$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a05216c-4bbb-4799-872c-81ed765d6e23.roa File: 9a05216c-4bbb-4799-872c-81ed765d6e23.roa (raw, json) Hash identifier: mArZiXcK6mn6q2rH67cN6RSo7o4fZsebbsamhYKMHrw= Subject key identifier: 22:9C:AD:5B:E4:2D:1C:E9:F9:13:B7:D5:D2:00:AD:C3:C0:21:A8:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6350E0480FFDBD7AAED6CFD6BDF2E5D333E027B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a05216c-4bbb-4799-872c-81ed765d6e23.roa Signing time: Mon 26 Oct 2026 00:20:08 +0000 ROA not before: Mon 26 Oct 2026 00:20:08 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.71.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:50:e0:48:0f:fd:bd:7a:ae:d6:cf:d6:bd:f2:e5:d3:33:e0:27:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:20:08 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=679bb18480aff7593bc2e1cecbb0cd142e6c223ea4a798272ec3f88242a25e9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:b4:05:05:9c:e6:2f:11:09:7e:d5:2f:63: ee:7c:0c:13:a5:cd:9a:0e:5d:26:88:04:b7:bf:32: 0c:fc:84:76:5d:1a:90:19:35:fd:e1:0c:bb:29:5b: 34:8c:28:7d:1e:5a:3c:12:5c:97:4e:b5:fe:20:c8: a9:a2:95:4c:30:22:2a:60:32:0f:ba:a1:9c:fa:8b: 84:68:cb:f0:9a:3b:50:53:b7:ac:ae:94:44:c5:5a: 30:d6:3d:be:42:12:19:0b:b6:a1:06:cf:fb:97:f0: 75:d9:95:6e:27:31:fd:29:d9:37:39:a3:15:9d:66: 13:26:2e:57:dd:89:4e:a7:f6:77:ac:fd:e1:44:66: 3c:d6:f6:bd:3f:ca:ca:c3:7a:31:5c:87:23:47:c1: 19:38:0a:fb:41:f8:55:54:ab:fa:96:c0:d7:9b:49: b6:f0:53:79:26:05:fb:16:78:d4:d3:97:57:1b:55: a8:5a:97:24:48:a0:e4:ca:69:0f:c9:b6:33:d2:33: 2d:47:60:d1:2e:d3:e6:3e:4d:46:bf:80:aa:64:28: 59:13:d8:a5:96:3b:f0:4c:58:f7:f1:7c:06:58:88: 6f:d3:f1:96:43:75:70:3e:c7:0f:88:0f:7c:0f:ec: e1:fa:75:28:3f:e2:0f:7d:a8:96:68:a3:b6:ef:0f: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9C:AD:5B:E4:2D:1C:E9:F9:13:B7:D5:D2:00:AD:C3:C0:21:A8:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a05216c-4bbb-4799-872c-81ed765d6e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.71.0.0/16 Signature Algorithm: sha256WithRSAEncryption ab:51:7d:d0:5a:d6:25:71:d3:e8:b8:65:bf:1d:98:b9:e8:bf: ea:f1:fe:7b:48:08:e9:5b:52:3c:ac:7d:7a:d2:c9:b4:b7:44: 3b:1d:aa:39:fd:d8:2f:62:f5:4a:02:7a:e1:96:59:ce:47:d3: a7:99:e8:09:d7:a5:b5:d7:e0:16:16:2c:37:b3:59:23:ae:14: 6c:2c:3a:bd:19:7c:5a:98:3d:b3:c7:8e:77:cf:b6:33:16:0b: 31:67:63:f7:7d:d5:6e:3c:1f:2a:c9:6c:9f:3f:96:00:e3:94: c7:69:be:03:b9:4b:50:a9:07:b4:46:f6:cc:3e:1f:f1:f4:b8: ef:84:77:c4:92:09:83:e8:d9:9e:db:b1:b2:c9:87:f1:21:d5: 85:60:80:3c:0e:c4:12:43:cb:46:cb:13:9c:61:7f:b0:7f:2a: c2:e5:3c:fe:cd:7d:cc:20:93:94:30:e5:c2:fe:bd:3c:ba:23: 10:e9:83:47:60:ec:aa:a0:e5:42:0f:b6:55:0a:56:fc:2b:11: f0:9f:8f:27:b9:08:4a:1e:cb:5f:7e:c3:b2:57:a9:9a:08:19: 84:a4:2f:d8:08:58:64:a3:dd:e3:22:94:c7:2c:9c:4d:77:5b: 92:92:01:93:db:df:9e:38:81:56:5c:3a:9b:79:35:5d:1e:25: 32:94:c7:dd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUY1DgSA/9vXqu1s/WvfLl0zPgJ7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAyMDA4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzliYjE4NDgwYWZmNzU5M2JjMmUxY2VjYmIwY2QxNDJl NmMyMjNlYTRhNzk4MjcyZWMzZjg4MjQyYTI1ZTljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCucbQFBZzmLxEJftUvY+58DBOlzZoOXSaIBLe/Mgz8hHZd GpAZNf3hDLspWzSMKH0eWjwSXJdOtf4gyKmilUwwIipgMg+6oZz6i4Roy/CaO1BT t6yulETFWjDWPb5CEhkLtqEGz/uX8HXZlW4nMf0p2Tc5oxWdZhMmLlfdiU6n9nes /eFEZjzW9r0/ysrDejFchyNHwRk4CvtB+FVUq/qWwNebSbbwU3kmBfsWeNTTl1cb VahalyRIoOTKaQ/JtjPSMy1HYNEu0+Y+TUa/gKpkKFkT2KWWO/BMWPfxfAZYiG/T 8ZZDdXA+xw+ID3wP7OH6dSg/4g99qJZoo7bvD2j7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIpytW+QtHOn5E7fV0gCtw8AhqEAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhMDUyMTZjLTRiYmItNDc5OS04NzJjLTgxZWQ3NjVkNmUyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4RzANBgkqhkiG9w0BAQsFAAOCAQEAq1F90FrWJXHT6Lhlvx2Yuei/6vH+ e0gI6VtSPKx9etLJtLdEOx2qOf3YL2L1SgJ64ZZZzkfTp5noCdeltdfgFhYsN7NZ I64UbCw6vRl8Wpg9s8eOd8+2MxYLMWdj933VbjwfKslsnz+WAOOUx2m+A7lLUKkH tEb2zD4f8fS474R3xJIJg+jZntuxssmH8SHVhWCAPA7EEkPLRssTnGF/sH8qwuU8 /s19zCCTlDDlwv69PLojEOmDR2DsqqDlQg+2VQpW/CsR8J+PJ7kISh7LX37Dslep mggZhKQv2AhYZKPd4yKUxyycTXdbkpIBk9vfnjiBVlw6m3k1XR4lMpTH3Q== -----END CERTIFICATE-----Generated at Wed Nov 4 05:57:01 2026 by rpki-client