$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa File: 811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa (raw, json) Hash identifier: YJLv1mHIqT9/MLVfHcY74jjsx3+E++h7WnXmVlG0PPw= Subject key identifier: 20:21:BF:8B:2A:6D:06:95:BD:DA:3A:7F:2F:43:1B:CF:C6:39:90:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26F10FAFF7C7809C6D1CA4848C8CD13CB4BF6268 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa Signing time: Mon 05 Oct 2026 00:10:38 +0000 ROA not before: Mon 05 Oct 2026 00:10:38 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f1:0f:af:f7:c7:80:9c:6d:1c:a4:84:8c:8c:d1:3c:b4:bf:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:10:38 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=d106f56792a0d896b9f560be13c795df8b392540c9c6b72c1617cf5212dd8e2d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:13:c0:92:74:2b:3e:dd:a9:a1:9b:51:59:e8: c8:51:f1:38:06:1c:52:6b:7d:99:0e:c1:52:92:a3: fe:a7:7e:08:34:e0:32:67:19:f7:f0:70:82:55:0a: f0:a4:43:8d:3e:3f:0c:f1:5a:50:d3:2a:75:fe:00: 42:ac:4b:c6:1a:82:e9:eb:e2:99:7e:3a:15:4a:19: 4f:9c:24:1a:be:76:7e:5b:1b:6e:2e:8a:36:0f:9d: 66:d6:26:cc:04:6b:85:cf:28:0a:c2:15:23:d0:ac: 89:12:9d:c1:40:1e:77:af:f6:86:fa:92:e7:5c:f0: ad:aa:d2:e4:11:6a:9b:17:25:bc:5b:c8:56:a8:52: a6:11:0e:9d:57:fd:13:92:74:1c:01:de:8e:1d:88: 22:62:5a:11:5c:1b:fd:20:fa:9e:c8:f5:4d:ef:c6: b4:47:f5:7e:3c:f3:36:3b:51:cf:72:fa:c8:62:84: f9:d5:b1:a1:54:bb:57:4b:2b:00:0f:c0:95:b0:ae: a3:20:ac:e7:40:18:32:18:92:48:5f:95:b3:7c:5f: 03:af:ec:19:3a:e1:ba:f9:26:82:d0:89:d3:8e:98: da:2d:87:b6:f9:c2:58:14:bf:d0:7d:e1:0e:2f:65: 59:c8:09:72:b3:da:8c:aa:0d:be:87:f2:8e:57:31: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:21:BF:8B:2A:6D:06:95:BD:DA:3A:7F:2F:43:1B:CF:C6:39:90:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.92.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7e:05:9b:e4:72:85:25:89:c7:bd:76:fc:25:c3:9e:07:6e:a3: 67:e6:8b:17:2e:9e:dc:5c:eb:dd:b4:db:83:e8:f7:11:9d:a1: fb:c1:3b:20:3c:c9:12:f9:f6:35:6f:41:b9:4f:56:0b:b7:14: 82:9a:45:fd:8e:b8:44:9f:ae:c8:ab:9f:d9:55:fe:87:3c:3b: 15:4f:58:a3:47:93:99:b8:48:17:e3:6d:2f:0c:ab:42:78:46: c5:97:58:57:f8:f5:2f:a8:ca:35:22:ea:95:47:ec:60:99:5d: 16:13:16:7a:8d:1a:b5:e0:50:8b:6f:64:2e:c5:4e:59:25:a8: 8f:31:cd:ec:7a:4c:eb:c4:b6:55:0e:20:5a:38:db:5e:b9:5b: b8:c2:f2:5d:f5:5a:9e:b6:01:67:97:ed:61:bc:96:b4:84:a8: 2c:2d:28:b8:4b:c3:a1:bd:61:1a:cf:45:e9:72:f7:cc:74:89: 19:e5:35:bb:30:5c:f4:7a:31:8c:08:90:10:16:0b:38:81:33: b7:58:bd:5a:26:38:f0:c6:6d:37:d8:67:dd:e0:41:4f:c7:70: a0:9e:5d:80:cc:e1:75:a6:a9:17:ed:10:c3:60:cc:b1:aa:14: 43:57:58:1d:ca:a1:3f:46:ac:a6:69:87:fd:55:ad:b3:da:1c: 95:b1:d4:80 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJvEPr/fHgJxtHKSEjIzRPLS/YmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAxMDM4WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTA2ZjU2NzkyYTBkODk2YjlmNTYwYmUxM2M3OTVkZjhi MzkyNTQwYzljNmI3MmMxNjE3Y2Y1MjEyZGQ4ZTJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTE8CSdCs+3amhm1FZ6MhR8TgGHFJrfZkOwVKSo/6nfgg0 4DJnGffwcIJVCvCkQ40+PwzxWlDTKnX+AEKsS8Yagunr4pl+OhVKGU+cJBq+dn5b G24uijYPnWbWJswEa4XPKArCFSPQrIkSncFAHnev9ob6kudc8K2q0uQRapsXJbxb yFaoUqYRDp1X/ROSdBwB3o4diCJiWhFcG/0g+p7I9U3vxrRH9X488zY7Uc9y+shi hPnVsaFUu1dLKwAPwJWwrqMgrOdAGDIYkkhflbN8XwOv7Bk64br5JoLQidOOmNot h7b5wlgUv9B94Q4vZVnICXKz2oyqDb6H8o5XMQg/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUICG/iyptBpW92jp/L0Mbz8Y5kBQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxMWZjYTEzLWI0MGEtNGZiMS1iYzdjLTZjNTk5NjM3ZmQyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQXDANBgkqhkiG9w0BAQsFAAOCAQEAfgWb5HKFJYnHvXb8JcOeB26jZ+aL Fy6e3Fzr3bTbg+j3EZ2h+8E7IDzJEvn2NW9BuU9WC7cUgppF/Y64RJ+uyKuf2VX+ hzw7FU9Yo0eTmbhIF+NtLwyrQnhGxZdYV/j1L6jKNSLqlUfsYJldFhMWeo0ateBQ i29kLsVOWSWojzHN7HpM68S2VQ4gWjjbXrlbuMLyXfVanrYBZ5ftYbyWtISoLC0o uEvDob1hGs9F6XL3zHSJGeU1uzBc9HoxjAiQEBYLOIEzt1i9WiY48MZtN9hn3eBB T8dwoJ5dgMzhdaapF+0Qw2DMsaoUQ1dYHcqhP0aspmmH/VWts9oclbHUgA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:30 2026 by rpki-client