$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa File: 81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa (raw, json) Hash identifier: S8tj91hz6Zp2sWpQs5GLISRbktja0b9fhmjFjIiFx5E= Subject key identifier: 99:ED:CA:64:37:C4:6A:A9:28:E4:A0:B9:75:3B:DB:49:90:56:30:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22226C358B970F0DC89AA043DED23343CB5A2867 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa Signing time: Thu 08 Oct 2026 00:30:13 +0000 ROA not before: Thu 08 Oct 2026 00:30:13 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:22:6c:35:8b:97:0f:0d:c8:9a:a0:43:de:d2:33:43:cb:5a:28:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:30:13 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=b266ba0d57e0253d38ca27aa633d5c5ab0ca5796285f15a1d8f8bd6097c68b2a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:c6:36:a6:72:ca:6d:18:2b:8a:d1:e8:a6: 85:40:f8:24:2d:c1:1b:83:bb:38:38:82:bc:b3:6d: 16:11:ca:0d:ea:98:a9:3f:7e:18:e8:50:fe:48:c7: f6:b3:51:cd:56:0c:53:ff:1e:a3:0e:6c:a3:86:c8: 79:00:3e:2d:9f:88:63:fb:85:43:73:71:44:29:fc: 38:49:6e:40:b7:85:1a:c2:ce:b8:c3:7d:bf:ca:0d: 95:4a:46:77:c0:c1:27:f2:a4:7a:58:2d:95:06:c9: 8f:61:75:b1:7d:17:c8:95:12:6b:08:24:2a:40:27: da:3e:75:6e:e2:c6:93:a9:5c:0e:6f:4d:eb:64:58: 80:1b:e8:6a:d5:29:b8:70:ef:27:06:e8:d5:80:1d: 59:f7:84:13:4d:bc:ea:2e:39:d9:9e:e0:7a:7b:f1: d8:44:9a:f8:df:ec:47:86:29:00:b3:88:b4:09:a3: 52:62:9d:63:b5:45:ef:42:52:8e:2e:78:bb:f8:eb: b1:59:8c:19:0f:f1:af:24:e8:bf:9a:fb:5d:09:f5: 8f:69:51:15:3e:e3:7f:34:34:9d:37:6f:ac:c1:4c: 29:7c:2f:2d:a9:a8:f1:0d:94:c2:af:f2:ba:93:c4: 6a:83:6c:da:a0:bd:7c:59:99:55:44:1b:7d:f1:4f: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:CA:64:37:C4:6A:A9:28:E4:A0:B9:75:3B:DB:49:90:56:30:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.88.0/22 Signature Algorithm: sha256WithRSAEncryption bd:70:10:fe:8b:fb:07:33:64:85:55:f1:56:e9:f0:59:e7:fe: 90:7c:1b:a2:ac:04:72:87:47:0d:e8:0b:c8:86:5f:96:54:53: e7:42:e0:b6:0b:87:83:52:e8:f8:40:4f:6c:8f:8d:7d:fc:b7: 1c:ff:97:8d:49:82:61:37:34:4f:ab:19:ea:d1:fb:9c:ab:3d: fd:77:12:2c:90:94:9e:33:57:85:96:f9:7c:36:16:f3:5e:57: 57:02:31:e6:28:2b:d1:28:d9:2a:80:c6:63:71:0a:5d:53:97: 68:89:d4:b3:67:0e:71:03:a1:60:14:45:01:92:58:97:14:af: b8:38:a7:a5:cf:8c:ca:ae:71:4d:66:df:33:19:46:e7:25:8a: 90:e4:57:c9:b3:67:e8:8a:3c:03:7d:79:e7:41:e3:37:29:ff: 6f:b7:f3:c2:8f:d1:5e:7c:93:a9:45:bc:b7:81:ba:c6:69:34: ad:2a:20:a9:fd:87:f1:7c:a9:f8:92:49:69:dc:a9:ac:28:0a: 02:34:fa:62:b5:95:29:f1:0c:6d:c6:06:48:8f:64:47:88:8c: 63:40:80:04:25:b5:75:d2:79:dd:84:6b:58:9d:cd:29:88:ef: 3d:b3:cf:91:58:a9:fe:63:51:08:a7:06:3f:0d:98:52:e7:77: 6d:32:4f:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIiJsNYuXDw3ImqBD3tIzQ8taKGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAzMDEzWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjY2YmEwZDU3ZTAyNTNkMzhjYTI3YWE2MzNkNWM1YWIw Y2E1Nzk2Mjg1ZjE1YTFkOGY4YmQ2MDk3YzY4YjJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+QMY2pnLKbRgritHopoVA+CQtwRuDuzg4gryzbRYRyg3q mKk/fhjoUP5Ix/azUc1WDFP/HqMObKOGyHkAPi2fiGP7hUNzcUQp/DhJbkC3hRrC zrjDfb/KDZVKRnfAwSfypHpYLZUGyY9hdbF9F8iVEmsIJCpAJ9o+dW7ixpOpXA5v TetkWIAb6GrVKbhw7ycG6NWAHVn3hBNNvOouOdme4Hp78dhEmvjf7EeGKQCziLQJ o1JinWO1Re9CUo4ueLv467FZjBkP8a8k6L+a+10J9Y9pURU+4380NJ03b6zBTCl8 Ly2pqPENlMKv8rqTxGqDbNqgvXxZmVVEG33xT7nfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUme3KZDfEaqko5KC5dTvbSZBWMDUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxODc4YjRlLTU1NWEtNDNkNC1iMGE5LWE3N2Q0YmViMzhkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAFgwDQYJKoZIhvcNAQELBQADggEBAL1wEP6L+wczZIVV8Vbp8Fnn/pB8 G6KsBHKHRw3oC8iGX5ZUU+dC4LYLh4NS6PhAT2yPjX38txz/l41JgmE3NE+rGerR +5yrPf13EiyQlJ4zV4WW+Xw2FvNeV1cCMeYoK9Eo2SqAxmNxCl1Tl2iJ1LNnDnED oWAURQGSWJcUr7g4p6XPjMqucU1m3zMZRuclipDkV8mzZ+iKPAN9eedB4zcp/2+3 88KP0V58k6lFvLeBusZpNK0qIKn9h/F8qfiSSWncqawoCgI0+mK1lSnxDG3GBkiP ZEeIjGNAgAQltXXSed2Ea1idzSmI7z2zz5FYqf5jUQinBj8NmFLnd20yT8U= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:51 2026 by rpki-client