$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa File: 7dc69a83-4a96-485c-9489-1b574db4510f.roa (raw, json) Hash identifier: S/a4PcIOQCA9kVpyhRrBoj+yMfmzuk4U5/U4rEOaMNg= Subject key identifier: 01:22:BA:70:82:B7:90:28:B6:2E:A3:29:2E:35:EB:5A:CD:6D:3E:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70E502F3E068B5A6752123F2C1321667D16EEF1F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa Signing time: Mon 12 Oct 2026 00:50:35 +0000 ROA not before: Mon 12 Oct 2026 00:50:35 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.90.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e5:02:f3:e0:68:b5:a6:75:21:23:f2:c1:32:16:67:d1:6e:ef:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:50:35 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=f54a4d452168d0de066578c759eb5007c7c084fe116250022ac1ef3b369e8406, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:d4:1f:14:75:7b:a3:c3:21:83:9d:60:6e: fd:9e:85:4c:82:4a:9a:a9:41:b0:81:96:09:4d:65: 2c:d8:24:4d:47:b7:b9:d1:11:c1:fb:ff:4e:3f:b5: 2a:26:e3:36:e7:0c:f8:47:c6:d5:b4:63:64:a1:b5: f4:ac:5a:bb:09:f5:cf:c6:cd:e2:a8:1c:0d:1a:cb: f0:80:68:f1:23:8b:33:e7:b5:b6:78:ee:c8:51:4b: 68:3b:46:b7:7c:72:c9:09:73:1a:40:db:ef:a0:5d: 2e:66:37:b4:c3:7b:a3:ba:81:16:a7:a7:f9:f2:c9: 3b:a8:6d:02:4a:b2:2c:ea:77:a1:a2:42:88:a0:ae: c4:dd:88:50:a4:85:85:ea:ce:4b:a7:fb:cc:a6:ae: 54:9b:b8:c9:51:16:18:25:eb:b6:38:0e:70:9c:a3: 6e:17:f6:c0:b8:6a:83:35:be:a9:86:06:f6:30:f5: 97:39:7a:80:d5:30:b7:39:cb:12:d5:ab:fc:7c:2e: a0:30:0e:66:cd:a0:b4:e3:b1:3c:b8:cf:ca:f0:ce: 04:de:74:b0:0e:7c:c0:f5:19:0f:26:12:61:90:2b: 06:26:1b:22:94:d3:b1:2a:8b:aa:85:1d:97:20:e3: be:bc:2a:82:2e:f2:4a:f1:67:b3:ca:8b:80:ee:52: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:22:BA:70:82:B7:90:28:B6:2E:A3:29:2E:35:EB:5A:CD:6D:3E:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.90.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:b9:ec:61:be:18:12:3c:3d:26:24:8b:75:78:7f:e1:5f:d6: 32:29:fb:13:a1:62:40:91:4d:41:8f:9a:0d:97:cf:18:46:f4: 51:87:af:99:f6:85:eb:38:a0:6a:fa:4c:8b:e1:7f:2d:e4:ce: 7b:f8:1d:19:4e:89:c0:0f:c3:b3:74:61:b8:16:f1:e6:c0:9e: cf:bf:ec:2f:9d:4d:94:de:9b:09:d3:1f:4e:3c:00:85:6d:fd: 1e:71:32:df:c9:fb:ee:e2:bb:ac:de:da:c9:f7:fa:ba:d4:58: da:ad:55:0f:dc:e6:c6:9b:fb:dd:88:45:fe:c0:fe:ca:fa:6f: cb:70:e3:5e:75:e7:1d:4e:04:8c:72:27:94:a2:6a:6c:63:c1: b1:9d:fd:af:e9:b2:5b:82:0a:3d:15:da:d2:21:7b:b9:31:87: 51:13:7d:7b:51:2b:1f:e3:4f:15:f4:29:0b:14:c3:fa:f2:00: 85:88:48:b5:51:d9:e0:a2:06:7a:35:cc:c7:ac:60:c6:12:4e: 2f:d8:05:62:74:fc:5b:70:c2:3b:73:2a:39:c8:02:8a:05:ec: b6:f6:9e:6b:c7:40:93:0c:8c:83:c4:20:19:c7:0b:8f:93:43: 1a:af:15:60:b4:84:26:fb:6b:5d:10:eb:92:9d:d0:5e:2b:bc: 3c:36:48:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcOUC8+BotaZ1ISPywTIWZ9Fu7x8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MDM1WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTRhNGQ0NTIxNjhkMGRlMDY2NTc4Yzc1OWViNTAwN2M3 YzA4NGZlMTE2MjUwMDIyYWMxZWYzYjM2OWU4NDA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx+tQfFHV7o8Mhg51gbv2ehUyCSpqpQbCBlglNZSzYJE1H t7nREcH7/04/tSom4zbnDPhHxtW0Y2ShtfSsWrsJ9c/GzeKoHA0ay/CAaPEjizPn tbZ47shRS2g7Rrd8cskJcxpA2++gXS5mN7TDe6O6gRanp/nyyTuobQJKsizqd6Gi QoigrsTdiFCkhYXqzkun+8ymrlSbuMlRFhgl67Y4DnCco24X9sC4aoM1vqmGBvYw 9Zc5eoDVMLc5yxLVq/x8LqAwDmbNoLTjsTy4z8rwzgTedLAOfMD1GQ8mEmGQKwYm GyKU07Eqi6qFHZcg4768KoIu8krxZ7PKi4DuUs3nAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUASK6cIK3kCi2LqMpLjXrWs1tPqkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkYzY5YTgzLTRhOTYtNDg1Yy05NDg5LTFiNTc0ZGI0NTEwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4WjANBgkqhkiG9w0BAQsFAAOCAQEAYLnsYb4YEjw9JiSLdXh/4V/WMin7 E6FiQJFNQY+aDZfPGEb0UYevmfaF6zigavpMi+F/LeTOe/gdGU6JwA/Ds3RhuBbx 5sCez7/sL51NlN6bCdMfTjwAhW39HnEy38n77uK7rN7ayff6utRY2q1VD9zmxpv7 3YhF/sD+yvpvy3DjXnXnHU4EjHInlKJqbGPBsZ39r+myW4IKPRXa0iF7uTGHURN9 e1ErH+NPFfQpCxTD+vIAhYhItVHZ4KIGejXMx6xgxhJOL9gFYnT8W3DCO3MqOcgC igXstvaea8dAkwyMg8QgGccLj5NDGq8VYLSEJvtrXRDrkp3QXiu8PDZIeQ== -----END CERTIFICATE-----Generated at Mon Nov 2 16:05:35 2026 by rpki-client