$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa File: 88612825-39ba-446a-a645-27d9ef61fe28.roa (raw, json) Hash identifier: oKCW4bBcFEaoDhlpWYXwzOl2Uu6lYObk48UzDxoKJgk= Subject key identifier: 35:68:A8:C5:6B:89:9B:0E:EF:D6:77:88:5E:1B:FA:6D:83:D1:AA:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 730267542F96DD3012B272F03F4E3B85904822CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa Signing time: Mon 26 Oct 2026 00:40:57 +0000 ROA not before: Mon 26 Oct 2026 00:40:57 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 198.52.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:02:67:54:2f:96:dd:30:12:b2:72:f0:3f:4e:3b:85:90:48:22:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:40:57 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=26840cb9c641ffd3bdc51caca0d478431883ac941416f5af97f89ad3a2762ece, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:7c:9f:4d:6c:d2:98:d0:4e:fd:a7:ea:99: a3:13:20:44:a5:1e:33:54:ca:e7:ad:d4:fe:73:e0: 6e:f8:43:f8:ab:a8:4f:17:ba:49:3a:17:15:d0:fa: 66:5f:9b:5a:e3:cf:35:cc:c4:bc:09:ca:8c:e0:4e: ef:af:a2:8d:74:3b:48:f7:a6:43:75:6c:6d:62:01: df:eb:25:24:b5:d2:f0:cf:38:ce:e4:07:c3:7d:56: 34:27:27:93:be:cd:00:29:99:a0:91:12:55:a1:db: 17:20:e0:eb:b8:da:4f:ef:ed:1d:0f:d3:3a:9c:37: 9d:f4:b1:66:fd:a2:19:d5:5b:15:59:ec:28:76:90: 1c:94:07:a8:4f:e9:b3:67:99:1d:70:b0:57:23:72: c4:f7:d7:04:ef:d5:5e:0a:09:fb:7c:d1:c4:c2:27: 84:0c:cc:e6:9c:c3:d5:54:18:eb:ad:47:5b:8b:a5: 57:48:0a:41:ed:19:d4:9f:1a:96:9e:5b:09:3a:c8: b3:76:1d:4b:48:3f:e2:33:57:b2:18:fc:d1:dd:b6: 9a:35:a2:0e:81:ac:78:61:00:10:52:08:98:09:4d: 15:db:93:fc:e6:3a:9a:e0:14:68:bc:9c:0d:ea:14: 34:82:c5:8b:35:30:5f:55:ca:6e:8d:db:78:15:3d: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:68:A8:C5:6B:89:9B:0E:EF:D6:77:88:5E:1B:FA:6D:83:D1:AA:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.52.96.0/19 Signature Algorithm: sha256WithRSAEncryption 69:11:51:c2:6b:b5:06:1b:70:bc:9b:2e:ef:d3:c4:d1:d2:9a: 79:06:8b:6a:2f:e2:f1:f7:3c:71:82:8f:d4:12:32:42:d7:0b: 1d:3f:3b:83:8c:c7:52:eb:e5:05:09:6a:55:dd:b1:8d:34:36: 36:a8:e4:ae:9b:90:92:23:30:c1:93:f6:24:5d:f5:9f:b5:de: 03:1a:29:5a:50:c0:d5:73:49:e8:ea:fd:b3:83:ca:19:00:11: 6d:5c:1e:5b:29:71:74:0c:99:10:1e:c7:9d:d9:82:9b:e9:37: 8e:ce:52:ea:d4:82:f2:81:d3:9b:48:60:ee:c2:d0:68:a1:ff: e0:e3:60:a9:fc:0f:9d:29:e1:c4:5d:2e:5c:07:5b:63:51:64: e2:92:65:4b:7d:9b:73:e0:15:85:bd:38:ed:6d:64:e4:53:b0: 6f:88:16:e3:62:4e:9b:5d:9b:8e:42:6b:1b:dd:0c:0e:d4:a9: 50:1b:9a:40:8d:d3:8d:3c:1f:77:d6:c2:9e:1d:f3:1d:ef:ee: ae:2b:c1:bb:fc:59:f6:6c:15:4f:a2:cd:46:e1:de:15:ef:34: 9b:04:4c:b4:20:4f:70:48:4f:26:53:bf:be:24:c9:b1:c4:40: 7f:8a:8f:f4:44:3d:ef:81:a8:16:02:0c:c5:ba:38:5a:b8:16: e4:1e:24:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcwJnVC+W3TASsnLwP047hZBIIs8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDA0MDU3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjg0MGNiOWM2NDFmZmQzYmRjNTFjYWNhMGQ0Nzg0MzE4 ODNhYzk0MTQxNmY1YWY5N2Y4OWFkM2EyNzYyZWNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyMXyfTWzSmNBO/afqmaMTIESlHjNUyuet1P5z4G74Q/ir qE8Xukk6FxXQ+mZfm1rjzzXMxLwJyozgTu+voo10O0j3pkN1bG1iAd/rJSS10vDP OM7kB8N9VjQnJ5O+zQApmaCRElWh2xcg4Ou42k/v7R0P0zqcN530sWb9ohnVWxVZ 7Ch2kByUB6hP6bNnmR1wsFcjcsT31wTv1V4KCft80cTCJ4QMzOacw9VUGOutR1uL pVdICkHtGdSfGpaeWwk6yLN2HUtIP+IzV7IY/NHdtpo1og6BrHhhABBSCJgJTRXb k/zmOprgFGi8nA3qFDSCxYs1MF9Vym6N23gVPToVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNWioxWuJmw7v1neIXhv6bYPRqvowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4NjEyODI1LTM5YmEtNDQ2YS1hNjQ1LTI3ZDllZjYxZmUyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGNGAwDQYJKoZIhvcNAQELBQADggEBAGkRUcJrtQYbcLybLu/TxNHSmnkG i2ov4vH3PHGCj9QSMkLXCx0/O4OMx1Lr5QUJalXdsY00Njao5K6bkJIjMMGT9iRd 9Z+13gMaKVpQwNVzSejq/bODyhkAEW1cHlspcXQMmRAex53ZgpvpN47OUurUgvKB 05tIYO7C0Gih/+DjYKn8D50p4cRdLlwHW2NRZOKSZUt9m3PgFYW9OO1tZORTsG+I FuNiTptdm45CaxvdDA7UqVAbmkCN0408H3fWwp4d8x3v7q4rwbv8WfZsFU+izUbh 3hXvNJsETLQgT3BITyZTv74kybHEQH+Kj/REPe+BqBYCDMW6OFq4FuQeJA8= -----END CERTIFICATE-----Generated at Tue Nov 3 12:04:42 2026 by rpki-client