$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa File: 8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa (raw, json) Hash identifier: amsWIIYEwv3i8CpHaJXB9gvddL6Qx+VSCmquG0lHihc= Subject key identifier: 11:46:F3:E6:1D:2D:46:49:BB:1B:40:6F:DB:EC:AF:A5:69:32:1E:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58DE5A6311DD88DAB5118F96B81D1989AA9B799A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa Signing time: Thu 22 Oct 2026 00:20:10 +0000 ROA not before: Thu 22 Oct 2026 00:20:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:de:5a:63:11:dd:88:da:b5:11:8f:96:b8:1d:19:89:aa:9b:79:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 00:20:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=4b2cb545b5b609ead3daef30c42f4e9bf226199a1fe3c08223dc9794052d430c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:d6:e6:47:b4:ae:3c:9b:0e:4e:60:79:9b: 9c:8c:df:26:b5:40:a1:bf:ad:1d:0a:26:1f:42:25: 07:cd:f0:fd:e7:05:a6:00:be:ee:64:ee:2e:6c:27: 2a:76:b4:40:33:17:ac:f1:b2:b9:3f:e9:7a:86:55: 4c:67:7a:0b:03:25:cb:12:15:df:29:32:34:a5:06: 99:3b:cf:99:24:0a:a7:bb:7c:c9:98:31:7f:e4:43: 93:ca:c5:2f:1f:ec:23:00:8e:72:c7:4c:f6:95:d2: 43:b2:a6:af:2a:71:74:73:52:f3:c1:c9:9a:8e:11: 20:6f:1a:c1:e2:a9:65:72:a3:30:3a:c3:f8:b2:22: 82:cd:c6:fe:be:31:c4:c7:14:bb:2e:06:29:47:24: 6c:d8:05:1f:24:c4:21:3a:90:a6:9e:f6:17:89:30: 1e:6b:b5:ac:ce:03:41:bb:1d:da:6e:b7:b2:d0:e6: f6:e8:2d:72:bd:91:65:2e:16:14:a9:cf:c5:ba:0c: 7f:39:1c:2d:25:ec:d8:c0:fb:93:d6:6f:54:b4:80: 61:94:dd:4a:32:b9:6f:4d:e0:4a:ed:f4:60:7b:60: a6:0f:c8:b8:72:f9:bb:b3:f4:6b:c2:d6:6c:3d:fa: 77:24:be:c4:ff:d9:60:31:98:e0:5b:07:98:50:9b: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:F3:E6:1D:2D:46:49:BB:1B:40:6F:DB:EC:AF:A5:69:32:1E:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.192.0/21 Signature Algorithm: sha256WithRSAEncryption 74:cd:a2:1a:f4:bd:53:ee:17:47:b9:24:f7:e0:41:59:90:33: 90:8f:a5:d2:b5:c2:5b:db:06:5a:d8:af:bb:be:9b:dc:da:18: ab:31:de:ae:99:a6:01:0d:28:35:e5:60:5a:56:94:28:b4:70: f5:87:a7:2b:fb:b0:2c:c4:2e:f1:4a:eb:46:2e:85:c0:63:fd: 8d:cf:a7:d5:81:50:c7:95:ad:69:f1:38:35:2e:dc:3d:e0:f2: 0b:eb:d9:c2:e6:6d:38:a8:cb:f7:45:b4:b1:fd:3f:0e:ba:ff: c1:8b:17:38:22:0e:f3:cc:af:24:02:c7:22:9f:4f:23:8b:b7: 93:a1:d4:87:aa:f7:81:da:e8:2c:da:0d:0c:80:1f:bd:37:89: ca:d6:c3:dc:78:49:84:65:e8:73:9e:1a:45:6d:c2:bc:b6:c7: a9:a8:82:bf:4e:0a:c2:29:ac:04:cd:6a:38:49:97:8e:7c:fb: e2:87:21:78:ba:23:a5:5e:83:48:01:32:10:84:95:46:13:7f: 33:09:ff:23:38:7c:8a:3e:19:bb:28:a8:ea:07:d9:3e:93:f7: df:ca:b7:0e:c5:1b:6f:4c:25:bf:0c:6d:92:5a:b5:ca:dd:34: 22:6c:0d:59:f7:f6:29:73:8b:d5:15:0c:c1:79:8e:f5:48:64: ae:c8:11:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWN5aYxHdiNq1EY+WuB0ZiaqbeZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDAyMDEwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjJjYjU0NWI1YjYwOWVhZDNkYWVmMzBjNDJmNGU5YmYy MjYxOTlhMWZlM2MwODIyM2RjOTc5NDA1MmQ0MzBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoBtbmR7SuPJsOTmB5m5yM3ya1QKG/rR0KJh9CJQfN8P3n BaYAvu5k7i5sJyp2tEAzF6zxsrk/6XqGVUxnegsDJcsSFd8pMjSlBpk7z5kkCqe7 fMmYMX/kQ5PKxS8f7CMAjnLHTPaV0kOypq8qcXRzUvPByZqOESBvGsHiqWVyozA6 w/iyIoLNxv6+McTHFLsuBilHJGzYBR8kxCE6kKae9heJMB5rtazOA0G7Hdput7LQ 5vboLXK9kWUuFhSpz8W6DH85HC0l7NjA+5PWb1S0gGGU3UoyuW9N4Ert9GB7YKYP yLhy+buz9GvC1mw9+nckvsT/2WAxmOBbB5hQm+U5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEUbz5h0tRkm7G0Bv2+yvpWkyHqowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkZDNjOWYxLTIxNGItNDUwZi05MWM5LTc1NGEwYWI4NWE4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFcAwDQYJKoZIhvcNAQELBQADggEBAHTNohr0vVPuF0e5JPfgQVmQM5CP pdK1wlvbBlrYr7u+m9zaGKsx3q6ZpgENKDXlYFpWlCi0cPWHpyv7sCzELvFK60Yu hcBj/Y3Pp9WBUMeVrWnxODUu3D3g8gvr2cLmbTioy/dFtLH9Pw66/8GLFzgiDvPM ryQCxyKfTyOLt5Oh1Ieq94Ha6CzaDQyAH703icrWw9x4SYRl6HOeGkVtwry2x6mo gr9OCsIprATNajhJl458++KHIXi6I6Veg0gBMhCElUYTfzMJ/yM4fIo+GbsoqOoH 2T6T99/Ktw7FG29MJb8MbZJatcrdNCJsDVn39ilzi9UVDMF5jvVIZK7IEXk= -----END CERTIFICATE-----Generated at Wed Nov 4 16:00:30 2026 by rpki-client