$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa File: 6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa (raw, json) Hash identifier: FgETOszrDnONDBU/9MGHLUCmrLuzUsq49cjqftSZVhw= Subject key identifier: B1:E2:13:55:AF:97:5D:F8:0C:CA:5C:BF:14:C0:29:61:28:1A:FE:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72BC55883A07CA5F590AA985208ED1AA2D42CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa Signing time: Sat 24 Oct 2026 00:03:01 +0000 ROA not before: Sat 24 Oct 2026 00:03:01 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 68.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bc:55:88:3a:07:ca:5f:59:0a:a9:85:20:8e:d1:aa:2d:42:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:03:01 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=d57f48ad05ac1ae768717099f400b5ecfeb41cce42c32f8d2e885cfbff3605db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:f8:b4:95:df:9e:f8:69:a7:de:98:ed:80: 13:02:87:0f:ba:14:9a:2f:99:f8:b8:29:58:74:29: 66:e6:20:b4:ff:5c:c2:0f:de:2d:a7:7a:58:e5:01: 9f:62:cc:72:14:de:bc:03:6f:65:66:6e:dc:25:b8: 0f:0f:6e:c2:6b:cc:48:1f:7c:b3:79:18:8c:e3:63: 83:8f:60:b5:68:c4:04:b9:67:e4:5b:20:13:c6:eb: 58:95:27:66:03:ea:82:7c:1e:65:ae:0c:59:61:17: f4:43:a6:a3:bc:ae:ca:e6:2f:70:93:30:29:12:95: 70:d1:85:b3:5a:90:3c:a9:ae:e2:63:53:fd:be:38: 89:7d:ba:8b:77:62:0b:b6:93:e3:af:8e:99:af:2c: d2:ab:f0:d8:8c:18:c1:78:28:20:c3:74:3a:d6:3b: 62:d6:72:5c:d0:0d:93:c0:db:0f:1f:3c:c0:61:86: 66:55:a0:2d:01:70:90:f1:3f:4c:cd:72:74:e9:9f: 52:32:48:df:56:ed:18:f3:21:fd:32:a9:02:37:c0: 6b:98:17:77:d2:cf:be:fb:83:3d:98:d8:60:c4:46: 50:00:fc:b5:9a:2f:10:55:e7:7a:3f:64:38:72:88: 7f:b3:47:fe:30:b4:f0:5b:30:b2:4f:9c:08:6d:e7: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:13:55:AF:97:5D:F8:0C:CA:5C:BF:14:C0:29:61:28:1A:FE:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3b:42:db:20:23:ed:6c:8f:20:49:03:65:2b:28:e0:7a:8e:e3: 16:ee:2f:9e:38:be:b7:fd:a7:b8:fe:c1:d9:31:7e:b0:1b:1c: e3:0d:ae:02:39:3a:01:62:0d:c8:cf:c7:54:de:41:38:01:25: 2d:41:eb:60:ed:b8:3f:9f:7f:03:08:ba:b0:65:12:a7:e6:05: 6b:85:4c:41:51:4b:09:d9:99:f9:1c:f9:8e:57:16:f8:b1:a5: 68:c7:66:99:9d:fc:fa:14:24:4e:0a:fb:0c:49:f1:a9:10:11: 7d:38:93:11:d8:92:3a:c5:30:f6:2c:2c:4e:27:8d:79:81:bb: dc:93:9e:8a:53:60:4a:55:70:97:ca:43:29:4a:b3:89:91:96: dc:47:69:2f:32:70:a4:50:ab:c2:4a:ba:be:2d:7a:49:7e:3f: d8:32:b0:1b:22:4b:5e:31:3c:6c:03:9b:7b:50:e5:9f:ac:47: ae:30:30:ee:97:bc:fd:aa:b9:d2:57:7c:0d:9f:a1:51:f6:8a: 2d:f1:ce:a1:bf:65:e1:54:8a:2d:4d:cb:dd:84:a6:6f:cc:ac: 2c:75:a0:ef:4e:11:eb:bd:d2:be:af:df:95:95:fc:06:88:2a: 43:9a:a7:1e:4d:56:f8:2f:db:bb:b7:47:32:c7:ac:94:51:23: 6a:fd:95:e1 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITcrxViDoHyl9ZCqmFII7Rqi1CyjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMjQwMDAzMDFaFw0yNzAxMjIyMzU5NTla MHoxSTBHBgNVBAUTQGQ1N2Y0OGFkMDVhYzFhZTc2ODcxNzA5OWY0MDBiNWVjZmVi NDFjY2U0MmMzMmY4ZDJlODg1Y2ZiZmYzNjA1ZGIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANra+LSV3574aafemO2AEwKHD7oUmi+Z+LgpWHQpZuYgtP9c wg/eLad6WOUBn2LMchTevANvZWZu3CW4Dw9uwmvMSB98s3kYjONjg49gtWjEBLln 5FsgE8brWJUnZgPqgnweZa4MWWEX9EOmo7yuyuYvcJMwKRKVcNGFs1qQPKmu4mNT /b44iX26i3diC7aT46+Oma8s0qvw2IwYwXgoIMN0OtY7YtZyXNANk8DbDx88wGGG ZlWgLQFwkPE/TM1ydOmfUjJI31btGPMh/TKpAjfAa5gXd9LPvvuDPZjYYMRGUAD8 tZovEFXnej9kOHKIf7NH/jC08Fswsk+cCG3ndRUCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBSx4hNVr5dd+AzKXL8UwClhKBr+MjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNmIyMTJkOGMtYjNmMy00ZGNhLWFjNmYtM2UyYjdkMTA3NTdhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAESeMA0GCSqGSIb3DQEBCwUAA4IBAQA7QtsgI+1sjyBJA2UrKOB6juMW7i+e OL63/ae4/sHZMX6wGxzjDa4COToBYg3Iz8dU3kE4ASUtQetg7bg/n38DCLqwZRKn 5gVrhUxBUUsJ2Zn5HPmOVxb4saVox2aZnfz6FCROCvsMSfGpEBF9OJMR2JI6xTD2 LCxOJ415gbvck56KU2BKVXCXykMpSrOJkZbcR2kvMnCkUKvCSrq+LXpJfj/YMrAb IkteMTxsA5t7UOWfrEeuMDDul7z9qrnSV3wNn6FR9oot8c6hv2XhVIotTcvdhKZv zKwsdaDvThHrvdK+r9+VlfwGiCpDmqceTVb4L9u7t0cyx6yUUSNq/ZXh -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:58 2026 by rpki-client