$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f446edc-0153-48f0-8fd2-45ca4ff1da5a.roa File: 8f446edc-0153-48f0-8fd2-45ca4ff1da5a.roa (raw, json) Hash identifier: no6DG8Lp7c1sR7DIqsXdV2kJVCesYhe3375JNYxEKvM= Subject key identifier: F5:67:AE:DB:A8:D8:C7:67:12:D7:DD:9B:66:62:1F:11:DB:54:B4:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E92FFD49181604284396E0FF481712888BB29F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f446edc-0153-48f0-8fd2-45ca4ff1da5a.roa Signing time: Sun 18 Oct 2026 00:20:05 +0000 ROA not before: Sun 18 Oct 2026 00:20:05 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:92:ff:d4:91:81:60:42:84:39:6e:0f:f4:81:71:28:88:bb:29:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 18 00:20:05 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=58ead439d17cf9ca2303854ea3fdbca0e7ab55d3b8deff3d5f3d7669cb6a44aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:f8:15:ea:46:0e:83:ae:f6:77:13:e2:35: b8:5d:7b:ca:27:9c:8c:9e:1d:76:9a:d2:fb:b2:cb: e0:bf:02:74:17:8a:ac:06:bf:1e:d0:fb:35:15:73: 4c:a6:6a:de:c6:fa:3d:48:b6:ca:24:86:6c:f7:b6: 17:5c:2e:65:0b:52:ed:21:95:e5:6f:cc:e2:bf:af: aa:24:4b:2d:37:f7:38:0c:59:ae:ca:cd:a5:d9:87: ee:7f:a9:f5:de:48:79:51:93:38:a2:08:e7:b9:33: 3f:ef:15:ed:ec:0b:5b:48:02:97:79:15:9e:28:6e: 33:a7:42:78:31:0d:dc:5a:00:7c:1a:f0:77:fb:00: a3:a6:09:52:5a:bc:0f:ad:c1:36:e3:86:04:00:c5: ca:43:9d:86:ad:7c:08:27:0a:27:27:ac:e3:f2:b2: f3:39:e7:fb:95:46:cf:37:55:77:c1:d3:bf:e1:61: 3d:aa:b0:76:fe:4d:d0:5b:ae:c7:1e:06:43:d2:59: 5b:40:5f:31:d8:3d:a5:45:43:07:c7:6d:90:fe:f9: 62:ba:6e:66:2a:af:70:67:27:bc:89:55:33:7a:42: 2e:0c:bc:d4:35:7f:ae:c8:9d:05:43:c3:69:b0:73: e7:9c:b8:9d:23:47:58:98:ed:76:5c:20:df:f3:43: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:AE:DB:A8:D8:C7:67:12:D7:DD:9B:66:62:1F:11:DB:54:B4:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f446edc-0153-48f0-8fd2-45ca4ff1da5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.13.0/24 Signature Algorithm: sha256WithRSAEncryption 77:a8:35:6a:a3:9f:d3:a3:9e:5e:51:15:8a:40:4c:c1:f7:6e: 11:84:2a:d3:fc:6b:cc:c7:c2:13:89:2a:47:4e:d8:25:d9:27: 8e:78:5c:1e:02:83:4b:7b:fa:62:1b:fb:1b:a0:f4:f7:91:e7: a0:d7:52:57:5a:02:f0:da:4d:b0:c9:89:16:79:45:ee:08:86: 2c:d6:ad:ca:f5:81:6d:9e:b7:94:8b:2b:39:df:0f:bc:d6:28: 74:67:fe:8d:aa:f5:cd:15:90:ed:4a:db:c2:5f:bf:20:d9:1c: 73:e8:5d:b2:4f:f5:b9:33:21:54:79:53:f9:e8:ba:fc:83:e1: d3:39:cd:b9:e2:a1:10:19:97:fd:6d:3a:85:5f:1e:00:48:fe: 92:ba:80:2e:40:50:91:d3:75:20:3d:43:8e:08:86:d6:52:f0: cc:88:a5:e5:2d:2a:07:8e:9c:0e:41:a3:22:05:11:63:ef:d2: 6d:01:99:eb:c9:db:57:ae:55:c1:a2:e6:85:31:24:e1:10:1b: e1:d2:cf:fd:51:4b:6b:82:fa:da:c3:79:c5:44:25:d4:a9:d1: b3:03:89:01:b8:7e:b2:ef:df:4b:35:3a:95:e0:ef:f6:27:ef: b3:79:6c:e9:f9:13:bd:cf:0d:ae:fd:9e:21:73:9a:90:6e:14: 1c:fb:45:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTpL/1JGBYEKEOW4P9IFxKIi7KfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE4MDAyMDA1WhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGVhZDQzOWQxN2NmOWNhMjMwMzg1NGVhM2ZkYmNhMGU3 YWI1NWQzYjhkZWZmM2Q1ZjNkNzY2OWNiNmE0NGFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPDfgV6kYOg672dxPiNbhde8onnIyeHXaa0vuyy+C/AnQX iqwGvx7Q+zUVc0ymat7G+j1Itsokhmz3thdcLmULUu0hleVvzOK/r6okSy039zgM Wa7KzaXZh+5/qfXeSHlRkziiCOe5Mz/vFe3sC1tIApd5FZ4objOnQngxDdxaAHwa 8Hf7AKOmCVJavA+twTbjhgQAxcpDnYatfAgnCicnrOPysvM55/uVRs83VXfB07/h YT2qsHb+TdBbrsceBkPSWVtAXzHYPaVFQwfHbZD++WK6bmYqr3BnJ7yJVTN6Qi4M vNQ1f67InQVDw2mwc+ecuJ0jR1iY7XZcIN/zQ7BdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9Weu26jYx2cS192bZmIfEdtUtHMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmNDQ2ZWRjLTAxNTMtNDhmMC04ZmQyLTQ1Y2E0ZmYxZGE1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWw0wDQYJKoZIhvcNAQELBQADggEBAHeoNWqjn9Ojnl5RFYpATMH3bhGE KtP8a8zHwhOJKkdO2CXZJ454XB4Cg0t7+mIb+xug9PeR56DXUldaAvDaTbDJiRZ5 Re4IhizWrcr1gW2et5SLKznfD7zWKHRn/o2q9c0VkO1K28JfvyDZHHPoXbJP9bkz IVR5U/nouvyD4dM5zbnioRAZl/1tOoVfHgBI/pK6gC5AUJHTdSA9Q44IhtZS8MyI peUtKgeOnA5BoyIFEWPv0m0BmevJ21euVcGi5oUxJOEQG+HSz/1RS2uC+trDecVE JdSp0bMDiQG4frLv30s1OpXg7/Yn77N5bOn5E73PDa79niFzmpBuFBz7RSk= -----END CERTIFICATE-----Generated at Tue Nov 3 19:17:34 2026 by rpki-client