$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa File: 9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa (raw, json) Hash identifier: ycVEYvfBhofdxxh6Q04hCd/cIn4z4zbqfQiExbjJrwg= Subject key identifier: 61:FB:2D:69:C4:19:F6:3B:AF:62:21:27:E8:8D:FE:23:79:3D:A6:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FBA1D101D5D0A1BE20BB181FA1830823806F7BC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa Signing time: Fri 16 Oct 2026 00:31:44 +0000 ROA not before: Fri 16 Oct 2026 00:31:44 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.179.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ba:1d:10:1d:5d:0a:1b:e2:0b:b1:81:fa:18:30:82:38:06:f7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:31:44 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=3281233e281a6182134feefcfaaca298b3f1790b3be4bb78dc6c438aaaeb8a5c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:30:05:67:3b:d0:3f:17:a4:2b:4b:e5:fa:d0: 4d:d9:09:50:9d:d4:d0:0b:db:97:7d:a5:ce:7c:51: de:fe:bb:c7:c6:ef:43:e1:fe:8d:0f:a8:27:d2:14: 54:4d:57:47:a1:33:6c:bb:5a:68:23:88:43:8b:de: d1:e8:58:a2:69:3d:69:d8:3f:7c:a0:40:98:75:d7: 04:e4:fc:7f:a6:2c:7f:ca:96:f5:35:84:ff:2c:c3: 19:e9:b1:36:b5:75:18:ec:90:33:e6:1c:f8:69:e0: 20:68:0a:d3:81:b3:48:5b:6d:1d:07:e4:6f:38:28: 0e:5e:36:fa:20:40:23:d1:eb:d6:8f:17:6c:89:e8: 1f:9f:62:9c:77:c1:c9:7f:05:d9:1e:c9:93:22:cc: f1:e0:42:46:0e:82:02:98:25:90:19:91:17:c1:d6: 02:96:8b:1c:ce:08:ba:de:7f:46:66:e6:34:5f:a0: 97:9b:0c:ca:70:92:3f:1c:38:19:fe:e6:ac:fa:7a: d1:75:40:de:c0:c9:19:61:f1:ea:06:74:96:75:0a: 73:7a:e6:e3:e8:ac:fc:e9:55:2c:4b:96:e3:24:ef: dd:22:b4:53:1c:75:06:53:53:04:a2:68:f9:8a:d1: 07:a6:c6:db:6d:9b:f4:4a:0e:86:64:04:76:b9:36: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FB:2D:69:C4:19:F6:3B:AF:62:21:27:E8:8D:FE:23:79:3D:A6:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:ff:b6:52:b1:83:85:4d:40:8e:a3:a5:45:7f:39:4e:3e:91: 4d:21:c3:73:36:c8:b7:aa:95:cb:3c:c1:1a:db:d5:f8:30:82: 5e:d0:02:bf:9b:29:d3:c7:bd:4c:56:07:b9:4a:3b:48:12:ca: 14:cc:84:b1:3c:7c:7d:61:ed:dc:67:a1:c2:f5:23:9b:5f:39: 3a:e1:1f:bf:fa:48:11:19:95:7b:e7:87:61:a4:15:7b:57:0f: b9:ce:d4:02:e1:66:72:21:50:39:d6:2d:83:c9:c2:cc:53:91: 47:e4:17:3c:ec:e0:0d:69:cc:d1:a0:4c:e6:12:6c:5b:ff:fc: 6b:a8:c3:9e:d0:3f:3c:1d:54:a5:85:f9:fa:b6:7b:f4:92:11: 5d:37:18:1f:46:60:33:48:5b:d8:08:ae:ee:2d:d2:a4:be:fc: 95:98:b4:a2:9a:07:d5:9f:69:23:65:17:f7:29:78:ab:7b:d2: 52:b3:3e:07:ae:07:6c:b6:89:b1:ac:b3:44:a0:c6:d4:05:ad: fd:ab:e5:24:6b:59:46:fb:16:b8:36:3a:cf:ad:a7:39:50:36: ed:67:91:5e:bc:9d:ef:d7:d0:ee:59:b9:c5:5e:dc:ab:42:e1: a0:ca:60:75:0b:cf:b2:be:82:03:09:b7:6f:ab:19:24:7d:70: a2:82:b8:a2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUf7odEB1dChviC7GB+hgwgjgG97wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAzMTQ0WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjgxMjMzZTI4MWE2MTgyMTM0ZmVlZmNmYWFjYTI5OGIz ZjE3OTBiM2JlNGJiNzhkYzZjNDM4YWFhZWI4YTVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdMAVnO9A/F6QrS+X60E3ZCVCd1NAL25d9pc58Ud7+u8fG 70Ph/o0PqCfSFFRNV0ehM2y7WmgjiEOL3tHoWKJpPWnYP3ygQJh11wTk/H+mLH/K lvU1hP8swxnpsTa1dRjskDPmHPhp4CBoCtOBs0hbbR0H5G84KA5eNvogQCPR69aP F2yJ6B+fYpx3wcl/BdkeyZMizPHgQkYOggKYJZAZkRfB1gKWixzOCLref0Zm5jRf oJebDMpwkj8cOBn+5qz6etF1QN7AyRlh8eoGdJZ1CnN65uPorPzpVSxLluMk790i tFMcdQZTUwSiaPmK0Qemxtttm/RKDoZkBHa5Nv6BAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYfstacQZ9juvYiEn6I3+I3k9pqowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljNzhjNzBmLWZlYTAtNGE2Ny04MjMzLTZjZmUyNTU1ZDIxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRszANBgkqhkiG9w0BAQsFAAOCAQEASv+2UrGDhU1AjqOlRX85Tj6RTSHD czbIt6qVyzzBGtvV+DCCXtACv5sp08e9TFYHuUo7SBLKFMyEsTx8fWHt3GehwvUj m185OuEfv/pIERmVe+eHYaQVe1cPuc7UAuFmciFQOdYtg8nCzFORR+QXPOzgDWnM 0aBM5hJsW//8a6jDntA/PB1UpYX5+rZ79JIRXTcYH0ZgM0hb2Aiu7i3SpL78lZi0 opoH1Z9pI2UX9yl4q3vSUrM+B64HbLaJsayzRKDG1AWt/avlJGtZRvsWuDY6z62n OVA27WeRXryd79fQ7lm5xV7cq0LhoMpgdQvPsr6CAwm3b6sZJH1wooK4og== -----END CERTIFICATE-----Generated at Sat Oct 31 15:20:53 2026 by rpki-client