$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa File: 7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa (raw, json) Hash identifier: Fyt85QdtKbXhuCPVagMToaOejhZqrdIDE9sUY5VMzUk= Subject key identifier: 5C:88:DA:14:38:DF:14:19:1F:1D:AB:CA:45:A9:51:B5:C8:9A:42:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 558F35D06500A7E81BEE1B169123E2FCC66569D2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa Signing time: Tue 13 Oct 2026 00:20:42 +0000 ROA not before: Tue 13 Oct 2026 00:20:42 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8f:35:d0:65:00:a7:e8:1b:ee:1b:16:91:23:e2:fc:c6:65:69:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:20:42 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=d269a0268f21e0b1a1b097d36e0be671ed14e7b53c20b9cf9b6bb6e1cb02360f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:da:c1:97:f9:00:c3:f4:37:fa:d2:d0:a0: 59:92:63:9c:21:0f:7b:d3:31:d3:d5:2c:73:62:4d: cb:e5:b3:c2:fa:2c:32:20:c8:aa:1d:17:ae:0f:ea: 75:8c:18:3c:d7:35:f4:a4:6c:f5:98:20:6f:62:c6: 9d:d1:20:2b:0f:c7:e7:43:e9:9d:0a:10:ff:38:8d: 07:8e:06:58:b8:40:a4:30:5c:ab:2e:fc:94:10:df: 86:be:50:15:7d:bd:92:9c:8d:da:45:aa:8e:94:57: e3:0c:33:b6:25:5b:d9:27:02:ee:6c:1c:99:55:bf: 2d:76:4d:d5:54:ea:1a:6b:1f:40:2d:12:9a:31:af: 08:b1:08:9c:c5:99:26:cb:57:1a:69:0a:d1:e7:a3: 86:e7:e4:65:f2:a3:bd:18:87:fd:e4:9b:9c:75:ff: 4d:7e:58:22:b6:45:df:9b:f1:e6:c1:f6:48:cc:65: 67:e3:59:de:f2:6d:20:10:cf:39:b6:17:55:ff:63: fb:0e:27:7b:0d:3e:b6:1a:be:29:60:35:e7:de:7b: 20:05:db:2f:28:7a:2f:a9:5f:82:79:6c:f0:15:58: 7d:f6:07:47:37:16:18:b7:0b:38:7f:92:b4:18:04: d4:41:57:d8:3f:34:0d:00:98:23:cd:37:e5:59:08: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:DA:14:38:DF:14:19:1F:1D:AB:CA:45:A9:51:B5:C8:9A:42:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.18.0/24 Signature Algorithm: sha256WithRSAEncryption 78:bd:b0:64:ac:bc:4a:88:3c:3e:6e:2e:e2:cb:6b:5e:9f:0f: 51:3d:a2:a2:ae:db:c6:62:7a:45:44:fa:81:41:d8:22:d8:a7: 51:21:79:f5:f4:b5:0e:3b:50:a4:a9:9f:82:1d:7a:e4:96:77: 85:94:20:38:f3:ee:74:c9:3a:8c:a1:a1:d5:55:34:9b:0e:b1: ec:1f:5a:06:1f:ce:9b:cc:9f:f2:15:9b:06:ec:99:87:a9:ff: 8f:47:46:22:93:33:6e:a7:46:b6:95:d6:bb:4b:c6:a9:ab:8a: b5:da:9d:47:ee:ab:f3:99:b5:f8:6e:b1:56:e4:21:5e:1d:0e: d1:b0:d2:65:b4:c7:50:47:34:f4:1a:11:f7:de:b4:5a:06:a5: c7:94:78:22:cc:a0:2c:12:f0:e5:fa:1b:1a:0e:f0:6c:aa:61: 11:cc:aa:eb:2b:90:1c:8d:8d:61:f4:17:c3:85:c5:a9:f5:d1: 3e:fe:34:25:5d:0f:eb:f6:30:5a:b5:c8:c5:a5:99:e8:e6:3a: 41:a0:32:35:13:7d:94:8f:e4:e1:99:bb:4d:25:8b:22:1b:04: 1f:b8:aa:fb:24:56:88:88:29:c0:05:16:3e:3c:d6:7a:1e:84: 28:11:9c:44:87:eb:a5:35:50:85:b8:1b:dd:a2:66:32:36:0e: 8c:4d:f6:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVY810GUAp+gb7hsWkSPi/MZladIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAyMDQyWhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjY5YTAyNjhmMjFlMGIxYTFiMDk3ZDM2ZTBiZTY3MWVk MTRlN2I1M2MyMGI5Y2Y5YjZiYjZlMWNiMDIzNjBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFu9rBl/kAw/Q3+tLQoFmSY5whD3vTMdPVLHNiTcvls8L6 LDIgyKodF64P6nWMGDzXNfSkbPWYIG9ixp3RICsPx+dD6Z0KEP84jQeOBli4QKQw XKsu/JQQ34a+UBV9vZKcjdpFqo6UV+MMM7YlW9knAu5sHJlVvy12TdVU6hprH0At EpoxrwixCJzFmSbLVxppCtHno4bn5GXyo70Yh/3km5x1/01+WCK2Rd+b8ebB9kjM ZWfjWd7ybSAQzzm2F1X/Y/sOJ3sNPrYavilgNefeeyAF2y8oei+pX4J5bPAVWH32 B0c3Fhi3Czh/krQYBNRBV9g/NA0AmCPNN+VZCCoHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXIjaFDjfFBkfHavKRalRtciaQp0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1NjFhNzAwLTBkYTYtNGY0ZC05ZTNlLTk2YTAxMGM3Y2I5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjlhIwDQYJKoZIhvcNAQELBQADggEBAHi9sGSsvEqIPD5uLuLLa16fD1E9 oqKu28ZiekVE+oFB2CLYp1EhefX0tQ47UKSpn4IdeuSWd4WUIDjz7nTJOoyhodVV NJsOsewfWgYfzpvMn/IVmwbsmYep/49HRiKTM26nRraV1rtLxqmrirXanUfuq/OZ tfhusVbkIV4dDtGw0mW0x1BHNPQaEffetFoGpceUeCLMoCwS8OX6GxoO8GyqYRHM qusrkByNjWH0F8OFxan10T7+NCVdD+v2MFq1yMWlmejmOkGgMjUTfZSP5OGZu00l iyIbBB+4qvskVoiIKcAFFj481noehCgRnESH66U1UIW4G92iZjI2DoxN9rM= -----END CERTIFICATE-----Generated at Tue Nov 3 19:20:59 2026 by rpki-client