$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa File: 7a63d989-b13f-46b2-ada6-94bd07a73e86.roa (raw, json) Hash identifier: 89lUc7J2ZIREYdCG7rAS3GuTeyNFvOGn/VBPo04h0Js= Subject key identifier: 47:88:CD:CB:B0:1F:78:08:A0:69:26:97:A1:8F:DF:34:F1:1E:0C:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51F4FC32BEB2B445704844B2CDE88726A8936E82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa Signing time: Fri 23 Oct 2026 00:31:48 +0000 ROA not before: Fri 23 Oct 2026 00:31:48 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f4:fc:32:be:b2:b4:45:70:48:44:b2:cd:e8:87:26:a8:93:6e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:31:48 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=d094119524f07c223652f212c88bfbb856106daec31afdde768bba3b03d8662b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:dd:e2:b8:59:82:ce:cf:5c:cb:c4:98:8f: b3:7a:11:ce:54:1c:c7:b1:f1:75:dc:c5:84:80:98: fe:dd:71:e3:ff:9f:1a:24:7f:d9:a0:ac:9d:ce:60: 85:41:d9:ee:76:ca:74:c1:97:7d:f1:36:a3:75:6b: a0:30:38:61:6c:41:3f:32:c5:41:93:f1:9b:36:ff: bf:17:99:3e:14:93:0d:3b:91:e0:05:cc:d5:b0:b0: bd:5f:8b:24:3a:e9:2f:ee:10:b4:ab:50:85:18:de: 02:31:77:ca:65:e0:61:7e:d9:ec:fe:86:ce:25:5b: ab:ae:d0:1b:d4:4a:31:55:3c:de:10:11:64:e1:ac: cc:df:a4:29:d6:65:03:38:16:77:2e:a3:b2:45:fb: 65:bb:6b:69:16:ba:f8:c4:83:a1:a2:d1:19:b3:b9: 1a:14:36:9c:08:de:04:ba:23:e6:ce:e3:80:c8:b7: 1d:d4:0b:3e:2c:7b:89:aa:fc:97:c5:89:e3:9b:e1: ec:08:04:7e:bf:d7:61:12:2a:c0:1b:c2:cc:d0:32: 7e:9f:99:ba:e2:69:02:14:5f:ac:74:a8:fd:aa:ab: 24:06:77:77:26:e9:ef:65:af:1c:ee:82:80:cf:9f: 50:01:78:63:13:df:16:43:ff:66:6a:03:4e:e4:49: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:88:CD:CB:B0:1F:78:08:A0:69:26:97:A1:8F:DF:34:F1:1E:0C:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.128.0/17 Signature Algorithm: sha256WithRSAEncryption 98:82:89:4f:69:cd:0f:e9:05:57:18:f3:1c:96:d8:d1:fa:62: d6:cb:47:d6:96:fb:47:97:6a:ba:4f:9c:1f:9a:78:d9:17:6f: eb:ca:23:92:d1:53:11:0a:de:65:5f:ba:74:8a:e5:f5:16:19: 28:47:b5:cf:33:0e:2f:7f:9c:ff:ea:42:d0:83:38:fc:0e:05: b2:dc:38:ee:7c:75:49:bf:d1:85:66:2d:02:ed:d4:b6:b7:71: 0c:2b:94:96:79:a8:a5:21:77:bc:ef:65:cc:04:1c:9c:74:54: 08:5f:bd:a6:f6:6b:9c:2d:31:e3:f7:54:95:a1:b3:3a:73:81: a2:97:e1:81:cb:0d:14:3e:a8:18:24:7b:8b:fd:c5:7e:6f:d3: f1:f1:ca:8a:0e:6c:13:78:50:e3:58:90:9d:69:5c:e8:60:1d: bd:52:3d:b8:5d:3a:e4:da:38:80:e6:3d:ad:74:64:12:e1:f3: fc:f4:7c:27:d3:3f:2b:a5:7d:72:93:1e:af:cb:f8:7a:bd:54: 16:af:37:4b:64:15:78:cc:62:43:5d:1b:ac:bf:f8:4b:31:38: 26:2f:32:52:78:4b:20:fd:8d:6f:35:4b:54:1d:42:ab:8d:c5: 87:89:57:c5:6c:3e:54:79:9d:ef:0f:7d:67:af:c6:a0:39:e4: 87:50:a3:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUfT8Mr6ytEVwSESyzeiHJqiTboIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAzMTQ4WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDk0MTE5NTI0ZjA3YzIyMzY1MmYyMTJjODhiZmJiODU2 MTA2ZGFlYzMxYWZkZGU3NjhiYmEzYjAzZDg2NjJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDATN3iuFmCzs9cy8SYj7N6Ec5UHMex8XXcxYSAmP7dceP/ nxokf9mgrJ3OYIVB2e52ynTBl33xNqN1a6AwOGFsQT8yxUGT8Zs2/78XmT4Ukw07 keAFzNWwsL1fiyQ66S/uELSrUIUY3gIxd8pl4GF+2ez+hs4lW6uu0BvUSjFVPN4Q EWThrMzfpCnWZQM4Fncuo7JF+2W7a2kWuvjEg6Gi0RmzuRoUNpwI3gS6I+bO44DI tx3UCz4se4mq/JfFieOb4ewIBH6/12ESKsAbwszQMn6fmbriaQIUX6x0qP2qqyQG d3cm6e9lrxzugoDPn1ABeGMT3xZD/2ZqA07kSYtjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR4jNy7AfeAigaSaXoY/fNPEeDMQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhNjNkOTg5LWIxM2YtNDZiMi1hZGE2LTk0YmQwN2E3M2U4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcXF4AwDQYJKoZIhvcNAQELBQADggEBAJiCiU9pzQ/pBVcY8xyW2NH6YtbL R9aW+0eXarpPnB+aeNkXb+vKI5LRUxEK3mVfunSK5fUWGShHtc8zDi9/nP/qQtCD OPwOBbLcOO58dUm/0YVmLQLt1La3cQwrlJZ5qKUhd7zvZcwEHJx0VAhfvab2a5wt MeP3VJWhszpzgaKX4YHLDRQ+qBgke4v9xX5v0/HxyooObBN4UONYkJ1pXOhgHb1S PbhdOuTaOIDmPa10ZBLh8/z0fCfTPyulfXKTHq/L+Hq9VBavN0tkFXjMYkNdG6y/ +EsxOCYvMlJ4SyD9jW81S1QdQquNxYeJV8VsPlR5ne8PfWevxqA55IdQo6M= -----END CERTIFICATE-----Generated at Wed Nov 4 17:59:59 2026 by rpki-client