$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b8049b4-624b-4704-b56d-196cb647a1ac.roa File: 8b8049b4-624b-4704-b56d-196cb647a1ac.roa (raw, json) Hash identifier: f68HKEddnkHh56w23jt2FHt8a+azOiP/zk+rGEOFmDc= Subject key identifier: B0:4A:B7:F1:5D:77:C3:F8:D8:E1:17:09:1C:90:AB:09:EB:FB:1D:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BD96F1B680AC1DF255A8DB6DC0BB0587845A46E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b8049b4-624b-4704-b56d-196cb647a1ac.roa Signing time: Tue 27 Oct 2026 00:10:40 +0000 ROA not before: Tue 27 Oct 2026 00:10:40 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d9:6f:1b:68:0a:c1:df:25:5a:8d:b6:dc:0b:b0:58:78:45:a4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:10:40 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=4f6dbe1a86c8fe1323f335bafe12e11901292e36889ed52cc1eee137d4aa9592, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:b5:f9:73:fb:02:dd:5e:2c:c6:82:e8:c6: 5e:63:a7:0b:fa:c3:80:c5:4d:4b:8c:58:91:03:c1: 91:8e:e2:07:33:d7:eb:aa:8a:63:37:31:73:1d:05: 83:f7:4b:b8:84:cb:9a:bd:a3:88:2b:bb:ac:c2:03: 9d:35:43:4a:7f:50:89:8a:02:ed:cc:30:eb:13:48: 10:d9:e9:4c:eb:47:0f:c7:44:a3:04:78:b4:84:5b: d3:ee:1a:d8:52:d3:0e:14:70:c9:eb:05:cf:69:a6: 99:b8:27:8e:e4:d9:d7:b4:a5:1a:1e:0f:d3:55:29: 5f:08:f5:4c:95:84:76:fd:8e:9a:bf:11:4e:eb:9d: dc:ce:01:07:a9:36:b5:f9:d2:5e:45:fd:cc:96:d2: 3d:f9:d6:27:a7:39:2d:b0:ca:63:2b:c9:98:d1:fb: 10:41:98:ec:1b:e8:e6:8f:3b:bc:d0:c9:30:1a:8c: 89:c6:16:18:13:93:ae:64:62:ab:b3:ca:0a:f4:e3: 1f:34:b9:b8:0b:0e:f7:47:1e:86:a4:86:cb:fb:6d: 85:7a:a3:7e:48:b3:1e:1f:89:1f:91:7d:50:6b:63: b3:f8:a0:ba:c6:f1:49:3f:b3:af:0b:11:5c:8c:0f: ef:11:a9:b0:b1:fe:a5:62:56:9f:75:eb:7e:ec:8e: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:B7:F1:5D:77:C3:F8:D8:E1:17:09:1C:90:AB:09:EB:FB:1D:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b8049b4-624b-4704-b56d-196cb647a1ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.16.0/21 Signature Algorithm: sha256WithRSAEncryption 51:29:c9:bf:3f:ba:7b:54:45:f6:a0:02:cf:b8:b7:24:e6:2a: de:aa:6a:d9:33:d1:18:c9:02:a8:ef:58:8b:02:a9:d4:8e:e7: 50:e1:48:e0:85:0a:98:42:81:03:07:a2:c5:93:ae:53:4a:ec: 52:7c:ac:b3:91:99:2f:2d:b4:c8:1c:e0:d0:cf:27:b0:37:e9: 2f:32:3a:82:d4:da:9e:7e:8e:2a:e1:93:0a:0a:81:2a:e9:b5: 68:84:6f:b6:0e:68:a3:5a:ee:67:6e:2b:10:f2:00:6b:43:85: d6:27:e5:f2:7c:d6:ae:b8:52:03:a0:d4:36:65:ff:c3:9b:ae: 8a:85:06:dc:7f:0c:fc:31:92:57:b1:11:04:71:18:2e:03:fc: 19:fe:e6:c1:c1:2d:1f:90:04:bb:af:9d:3b:62:5e:af:88:9d: 6c:6e:10:58:a4:b1:64:7f:b4:35:89:a3:15:31:9a:79:66:96: 4c:95:30:9d:74:b5:86:7c:c2:25:ca:51:93:b6:d5:13:e9:86: e7:de:5e:af:0e:98:d8:c5:7d:e5:f2:38:eb:76:47:02:29:a0: 3f:ab:8b:1c:65:05:09:4f:4c:49:89:41:a1:15:de:24:75:e8: 56:9b:b0:fd:26:3c:07:e0:3c:46:87:7e:42:ea:5a:34:63:8d: 1a:a7:6a:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO9lvG2gKwd8lWo223AuwWHhFpG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAxMDQwWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjZkYmUxYTg2YzhmZTEzMjNmMzM1YmFmZTEyZTExOTAx MjkyZTM2ODg5ZWQ1MmNjMWVlZTEzN2Q0YWE5NTkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQX7X5c/sC3V4sxoLoxl5jpwv6w4DFTUuMWJEDwZGO4gcz 1+uqimM3MXMdBYP3S7iEy5q9o4gru6zCA501Q0p/UImKAu3MMOsTSBDZ6UzrRw/H RKMEeLSEW9PuGthS0w4UcMnrBc9pppm4J47k2de0pRoeD9NVKV8I9UyVhHb9jpq/ EU7rndzOAQepNrX50l5F/cyW0j351ienOS2wymMryZjR+xBBmOwb6OaPO7zQyTAa jInGFhgTk65kYquzygr04x80ubgLDvdHHoakhsv7bYV6o35Isx4fiR+RfVBrY7P4 oLrG8Uk/s68LEVyMD+8RqbCx/qViVp91637sjj1dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsEq38V13w/jY4RcJHJCrCev7HakwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiODA0OWI0LTYyNGItNDcwNC1iNTZkLTE5NmNiNjQ3YTFhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgABAwDQYJKoZIhvcNAQELBQADggEBAFEpyb8/untURfagAs+4tyTmKt6q atkz0RjJAqjvWIsCqdSO51DhSOCFCphCgQMHosWTrlNK7FJ8rLORmS8ttMgc4NDP J7A36S8yOoLU2p5+jirhkwoKgSrptWiEb7YOaKNa7mduKxDyAGtDhdYn5fJ81q64 UgOg1DZl/8ObroqFBtx/DPwxklexEQRxGC4D/Bn+5sHBLR+QBLuvnTtiXq+InWxu EFiksWR/tDWJoxUxmnlmlkyVMJ10tYZ8wiXKUZO21RPphufeXq8OmNjFfeXyOOt2 RwIpoD+rixxlBQlPTEmJQaEV3iR16FabsP0mPAfgPEaHfkLqWjRjjRqnahQ= -----END CERTIFICATE-----Generated at Wed Nov 4 21:13:47 2026 by rpki-client