$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c644b88-5a33-40dc-826c-573ce65c3b68.roa File: 9c644b88-5a33-40dc-826c-573ce65c3b68.roa (raw, json) Hash identifier: 3ds1zK7fYGnnTIR7TdA8TkqPIB40XIdd0wJc5x4tt6A= Subject key identifier: E2:9E:CE:53:7D:CD:0D:C5:F5:71:A9:0F:AA:32:20:BE:CD:2A:85:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44A3EDDD8F84774F24FEAAFCFF1DAA77665763AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c644b88-5a33-40dc-826c-573ce65c3b68.roa Signing time: Thu 15 Oct 2026 00:10:06 +0000 ROA not before: Thu 15 Oct 2026 00:10:06 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 66.151.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a3:ed:dd:8f:84:77:4f:24:fe:aa:fc:ff:1d:aa:77:66:57:63:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:10:06 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=dc1ea60189b8c4e4b8306ccad11294a2de2cab9b710431542f7a4b0073f7359a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:9f:cd:83:97:0e:9f:df:42:af:a6:5a:6f: 4f:06:61:c2:45:1f:02:28:c2:67:7f:2b:fa:1d:28: 3b:91:9c:63:25:86:47:d7:33:0e:8e:64:b1:2a:cc: 2a:3c:e6:af:ae:e0:49:39:05:6f:9d:6c:10:03:bd: a8:94:fd:5c:84:f6:08:20:18:33:87:4c:09:54:a3: 29:e8:26:70:b9:70:39:cd:a4:c0:4e:96:e2:af:3d: 3f:a0:38:17:96:29:c1:70:92:94:15:cd:64:9f:56: a7:14:b8:f1:2f:e8:63:3b:f6:a0:bb:cb:0b:72:c1: e4:fc:43:69:ce:1b:a6:18:90:e0:f1:6d:b4:03:30: 55:80:92:d3:f6:9a:b6:9b:88:57:05:ba:a5:14:93: 0f:a2:bb:62:9b:3c:1d:25:9c:47:87:d7:0e:5b:00: 20:1f:66:e1:9c:78:e3:ab:9a:78:79:dd:34:9d:c3: 29:2e:23:de:69:ae:68:dd:83:ee:28:fb:3f:7e:7a: f5:d5:d6:86:59:35:b0:ca:c6:a9:10:54:c2:39:6f: b5:95:5c:98:12:6c:74:02:37:f9:34:39:64:50:54: 94:95:40:26:02:96:ff:97:76:c1:f0:64:cf:f2:47: fe:72:52:0d:a8:4c:3c:88:c5:38:5c:34:a0:8e:14: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:CE:53:7D:CD:0D:C5:F5:71:A9:0F:AA:32:20:BE:CD:2A:85:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c644b88-5a33-40dc-826c-573ce65c3b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.151.8.0/22 Signature Algorithm: sha256WithRSAEncryption 46:24:5a:d8:9c:9b:0f:5a:2a:5b:a5:c5:e0:d3:ee:2b:be:63: ce:49:96:68:65:90:54:93:b4:19:04:38:90:f8:b2:d9:38:79: a6:ef:3a:4d:7f:d8:c3:35:6d:97:4e:de:89:af:d4:de:03:e2: cd:1f:f6:e1:e4:35:5d:17:80:7f:7e:01:b3:8f:25:41:46:3f: ac:f7:7a:f7:e6:a8:3d:ce:0f:03:8f:9b:b8:9f:61:77:6b:1e: ec:3b:78:a8:e6:e3:25:5e:0b:7f:e1:b7:bc:4b:c3:fa:80:96: b7:18:66:63:75:7c:f4:07:69:9c:f3:b0:68:ba:05:41:4e:dc: 03:03:9f:c1:1b:db:74:bf:1e:5c:b4:3e:5d:4f:f3:93:eb:e0: 52:cd:37:6e:e9:bb:8d:f5:ea:e2:1d:84:22:36:9f:3a:82:d5: 33:d0:6d:9e:17:a0:3e:fc:9d:2f:52:fe:b5:eb:47:97:8f:e7: e4:80:8d:84:c1:af:39:04:a1:24:24:57:26:6a:f6:d6:20:d6: 37:84:6d:af:e9:d5:da:1b:74:05:b0:3d:14:6c:0e:35:10:10: bd:10:9a:2f:f6:41:42:27:4b:e8:fd:77:a6:5a:47:dc:f3:88: 96:86:3f:a5:81:84:04:a0:90:09:db:a7:e5:d3:8a:f4:cd:d1: ee:50:6d:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURKPt3Y+Ed08k/qr8/x2qd2ZXY68wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAxMDA2WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzFlYTYwMTg5YjhjNGU0YjgzMDZjY2FkMTEyOTRhMmRl MmNhYjliNzEwNDMxNTQyZjdhNGIwMDczZjczNTlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGXZ/Ng5cOn99Cr6Zab08GYcJFHwIowmd/K/odKDuRnGMl hkfXMw6OZLEqzCo85q+u4Ek5BW+dbBADvaiU/VyE9gggGDOHTAlUoynoJnC5cDnN pMBOluKvPT+gOBeWKcFwkpQVzWSfVqcUuPEv6GM79qC7ywtyweT8Q2nOG6YYkODx bbQDMFWAktP2mrabiFcFuqUUkw+iu2KbPB0lnEeH1w5bACAfZuGceOOrmnh53TSd wykuI95prmjdg+4o+z9+evXV1oZZNbDKxqkQVMI5b7WVXJgSbHQCN/k0OWRQVJSV QCYClv+XdsHwZM/yR/5yUg2oTDyIxThcNKCOFLh3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4p7OU33NDcX1cakPqjIgvs0qha0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljNjQ0Yjg4LTVhMzMtNDBkYy04MjZjLTU3M2NlNjVjM2I2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJClwgwDQYJKoZIhvcNAQELBQADggEBAEYkWticmw9aKlulxeDT7iu+Y85J lmhlkFSTtBkEOJD4stk4eabvOk1/2MM1bZdO3omv1N4D4s0f9uHkNV0XgH9+AbOP JUFGP6z3evfmqD3ODwOPm7ifYXdrHuw7eKjm4yVeC3/ht7xLw/qAlrcYZmN1fPQH aZzzsGi6BUFO3AMDn8Eb23S/Hly0Pl1P85Pr4FLNN27pu4316uIdhCI2nzqC1TPQ bZ4XoD78nS9S/rXrR5eP5+SAjYTBrzkEoSQkVyZq9tYg1jeEba/p1dobdAWwPRRs DjUQEL0Qmi/2QUInS+j9d6ZaR9zziJaGP6WBhASgkAnbp+XTivTN0e5QbZ8= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:33 2026 by rpki-client