$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d63cd7b-5f9f-40bd-a7d4-e2a1d5ca5822.roa File: 9d63cd7b-5f9f-40bd-a7d4-e2a1d5ca5822.roa (raw, json) Hash identifier: wuGLnChDKNIetFd2ouClLLScVG80XGMKa1UI+BeD+EA= Subject key identifier: 76:F1:5C:70:4C:68:78:31:B9:FE:52:F6:DD:69:AA:05:92:5C:41:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69698A2DB6481337F79096FDA7CF003615E65E4B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d63cd7b-5f9f-40bd-a7d4-e2a1d5ca5822.roa Signing time: Tue 13 Oct 2026 00:10:07 +0000 ROA not before: Tue 13 Oct 2026 00:10:07 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:69:8a:2d:b6:48:13:37:f7:90:96:fd:a7:cf:00:36:15:e6:5e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:10:07 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=06346b250324b1178e7ee83a4e940454dcbd4e3eb827007d3ca018a54384d22d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:27:1a:39:5f:f0:85:c6:3f:61:ee:dd:21: d6:2f:b9:2a:b8:fd:e2:8f:0f:71:39:88:41:e7:15: 20:42:7e:b8:4f:18:d5:8f:15:9d:6b:23:a9:a2:fd: ee:fd:7e:0d:f4:45:ab:ea:da:d9:c2:36:8d:92:68: e6:be:9b:74:d3:d5:36:98:b9:aa:a6:42:86:22:c9: aa:73:c9:b6:94:34:e0:65:ad:9c:be:1e:c5:ee:d0: 09:51:fe:c8:a4:27:47:e4:43:6c:d2:66:ce:97:97: cf:8b:08:fe:8c:9f:ad:50:c3:79:89:73:a1:73:16: 68:3c:50:19:21:d2:cd:18:bd:41:29:c9:62:82:97: 17:3e:5b:c5:45:34:5c:95:43:79:56:35:32:40:74: 4d:a1:7f:c5:67:41:86:74:e2:09:e7:ed:3a:b0:f1: 92:1d:ae:9b:67:4a:33:7b:e2:f9:ae:89:a0:7e:20: 71:70:c0:a1:c0:c3:73:77:e9:2b:4f:f5:38:f7:ba: dc:d0:d3:91:0f:e1:63:05:87:31:51:bb:46:1e:db: 55:13:9d:0e:46:8b:df:ca:81:56:d2:13:34:d1:6e: 4f:22:95:7f:59:70:ea:3d:41:c2:cd:0e:9f:59:8f: 27:cb:d5:01:66:24:2b:e8:1b:97:99:09:10:dc:eb: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F1:5C:70:4C:68:78:31:B9:FE:52:F6:DD:69:AA:05:92:5C:41:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d63cd7b-5f9f-40bd-a7d4-e2a1d5ca5822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.128.0/21 Signature Algorithm: sha256WithRSAEncryption 81:b7:81:da:7e:43:eb:c7:f3:68:08:bb:c2:e9:c3:e8:9d:4f: 18:2c:75:34:22:b5:81:7e:cc:9a:e1:65:ec:58:8b:95:3f:1d: 13:94:0b:14:a3:d0:1d:53:f8:61:6d:65:3e:70:8b:6b:89:64: b3:f1:ca:1f:7f:48:44:f8:85:a7:5a:b9:83:50:5d:ca:4b:79: 8b:d0:97:c9:6a:34:05:16:c9:20:da:49:8f:8e:aa:f8:88:0c: 4f:49:ca:c1:2f:4d:bb:32:4a:ca:8f:b4:15:d0:e9:0c:54:9d: 71:b5:59:19:c8:f7:f4:f1:cc:32:5d:3d:5e:87:76:f3:15:61: 92:04:34:ea:e2:79:91:0e:43:c0:27:4d:c7:92:07:e7:72:70: 69:b0:27:a2:0e:37:6f:51:d9:f5:c3:82:44:bc:ca:25:fb:25: d1:ee:fa:49:cc:6b:bf:45:86:7a:0c:ea:bb:dc:54:04:0d:e5: 62:dc:61:6f:6b:70:7d:1e:7f:f6:0d:43:e2:68:e2:c4:f6:a9: 5d:30:c2:98:89:b8:26:c2:a8:b7:17:ff:33:16:d1:96:00:72: 70:e7:f9:72:d1:82:f8:e9:e7:40:d7:b9:2b:0e:77:7f:18:2f: c3:e2:b6:1e:2d:e8:e8:e4:9f:2c:2d:a5:6e:4e:89:43:26:bc: 59:42:bf:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaWmKLbZIEzf3kJb9p88ANhXmXkswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAxMDA3WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjM0NmIyNTAzMjRiMTE3OGU3ZWU4M2E0ZTk0MDQ1NGRj YmQ0ZTNlYjgyNzAwN2QzY2EwMThhNTQzODRkMjJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChRScaOV/whcY/Ye7dIdYvuSq4/eKPD3E5iEHnFSBCfrhP GNWPFZ1rI6mi/e79fg30Ravq2tnCNo2SaOa+m3TT1TaYuaqmQoYiyapzybaUNOBl rZy+HsXu0AlR/sikJ0fkQ2zSZs6Xl8+LCP6Mn61Qw3mJc6FzFmg8UBkh0s0YvUEp yWKClxc+W8VFNFyVQ3lWNTJAdE2hf8VnQYZ04gnn7Tqw8ZIdrptnSjN74vmuiaB+ IHFwwKHAw3N36StP9Tj3utzQ05EP4WMFhzFRu0Ye21UTnQ5Gi9/KgVbSEzTRbk8i lX9ZcOo9QcLNDp9ZjyfL1QFmJCvoG5eZCRDc65EjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdvFccExoeDG5/lL23WmqBZJcQWQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkNjNjZDdiLTVmOWYtNDBiZC1hN2Q0LWUyYTFkNWNhNTgyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl4AwDQYJKoZIhvcNAQELBQADggEBAIG3gdp+Q+vH82gIu8Lpw+idTxgs dTQitYF+zJrhZexYi5U/HROUCxSj0B1T+GFtZT5wi2uJZLPxyh9/SET4hadauYNQ XcpLeYvQl8lqNAUWySDaSY+OqviIDE9JysEvTbsySsqPtBXQ6QxUnXG1WRnI9/Tx zDJdPV6HdvMVYZIENOrieZEOQ8AnTceSB+dycGmwJ6ION29R2fXDgkS8yiX7JdHu +knMa79FhnoM6rvcVAQN5WLcYW9rcH0ef/YNQ+Jo4sT2qV0wwpiJuCbCqLcX/zMW 0ZYAcnDn+XLRgvjp50DXuSsOd38YL8Pith4t6OjknywtpW5OiUMmvFlCv44= -----END CERTIFICATE-----Generated at Sat Oct 31 06:09:14 2026 by rpki-client