$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9846244a-41d6-4a61-bc45-ec42cedff928.roa File: 9846244a-41d6-4a61-bc45-ec42cedff928.roa (raw, json) Hash identifier: 8ggcf+6otyLAuNY2Qk/uCJuBFhFmlf2n49tH/HFgc5U= Subject key identifier: BB:8F:F0:4D:FE:5B:3C:F3:54:0A:E5:9E:8C:84:D5:FB:92:CA:2F:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2875C9992FDC72FC3708E9982A3F92365FA88784 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9846244a-41d6-4a61-bc45-ec42cedff928.roa Signing time: Fri 23 Oct 2026 00:40:04 +0000 ROA not before: Fri 23 Oct 2026 00:40:04 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 40.208.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:75:c9:99:2f:dc:72:fc:37:08:e9:98:2a:3f:92:36:5f:a8:87:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:40:04 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=b328cb0b2ea153b32db9f910d7efa6b0ba16ee297a97516ee9e07964cd3fb889, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:fb:30:17:ff:02:e9:c1:bf:47:45:66:96: e1:24:72:3b:54:65:d1:87:d5:db:8c:f4:51:52:db: bb:6d:05:c5:e7:48:2a:ef:93:4f:78:40:ac:ad:13: 8d:6b:63:50:fa:c9:ff:d7:7e:62:46:d1:d6:ff:ab: 2d:9c:73:5b:14:4b:23:bc:12:7c:ec:db:3b:a5:fe: 25:e5:61:90:f3:c1:03:97:0f:a1:41:be:e1:f4:24: 79:41:9b:8b:ea:00:a5:c4:af:f7:fd:25:03:af:3b: f8:e9:bb:e9:99:32:de:13:4b:0e:b6:e2:e3:1e:67: ab:6b:66:2e:63:56:2e:61:a2:8b:65:e6:14:a6:8b: 19:38:13:ed:7f:97:77:87:ea:60:44:cf:2d:3d:f6: 3e:08:36:9e:b8:77:14:3f:a1:e6:73:f0:3d:c3:96: 81:fc:c8:dc:c1:cb:24:4b:fe:85:82:97:38:e9:89: d5:ee:51:d7:4b:e1:b6:34:38:4e:10:61:98:c3:79: df:4e:7d:67:94:15:fe:2e:f7:d9:1c:79:3a:6e:94: 1e:f6:46:eb:89:fc:7c:e6:d0:94:de:e8:20:d3:56: 14:34:2b:00:f0:80:4a:8e:1b:b7:27:43:da:c7:fa: f3:3e:d1:f7:b0:2b:5a:c1:72:cc:71:25:34:46:15: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8F:F0:4D:FE:5B:3C:F3:54:0A:E5:9E:8C:84:D5:FB:92:CA:2F:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9846244a-41d6-4a61-bc45-ec42cedff928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:4b:5d:71:4f:c4:44:4c:d0:31:1b:8a:a1:42:22:7d:e2:2f: a3:a2:8f:a5:ee:10:40:0b:ac:fd:12:83:8c:a5:98:bc:c7:6f: 97:da:ea:79:a3:03:de:09:8e:ca:69:bd:00:4f:6c:fe:45:76: 48:55:42:14:78:2b:86:44:d0:27:09:48:31:1c:46:fa:01:65: 53:4c:4f:6a:d8:4a:7f:e7:b9:6c:05:78:24:8a:0c:4a:27:b2: 1b:a9:79:5e:d2:5a:ce:8f:89:04:a0:2a:d5:cf:8d:43:72:13: 2f:29:4c:47:79:20:e8:79:f8:48:df:21:ad:58:0a:5d:f7:6a: 56:c7:f2:38:4b:b9:9f:94:61:c3:0e:ac:3c:b4:a4:3f:5e:46: 46:c4:e6:ea:89:e6:ec:81:6e:21:ee:51:e5:ca:bd:fc:68:58: 81:ee:24:a1:42:58:2c:4c:11:cc:47:e3:4e:51:1c:13:87:20: 40:a2:87:2a:63:49:52:9b:06:d2:18:c5:3c:51:85:9d:40:aa: a0:cc:91:bd:be:e0:b5:97:51:07:31:51:6a:95:84:b4:20:06: 6e:46:2e:65:2d:5c:30:35:6b:94:50:12:6c:76:78:0e:f3:fc: 21:9a:c9:01:cb:ac:4e:b9:e8:3a:ab:12:74:f1:57:70:cc:f3: cf:46:42:2c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKHXJmS/ccvw3COmYKj+SNl+oh4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDA0MDA0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzI4Y2IwYjJlYTE1M2IzMmRiOWY5MTBkN2VmYTZiMGJh MTZlZTI5N2E5NzUxNmVlOWUwNzk2NGNkM2ZiODg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCEvswF/8C6cG/R0VmluEkcjtUZdGH1duM9FFS27ttBcXn SCrvk094QKytE41rY1D6yf/XfmJG0db/qy2cc1sUSyO8Enzs2zul/iXlYZDzwQOX D6FBvuH0JHlBm4vqAKXEr/f9JQOvO/jpu+mZMt4TSw624uMeZ6trZi5jVi5hootl 5hSmixk4E+1/l3eH6mBEzy099j4INp64dxQ/oeZz8D3DloH8yNzByyRL/oWClzjp idXuUddL4bY0OE4QYZjDed9OfWeUFf4u99kceTpulB72RuuJ/Hzm0JTe6CDTVhQ0 KwDwgEqOG7cnQ9rH+vM+0fewK1rBcsxxJTRGFfzjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUu4/wTf5bPPNUCuWejITV+5LKL3AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4NDYyNDRhLTQxZDYtNGE2MS1iYzQ1LWVjNDJjZWRmZjkyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo0DANBgkqhkiG9w0BAQsFAAOCAQEAC0tdcU/EREzQMRuKoUIifeIvo6KP pe4QQAus/RKDjKWYvMdvl9rqeaMD3gmOymm9AE9s/kV2SFVCFHgrhkTQJwlIMRxG +gFlU0xPathKf+e5bAV4JIoMSieyG6l5XtJazo+JBKAq1c+NQ3ITLylMR3kg6Hn4 SN8hrVgKXfdqVsfyOEu5n5Rhww6sPLSkP15GRsTm6onm7IFuIe5R5cq9/GhYge4k oUJYLEwRzEfjTlEcE4cgQKKHKmNJUpsG0hjFPFGFnUCqoMyRvb7gtZdRBzFRapWE tCAGbkYuZS1cMDVrlFASbHZ4DvP8IZrJAcusTrnoOqsSdPFXcMzzz0ZCLA== -----END CERTIFICATE-----Generated at Mon Nov 2 21:10:30 2026 by rpki-client