$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa File: 7671e404-27d3-4739-9da3-e9ffff3d4e14.roa (raw, json) Hash identifier: cRBQK2f9uZgzQIeiUTYMYh85b+eK0k0QT0cl2wv7RrA= Subject key identifier: 90:28:C0:A2:B3:BE:C2:8B:5C:CB:15:C6:C6:83:0D:93:1A:95:F9:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E1975282D9C6DC688721457AB8CE668249D432B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa Signing time: Tue 06 Oct 2026 01:00:48 +0000 ROA not before: Tue 06 Oct 2026 01:00:48 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.76.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:19:75:28:2d:9c:6d:c6:88:72:14:57:ab:8c:e6:68:24:9d:43:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 01:00:48 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=048982e611101d48f076c0f008b43c5887a963acd437fd688c173b2e1f4ecc78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:10:27:59:0f:30:c5:4d:a9:2d:4d:39:1b: 22:63:79:c6:81:8d:e5:56:19:9e:04:b4:9b:5e:45: 39:55:f3:7b:ca:e0:f1:60:7a:be:f3:2d:91:a5:92: a3:72:ae:b6:fa:73:72:8c:18:9b:26:af:4c:9d:f8: d0:c1:db:6c:10:7b:0e:d4:e7:91:cb:33:df:87:60: 79:79:9a:bf:84:b1:07:a7:3b:f6:fd:2f:72:30:ea: 63:8d:1a:d9:44:fe:34:12:fb:e6:b7:c4:b2:6e:33: 2d:58:54:e4:64:5d:91:88:04:38:60:1c:ec:80:c3: 0b:58:62:70:aa:4d:fa:cc:06:d8:e9:d0:cb:8e:27: da:8d:a2:70:fd:88:ad:ad:4f:4f:55:2f:eb:0a:d6: e2:86:dc:c5:15:e1:a8:a7:c6:27:59:cf:d1:d1:d4: c2:fa:7c:9e:97:d5:c4:60:f1:3c:96:20:5e:90:51: e7:51:d4:d5:ee:c6:7c:d9:b9:f8:d9:04:d3:d3:62: 39:91:ac:c9:2e:1c:24:a8:00:c7:7b:e9:86:5f:8f: e9:30:41:39:94:3d:a5:08:8e:6b:69:41:70:06:0d: 1d:94:0f:2d:34:34:3f:13:e5:77:10:30:f9:51:64: 8d:42:96:9a:d4:b6:50:9c:81:97:e1:ea:33:55:e6: d4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:28:C0:A2:B3:BE:C2:8B:5C:CB:15:C6:C6:83:0D:93:1A:95:F9:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.76.64.0/18 Signature Algorithm: sha256WithRSAEncryption bb:c8:c1:bd:8d:cd:48:9f:f4:2e:e6:f0:ef:09:82:af:48:d0: 86:99:2b:ef:ae:54:d9:67:9f:e9:49:c0:e1:11:6a:f1:4d:61: 4c:1a:43:7f:ed:ce:1c:7e:d9:b9:5c:86:9a:92:f9:eb:30:6e: 5f:2c:45:90:59:fe:af:db:c7:4a:2f:18:ee:20:89:3f:f3:3a: fc:4f:3c:67:3c:27:b7:17:03:92:69:6c:da:8f:fc:d6:55:c7: ce:42:21:a3:90:76:26:d3:d6:fd:d3:41:51:ba:f3:ce:48:cb: 2e:09:14:c7:6e:ea:68:e4:e5:08:89:89:a8:b2:18:4d:d0:1d: c7:49:91:f4:a6:90:9f:30:3d:d5:59:08:af:90:06:50:2d:7a: cc:1b:77:f0:7b:b2:f6:9b:50:99:fd:3a:1f:02:54:d6:e8:e4: 19:3d:67:99:56:d2:72:2a:65:5f:b9:c6:3d:95:8f:97:ff:27: 55:83:69:cc:d6:34:cb:db:4a:65:91:3f:69:b2:7f:20:55:37: a3:e6:0b:f9:c0:1e:20:af:68:a2:6b:98:3d:a2:bd:e1:df:84: 3f:a1:06:dd:3e:e5:cc:04:4c:d2:31:41:fc:52:89:7f:9d:b6: 1e:79:7f:e0:4c:49:d6:38:84:75:81:87:8b:4b:cc:f1:d0:8c: 2e:a0:83:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHhl1KC2cbcaIchRXq4zmaCSdQyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDEwMDQ4WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDg5ODJlNjExMTAxZDQ4ZjA3NmMwZjAwOGI0M2M1ODg3 YTk2M2FjZDQzN2ZkNjg4YzE3M2IyZTFmNGVjYzc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+TBAnWQ8wxU2pLU05GyJjecaBjeVWGZ4EtJteRTlV83vK 4PFger7zLZGlkqNyrrb6c3KMGJsmr0yd+NDB22wQew7U55HLM9+HYHl5mr+EsQen O/b9L3Iw6mONGtlE/jQS++a3xLJuMy1YVORkXZGIBDhgHOyAwwtYYnCqTfrMBtjp 0MuOJ9qNonD9iK2tT09VL+sK1uKG3MUV4ainxidZz9HR1ML6fJ6X1cRg8TyWIF6Q UedR1NXuxnzZufjZBNPTYjmRrMkuHCSoAMd76YZfj+kwQTmUPaUIjmtpQXAGDR2U Dy00ND8T5XcQMPlRZI1ClprUtlCcgZfh6jNV5tQ9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkCjAorO+wotcyxXGxoMNkxqV+TAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2NzFlNDA0LTI3ZDMtNDczOS05ZGEzLWU5ZmZmZjNkNGUxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjTEAwDQYJKoZIhvcNAQELBQADggEBALvIwb2NzUif9C7m8O8Jgq9I0IaZ K++uVNlnn+lJwOERavFNYUwaQ3/tzhx+2blchpqS+eswbl8sRZBZ/q/bx0ovGO4g iT/zOvxPPGc8J7cXA5JpbNqP/NZVx85CIaOQdibT1v3TQVG6885Iyy4JFMdu6mjk 5QiJiaiyGE3QHcdJkfSmkJ8wPdVZCK+QBlAteswbd/B7svabUJn9Oh8CVNbo5Bk9 Z5lW0nIqZV+5xj2Vj5f/J1WDaczWNMvbSmWRP2myfyBVN6PmC/nAHiCvaKJrmD2i veHfhD+hBt0+5cwETNIxQfxSiX+dth55f+BMSdY4hHWBh4tLzPHQjC6ggxE= -----END CERTIFICATE-----Generated at Fri Oct 9 15:18:22 2026 by rpki-client