$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af038d2-354c-4182-aff5-39365e11033e.roa File: 9af038d2-354c-4182-aff5-39365e11033e.roa (raw, json) Hash identifier: Jp0R8osyJ8rrlmlIASbpH8YRZUKr9OIIv8gMq5X5XrU= Subject key identifier: 4E:A7:E4:BF:97:4D:16:63:50:6D:D4:FC:A2:AE:2A:BD:80:22:E5:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FADF16F5553E81F1B8C744A4BD54A107B0EF044 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af038d2-354c-4182-aff5-39365e11033e.roa Signing time: Sun 04 Oct 2026 00:10:10 +0000 ROA not before: Sun 04 Oct 2026 00:10:10 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 152.227.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ad:f1:6f:55:53:e8:1f:1b:8c:74:4a:4b:d5:4a:10:7b:0e:f0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 4 00:10:10 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=5eaeb249363517f934e763350356dfbee94d3dd1a11aa124ce1fd05fb66fe0ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:2a:d2:9e:3b:05:41:9b:42:78:8e:5b:3e: 6a:2a:f3:61:9a:68:2c:58:13:c6:77:55:ca:c2:20: 6d:55:a0:bc:57:4c:2b:e0:5d:58:0d:91:14:f7:98: fa:e9:c2:38:9c:ea:ac:ac:4c:9d:c6:a5:39:aa:5e: 0b:90:6a:ba:a0:fe:bb:c7:84:ea:d8:8b:cf:78:d8: d5:6f:30:17:fa:bb:30:e7:f7:97:fd:fb:4b:f8:7f: f7:f5:7e:ed:1f:7a:fc:09:2d:df:d4:42:47:f0:25: bf:5a:79:0d:61:ac:38:3f:63:8e:a2:b7:2a:b2:1f: a1:38:fa:4f:34:29:7e:5a:5d:d3:68:43:75:a1:1c: b3:bf:f0:56:ad:26:6d:23:42:40:d3:0e:c1:6f:49: 62:4a:3d:cc:ab:22:8d:22:18:81:5c:f7:03:ac:22: e0:74:7c:d8:39:bd:9a:81:04:5e:30:20:aa:6f:79: 14:32:12:1b:8a:0c:fa:b9:eb:a4:2b:cb:c3:18:3d: f5:bb:71:4d:ae:26:70:70:1a:48:79:97:b5:f8:65: de:68:05:a4:72:a7:bd:a9:d6:d2:f4:2e:3b:a1:cf: 19:ce:10:d2:69:8e:fb:5d:07:93:be:74:a9:81:ae: ed:cf:de:12:fd:4c:78:3e:10:84:f5:41:28:5e:92: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A7:E4:BF:97:4D:16:63:50:6D:D4:FC:A2:AE:2A:BD:80:22:E5:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af038d2-354c-4182-aff5-39365e11033e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:cb:f2:3d:c3:a5:cc:11:d1:ae:c8:de:73:99:04:e2:67:b8: 14:9e:03:2c:26:5c:50:0a:71:d1:b9:39:5f:70:86:59:32:ef: e1:cf:24:ba:ed:92:3b:e0:5c:a1:78:07:fe:82:26:5f:96:a4: eb:e9:1a:c1:9a:d3:8c:f1:ca:1c:44:64:1c:3f:0c:61:f8:29: 75:d3:0f:3b:94:a0:28:24:fd:95:ae:fa:9b:e6:6a:f6:1c:3f: 66:23:c1:1f:19:a0:38:0c:8f:37:22:51:67:22:c3:99:96:ba: 23:2b:33:97:00:89:6e:a6:c3:77:2c:33:db:a2:84:7c:2b:f0: 7a:58:fd:73:6f:f2:f5:ca:14:5f:17:a8:de:73:c0:d7:4c:06: 1c:92:ea:99:07:f5:c1:7e:65:42:cc:23:0a:a2:b4:7a:0c:70: 44:81:97:47:8a:b0:e5:c6:a2:3e:a3:ee:5d:1c:ad:88:a0:7e: f7:ff:4d:63:6f:70:b0:b2:f1:2d:4a:ef:5b:bb:06:4a:73:b7: f3:0e:a4:f9:3c:bd:95:7b:8d:66:ae:07:2b:ea:36:16:36:73: 81:ca:ad:b6:6a:89:12:f0:75:1f:0d:85:1b:a9:dd:59:dc:9c: 10:55:f9:4f:ae:17:9d:cd:f3:6e:44:d6:15:d1:2b:a4:2d:90: 6a:3d:45:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUL63xb1VT6B8bjHRKS9VKEHsO8EQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA0MDAxMDEwWhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWFlYjI0OTM2MzUxN2Y5MzRlNzYzMzUwMzU2ZGZiZWU5 NGQzZGQxYTExYWExMjRjZTFmZDA1ZmI2NmZlMGVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjuSrSnjsFQZtCeI5bPmoq82GaaCxYE8Z3VcrCIG1VoLxX TCvgXVgNkRT3mPrpwjic6qysTJ3GpTmqXguQarqg/rvHhOrYi8942NVvMBf6uzDn 95f9+0v4f/f1fu0fevwJLd/UQkfwJb9aeQ1hrDg/Y46ityqyH6E4+k80KX5aXdNo Q3WhHLO/8FatJm0jQkDTDsFvSWJKPcyrIo0iGIFc9wOsIuB0fNg5vZqBBF4wIKpv eRQyEhuKDPq566Qry8MYPfW7cU2uJnBwGkh5l7X4Zd5oBaRyp72p1tL0LjuhzxnO ENJpjvtdB5O+dKmBru3P3hL9THg+EIT1QSheknKvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTqfkv5dNFmNQbdT8oq4qvYAi5YkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhZjAzOGQyLTM1NGMtNDE4Mi1hZmY1LTM5MzY1ZTExMDMzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCY4zANBgkqhkiG9w0BAQsFAAOCAQEAasvyPcOlzBHRrsjec5kE4me4FJ4D LCZcUApx0bk5X3CGWTLv4c8kuu2SO+BcoXgH/oImX5ak6+kawZrTjPHKHERkHD8M YfgpddMPO5SgKCT9la76m+Zq9hw/ZiPBHxmgOAyPNyJRZyLDmZa6IyszlwCJbqbD dywz26KEfCvwelj9c2/y9coUXxeo3nPA10wGHJLqmQf1wX5lQswjCqK0egxwRIGX R4qw5caiPqPuXRytiKB+9/9NY29wsLLxLUrvW7sGSnO38w6k+Ty9lXuNZq4HK+o2 FjZzgcqttmqJEvB1Hw2FG6ndWdycEFX5T64Xnc3zbkTWFdErpC2Qaj1FGQ== -----END CERTIFICATE-----Generated at Tue Nov 3 22:39:11 2026 by rpki-client