$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6867ff00-ff82-4402-a40b-1095364801f5.roa File: 6867ff00-ff82-4402-a40b-1095364801f5.roa (raw, json) Hash identifier: sXH4z/v1PZZLtj5WDQt7ba2OEBGrbx5n+MQjzb2g+ic= Subject key identifier: B2:11:B2:48:74:98:DD:D0:74:3B:58:EF:51:FC:82:46:5C:78:E0:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17CCFC90586578A3635B4204D7F4FE39C53BD2AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6867ff00-ff82-4402-a40b-1095364801f5.roa Signing time: Tue 13 Oct 2026 00:20:08 +0000 ROA not before: Tue 13 Oct 2026 00:20:08 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 188.135.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cc:fc:90:58:65:78:a3:63:5b:42:04:d7:f4:fe:39:c5:3b:d2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:20:08 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=4910bff52db8b38f8ad2d57237e9e0b2f95d608f61f5d7ecfef8965978c217d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:30:22:fb:b3:33:9f:76:c3:10:c9:c2:54: 68:ae:14:04:8f:1e:91:6c:f9:88:d5:68:a0:c8:18: 44:d0:46:86:7f:6d:ca:34:8e:25:8c:0a:9c:23:ff: cb:db:75:73:d3:19:36:70:3c:25:14:26:8a:8f:3a: 9f:d4:4d:72:5e:83:14:69:45:22:66:fb:df:e0:94: 63:76:9a:e1:82:35:2e:85:cf:c7:59:e0:0e:76:d7: ab:d1:a4:1d:5e:ee:df:bb:4c:8f:88:ce:90:ec:1d: a1:53:ea:0a:98:27:82:42:33:91:7a:2a:f4:48:a9: 73:66:47:3c:0c:7f:f2:b9:06:21:a8:43:39:29:26: 98:74:6b:59:d6:17:13:d4:24:4b:ec:b6:bd:49:ad: 34:42:ae:29:8d:b5:c7:02:75:71:1b:c4:73:df:39: 21:aa:06:56:5c:a8:c7:1a:24:95:9e:11:57:3b:f4: 98:5e:f7:23:7c:8b:b7:4e:19:40:73:0c:b3:3a:fa: 10:ac:12:b2:cb:db:c8:4e:d3:c7:5d:3b:4c:a1:a7: 23:82:d9:b9:64:34:15:c7:57:5b:40:92:d3:7c:ec: 0b:a1:0b:8a:08:9a:4f:41:44:e1:17:59:b8:38:f2: 0a:a1:0d:7b:e9:4b:03:07:ad:3e:77:29:2e:b5:87: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:B2:48:74:98:DD:D0:74:3B:58:EF:51:FC:82:46:5C:78:E0:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6867ff00-ff82-4402-a40b-1095364801f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.135.128.0/17 Signature Algorithm: sha256WithRSAEncryption 70:ac:6b:97:21:d0:e4:1d:eb:e8:03:3e:2c:ca:12:b8:88:e1: 2b:8a:94:87:bb:02:73:2b:f0:c6:b6:21:e0:6c:2f:f3:16:ff: 97:bb:e9:9f:3e:c8:21:16:73:d3:f5:73:c2:ed:0c:68:99:0a: 15:8d:d1:62:c2:f9:11:e7:b9:3d:ff:90:d9:00:51:3a:65:7f: 0a:47:0d:05:16:b2:ed:9d:07:eb:02:c7:74:5b:a8:17:e8:3c: 78:15:ed:a4:bd:5f:63:32:66:ae:07:a0:62:b6:e7:e0:a8:da: 66:85:e7:0c:9a:55:85:6c:4c:63:8f:bf:be:3e:c7:86:44:64: 93:e1:eb:69:03:fb:61:c2:e7:4d:4a:36:2c:cb:66:da:7b:ba: f8:bd:30:49:b0:02:29:4a:10:6b:4e:02:cb:68:23:97:24:e2: 17:3c:4e:ef:fb:0c:36:75:31:aa:ff:2f:cc:55:51:5d:97:4f: fc:ec:2f:57:56:a9:17:88:cd:a2:40:1a:ed:e6:83:e0:82:3b: 8d:a9:b5:a2:3b:cf:19:bc:16:e9:4d:bf:66:ab:e2:be:73:b8: 77:40:76:20:69:b9:04:ab:4b:06:6f:1d:28:6f:2e:26:51:34: 71:6c:e3:b1:b9:1e:8c:20:f7:9d:ed:5c:dd:c7:93:4f:c8:3c: 76:b4:2c:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF8z8kFhleKNjW0IE1/T+OcU70q8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAyMDA4WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTEwYmZmNTJkYjhiMzhmOGFkMmQ1NzIzN2U5ZTBiMmY5 NWQ2MDhmNjFmNWQ3ZWNmZWY4OTY1OTc4YzIxN2QwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE4zAi+7Mzn3bDEMnCVGiuFASPHpFs+YjVaKDIGETQRoZ/ bco0jiWMCpwj/8vbdXPTGTZwPCUUJoqPOp/UTXJegxRpRSJm+9/glGN2muGCNS6F z8dZ4A5216vRpB1e7t+7TI+IzpDsHaFT6gqYJ4JCM5F6KvRIqXNmRzwMf/K5BiGo QzkpJph0a1nWFxPUJEvstr1JrTRCrimNtccCdXEbxHPfOSGqBlZcqMcaJJWeEVc7 9Jhe9yN8i7dOGUBzDLM6+hCsErLL28hO08ddO0yhpyOC2blkNBXHV1tAktN87Auh C4oImk9BROEXWbg48gqhDXvpSwMHrT53KS61h/GVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUshGySHSY3dB0O1jvUfyCRlx44HswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NjdmZjAwLWZmODItNDQwMi1hNDBiLTEwOTUzNjQ4MDFmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe8h4AwDQYJKoZIhvcNAQELBQADggEBAHCsa5ch0OQd6+gDPizKEriI4SuK lIe7AnMr8Ma2IeBsL/MW/5e76Z8+yCEWc9P1c8LtDGiZChWN0WLC+RHnuT3/kNkA UTplfwpHDQUWsu2dB+sCx3RbqBfoPHgV7aS9X2MyZq4HoGK25+Co2maF5wyaVYVs TGOPv74+x4ZEZJPh62kD+2HC501KNizLZtp7uvi9MEmwAilKEGtOAstoI5ck4hc8 Tu/7DDZ1Mar/L8xVUV2XT/zsL1dWqReIzaJAGu3mg+CCO42ptaI7zxm8FulNv2ar 4r5zuHdAdiBpuQSrSwZvHShvLiZRNHFs47G5Howg953tXN3Hk0/IPHa0LGA= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:40 2026 by rpki-client