$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa File: 76aa40ec-69b9-44f1-9209-484f2d282a6a.roa (raw, json) Hash identifier: ijimuh3/CpAel/DkBp4QvZncmsOwAfxdAAIpHj2XT1Q= Subject key identifier: 0A:CC:03:E8:75:7E:45:27:B1:71:5E:65:84:7D:7D:00:B1:DE:BC:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42DFCE0EC1A6F0C2B6A9C8AFA38B6EDCBE14B2B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa Signing time: Thu 22 Oct 2026 02:20:03 +0000 ROA not before: Thu 22 Oct 2026 02:20:03 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 157.175.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:df:ce:0e:c1:a6:f0:c2:b6:a9:c8:af:a3:8b:6e:dc:be:14:b2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:20:03 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=afed82fd983ac3bdba6fdf49921655023391a3cd6b828844f1415517d59924db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:a4:b8:fb:ae:86:17:a4:42:89:69:7f:17: 48:2b:9c:7c:09:42:4d:1f:aa:77:b0:25:85:e6:96: 0f:70:6b:5c:2c:cf:6c:55:fc:1f:5c:83:48:4c:2e: dd:f2:2f:f3:bd:8f:4a:15:21:f8:bb:a4:50:ee:7f: de:fe:fb:6b:e3:15:d3:d9:83:78:df:98:1a:3a:ac: 0b:f3:08:fd:aa:85:08:5c:cc:2a:8c:ee:fb:8c:82: 4d:ab:70:92:70:98:9b:02:ba:a4:fc:25:f2:6d:92: de:5f:49:27:fe:54:28:b2:d9:66:5d:47:fc:c7:e8: fd:d7:35:c7:8d:04:0a:e7:36:63:8c:d5:76:fc:60: 30:ab:43:67:27:a9:7c:c9:8d:28:0b:2e:9d:ae:56: 15:1b:dd:1b:ca:8d:80:49:54:42:64:23:29:5e:dd: 5d:28:ff:9e:ce:4a:d4:45:a7:bf:6a:2f:f1:97:d3: 81:6e:fb:06:89:93:a6:f7:aa:63:54:52:17:18:0d: bf:79:19:ae:53:f4:6c:98:06:38:d6:f7:85:18:1c: 12:99:da:9b:fe:31:27:02:17:55:ee:85:38:2d:b1: eb:1e:c9:a2:d7:29:c1:28:b6:f4:46:7d:a7:5a:77: 55:48:5f:4d:ba:c3:53:ca:23:75:f5:45:45:5a:ca: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CC:03:E8:75:7E:45:27:B1:71:5E:65:84:7D:7D:00:B1:DE:BC:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.175.128.0/17 Signature Algorithm: sha256WithRSAEncryption 80:3e:f9:68:3d:74:33:cc:1e:ad:ba:b8:20:6e:30:f2:b4:48: 45:d4:62:d4:9f:be:fd:ff:22:a5:01:d1:b4:89:43:b3:bd:6f: 02:27:57:8a:a4:f1:d2:8a:ef:cf:2f:60:dc:6d:94:aa:0b:c9: 30:53:51:92:d6:6e:01:f7:6a:cc:19:03:4b:51:f7:62:f3:78: e0:87:a1:43:1d:85:56:d3:5b:68:81:45:b7:65:f1:8e:8a:69: b2:95:21:21:56:4c:da:fa:ed:ae:21:89:55:e7:14:5f:0d:ed: 8a:4f:85:d2:00:f5:88:82:fd:1e:fe:55:55:b2:75:87:40:b6: 7c:df:ef:b0:04:cd:02:cb:56:3c:27:28:d1:9a:7a:dd:ee:b6: 14:49:5a:29:dc:80:fb:fb:24:10:8b:20:9e:44:17:65:fc:3c: d6:d4:03:79:e0:7a:4c:0d:8d:30:a1:fe:23:b2:c1:45:1b:1a: 7e:3c:ed:a5:67:28:0e:6c:28:65:1f:03:f3:05:a0:dd:a2:41: 9e:56:3e:c3:cc:ec:c6:4a:69:c1:c7:e6:82:ee:eb:64:2f:1f: ef:17:f2:81:43:b5:28:a6:9d:30:30:3a:3f:08:81:9b:a7:cc: 01:6a:77:cd:ab:63:03:3d:b0:31:48:f0:46:b4:c8:8d:b6:a2: cf:ca:e7:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQt/ODsGm8MK2qcivo4tu3L4UsrUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIyMDAzWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmVkODJmZDk4M2FjM2JkYmE2ZmRmNDk5MjE2NTUwMjMz OTFhM2NkNmI4Mjg4NDRmMTQxNTUxN2Q1OTkyNGRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDh6S4+66GF6RCiWl/F0grnHwJQk0fqnewJYXmlg9wa1ws z2xV/B9cg0hMLt3yL/O9j0oVIfi7pFDuf97++2vjFdPZg3jfmBo6rAvzCP2qhQhc zCqM7vuMgk2rcJJwmJsCuqT8JfJtkt5fSSf+VCiy2WZdR/zH6P3XNceNBArnNmOM 1Xb8YDCrQ2cnqXzJjSgLLp2uVhUb3RvKjYBJVEJkIyle3V0o/57OStRFp79qL/GX 04Fu+waJk6b3qmNUUhcYDb95Ga5T9GyYBjjW94UYHBKZ2pv+MScCF1XuhTgtsese yaLXKcEotvRGfadad1VIX026w1PKI3X1RUVayonNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCswD6HV+RSexcV5lhH19ALHevAYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2YWE0MGVjLTY5YjktNDRmMS05MjA5LTQ4NGYyZDI4MmE2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAedr4AwDQYJKoZIhvcNAQELBQADggEBAIA++Wg9dDPMHq26uCBuMPK0SEXU YtSfvv3/IqUB0bSJQ7O9bwInV4qk8dKK788vYNxtlKoLyTBTUZLWbgH3aswZA0tR 92LzeOCHoUMdhVbTW2iBRbdl8Y6KabKVISFWTNr67a4hiVXnFF8N7YpPhdIA9YiC /R7+VVWydYdAtnzf77AEzQLLVjwnKNGaet3uthRJWincgPv7JBCLIJ5EF2X8PNbU A3ngekwNjTCh/iOywUUbGn487aVnKA5sKGUfA/MFoN2iQZ5WPsPM7MZKacHH5oLu 62QvH+8X8oFDtSimnTAwOj8IgZunzAFqd82rYwM9sDFI8Ea0yI22os/K55I= -----END CERTIFICATE-----Generated at Mon Nov 2 18:49:19 2026 by rpki-client