$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa File: 7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa (raw, json) Hash identifier: ncYw1aWEPlGNSVlbmGeYTWnkyJJ/1I+l73YmEBKrNxE= Subject key identifier: C9:A3:CF:77:00:13:89:E8:8B:99:70:43:92:02:43:D0:A6:9B:41:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44A7D09B6D2BD43AA661242C68B912EC10F92358 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa Signing time: Sat 10 Oct 2026 00:11:01 +0000 ROA not before: Sat 10 Oct 2026 00:11:01 +0000 ROA not after: Fri 08 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a7:d0:9b:6d:2b:d4:3a:a6:61:24:2c:68:b9:12:ec:10:f9:23:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 10 00:11:01 2026 GMT Not After : Jan 8 23:59:59 2027 GMT Subject: serialNumber=45ecc3aed5cf48b61c0a877efaad2da4f3b83816f97c9b892c43601b652e6903, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:2a:db:39:d0:34:ec:bd:74:71:46:00:51: a8:55:86:ef:13:1e:e0:b4:a6:58:33:6a:ab:9b:d4: 44:08:5a:c2:de:5e:85:15:78:0c:ef:a5:ba:fe:f8: 68:85:a8:00:6f:f1:be:48:aa:33:19:d2:2d:64:a2: 07:b5:6d:4d:02:52:51:3e:05:e1:8b:63:b1:49:fb: d9:19:de:15:ab:c6:ea:88:d7:08:f5:88:a8:3e:79: 1c:7b:dd:d2:ee:17:6d:bf:40:66:8d:02:3c:24:5a: 6e:75:a6:5a:3f:80:19:9c:9d:1e:98:43:98:07:5c: fa:4c:7e:de:01:55:0e:7f:e3:7a:44:63:15:e5:8b: 0d:91:17:bd:98:48:ad:df:fb:81:0f:ea:38:fd:c0: ce:17:c6:2b:e3:c4:48:b3:96:b1:ce:ad:40:b9:2b: d4:19:83:57:cf:7d:16:c4:9f:02:f4:cd:8a:eb:a6: de:48:01:76:d7:6f:d0:53:d3:a9:60:85:22:69:aa: c5:bb:27:5e:f2:a2:db:43:54:1b:e4:bf:4f:52:e8: c4:58:87:32:ba:ab:f8:13:4e:20:21:c1:7a:8a:aa: a2:02:b0:ed:0b:e7:53:37:5a:2b:2b:50:4c:c2:3a: 37:35:a9:38:84:9d:c4:84:93:cd:f8:da:f5:93:3c: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A3:CF:77:00:13:89:E8:8B:99:70:43:92:02:43:D0:A6:9B:41:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.192.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:b8:3a:63:9b:e3:56:65:42:3b:c2:8a:f9:76:fd:c6:2d:24: 99:47:16:dc:3e:b0:36:ba:c7:5c:68:2c:86:fe:19:34:b5:3b: f0:ab:fe:a6:60:9d:80:b7:52:98:a0:0e:10:67:cc:0d:3a:e6: b1:30:c3:a6:c3:98:a5:ec:a2:6e:a1:34:0f:20:6d:ee:6b:bf: 02:7a:65:d1:3b:b7:df:bd:6a:75:27:7a:6e:9e:82:48:ec:22: 05:06:df:42:1b:1d:1d:01:20:dd:ef:69:e2:7e:f4:e4:01:c3: 2b:42:bd:a3:af:f8:de:f5:ed:ef:6b:c3:a6:57:47:c0:e3:70: d7:1f:da:ee:30:dd:a4:51:6d:4f:74:a2:9a:68:10:1a:08:26: ea:28:8a:88:25:ae:a0:88:fa:e2:15:66:be:08:a1:07:9a:fd: d6:0e:1e:f9:40:c8:56:7b:00:96:1b:7a:c6:75:61:a4:1e:58: 62:53:dd:ff:4e:50:4c:31:1e:0c:ec:71:56:15:b1:fc:18:07: 3b:9c:a7:22:3e:f1:d8:d6:4b:8d:57:d3:98:b4:4f:d3:07:de: 3c:4b:e1:8b:64:ed:ba:a4:27:57:f2:e7:d1:59:90:37:80:40: f8:bc:ad:71:ec:09:c5:4e:71:81:fe:90:35:06:74:e2:9a:a3: 78:76:5c:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURKfQm20r1DqmYSQsaLkS7BD5I1gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEwMDAxMTAxWhcNMjcwMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWVjYzNhZWQ1Y2Y0OGI2MWMwYTg3N2VmYWFkMmRhNGYz YjgzODE2Zjk3YzliODkyYzQzNjAxYjY1MmU2OTAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAxirbOdA07L10cUYAUahVhu8THuC0plgzaqub1EQIWsLe XoUVeAzvpbr++GiFqABv8b5IqjMZ0i1koge1bU0CUlE+BeGLY7FJ+9kZ3hWrxuqI 1wj1iKg+eRx73dLuF22/QGaNAjwkWm51plo/gBmcnR6YQ5gHXPpMft4BVQ5/43pE YxXliw2RF72YSK3f+4EP6jj9wM4XxivjxEizlrHOrUC5K9QZg1fPfRbEnwL0zYrr pt5IAXbXb9BT06lghSJpqsW7J17yottDVBvkv09S6MRYhzK6q/gTTiAhwXqKqqIC sO0L51M3WisrUEzCOjc1qTiEncSEk8342vWTPOf7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyaPPdwATieiLmXBDkgJD0KabQXUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdlZTNmOWVjLTgxODktNDAxOC1hYjI1LWRiMmVkZDM5ZWEyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7sAwDQYJKoZIhvcNAQELBQADggEBAGq4OmOb41ZlQjvCivl2/cYtJJlH Ftw+sDa6x1xoLIb+GTS1O/Cr/qZgnYC3UpigDhBnzA065rEww6bDmKXsom6hNA8g be5rvwJ6ZdE7t9+9anUnem6egkjsIgUG30IbHR0BIN3vaeJ+9OQBwytCvaOv+N71 7e9rw6ZXR8DjcNcf2u4w3aRRbU90oppoEBoIJuooioglrqCI+uIVZr4IoQea/dYO HvlAyFZ7AJYbesZ1YaQeWGJT3f9OUEwxHgzscVYVsfwYBzucpyI+8djWS41X05i0 T9MH3jxL4Ytk7bqkJ1fy59FZkDeAQPi8rXHsCcVOcYH+kDUGdOKao3h2XBQ= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:52 2026 by rpki-client