$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71e4dd76-d0a5-4298-b47e-b983c7943d01.roa File: 71e4dd76-d0a5-4298-b47e-b983c7943d01.roa (raw, json) Hash identifier: SmPqUQkN/YlhyCTNu3a1aq0ViGh2PUf5Oyf10/UoBYc= Subject key identifier: 8D:A2:E6:02:FE:1E:68:A4:9C:EB:22:7D:82:B5:BD:DE:BE:B9:01:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BDC3E12D0F3A8B467A44EC9448F14A3F502B271 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71e4dd76-d0a5-4298-b47e-b983c7943d01.roa Signing time: Thu 22 Oct 2026 01:11:08 +0000 ROA not before: Thu 22 Oct 2026 01:11:08 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:dc:3e:12:d0:f3:a8:b4:67:a4:4e:c9:44:8f:14:a3:f5:02:b2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:11:08 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=74f9da61681fa3c818956c2ed5b1fbf129e834b5a67db8a9ea084e89d6bc14cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:41:01:cf:b2:f7:5d:96:41:7a:e1:c6:be: a0:7e:96:4e:2d:37:57:3a:61:77:fa:5a:f6:ef:b9: 3c:e7:7f:7f:ee:6f:1f:96:38:89:d0:6d:97:85:2a: 11:c5:ae:65:ee:0e:0e:95:ae:b3:1c:80:00:d9:a3: 85:b2:6f:fd:20:a3:04:da:0e:1b:c9:7b:b7:0c:24: c4:a6:d5:e5:b0:62:b3:f0:33:88:cb:d9:46:ec:0a: 8b:c1:1d:91:33:42:6e:80:7b:48:99:2e:84:b1:62: 5c:3d:e7:7f:1f:bd:fe:ad:6c:a3:c2:b0:fa:5c:36: 48:69:4b:10:74:d3:04:28:02:0b:8b:e7:8e:e6:95: 9a:76:ce:22:53:5e:37:9b:d9:66:b9:6c:ef:f4:41: 90:a7:6d:1c:63:2b:8f:3c:ce:b7:63:e2:e6:45:20: c8:26:2a:ae:cd:50:93:1f:ac:fd:15:a0:b5:37:9e: e2:96:32:0e:a0:35:9f:5b:b2:ab:fa:ff:e9:02:40: a6:2c:d3:65:da:95:41:d9:ed:62:84:a3:c6:18:08: 98:76:8b:61:e9:81:18:3d:43:df:eb:e3:a9:ee:36: 4c:8c:a7:3c:6a:ae:88:e8:35:d0:4a:ce:f3:25:44: fc:50:e8:f7:72:da:36:6d:48:31:31:17:f4:6e:40: 1a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A2:E6:02:FE:1E:68:A4:9C:EB:22:7D:82:B5:BD:DE:BE:B9:01:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71e4dd76-d0a5-4298-b47e-b983c7943d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.128.0/22 Signature Algorithm: sha256WithRSAEncryption be:80:a1:9e:1a:43:13:7a:67:7b:d6:54:79:85:0b:f2:25:cd: 18:c7:91:f4:44:9d:12:8a:77:90:f6:a5:c3:91:27:bf:14:a4: ba:95:5d:5c:fa:5c:ac:08:56:91:2f:30:b3:29:50:ea:49:bb: 1c:70:ff:4d:d3:3d:a4:3e:d3:c6:a1:4a:8c:c4:8d:6c:b1:d4: e9:72:2d:01:fb:92:02:48:d8:cf:26:18:d4:2c:1e:5d:80:48: 92:71:4c:19:0f:70:5a:6a:65:be:f5:05:3a:00:91:7c:16:8e: 21:d0:0e:a8:b3:cf:25:e7:bc:2a:f1:f1:7d:c7:4b:9b:b8:46: c1:25:46:b2:db:03:c1:74:3d:43:f3:95:0d:43:90:84:73:52: 73:f7:7b:10:96:17:1d:1d:71:37:bb:68:0b:f5:22:b3:f5:94: 31:ba:0e:50:a3:0d:e1:ac:89:ac:98:73:83:44:a2:6b:2c:70: c7:24:54:cb:17:2a:71:d9:64:a6:28:c6:1e:61:65:12:d7:2a: 29:dd:eb:71:f9:5b:54:e9:0e:54:3c:0a:78:75:44:f3:b3:f8: 76:26:3d:a6:b4:95:e6:94:1f:d5:0a:3a:e7:89:81:23:12:77: 8a:77:85:56:04:3e:61:1c:af:12:fb:20:fc:02:4c:80:97:a5: aa:0b:ea:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK9w+EtDzqLRnpE7JRI8Uo/UCsnEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDExMTA4WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGY5ZGE2MTY4MWZhM2M4MTg5NTZjMmVkNWIxZmJmMTI5 ZTgzNGI1YTY3ZGI4YTllYTA4NGU4OWQ2YmMxNGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuiEEBz7L3XZZBeuHGvqB+lk4tN1c6YXf6WvbvuTznf3/u bx+WOInQbZeFKhHFrmXuDg6VrrMcgADZo4Wyb/0gowTaDhvJe7cMJMSm1eWwYrPw M4jL2UbsCovBHZEzQm6Ae0iZLoSxYlw9538fvf6tbKPCsPpcNkhpSxB00wQoAguL 547mlZp2ziJTXjeb2Wa5bO/0QZCnbRxjK488zrdj4uZFIMgmKq7NUJMfrP0VoLU3 nuKWMg6gNZ9bsqv6/+kCQKYs02XalUHZ7WKEo8YYCJh2i2HpgRg9Q9/r46nuNkyM pzxqrojoNdBKzvMlRPxQ6Pdy2jZtSDExF/RuQBonAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjaLmAv4eaKSc6yJ9grW93r65AYgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxZTRkZDc2LWQwYTUtNDI5OC1iNDdlLWI5ODNjNzk0M2QwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFIAwDQYJKoZIhvcNAQELBQADggEBAL6AoZ4aQxN6Z3vWVHmFC/IlzRjH kfREnRKKd5D2pcORJ78UpLqVXVz6XKwIVpEvMLMpUOpJuxxw/03TPaQ+08ahSozE jWyx1OlyLQH7kgJI2M8mGNQsHl2ASJJxTBkPcFpqZb71BToAkXwWjiHQDqizzyXn vCrx8X3HS5u4RsElRrLbA8F0PUPzlQ1DkIRzUnP3exCWFx0dcTe7aAv1IrP1lDG6 DlCjDeGsiayYc4NEomsscMckVMsXKnHZZKYoxh5hZRLXKind63H5W1TpDlQ8Cnh1 RPOz+HYmPaa0leaUH9UKOueJgSMSd4p3hVYEPmEcrxL7IPwCTICXpaoL6ks= -----END CERTIFICATE-----Generated at Tue Nov 3 00:28:54 2026 by rpki-client