$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa File: 881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa (raw, json) Hash identifier: 4qubHopmBEUcESky3lOcOBN5qd1kdLV9jStUrx+Av2A= Subject key identifier: FF:D3:37:98:5F:7B:CF:7B:99:15:C8:1C:6C:7D:8E:EA:0D:5A:C1:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A14D574C35E2A1B3C517B4C8C9F3CE21BACE74D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa Signing time: Sat 24 Oct 2026 00:20:12 +0000 ROA not before: Sat 24 Oct 2026 00:20:12 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 72.44.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:14:d5:74:c3:5e:2a:1b:3c:51:7b:4c:8c:9f:3c:e2:1b:ac:e7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:20:12 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=a33277b3810725eec0c0fde0779372dd1ec7080641355b8418c4ac8bc456df54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:b1:8d:99:6a:7a:e0:22:0e:b7:f0:5f:37: 9e:a6:42:d2:3b:2f:bf:ed:be:b0:2a:c8:1d:47:d9: 77:40:57:8f:9b:73:75:ab:25:ad:66:e9:30:6d:d0: 2c:25:0d:d0:a8:a9:7b:70:56:41:90:e2:79:47:86: 32:46:6a:93:4f:b8:e3:d8:be:e0:83:21:43:8d:fc: 27:8b:be:74:92:1d:47:dd:ec:2a:89:a0:10:a3:2f: 1e:d8:58:64:78:03:58:e4:ec:88:54:59:b7:01:7d: 89:37:e0:3f:bf:bb:e3:2a:ac:cc:1a:af:b5:8c:d9: fc:1c:bf:a0:be:be:3b:bd:f8:19:88:db:30:23:f6: 46:c0:0b:17:ad:0c:7b:39:ff:51:7a:a5:1b:91:ae: 11:84:2f:5c:d7:06:64:06:74:cd:30:04:d3:58:67: aa:7f:c6:32:e2:df:be:3d:07:a0:ae:10:77:01:d1: f1:cd:aa:98:b3:4a:7d:94:23:ef:df:54:ad:64:09: 6f:f8:de:f7:b1:f4:fb:9e:76:ed:98:91:07:29:ee: 0b:cd:da:b6:48:9e:23:57:5a:06:27:fb:4d:37:dc: ef:27:71:c9:e9:50:04:6e:ad:09:70:e0:da:51:e0: ae:09:5e:eb:f4:99:fa:4e:71:79:01:52:ad:4f:63: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:37:98:5F:7B:CF:7B:99:15:C8:1C:6C:7D:8E:EA:0D:5A:C1:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.40.0/21 Signature Algorithm: sha256WithRSAEncryption 70:3e:1e:e1:04:5a:f0:15:c3:07:a0:fa:aa:cf:31:31:30:f8: 5f:53:0a:38:63:b9:9e:6e:c7:d1:b9:db:2d:45:e9:6b:6c:9e: a0:13:ce:25:e7:90:64:7f:31:b4:e2:2e:a6:cf:68:38:d3:77: a7:a3:37:63:c3:8f:89:9c:0e:68:83:ae:03:99:d8:b3:76:38: a9:34:59:dc:51:45:24:a5:13:b8:19:de:77:b5:fb:ef:bb:4d: f4:e4:a1:9d:94:b2:3c:2a:4b:b5:40:03:a5:cb:f7:56:e2:a3: 60:da:50:d8:66:98:ba:4e:f6:8a:4c:12:1c:8c:3a:49:40:8b: 16:a7:82:cc:ea:51:81:dd:0d:30:72:f4:41:b9:a1:ce:51:a6: a7:12:36:12:7a:b4:68:ea:b5:ff:6d:91:b2:b8:50:ca:47:80: 09:c6:0c:88:ee:b1:2e:df:98:49:5f:f2:97:39:da:62:3c:a5: 3a:bc:38:b1:f1:33:46:c5:c7:7a:eb:31:36:78:a5:8d:a5:57: 9a:0a:59:11:69:08:76:a8:37:07:68:53:b4:4b:8a:f9:63:f9: 53:38:2a:a1:ad:8d:02:17:0a:98:5e:d9:fe:3e:99:d4:0f:35: 38:bd:e0:07:25:90:f5:d9:e5:46:b8:00:9c:13:1c:d0:15:68: 2c:cc:61:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUShTVdMNeKhs8UXtMjJ884hus500wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAyMDEyWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzMyNzdiMzgxMDcyNWVlYzBjMGZkZTA3NzkzNzJkZDFl YzcwODA2NDEzNTViODQxOGM0YWM4YmM0NTZkZjU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmsrGNmWp64CIOt/BfN56mQtI7L7/tvrAqyB1H2XdAV4+b c3WrJa1m6TBt0CwlDdCoqXtwVkGQ4nlHhjJGapNPuOPYvuCDIUON/CeLvnSSHUfd 7CqJoBCjLx7YWGR4A1jk7IhUWbcBfYk34D+/u+MqrMwar7WM2fwcv6C+vju9+BmI 2zAj9kbACxetDHs5/1F6pRuRrhGEL1zXBmQGdM0wBNNYZ6p/xjLi3749B6CuEHcB 0fHNqpizSn2UI+/fVK1kCW/43vex9Puedu2YkQcp7gvN2rZIniNXWgYn+0033O8n ccnpUARurQlw4NpR4K4JXuv0mfpOcXkBUq1PY0jHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/9M3mF97z3uZFcgcbH2O6g1awbkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4MWM2YjliLTU5NGQtNGVlNy1hNmQxLWIxZTllNmFlOTM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANILCgwDQYJKoZIhvcNAQELBQADggEBAHA+HuEEWvAVwweg+qrPMTEw+F9T CjhjuZ5ux9G52y1F6WtsnqATziXnkGR/MbTiLqbPaDjTd6ejN2PDj4mcDmiDrgOZ 2LN2OKk0WdxRRSSlE7gZ3ne1+++7TfTkoZ2UsjwqS7VAA6XL91bio2DaUNhmmLpO 9opMEhyMOklAixangszqUYHdDTBy9EG5oc5RpqcSNhJ6tGjqtf9tkbK4UMpHgAnG DIjusS7fmElf8pc52mI8pTq8OLHxM0bFx3rrMTZ4pY2lV5oKWRFpCHaoNwdoU7RL ivlj+VM4KqGtjQIXCphe2f4+mdQPNTi94AclkPXZ5Ua4AJwTHNAVaCzMYSw= -----END CERTIFICATE-----Generated at Mon Nov 2 16:48:46 2026 by rpki-client