$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa File: 9489bef2-0a21-4c24-8378-03322c296a7b.roa (raw, json) Hash identifier: q8oW09kODejHS/wR1rys6oat+x/bRhyxVj6zCgUap2I= Subject key identifier: 11:F7:99:3A:BC:8C:5B:19:97:50:71:50:0C:B5:29:B0:CC:1F:E5:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 41AE902A5596C9C5E04881D8CCA28D2B63714ED6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa Signing time: Sat 24 Oct 2026 00:10:56 +0000 ROA not before: Sat 24 Oct 2026 00:10:56 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ae:90:2a:55:96:c9:c5:e0:48:81:d8:cc:a2:8d:2b:63:71:4e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:10:56 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=06f5a33ae46149fcd4985a7e00ee20d52138ccf2f0b3f2a7a28af30db879db0b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:2d:94:bc:5a:22:6d:cb:77:73:1d:9e:47: 71:4d:e0:1b:9a:b9:5b:1a:e1:a8:e8:7c:43:78:1e: 81:b3:80:db:8a:7a:01:19:46:70:1a:4d:d2:aa:45: 32:c5:7e:78:41:ab:01:64:ce:6d:3f:5f:49:35:4e: 45:a9:ff:77:6c:68:12:ed:a7:85:47:4e:6a:40:af: 61:4a:3a:1c:f6:d6:7d:1e:da:47:a3:dd:5f:0a:fc: 00:3e:86:d7:78:5e:3a:9c:ba:33:81:5c:e6:52:85: 8c:01:54:b6:de:f0:92:5c:d2:e6:4a:7c:f7:24:97: f0:9c:5a:07:f1:c2:1a:9e:af:eb:18:65:69:29:81: 4c:ff:8c:25:cc:4f:e4:fe:6a:f4:5a:57:93:0a:85: 10:32:0e:3f:ed:08:98:61:28:69:c8:f9:ce:b8:19: 81:b9:58:df:0c:b4:2f:25:dd:72:40:b5:40:d9:12: 4d:c2:da:cd:56:f6:c0:bd:dd:f8:21:8d:85:b7:81: 93:e0:e3:d2:70:18:d1:b8:0a:3e:a9:a3:66:1f:73: 56:50:81:71:89:d2:b3:3f:b5:00:81:ba:8d:f7:d5: d9:31:87:c5:c7:2a:d0:25:c4:2b:54:d5:17:84:d2: b5:3d:19:67:c5:f6:aa:ea:a2:cf:51:19:1e:8d:36: 41:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F7:99:3A:BC:8C:5B:19:97:50:71:50:0C:B5:29:B0:CC:1F:E5:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.211.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:c4:2b:a8:c2:fc:5d:06:5d:19:d0:60:c0:44:0e:a6:25:be: a8:53:17:d1:04:d5:5b:85:c4:66:1d:30:59:5c:9b:e6:30:14: 68:46:4b:13:bc:d6:d8:3c:4b:70:9d:1f:cb:2c:ba:9b:a7:d5: a7:44:95:c6:d0:f4:9d:88:cc:80:e9:c4:4a:9f:ea:e7:de:aa: 75:0a:99:07:6d:b9:7c:c0:d7:47:b5:3f:db:df:2c:1a:13:56: a3:6e:7a:fc:e6:8a:dd:c6:ab:0e:e3:8b:f1:67:00:9f:f5:c4: 39:87:79:50:05:6c:37:c6:1c:f9:d4:f6:b8:d9:0d:0a:2c:99: 1a:35:84:d6:3a:ec:cc:26:80:b8:72:9e:20:ef:8a:2b:e4:97: da:27:c2:72:9f:98:e3:64:77:93:20:e0:9e:93:89:ef:2f:8a: d7:87:ac:0f:26:d7:5d:bc:74:d5:09:40:a8:f1:0f:9f:3d:53: 06:c6:ae:5e:1b:06:f0:cf:6c:b5:3c:30:66:b7:ea:48:87:56: bb:da:42:70:44:08:f8:95:f8:56:5b:e7:0d:b6:44:a7:03:c0: 3f:b5:71:b1:27:e1:fe:c3:2b:45:b6:f0:cf:b9:9d:4d:6f:b0: 49:a1:28:99:e7:49:8e:c8:23:15:cd:e6:3f:c5:d5:82:24:6f: 08:64:bb:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQa6QKlWWycXgSIHYzKKNK2NxTtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAxMDU2WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmY1YTMzYWU0NjE0OWZjZDQ5ODVhN2UwMGVlMjBkNTIx MzhjY2YyZjBiM2YyYTdhMjhhZjMwZGI4NzlkYjBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYay2UvFoibct3cx2eR3FN4BuauVsa4ajofEN4HoGzgNuK egEZRnAaTdKqRTLFfnhBqwFkzm0/X0k1TkWp/3dsaBLtp4VHTmpAr2FKOhz21n0e 2kej3V8K/AA+htd4XjqcujOBXOZShYwBVLbe8JJc0uZKfPckl/CcWgfxwhqer+sY ZWkpgUz/jCXMT+T+avRaV5MKhRAyDj/tCJhhKGnI+c64GYG5WN8MtC8l3XJAtUDZ Ek3C2s1W9sC93fghjYW3gZPg49JwGNG4Cj6po2Yfc1ZQgXGJ0rM/tQCBuo331dkx h8XHKtAlxCtU1ReE0rU9GWfF9qrqos9RGR6NNkHPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEfeZOryMWxmXUHFQDLUpsMwf5ZkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0ODliZWYyLTBhMjEtNGMyNC04Mzc4LTAzMzIyYzI5NmE3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFdMwDQYJKoZIhvcNAQELBQADggEBAC7EK6jC/F0GXRnQYMBEDqYlvqhT F9EE1VuFxGYdMFlcm+YwFGhGSxO81tg8S3CdH8ssupun1adElcbQ9J2IzIDpxEqf 6ufeqnUKmQdtuXzA10e1P9vfLBoTVqNuevzmit3Gqw7ji/FnAJ/1xDmHeVAFbDfG HPnU9rjZDQosmRo1hNY67MwmgLhyniDviivkl9onwnKfmONkd5Mg4J6Tie8viteH rA8m1128dNUJQKjxD589UwbGrl4bBvDPbLU8MGa36kiHVrvaQnBECPiV+FZb5w22 RKcDwD+1cbEn4f7DK0W28M+5nU1vsEmhKJnnSY7IIxXN5j/F1YIkbwhku+Q= -----END CERTIFICATE-----Generated at Tue Nov 3 12:06:21 2026 by rpki-client