$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa File: 68af9002-6d9c-4a97-b412-41140a596dc9.roa (raw, json) Hash identifier: ZJaj/kQ+W0D6TUYRi7BEl1sgV8VnnfZnUw6e9+Flx6o= Subject key identifier: C8:DA:40:2B:5F:4E:51:BB:DC:B7:BA:A2:84:19:C9:A8:FF:25:B9:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BFFDC2D6A3036127C23CD9AB5C76C4D94AD22EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa Signing time: Tue 13 Oct 2026 00:11:12 +0000 ROA not before: Tue 13 Oct 2026 00:11:12 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ff:dc:2d:6a:30:36:12:7c:23:cd:9a:b5:c7:6c:4d:94:ad:22:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:11:12 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=7ab9d183255740d5e31efb823f5937205ab4feee7477c96de21ae4cd8f9758be, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f5:7b:45:e4:e3:70:31:05:f3:e8:17:e8:b6: 71:6d:71:0b:60:59:d5:70:40:cb:56:e0:19:db:39: c5:4d:34:13:fe:68:3b:1e:24:7a:69:5e:0e:c7:4d: f8:a1:6c:fb:28:42:19:86:04:8f:2a:4f:71:56:a4: 89:8c:ce:51:58:d5:bb:1b:30:c5:c8:77:7e:7f:8a: eb:84:87:4d:7c:3d:13:79:c4:f7:eb:0a:37:c8:66: 69:a5:60:b4:55:45:8b:18:16:d2:70:51:33:75:1c: 7d:11:a2:48:0f:11:fa:d8:d7:76:60:9d:84:4d:c1: af:20:26:ab:6a:e2:af:93:56:30:49:bb:3d:8b:a6: 62:ee:ad:a7:9a:33:5b:a0:30:d9:21:15:e7:3f:c1: 88:5f:2e:e8:a7:ef:18:86:ba:47:27:cf:1b:79:0f: de:18:6f:8f:dd:00:37:e6:0c:dd:12:44:e1:02:a5: dd:67:43:55:9a:8c:d1:86:fe:79:b7:b5:c9:e5:30: fa:1c:ad:91:20:c1:06:ab:45:68:c7:29:11:6b:c2: 9b:5f:f5:19:26:ff:50:21:95:77:16:ba:d6:bd:9f: bd:7b:38:2b:64:48:33:42:d2:61:6f:94:87:60:81: 55:f4:16:85:03:f0:d8:f4:96:0b:15:93:33:5b:4a: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:40:2B:5F:4E:51:BB:DC:B7:BA:A2:84:19:C9:A8:FF:25:B9:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.56.0/21 Signature Algorithm: sha256WithRSAEncryption b5:11:73:69:a8:1f:a8:93:2d:18:bc:48:be:2f:bb:e2:c5:be: 67:cc:cf:cb:73:3d:4b:62:a0:27:a6:ac:40:77:e3:00:58:2a: 8c:b7:8f:01:29:0a:ea:74:12:ba:8c:98:70:d3:7f:ac:c2:e9: 4b:44:8b:80:78:b5:56:74:72:d3:cf:e2:35:77:93:c2:d3:ee: 91:f8:f5:10:c4:5a:91:f2:d6:b3:a5:4e:74:a8:f3:28:c0:cc: b4:50:39:c0:eb:14:7d:d5:04:7b:2e:c1:5d:e5:0e:e9:7f:f0: 70:3c:74:0a:52:b7:f8:6e:67:96:d2:25:54:d9:a9:84:0a:59: bd:56:85:c6:e2:83:1c:54:a0:1e:b8:ff:80:a1:82:f2:cb:f6: 48:96:fc:05:db:fa:db:db:21:2d:a3:56:73:40:36:da:16:6f: d6:ec:1a:90:a5:51:d8:55:ad:f5:f2:97:ad:92:92:07:01:09: 5d:5c:c0:ec:d0:bf:8e:db:06:31:2f:61:df:0a:70:35:76:06: 2a:53:e5:3e:ba:a3:6b:6c:01:0c:c0:de:a1:f5:9a:5c:97:df: ba:98:f8:04:ca:d2:06:57:68:03:f4:87:62:6e:7a:e8:b3:8c: d1:06:98:58:05:d1:61:6a:7a:14:04:87:3a:d5:7c:39:2b:18: fa:88:0b:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe//cLWowNhJ8I82atcdsTZStIuswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAxMTEyWhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWI5ZDE4MzI1NTc0MGQ1ZTMxZWZiODIzZjU5MzcyMDVh YjRmZWVlNzQ3N2M5NmRlMjFhZTRjZDhmOTc1OGJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH9XtF5ONwMQXz6BfotnFtcQtgWdVwQMtW4BnbOcVNNBP+ aDseJHppXg7HTfihbPsoQhmGBI8qT3FWpImMzlFY1bsbMMXId35/iuuEh018PRN5 xPfrCjfIZmmlYLRVRYsYFtJwUTN1HH0RokgPEfrY13ZgnYRNwa8gJqtq4q+TVjBJ uz2LpmLuraeaM1ugMNkhFec/wYhfLuin7xiGukcnzxt5D94Yb4/dADfmDN0SROEC pd1nQ1WajNGG/nm3tcnlMPocrZEgwQarRWjHKRFrwptf9Rkm/1AhlXcWuta9n717 OCtkSDNC0mFvlIdggVX0FoUD8Nj0lgsVkzNbSmx7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyNpAK19OUbvct7qihBnJqP8lud0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4YWY5MDAyLTZkOWMtNGE5Ny1iNDEyLTQxMTQwYTU5NmRjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjljgwDQYJKoZIhvcNAQELBQADggEBALURc2moH6iTLRi8SL4vu+LFvmfM z8tzPUtioCemrEB34wBYKoy3jwEpCup0ErqMmHDTf6zC6UtEi4B4tVZ0ctPP4jV3 k8LT7pH49RDEWpHy1rOlTnSo8yjAzLRQOcDrFH3VBHsuwV3lDul/8HA8dApSt/hu Z5bSJVTZqYQKWb1WhcbigxxUoB64/4ChgvLL9kiW/AXb+tvbIS2jVnNANtoWb9bs GpClUdhVrfXyl62SkgcBCV1cwOzQv47bBjEvYd8KcDV2BipT5T66o2tsAQzA3qH1 mlyX37qY+ATK0gZXaAP0h2JueuizjNEGmFgF0WFqehQEhzrVfDkrGPqIC1s= -----END CERTIFICATE-----Generated at Tue Nov 3 12:01:54 2026 by rpki-client