$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa File: 81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa (raw, json) Hash identifier: LXgfAvZCTRSwuYJn9tQvJhNtXLUddv1UZqpF2S78tjA= Subject key identifier: 7C:67:FF:86:E4:3E:D8:7B:8E:9B:37:21:FD:55:E7:D7:BF:42:B7:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68E89B6814200C5529039250ADCDB89FD979F940 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa Signing time: Thu 08 Oct 2026 00:31:50 +0000 ROA not before: Thu 08 Oct 2026 00:31:50 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 99.77.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e8:9b:68:14:20:0c:55:29:03:92:50:ad:cd:b8:9f:d9:79:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:31:50 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=e2be50502dba444067f6192eb8293ceeb2120c0b663c56c9a17602707b53ad2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:63:a7:a5:a5:39:53:83:69:99:c2:4e:f9: 01:89:c6:65:8d:74:b0:b6:d9:5b:52:d0:fc:c0:30: 36:e7:d7:da:b0:5a:55:ad:e1:b0:6a:66:9b:b5:38: 3b:8f:cf:e0:2d:82:e5:9a:68:d5:4b:26:76:27:4a: 95:30:9c:e1:bc:d6:d3:03:2a:8a:17:0f:c5:1a:89: 15:da:05:c5:ff:65:d6:fb:d1:7f:73:bf:e3:cf:fe: 6d:bd:66:82:17:db:ce:00:25:16:60:a3:24:df:29: 76:65:a4:f5:4e:27:85:ae:7e:d8:af:8e:fb:ea:1b: c9:35:8d:6f:f6:32:76:99:d2:07:3a:0e:6e:7a:93: 52:f5:5a:c9:0b:ad:33:8c:2b:d3:32:b4:4a:77:6c: 84:c2:b0:d9:fc:e6:d8:b1:52:ff:e0:9a:f2:33:c9: e4:d0:b8:93:9d:ad:74:5b:2b:70:db:6a:38:f9:a2: dc:7a:23:43:d6:2a:30:bf:e4:81:3e:d0:6d:34:e3: 54:10:1d:7a:1e:82:b9:05:7c:22:05:f8:f4:8f:9a: da:bb:ba:92:df:ed:9f:d7:8c:1a:8c:31:c8:fe:e6: 34:d2:ae:50:c1:d1:ee:2a:d0:a3:56:e0:36:60:b0: b2:35:db:37:e3:70:33:b9:97:cd:51:77:d2:53:7e: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:67:FF:86:E4:3E:D8:7B:8E:9B:37:21:FD:55:E7:D7:BF:42:B7:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.183.0/24 Signature Algorithm: sha256WithRSAEncryption c5:31:00:3f:40:61:31:2d:74:a5:e5:23:25:d9:07:42:3c:98: c9:e3:9b:62:c1:1d:9d:65:0f:2b:4a:8d:55:7a:0d:7c:23:29: b3:d5:c5:4a:69:f5:7f:7b:aa:00:b6:45:ce:e0:a7:67:0a:e6: 17:77:23:22:1e:6c:81:d8:a6:b7:a5:16:04:15:00:48:2d:7a: 4d:47:e6:7a:be:a1:a6:89:f4:63:79:d2:94:d0:ee:8e:ab:e1: bd:45:30:47:09:ea:2e:74:1e:62:e4:80:76:a2:c8:49:c3:0c: 94:ff:15:00:f9:a6:fa:36:4b:f2:e2:a7:0b:61:e5:60:b0:2e: ba:13:f7:8f:9c:96:f3:01:60:4b:a8:ef:e7:7e:2c:42:59:d2: 7b:fc:57:3a:16:94:2e:1a:5f:92:9d:3d:fa:f9:60:80:cf:c2: e1:99:4f:41:70:13:f8:6d:13:df:c6:08:28:67:aa:e1:a6:60: 1a:66:2d:60:1c:13:5f:53:e1:92:00:cd:e1:9e:3c:c5:a3:4e: 29:b4:28:a2:db:90:96:35:52:53:5d:f0:78:08:a8:77:a8:94: 9c:ef:f7:5c:7f:e7:17:a9:89:bb:38:e1:3f:00:e0:e3:42:7f: bc:dc:38:93:c7:b5:dd:f6:9a:3c:2c:6f:7a:fe:08:31:dc:0f: 19:4e:4f:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaOibaBQgDFUpA5JQrc24n9l5+UAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAzMTUwWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmJlNTA1MDJkYmE0NDQwNjdmNjE5MmViODI5M2NlZWIy MTIwYzBiNjYzYzU2YzlhMTc2MDI3MDdiNTNhZDJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYz2OnpaU5U4NpmcJO+QGJxmWNdLC22VtS0PzAMDbn19qw WlWt4bBqZpu1ODuPz+AtguWaaNVLJnYnSpUwnOG81tMDKooXD8UaiRXaBcX/Zdb7 0X9zv+PP/m29ZoIX284AJRZgoyTfKXZlpPVOJ4WuftivjvvqG8k1jW/2MnaZ0gc6 Dm56k1L1WskLrTOMK9MytEp3bITCsNn85tixUv/gmvIzyeTQuJOdrXRbK3Dbajj5 otx6I0PWKjC/5IE+0G0041QQHXoegrkFfCIF+PSPmtq7upLf7Z/XjBqMMcj+5jTS rlDB0e4q0KNW4DZgsLI12zfjcDO5l81Rd9JTftkVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfGf/huQ+2HuOmzch/VXn179CtyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxYTVjMDUxLWI5ZDgtNGYyNC04OGNjLTgyNDllMWQyZTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTbcwDQYJKoZIhvcNAQELBQADggEBAMUxAD9AYTEtdKXlIyXZB0I8mMnj m2LBHZ1lDytKjVV6DXwjKbPVxUpp9X97qgC2Rc7gp2cK5hd3IyIebIHYprelFgQV AEgtek1H5nq+oaaJ9GN50pTQ7o6r4b1FMEcJ6i50HmLkgHaiyEnDDJT/FQD5pvo2 S/Lipwth5WCwLroT94+clvMBYEuo7+d+LEJZ0nv8VzoWlC4aX5KdPfr5YIDPwuGZ T0FwE/htE9/GCChnquGmYBpmLWAcE19T4ZIAzeGePMWjTim0KKLbkJY1UlNd8HgI qHeolJzv91x/5xepibs44T8A4ONCf7zcOJPHtd32mjwsb3r+CDHcDxlOTyM= -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:47 2026 by rpki-client