$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa File: 8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa (raw, json) Hash identifier: fdsc8l+/6W8Zg8hNAHXfHjpQ5sSRjyivOypK/nCRdWM= Subject key identifier: 1B:2B:0B:AA:3E:0D:1E:F7:10:9C:2B:E3:34:A2:69:47:5B:6D:E9:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 567A00D9D15A66FCE6D1A690747A47CF12D1B34C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa Signing time: Fri 23 Oct 2026 01:21:14 +0000 ROA not before: Fri 23 Oct 2026 01:21:14 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.22.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7a:00:d9:d1:5a:66:fc:e6:d1:a6:90:74:7a:47:cf:12:d1:b3:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:21:14 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=92371061404c1ae9b4e528e3d0129246813250a7421331be0c152ab1f98c3667, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:41:c7:c0:88:98:ae:aa:0a:5d:f8:6d:66: de:f2:ea:52:ad:3f:f0:17:10:45:2a:ad:7d:fb:19: 78:46:81:7f:59:11:92:29:dc:f8:18:a3:f2:37:49: 4e:30:a8:47:fc:2f:0a:01:74:6e:61:a6:1d:61:22: f0:92:72:a6:54:be:94:76:75:b2:8d:d5:74:af:02: e1:ed:93:4c:5d:25:66:b4:f5:70:86:8a:98:c6:95: 9b:b3:15:a0:52:81:c7:b0:a6:94:51:4f:8b:8b:9c: ba:b6:c1:9c:99:07:4b:0b:15:95:a3:e4:e7:aa:17: e0:b3:e7:08:19:ad:51:f0:7f:05:ad:27:9e:84:2c: fa:71:24:19:11:e2:24:cf:70:bf:e5:78:df:a9:e8: dc:04:b1:e8:c3:4e:51:94:33:99:c7:59:0b:f4:42: b9:52:b0:e7:94:71:91:08:7d:56:56:13:5d:6c:89: 54:20:be:26:54:57:57:96:77:06:5a:a5:0b:0a:0a: 06:42:25:c1:df:55:c9:4b:11:71:5a:9b:4e:28:0d: 8c:e8:ea:00:dd:b6:e5:3e:46:ba:6c:fb:c5:22:08: 72:b3:b9:af:d2:78:52:c0:15:6f:ab:ed:62:6b:c6: f7:16:dc:6d:d5:8b:50:88:19:61:d3:bd:6c:0a:b5: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2B:0B:AA:3E:0D:1E:F7:10:9C:2B:E3:34:A2:69:47:5B:6D:E9:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.64.0/21 Signature Algorithm: sha256WithRSAEncryption ad:2f:50:5a:a2:20:9f:91:e2:0a:88:5d:23:d5:cb:14:b9:ac: 82:3e:e7:6b:e4:91:73:43:e5:e4:f5:41:44:ab:85:62:6c:3a: cb:6a:82:4c:9a:c7:fa:d7:7a:3e:f5:b2:e7:f1:02:d9:5c:39: 73:55:05:20:d4:a0:88:1a:88:50:d6:64:04:d4:3d:2a:8e:8e: 4c:3b:d6:9e:50:82:9c:fc:82:93:b6:66:d0:38:6e:5b:cd:dc: 25:73:41:55:3f:cc:4f:0f:22:9b:61:42:2e:95:27:58:9e:84: b0:9a:fc:fa:cb:3e:58:0a:0f:b8:1a:e2:b1:1c:cd:3b:85:68: fd:24:96:39:c6:da:b1:84:59:72:3b:c7:6a:bc:42:97:a9:4a: 47:a9:3c:8d:de:45:c6:72:f5:21:79:fb:df:36:f4:73:27:a4: c7:91:c7:7d:95:e8:2a:a8:e8:00:f8:61:14:fb:f7:79:13:3d: 57:a9:06:d4:bc:76:8a:20:80:b9:9c:23:95:4e:b2:d6:20:6b: 20:85:40:83:c4:e4:94:43:03:ac:28:f6:93:0f:9d:ed:f2:2d: 91:14:32:f6:90:6a:ee:02:cc:2e:ec:d2:80:8d:d4:60:cc:0f: d0:19:db:90:54:23:f6:2e:26:76:8b:12:53:28:76:b4:ae:7f: 67:b8:8e:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVnoA2dFaZvzm0aaQdHpHzxLRs0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEyMTE0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjM3MTA2MTQwNGMxYWU5YjRlNTI4ZTNkMDEyOTI0Njgx MzI1MGE3NDIxMzMxYmUwYzE1MmFiMWY5OGMzNjY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1d0HHwIiYrqoKXfhtZt7y6lKtP/AXEEUqrX37GXhGgX9Z EZIp3PgYo/I3SU4wqEf8LwoBdG5hph1hIvCScqZUvpR2dbKN1XSvAuHtk0xdJWa0 9XCGipjGlZuzFaBSgcewppRRT4uLnLq2wZyZB0sLFZWj5OeqF+Cz5wgZrVHwfwWt J56ELPpxJBkR4iTPcL/leN+p6NwEsejDTlGUM5nHWQv0QrlSsOeUcZEIfVZWE11s iVQgviZUV1eWdwZapQsKCgZCJcHfVclLEXFam04oDYzo6gDdtuU+Rrps+8UiCHKz ua/SeFLAFW+r7WJrxvcW3G3Vi1CIGWHTvWwKtSx3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGysLqj4NHvcQnCvjNKJpR1tt6f4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkMjc2NTlhLTk5YjgtNGYxMi04ZTEwLTgxYzdiYzJjZjdiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMXFkAwDQYJKoZIhvcNAQELBQADggEBAK0vUFqiIJ+R4gqIXSPVyxS5rII+ 52vkkXND5eT1QUSrhWJsOstqgkyax/rXej71sufxAtlcOXNVBSDUoIgaiFDWZATU PSqOjkw71p5Qgpz8gpO2ZtA4blvN3CVzQVU/zE8PIpthQi6VJ1iehLCa/PrLPlgK D7ga4rEczTuFaP0kljnG2rGEWXI7x2q8QpepSkepPI3eRcZy9SF5+9829HMnpMeR x32V6Cqo6AD4YRT793kTPVepBtS8dooggLmcI5VOstYgayCFQIPE5JRDA6wo9pMP ne3yLZEUMvaQau4CzC7s0oCN1GDMD9AZ25BUI/YuJnaLElModrSuf2e4jtc= -----END CERTIFICATE-----Generated at Mon Nov 2 14:54:21 2026 by rpki-client