:58:11:5e: 1c:b1:96:21:72:08:9e:cd:e6:39:41:a4:47:70:a5:18:53:8f: 1b:c7:b7:10:2f:26:64:c6:fd:46:41:de:7b:e7:4e:0a:50:ab: f9:6e:0d:8e:46:c8:54:f1:d8:02:9f:75:0f:d3:16:fb:a4:3a: 3d:30:ef:28:e0:26:80:4e:7b:0f:65:87:6c:c6:6b:50:54:48: e3:d5:8b:04:23:b0:48:2b:03:35:f6:3e:4d:3f:f6:84:e8:c2: 83:59:05:cd:5a:50:65:cb:f6:46:48:e8:61:56:0c:a7:af:5c: 41:8f:a9:ac:d5:e6:ac:dd:ed:88:61:81:21:b6:e7:88:93:44: 46:67:e7:a3:6c:03:32:d2:d3:02:66:e8:4d:98:f4:91:62:50: bd:57:f8:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUNbR8HUfHsdK1PGwUiSdq9wWNRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEwMDAwOTMyWhcNMjcwMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWE0NmMyYTM3OGNhNWU0ZTYwYmU0Y2VmZTFjODJhMzRm MGJlMzBhNjY5OThmNjQxOWYyODZhOGFhZjJjNmUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDtiUMY7YO+7638DRDmxtZhaTpIEi5CgdZuGI0hPOu/3wg r493IidrmcynUMnpC4LtIIj7bTD+afx82EwiqqvrBheijkVeQlGGrjcu7Y3OggM+ H3H2DgPoCUEfojypC1WsWPAARAFxo9Ct5VrhyxVTNAWYWkUaL0aI+xIDBtkjjO1P 00slsgeobhBZS7WbcA1hnqg8LLDBYwG1oSz0WgLXSARqgE8ZMYS8SFckVWk0HEpB zDvYyefvg6SNowdgj4Vz61R4RZE9CeuqcPIs5KXQMzBwxxV6Nnf3L+TaCqbk3NOL N4OzXwUc/W+NPz2QX6OPGiUEgbcCtPVWEaDas2SNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPrh1iQsrafltzf0hXPMfEvJTkFkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3YzEwYmQxLWU1ZWYtNDA2Yi1iNzExLTIyMjM0YTEwOTc1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7rgwDQYJKoZIhvcNAQELBQADggEBAIZofJtiHeIiIRJ38xoVM5SZc0aL oOr6hm74fIQKd/Rs2+fur9itYylb+kKf1jmFKqlmKm7zGG1xWvV67sZbvLalL3da gtGEtf8orc3lLL3PNidq4LHNN4Jd5BFoOgBHVaj1grKNi4edrFgRXhyxliFyCJ7N 5jlBpEdwpRhTjxvHtxAvJmTG/UZB3nvnTgpQq/luDY5GyFTx2AKfdQ/TFvukOj0w 7yjgJoBOew9lh2zGa1BUSOPViwQjsEgrAzX2Pk0/9oTowoNZBc1aUGXL9kZI6GFW DKevXEGPqazV5qzd7YhhgSG254iTREZn56NsAzLS0wJm6E2Y9JFiUL1X+H0= -----END CERTIFICATE-----Generated at Tue Nov 3 22:37:12 2026 by rpki-client