$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa File: 703d892d-ff7a-4463-88f7-014e2ca759c0.roa (raw, json) Hash identifier: zIwQed8zpkIsAT6yIWmWotYvo+3sIN4wobr2661JiDA= Subject key identifier: 3A:38:3E:0E:7A:53:CD:43:BA:3B:96:22:03:81:D7:EF:3A:11:C2:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 551548907B91AE604C6AF531E743C603F838720D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa Signing time: Tue 06 Oct 2026 01:00:53 +0000 ROA not before: Tue 06 Oct 2026 01:00:53 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.91.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:15:48:90:7b:91:ae:60:4c:6a:f5:31:e7:43:c6:03:f8:38:72:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 01:00:53 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=563667152092f4b69139bddc990b2446a9eeed4a6925ac867aaa24e2629c988a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:fe:c5:77:44:4e:0a:69:d7:cc:73:36:0e: 32:b0:02:f3:3b:de:fd:99:cb:76:1b:aa:dc:81:ea: b8:4f:26:b2:a9:0a:49:07:20:6b:e9:89:5d:8e:fa: ee:12:70:35:7f:cc:a4:0e:53:66:a2:75:77:de:fa: 04:ad:4f:41:76:b3:77:f6:25:97:9d:7b:09:e2:b7: 23:0e:90:6e:2c:c4:00:0f:46:5b:4d:cd:28:c9:67: fb:f0:9c:4a:3e:89:27:d4:e1:6a:e9:f7:18:0a:88: e4:fa:43:12:b1:73:97:96:07:b3:b7:a1:43:ae:b9: 0b:8a:3b:52:3e:47:36:6a:2c:b7:fe:e5:50:02:61: b2:be:d1:87:75:d6:c2:a6:ec:2c:46:c4:9b:c7:ff: 57:e6:e7:20:cd:0e:b7:7b:cc:3a:7d:61:e6:6f:ff: 32:16:fe:11:67:71:6b:26:e6:d3:5a:a6:f1:60:3f: 62:f1:9c:5f:db:83:d1:e0:42:e6:ba:ea:a6:2a:db: 14:88:fa:fa:3c:04:67:d6:c3:01:28:71:6b:c6:d7: 97:a0:9d:40:d1:15:26:10:19:3f:5a:24:d2:d4:42: 2c:a5:94:a9:41:c1:4f:e6:f4:46:87:63:82:c6:1f: ca:5d:cc:e0:bc:c3:7e:48:df:42:0f:67:ef:01:03: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:3E:0E:7A:53:CD:43:BA:3B:96:22:03:81:D7:EF:3A:11:C2:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.91.128.0/18 Signature Algorithm: sha256WithRSAEncryption 63:5c:dd:e0:d5:f6:8a:71:d2:59:5a:0c:ef:92:d2:a3:ad:0b: dc:a9:58:a6:f3:e6:7b:4e:a3:46:1e:11:0d:82:3e:77:57:00: 8e:4d:b1:21:70:88:4d:d5:67:d1:a5:a2:f0:0d:80:e8:87:d5: 42:0e:c9:d0:b1:26:02:95:2e:28:c5:78:4b:5d:35:df:91:a0: 1c:01:cf:c4:93:47:e6:2a:7e:46:7d:57:ed:42:c2:df:cf:24: 59:c7:1a:82:77:2e:1e:9a:9d:18:94:c0:84:e5:65:3c:f0:fc: 76:f3:b0:dd:f8:90:5b:36:d4:45:aa:0a:fe:43:e8:43:46:ed: d8:4c:c7:d0:df:8a:98:be:9e:f1:9e:4f:73:8d:e6:b6:bc:4b: 49:17:43:63:ea:5d:9a:bd:e7:e9:a3:71:f7:8d:c1:ce:22:f5: 44:7a:2b:67:c2:d8:05:00:09:56:af:4a:b5:32:e1:fe:d7:a0: 89:b7:3d:8f:fc:6c:c7:b0:26:24:d9:41:1c:38:ca:e0:cf:f3: 43:ea:42:af:b3:f2:ad:db:a8:41:36:fd:bf:ea:eb:14:d9:96: c4:2c:34:5c:30:dc:20:fe:36:e7:01:cd:0a:bf:61:41:2e:af: 9a:b8:55:92:3e:10:df:5b:6b:d8:20:16:72:d1:7b:4d:da:a3: 89:23:42:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVRVIkHuRrmBMavUx50PGA/g4cg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDEwMDUzWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjM2NjcxNTIwOTJmNGI2OTEzOWJkZGM5OTBiMjQ0NmE5 ZWVlZDRhNjkyNWFjODY3YWFhMjRlMjYyOWM5ODhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCupv7Fd0ROCmnXzHM2DjKwAvM73v2Zy3YbqtyB6rhPJrKp CkkHIGvpiV2O+u4ScDV/zKQOU2aidXfe+gStT0F2s3f2JZedewnityMOkG4sxAAP RltNzSjJZ/vwnEo+iSfU4Wrp9xgKiOT6QxKxc5eWB7O3oUOuuQuKO1I+RzZqLLf+ 5VACYbK+0Yd11sKm7CxGxJvH/1fm5yDNDrd7zDp9YeZv/zIW/hFncWsm5tNapvFg P2LxnF/bg9HgQua66qYq2xSI+vo8BGfWwwEocWvG15egnUDRFSYQGT9aJNLUQiyl lKlBwU/m9EaHY4LGH8pdzOC8w35I30IPZ+8BAxgRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOjg+DnpTzUO6O5YiA4HX7zoRwsowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwM2Q4OTJkLWZmN2EtNDQ2My04OGY3LTAxNGUyY2E3NTljMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAW4AwDQYJKoZIhvcNAQELBQADggEBAGNc3eDV9opx0llaDO+S0qOtC9yp WKbz5ntOo0YeEQ2CPndXAI5NsSFwiE3VZ9GlovANgOiH1UIOydCxJgKVLijFeEtd Nd+RoBwBz8STR+YqfkZ9V+1Cwt/PJFnHGoJ3Lh6anRiUwITlZTzw/HbzsN34kFs2 1EWqCv5D6ENG7dhMx9Dfipi+nvGeT3ON5ra8S0kXQ2PqXZq95+mjcfeNwc4i9UR6 K2fC2AUACVavSrUy4f7XoIm3PY/8bMewJiTZQRw4yuDP80PqQq+z8q3bqEE2/b/q 6xTZlsQsNFww3CD+NucBzQq/YUEur5q4VZI+EN9ba9ggFnLRe03ao4kjQuI= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:14 2026 by rpki-client