$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa File: 9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa (raw, json) Hash identifier: +3nX2psj0HfgFG9DS106T+T6ybuDP1gBIUo8k7p2+0s= Subject key identifier: 4C:89:BC:62:F7:B0:CA:AE:EE:86:71:B0:31:BE:A4:DE:37:E6:B7:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73A341A5F3C4B4EC235F5580E021BE3530684D58 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa Signing time: Fri 23 Oct 2026 01:50:07 +0000 ROA not before: Fri 23 Oct 2026 01:50:07 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a3:41:a5:f3:c4:b4:ec:23:5f:55:80:e0:21:be:35:30:68:4d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:50:07 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=9a54ca5802e72ad4fe5df81a1d424283f1f090c91330e6bd6db4f16f2eac90d7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:9d:09:31:fa:24:02:85:52:84:b2:02:5b: 04:05:20:ef:00:02:9d:6d:1e:49:5c:1b:c4:14:09: a6:9a:88:ee:64:c2:00:e7:b9:f0:ce:a0:4c:5f:8f: 09:49:30:c8:9c:f0:82:cf:cf:99:3e:98:88:03:3d: d6:32:3c:83:08:1d:dc:30:c5:39:96:42:fc:a0:6d: 64:6a:2f:e8:2e:75:5d:48:40:d2:29:d0:1a:08:34: ae:02:da:aa:d3:6a:b6:0b:c0:29:44:70:e2:d5:ab: e6:e2:e9:40:86:14:e0:95:52:69:23:5f:80:04:17: d7:a4:7c:5d:f0:5b:8d:a0:21:24:9d:eb:6b:b0:3f: 9d:68:79:d1:d1:c8:ae:b4:4b:74:a0:50:5b:31:fd: aa:e0:77:8d:53:fe:73:92:c1:0c:19:b5:f3:d5:4d: 37:ab:77:f4:95:86:c3:0b:d7:97:62:9e:93:17:0d: fe:b6:6d:9a:da:c4:c1:f1:d9:b9:d2:43:87:07:c2: fc:f9:d3:40:c1:ce:91:29:a0:e0:7c:41:f5:4a:26: e1:c2:1b:55:a5:bd:0a:26:5c:67:51:1f:54:46:dc: b2:22:3e:7d:25:f3:56:64:db:bf:4d:2e:5f:f2:6f: db:4d:09:50:c0:ce:00:bb:ef:86:a0:79:cf:36:72: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:BC:62:F7:B0:CA:AE:EE:86:71:B0:31:BE:A4:DE:37:E6:B7:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.0.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:58:84:dc:99:4a:f1:0e:2e:80:96:93:1f:73:bd:25:ff:59: 3f:ea:f6:76:bf:de:14:7b:36:3e:ff:62:d9:5f:17:f1:f3:d6: 86:f5:35:b4:c1:c9:7e:37:03:2a:92:42:1c:99:e2:ae:eb:6c: c5:42:b3:d7:bc:45:91:7d:fc:90:d6:b6:9f:8d:10:48:a3:6b: a3:de:db:f9:33:1f:16:3b:93:01:36:f1:cb:fd:dd:c2:eb:85: ea:d7:6e:61:a4:be:1d:e0:c5:0f:49:67:83:b9:85:10:f1:58: 6a:c8:93:6f:13:c4:f2:b3:9c:b3:62:2e:0a:d3:90:38:52:40: be:2b:64:46:4d:9b:82:89:61:2a:b0:b1:63:62:0b:a1:59:fe: ae:6d:0f:d1:9f:fe:07:fe:79:be:a1:d7:f7:df:e1:2d:dd:96: 66:19:d3:8d:bc:d0:e1:71:6e:c5:7a:45:29:59:d3:ce:97:11: a8:f0:9b:c5:0a:ad:45:1e:85:7f:3c:66:fb:ca:9f:78:90:cb: 4f:cf:6c:87:a0:9e:b6:37:88:8d:50:c8:47:f8:db:75:17:f2: 7a:65:33:67:34:33:22:fe:5a:f5:27:00:a8:57:db:67:71:83: e4:84:ec:21:12:cb:aa:d0:f6:f1:92:80:e6:41:d8:a3:52:b4: 97:9f:9e:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc6NBpfPEtOwjX1WA4CG+NTBoTVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDE1MDA3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTU0Y2E1ODAyZTcyYWQ0ZmU1ZGY4MWExZDQyNDI4M2Yx ZjA5MGM5MTMzMGU2YmQ2ZGI0ZjE2ZjJlYWM5MGQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDBJ0JMfokAoVShLICWwQFIO8AAp1tHklcG8QUCaaaiO5k wgDnufDOoExfjwlJMMic8ILPz5k+mIgDPdYyPIMIHdwwxTmWQvygbWRqL+gudV1I QNIp0BoINK4C2qrTarYLwClEcOLVq+bi6UCGFOCVUmkjX4AEF9ekfF3wW42gISSd 62uwP51oedHRyK60S3SgUFsx/argd41T/nOSwQwZtfPVTTerd/SVhsML15dinpMX Df62bZraxMHx2bnSQ4cHwvz500DBzpEpoOB8QfVKJuHCG1WlvQomXGdRH1RG3LIi Pn0l81Zk279NLl/yb9tNCVDAzgC774agec82cusdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTIm8Yvewyq7uhnGwMb6k3jfmt/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhZjQyYjg0LTg2OGItNDBhZS04YjZmLTI1ODFiYTNjZjYxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMX/gAwDQYJKoZIhvcNAQELBQADggEBAE9YhNyZSvEOLoCWkx9zvSX/WT/q 9na/3hR7Nj7/YtlfF/Hz1ob1NbTByX43AyqSQhyZ4q7rbMVCs9e8RZF9/JDWtp+N EEija6Pe2/kzHxY7kwE28cv93cLrherXbmGkvh3gxQ9JZ4O5hRDxWGrIk28TxPKz nLNiLgrTkDhSQL4rZEZNm4KJYSqwsWNiC6FZ/q5tD9Gf/gf+eb6h1/ff4S3dlmYZ 04280OFxbsV6RSlZ086XEajwm8UKrUUehX88ZvvKn3iQy0/PbIegnrY3iI1QyEf4 23UX8nplM2c0MyL+WvUnAKhX22dxg+SE7CESy6rQ9vGSgOZB2KNStJefnj8= -----END CERTIFICATE-----Generated at Mon Nov 2 18:49:08 2026 by rpki-client