$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa File: 975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa (raw, json) Hash identifier: sQR1HJFhVBIZ9zBku+A4IvSI6LBhuIzK4LNmChLJuKU= Subject key identifier: 3E:9B:F6:40:00:9A:DD:38:98:4C:57:1D:0D:1A:2F:58:59:70:76:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57BFD85F49F120FA515F2EBE86899DABBA6BF064 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa Signing time: Tue 06 Oct 2026 00:01:57 +0000 ROA not before: Tue 06 Oct 2026 00:01:57 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 206.217.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bf:d8:5f:49:f1:20:fa:51:5f:2e:be:86:89:9d:ab:ba:6b:f0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:01:57 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=ae78c9fe83228b56f53e174b7fee9c878fe64aa08ee53eced374848427ab4bad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:3d:fd:38:42:dc:42:b2:aa:e8:e0:65:81: 1f:fb:c4:e8:20:44:f3:d2:70:79:d9:71:19:8d:f6: 7d:c8:e8:e3:5d:31:c1:66:64:13:bf:c2:09:85:47: f1:9c:be:38:e5:d5:38:5d:3d:96:e4:e0:e2:0f:20: 72:f9:bf:73:3b:57:de:43:81:ca:37:21:79:87:37: 6e:44:32:8c:3f:f8:86:95:70:fd:69:66:51:10:3e: e9:f2:6e:32:67:9f:f2:3e:9b:30:59:35:8a:27:7d: d5:f1:8d:dc:2e:dc:6c:02:3a:2d:2f:48:db:76:ae: e0:d4:08:b8:ec:f0:10:ca:9d:0b:bc:11:18:96:12: 3b:18:cc:aa:62:3d:df:c1:cd:f2:ad:93:69:e1:0e: 3b:bd:3b:d1:ec:ed:43:80:1a:ad:23:d3:27:01:83: d6:93:28:05:94:f0:16:f7:4e:70:c4:17:93:23:ca: 7b:40:dc:6f:89:52:7a:3a:57:95:ed:ee:d3:4b:6c: 1c:78:bd:e0:b2:45:19:55:ef:07:12:0d:0a:63:95: 89:e1:4b:75:49:f0:25:11:94:c8:9f:45:a5:0d:ac: ae:6b:59:e9:e5:21:89:4c:b7:17:be:cd:86:1c:2f: ae:25:47:a4:d0:23:42:1c:28:1c:ae:4d:50:8b:da: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9B:F6:40:00:9A:DD:38:98:4C:57:1D:0D:1A:2F:58:59:70:76:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5a:cd:81:28:c4:1d:a1:19:18:5c:69:d7:b5:01:d5:d2:75:e6: a8:62:b5:67:12:ff:f3:f2:51:6a:40:03:9e:05:dd:da:28:7e: 20:ef:ab:6d:92:d1:e6:ac:37:68:96:da:d4:32:30:71:97:cd: 84:84:88:c2:16:9e:10:40:d7:c6:01:84:ea:38:03:fa:f2:00: 04:57:2c:14:c8:e7:bf:b0:d3:c5:8c:e6:cc:78:00:b0:11:45: 94:a1:d8:b4:f0:4a:5e:63:27:e2:1a:a9:79:30:2a:a5:8c:b7: 84:12:1f:06:0d:5f:3f:39:53:78:8c:aa:4b:04:e9:49:a5:2a: c7:ea:52:f6:bb:38:0d:49:a5:98:9c:16:e1:88:63:ff:09:9a: 0a:8d:ed:3c:d0:d3:a2:4c:3e:5a:b9:4f:a0:b6:2e:2b:6b:c8: 20:56:86:38:22:6f:97:38:bc:31:28:ba:26:b0:a3:64:8e:19: b9:33:da:f7:ef:1d:72:e9:2d:83:34:ae:75:30:e2:e1:80:dd: a7:51:e7:58:eb:d2:c1:43:ad:b1:f3:85:97:0c:2a:b3:ae:7d: fe:23:df:de:b7:6e:47:93:2d:9f:bf:c2:89:18:c5:e0:f8:56: 42:45:c3:09:97:01:d3:e2:0a:23:dd:02:0c:47:4e:bc:04:a3: 78:21:00:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV7/YX0nxIPpRXy6+homdq7pr8GQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAwMTU3WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTc4YzlmZTgzMjI4YjU2ZjUzZTE3NGI3ZmVlOWM4Nzhm ZTY0YWEwOGVlNTNlY2VkMzc0ODQ4NDI3YWI0YmFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgwD39OELcQrKq6OBlgR/7xOggRPPScHnZcRmN9n3I6ONd McFmZBO/wgmFR/Gcvjjl1ThdPZbk4OIPIHL5v3M7V95Dgco3IXmHN25EMow/+IaV cP1pZlEQPunybjJnn/I+mzBZNYonfdXxjdwu3GwCOi0vSNt2ruDUCLjs8BDKnQu8 ERiWEjsYzKpiPd/BzfKtk2nhDju9O9Hs7UOAGq0j0ycBg9aTKAWU8Bb3TnDEF5Mj yntA3G+JUno6V5Xt7tNLbBx4veCyRRlV7wcSDQpjlYnhS3VJ8CURlMifRaUNrK5r WenlIYlMtxe+zYYcL64lR6TQI0IcKByuTVCL2kt9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPpv2QACa3TiYTFcdDRovWFlwdvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3NWE5OGJhLWM0MzctNGQ2NS1iZjI2LWE0NmQ4ZDVkNDliZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2SAwDQYJKoZIhvcNAQELBQADggEBAFrNgSjEHaEZGFxp17UB1dJ15qhi tWcS//PyUWpAA54F3doofiDvq22S0easN2iW2tQyMHGXzYSEiMIWnhBA18YBhOo4 A/ryAARXLBTI57+w08WM5sx4ALARRZSh2LTwSl5jJ+IaqXkwKqWMt4QSHwYNXz85 U3iMqksE6UmlKsfqUva7OA1JpZicFuGIY/8JmgqN7TzQ06JMPlq5T6C2LitryCBW hjgib5c4vDEouiawo2SOGbkz2vfvHXLpLYM0rnUw4uGA3adR51jr0sFDrbHzhZcM KrOuff4j3963bkeTLZ+/wokYxeD4VkJFwwmXAdPiCiPdAgxHTrwEo3ghAE0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:09:06 2026 by rpki-client