$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a77475-f5f6-4c11-98f2-3f287b3da824.roa File: 74a77475-f5f6-4c11-98f2-3f287b3da824.roa (raw, json) Hash identifier: MWOQ7t/Cy2VugfJLNylsq0FYQ4/D4BanlY3fFwXkbMM= Subject key identifier: C2:B1:74:77:26:69:F4:04:17:BC:F2:B5:9C:88:9B:03:36:B3:2B:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04418EC740ED98AEF69BDC199EE6725C7869867F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a77475-f5f6-4c11-98f2-3f287b3da824.roa Signing time: Sat 10 Oct 2026 00:10:34 +0000 ROA not before: Sat 10 Oct 2026 00:10:34 +0000 ROA not after: Fri 08 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:41:8e:c7:40:ed:98:ae:f6:9b:dc:19:9e:e6:72:5c:78:69:86:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 10 00:10:34 2026 GMT Not After : Jan 8 23:59:59 2027 GMT Subject: serialNumber=11eb0ce6e668f4f48979e905200a213a22775c3bc22c70460e89b087ca2de202, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:d3:47:80:64:a3:d4:07:3b:41:1d:24:de: 21:35:0a:0f:17:08:81:81:2f:02:95:39:99:5c:eb: 45:de:78:25:f3:45:92:2e:91:73:c2:be:92:d8:82: a6:5c:90:bb:87:0e:bb:09:f9:cd:ee:1c:c1:75:85: 24:ec:e0:ab:d9:3a:d0:c3:cf:23:5e:1c:d3:95:82: 31:d2:7c:2e:53:2d:1d:5a:e0:3a:8b:0e:54:96:22: 29:4b:da:65:9a:de:c3:64:cd:fc:27:5d:3d:bb:0c: 55:02:a5:c3:a4:76:8c:f9:ea:4d:16:11:dd:80:db: 27:b7:87:c4:29:99:68:53:78:5a:2a:0f:4d:3d:6f: d4:b0:4e:70:5a:06:d8:c3:0b:3a:4b:e7:fa:16:2c: 5f:b2:b5:fd:ef:5a:bc:51:f7:20:a5:23:2a:e9:98: c4:4e:bb:55:5b:9d:38:56:71:e1:b6:10:c7:88:f7: a3:ad:a3:6a:5e:0b:14:b9:0a:b2:93:a8:3a:a3:23: 51:cd:ec:4d:88:a6:ff:32:b2:ae:35:fa:39:09:56: 33:25:bd:6c:c1:89:a8:71:e1:b4:cc:e8:c7:cb:17: 0c:0a:22:6a:30:8c:4e:7a:af:9e:99:86:30:ae:c5: e2:25:c8:70:b7:f8:31:3e:07:83:29:d9:ea:a9:67: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B1:74:77:26:69:F4:04:17:BC:F2:B5:9C:88:9B:03:36:B3:2B:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a77475-f5f6-4c11-98f2-3f287b3da824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.183.0/24 Signature Algorithm: sha256WithRSAEncryption 72:55:33:0d:94:f4:a2:07:6b:7a:c8:ea:1b:93:f6:0f:93:c4: 3c:23:ab:ff:21:6d:3f:e7:b8:ce:9b:3a:d4:f3:ea:da:2c:db: c3:8b:2c:30:8d:9c:e3:12:c1:86:4e:e7:71:8c:a5:0a:21:bb: 22:f8:a6:23:8b:0e:46:2f:12:cf:30:99:33:39:d7:38:0d:0c: fa:25:a8:4b:23:72:86:9b:4c:14:71:40:c6:26:a6:3f:99:a5: b0:d5:b6:1d:42:37:10:7a:75:df:8d:0e:8f:74:50:10:2d:30: 93:d5:ff:5e:1e:9c:0b:15:4f:dc:ce:e9:2d:80:09:fb:d5:be: 50:93:67:ef:09:57:bf:57:49:1b:12:d5:b0:cd:42:c8:5a:80: a5:b7:67:6e:52:93:b8:8d:3b:4f:69:6c:82:b9:74:fa:c9:34: 14:80:4d:19:af:ff:b0:7f:a0:b9:d6:b8:59:7c:06:3c:fe:3e: 23:55:66:eb:db:f3:a6:4f:85:74:9d:c6:d8:d2:5c:4a:d5:0f: 1f:c4:d4:58:7e:91:2e:3c:a0:e4:18:9e:22:99:89:af:08:77: d1:12:1d:c7:86:44:55:d8:cf:df:02:9e:81:88:c7:3b:6c:0e: 38:d6:4d:be:34:1c:e6:08:d4:a8:17:0b:e7:0b:0a:58:64:55: df:07:d5:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBEGOx0DtmK72m9wZnuZyXHhphn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEwMDAxMDM0WhcNMjcwMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWViMGNlNmU2NjhmNGY0ODk3OWU5MDUyMDBhMjEzYTIy Nzc1YzNiYzIyYzcwNDYwZTg5YjA4N2NhMmRlMjAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5u9NHgGSj1Ac7QR0k3iE1Cg8XCIGBLwKVOZlc60XeeCXz RZIukXPCvpLYgqZckLuHDrsJ+c3uHMF1hSTs4KvZOtDDzyNeHNOVgjHSfC5TLR1a 4DqLDlSWIilL2mWa3sNkzfwnXT27DFUCpcOkdoz56k0WEd2A2ye3h8QpmWhTeFoq D009b9SwTnBaBtjDCzpL5/oWLF+ytf3vWrxR9yClIyrpmMROu1VbnThWceG2EMeI 96Oto2peCxS5CrKTqDqjI1HN7E2Ipv8ysq41+jkJVjMlvWzBiahx4bTM6MfLFwwK ImowjE56r56ZhjCuxeIlyHC3+DE+B4Mp2eqpZ5AlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwrF0dyZp9AQXvPK1nIibAzazKxswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0YTc3NDc1LWY1ZjYtNGMxMS05OGYyLTNmMjg3YjNkYTgyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7rcwDQYJKoZIhvcNAQELBQADggEBAHJVMw2U9KIHa3rI6huT9g+TxDwj q/8hbT/nuM6bOtTz6tos28OLLDCNnOMSwYZO53GMpQohuyL4piOLDkYvEs8wmTM5 1zgNDPolqEsjcoabTBRxQMYmpj+ZpbDVth1CNxB6dd+NDo90UBAtMJPV/14enAsV T9zO6S2ACfvVvlCTZ+8JV79XSRsS1bDNQshagKW3Z25Sk7iNO09pbIK5dPrJNBSA TRmv/7B/oLnWuFl8Bjz+PiNVZuvb86ZPhXSdxtjSXErVDx/E1Fh+kS48oOQYniKZ ia8Id9ESHceGRFXYz98CnoGIxztsDjjWTb40HOYI1KgXC+cLClhkVd8H1XE= -----END CERTIFICATE-----Generated at Mon Nov 2 18:52:38 2026 by rpki-client