$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8041fc8f-db98-4bfd-8962-964aeb626728.roa File: 8041fc8f-db98-4bfd-8962-964aeb626728.roa (raw, json) Hash identifier: 85QYTpbn9rUAgfXU1MX4oa6VF+uHgC+G+yENiufmhJM= Subject key identifier: 80:56:53:5B:0E:50:0F:43:B8:A8:E8:B4:EB:9A:E7:CC:3F:E5:5A:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BB2B8B229E91DB0F7F2AFDCE99CEBEBE041DEE6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8041fc8f-db98-4bfd-8962-964aeb626728.roa Signing time: Fri 30 Oct 2026 05:22:55 +0000 ROA not before: Fri 30 Oct 2026 05:22:55 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 72.150.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b2:b8:b2:29:e9:1d:b0:f7:f2:af:dc:e9:9c:eb:eb:e0:41:de:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 30 05:22:55 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=825fa315ea7f22c693beaccb0da0f05bae0a771e14581c35f42e1e7ec6334d7a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:ea:07:fd:c2:56:f4:3f:05:97:b8:f0:ac: 79:6b:3f:6c:c9:e1:9c:6b:5a:67:4f:b3:2e:aa:61: 48:ec:1a:c0:8b:a3:76:fa:97:0f:ca:47:e0:af:e4: 2d:7b:2f:75:92:80:b7:e5:19:b4:a6:7b:67:80:bd: 5b:40:e6:4d:ec:02:bd:2f:e1:53:75:9b:5f:47:5b: d5:dd:a8:f8:be:16:fd:1f:0d:15:a2:16:b3:99:3d: f2:45:6b:c1:d0:8a:a3:c7:31:92:02:79:9a:5c:f9: 19:b5:40:12:f3:97:45:e7:91:67:4a:b1:ac:85:15: 53:0c:16:bc:ad:d9:05:28:03:3e:66:c9:0e:1b:b4: 14:c5:df:98:e9:89:54:f1:a9:5b:9d:a3:38:a6:ae: 74:60:a9:0e:49:c7:f6:c9:55:ea:d8:25:75:c9:23: 3b:46:7c:ae:db:7c:8c:2e:8a:8e:4a:27:a8:3a:e6: 3f:5a:ae:cf:48:5a:d0:ab:89:80:8d:b8:92:11:0d: 2a:1a:35:b1:de:cb:56:29:b4:08:98:69:cc:a1:f2: 12:7c:e5:ce:ed:6a:43:ba:7c:86:c9:31:3a:19:66: f3:c7:2c:f8:38:12:08:39:0c:ab:0c:6f:de:b4:40: 00:5d:b8:cd:e4:d7:62:a0:af:da:70:b9:1a:8f:cc: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:56:53:5B:0E:50:0F:43:B8:A8:E8:B4:EB:9A:E7:CC:3F:E5:5A:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8041fc8f-db98-4bfd-8962-964aeb626728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.150.20.0/24 Signature Algorithm: sha256WithRSAEncryption d3:77:94:ad:70:97:9f:e2:db:ea:73:8a:c5:f5:5e:66:bb:88: a0:5e:33:15:4a:8c:8d:fb:85:8f:89:d5:33:31:62:11:cb:43: 3f:6b:48:da:46:03:26:9d:ee:20:2a:53:5c:b1:16:e7:2f:a2: f6:55:88:1c:fc:a5:05:35:26:d0:81:fd:28:4a:a2:46:b3:32: bd:eb:1a:fa:b8:72:ea:0a:31:81:8c:e8:67:c2:d2:78:9c:08: 12:d1:3b:f8:18:6e:ba:63:00:b2:5c:6c:7b:41:8a:df:63:a0: 86:cd:4b:07:0e:cf:88:de:b3:d6:60:b3:0f:49:2f:59:33:cc: 56:7a:e1:98:ce:ec:58:cf:9f:da:f4:37:1b:1b:23:a0:15:f0: c0:bb:15:60:c6:6f:82:d2:2b:ba:16:b8:4c:25:d8:29:c9:28: d6:d9:71:dc:b1:34:af:5e:b4:21:a7:2b:6b:4e:f5:46:85:d8: 27:8e:9a:87:13:3c:fc:da:6f:c7:4a:98:e0:f5:1f:90:02:90: c6:c4:1c:a4:5a:f8:a2:f2:1e:df:b2:e9:17:94:47:79:34:a7: ca:46:c0:ad:96:dd:b0:79:dd:ac:85:06:fd:20:2c:2c:92:6f: 50:4e:4b:9c:fb:de:e2:ca:87:2e:f0:e0:48:25:a6:3d:a7:8a: 89:4f:c1:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK7K4sinpHbD38q/c6Zzr6+BB3uYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDMwMDUyMjU1WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjVmYTMxNWVhN2YyMmM2OTNiZWFjY2IwZGEwZjA1YmFl MGE3NzFlMTQ1ODFjMzVmNDJlMWU3ZWM2MzM0ZDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkQeoH/cJW9D8Fl7jwrHlrP2zJ4ZxrWmdPsy6qYUjsGsCL o3b6lw/KR+Cv5C17L3WSgLflGbSme2eAvVtA5k3sAr0v4VN1m19HW9XdqPi+Fv0f DRWiFrOZPfJFa8HQiqPHMZICeZpc+Rm1QBLzl0XnkWdKsayFFVMMFryt2QUoAz5m yQ4btBTF35jpiVTxqVudozimrnRgqQ5Jx/bJVerYJXXJIztGfK7bfIwuio5KJ6g6 5j9ars9IWtCriYCNuJIRDSoaNbHey1YptAiYacyh8hJ85c7takO6fIbJMToZZvPH LPg4Egg5DKsMb960QABduM3k12Kgr9pwuRqPzBIVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgFZTWw5QD0O4qOi065rnzD/lWj4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwNDFmYzhmLWRiOTgtNGJmZC04OTYyLTk2NGFlYjYyNjcyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABIlhQwDQYJKoZIhvcNAQELBQADggEBANN3lK1wl5/i2+pzisX1Xma7iKBe MxVKjI37hY+J1TMxYhHLQz9rSNpGAyad7iAqU1yxFucvovZViBz8pQU1JtCB/ShK okazMr3rGvq4cuoKMYGM6GfC0nicCBLRO/gYbrpjALJcbHtBit9joIbNSwcOz4je s9Zgsw9JL1kzzFZ64ZjO7FjPn9r0NxsbI6AV8MC7FWDGb4LSK7oWuEwl2CnJKNbZ cdyxNK9etCGnK2tO9UaF2CeOmocTPPzab8dKmOD1H5ACkMbEHKRa+KLyHt+y6ReU R3k0p8pGwK2W3bB53ayFBv0gLCySb1BOS5z73uLKhy7w4Eglpj2niolPwcg= -----END CERTIFICATE-----Generated at Wed Nov 4 05:32:39 2026 by rpki-client