$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa File: 964203da-7c50-4d09-baca-392bf66c6a79.roa (raw, json) Hash identifier: Fkiv1ViAEFAY+0Gc8BvepdGUzUESffSJWAhWDTIW9Cw= Subject key identifier: 29:77:66:A1:68:83:86:BA:CB:A5:7A:9A:E8:50:1F:2A:51:A9:87:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38E29CFD6172E5EC620C630FE788B030C9C7517F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa Signing time: Fri 23 Oct 2026 01:02:18 +0000 ROA not before: Fri 23 Oct 2026 01:02:18 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e2:9c:fd:61:72:e5:ec:62:0c:63:0f:e7:88:b0:30:c9:c7:51:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:02:18 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=433a64877c0cf8aeb7acf31b6f320461395d1bd85e86668fbe2aadb42e715a1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:93:eb:35:05:cc:0c:ca:86:77:ce:9a:d8: 71:3d:6e:c6:4f:5b:5d:7a:3f:30:fd:49:6b:94:c6: a1:ad:d7:a0:37:14:10:93:d8:42:68:9c:d1:0e:bd: 1c:42:f2:e6:e6:34:f7:50:1d:c8:35:5e:fa:cc:04: 88:21:de:72:7a:e3:24:00:df:f2:8c:49:cd:81:77: f0:78:fd:f3:8d:3c:c2:dd:b0:62:d9:c8:cd:aa:8b: 7c:97:62:21:50:1e:0f:06:5c:1d:2d:b9:3e:73:ef: e2:99:ea:8e:60:be:8b:9c:ac:b5:21:2d:34:ce:ac: 87:21:d0:81:b7:ce:53:2f:9f:06:71:06:09:0f:b3: cb:bc:18:98:46:90:44:5c:42:46:72:c4:46:70:ac: 21:db:25:65:74:6a:35:dc:07:45:4a:47:20:60:8b: fa:55:39:4b:8d:23:88:82:25:fe:b5:f6:b4:40:06: 3a:03:72:b1:83:4f:02:d6:9f:e3:59:b7:db:d7:f4: fa:1a:63:a9:3c:a4:dd:55:a7:64:be:fc:45:4f:9a: 9b:3d:df:5e:b4:00:35:31:30:9c:5c:d2:c3:38:aa: a5:94:08:d3:e0:ec:89:e5:13:be:91:b5:c4:8f:dd: de:53:e7:06:ff:eb:74:c2:94:05:35:32:c7:1a:b4: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:77:66:A1:68:83:86:BA:CB:A5:7A:9A:E8:50:1F:2A:51:A9:87:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.76.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:fd:f9:26:0e:ff:6a:7e:67:cb:d7:56:16:4e:62:6f:0f:9a: 3a:5a:5b:1f:f9:52:a0:4d:40:21:3f:79:05:3b:74:21:ee:a2: 64:51:11:83:1a:5c:57:9a:42:f4:8e:f3:ff:a6:ce:e6:35:07: ed:7a:c1:3e:e2:6e:f4:7c:6d:7a:da:ba:ea:1f:fb:b5:97:cb: af:5d:47:56:5d:1b:2c:4d:2a:5a:57:28:00:f5:ff:6e:fa:53: ac:27:13:77:09:80:7d:28:0b:97:65:74:11:6f:81:94:ee:73: 26:78:66:16:aa:b8:35:4a:af:20:cb:06:63:4f:52:e4:b0:ad: 4f:47:e2:7c:97:24:1d:73:30:3e:65:d1:20:8e:d5:ab:36:35: e1:56:1e:e5:c6:be:1f:bb:92:bd:40:34:c8:e2:d2:24:27:6a: 20:77:c0:cf:b5:fd:0c:bc:d4:fa:19:c0:48:08:3e:3a:0e:ba: 4a:21:f2:33:89:30:0d:c4:b7:6d:d1:24:cc:7d:26:80:cf:83: 0a:dc:72:3f:bb:33:71:e5:de:91:9f:bc:bc:1d:a2:6c:98:b2: d3:8e:09:7f:8f:ec:d2:2a:1b:02:68:37:e6:30:f3:0a:cb:49: 6c:db:64:36:89:30:ce:07:ab:3c:98:6d:d1:d2:8f:aa:71:62: cf:0e:79:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOOKc/WFy5exiDGMP54iwMMnHUX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEwMjE4WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzNhNjQ4NzdjMGNmOGFlYjdhY2YzMWI2ZjMyMDQ2MTM5 NWQxYmQ4NWU4NjY2OGZiZTJhYWRiNDJlNzE1YTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8xpPrNQXMDMqGd86a2HE9bsZPW116PzD9SWuUxqGt16A3 FBCT2EJonNEOvRxC8ubmNPdQHcg1XvrMBIgh3nJ64yQA3/KMSc2Bd/B4/fONPMLd sGLZyM2qi3yXYiFQHg8GXB0tuT5z7+KZ6o5gvoucrLUhLTTOrIch0IG3zlMvnwZx BgkPs8u8GJhGkERcQkZyxEZwrCHbJWV0ajXcB0VKRyBgi/pVOUuNI4iCJf619rRA BjoDcrGDTwLWn+NZt9vX9PoaY6k8pN1Vp2S+/EVPmps93160ADUxMJxc0sM4qqWU CNPg7InlE76RtcSP3d5T5wb/63TClAU1MscatEFdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKXdmoWiDhrrLpXqa6FAfKlGph0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NDIwM2RhLTdjNTAtNGQwOS1iYWNhLTM5MmJmNjZjNmE3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXFkwwDQYJKoZIhvcNAQELBQADggEBAF/9+SYO/2p+Z8vXVhZOYm8Pmjpa Wx/5UqBNQCE/eQU7dCHuomRREYMaXFeaQvSO8/+mzuY1B+16wT7ibvR8bXrauuof +7WXy69dR1ZdGyxNKlpXKAD1/276U6wnE3cJgH0oC5dldBFvgZTucyZ4ZhaquDVK ryDLBmNPUuSwrU9H4nyXJB1zMD5l0SCO1as2NeFWHuXGvh+7kr1ANMji0iQnaiB3 wM+1/Qy81PoZwEgIPjoOukoh8jOJMA3Et23RJMx9JoDPgwrccj+7M3Hl3pGfvLwd omyYstOOCX+P7NIqGwJoN+Yw8wrLSWzbZDaJMM4HqzyYbdHSj6pxYs8OefE= -----END CERTIFICATE-----Generated at Tue Nov 3 19:18:55 2026 by rpki-client