$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a015cff7-ca3c-4365-801a-e2038c714d7f.roa File: a015cff7-ca3c-4365-801a-e2038c714d7f.roa (raw, json) Hash identifier: BLhflI+/lkZdBy29pjCZUeB5JyZa+M4Y7L4Vz4IyGKs= Subject key identifier: 3C:B8:E1:DE:53:55:6D:3D:F6:A2:E6:C3:4A:66:4E:3E:E8:9C:F7:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A47606C9F2C9E5CBB4DA3D06350B3266116A5BB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a015cff7-ca3c-4365-801a-e2038c714d7f.roa Signing time: Sat 24 Oct 2026 00:41:12 +0000 ROA not before: Sat 24 Oct 2026 00:41:12 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:47:60:6c:9f:2c:9e:5c:bb:4d:a3:d0:63:50:b3:26:61:16:a5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:41:12 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=f25e110d071a8db11fd38eccec17af7c0602f09910af9479ad0fdb0a7346a1cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:4b:d3:40:b8:8c:15:55:b3:b4:18:40:9c: 87:e4:77:33:71:ca:90:bc:6a:f8:40:74:c9:57:0c: 5b:51:a9:b4:97:52:1f:9c:58:53:30:5a:19:4b:8c: 88:6c:d0:6f:1a:f5:d0:27:d0:fa:9f:71:9b:f1:47: db:56:17:06:4f:9b:6e:3b:2b:b7:2c:db:00:8a:a0: 69:c8:fe:7d:ff:5f:a7:07:99:0f:3c:63:f0:fd:21: 76:3d:0e:d9:f3:2e:f3:0d:7a:7e:35:1b:d5:0d:bd: 38:c7:cc:87:ca:2a:b2:5b:3c:3d:96:57:c5:f2:b3: d0:46:21:29:38:17:10:84:5b:65:26:64:45:80:6a: 96:90:5c:fb:a7:19:05:90:b5:e5:1e:74:f6:20:55: 9f:3f:e7:8e:30:0c:fb:60:92:00:c9:4f:c0:76:7b: ef:5f:16:b5:43:85:4e:3c:01:f3:0b:16:69:43:60: 28:ae:4d:f8:6c:15:8b:c5:8d:01:0d:84:2e:b3:60: cd:a7:4f:31:cf:e1:e8:13:86:ce:a9:b2:d7:8d:16: 30:f9:9e:b0:0d:2a:f6:f6:8a:0d:7c:a4:56:5f:aa: 99:b7:34:20:a1:34:e5:9c:7d:e4:e1:18:aa:0d:e2: dd:d1:4b:af:7f:86:7d:76:f1:19:a2:65:9d:e5:5c: 5f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B8:E1:DE:53:55:6D:3D:F6:A2:E6:C3:4A:66:4E:3E:E8:9C:F7:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a015cff7-ca3c-4365-801a-e2038c714d7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.240.0/23 Signature Algorithm: sha256WithRSAEncryption 36:3a:4a:84:82:32:3a:11:2c:00:86:66:78:fd:a4:1e:3d:5f: 6f:09:69:d8:1f:fd:a0:73:0d:39:27:3e:63:1a:e0:ca:00:ce: 5c:07:fe:66:2e:7f:29:de:28:21:5f:22:73:1c:11:49:b3:41: b8:bf:9c:46:06:f7:58:ec:26:1a:2b:b9:ea:59:ab:d0:d5:43: 4a:ce:84:a3:6b:50:93:48:2c:cd:e0:e1:4d:68:81:e8:9a:82: 63:91:d7:f0:71:3d:8d:4e:07:5d:2e:d6:44:24:44:82:8e:11: 78:27:c9:53:fe:d0:2a:4b:e0:06:4f:10:6a:0f:34:ec:fc:26: 64:18:b2:4b:40:74:39:4f:6a:21:70:82:b8:93:7d:37:6c:ed: e9:8f:2a:73:c9:39:a5:bf:c8:43:85:68:16:81:a0:ce:34:06: c2:91:d6:c5:f8:c8:d2:1e:5d:24:7b:77:9f:18:e8:f2:90:1f: 4b:00:7c:0c:f4:9e:fa:c3:37:a3:5e:ab:54:4b:25:73:80:f5: 7b:6d:44:ac:16:e8:6d:cc:53:3b:cd:0a:f9:be:b7:c5:bf:20: 4a:17:f8:61:9a:e5:b4:4e:0b:e8:c2:88:ea:34:8b:52:84:0e: af:f2:d9:ad:21:0e:6f:f7:f7:40:06:11:2c:fe:83:6d:0f:d0: 40:9e:41:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWkdgbJ8snly7TaPQY1CzJmEWpbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDA0MTEyWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjVlMTEwZDA3MWE4ZGIxMWZkMzhlY2NlYzE3YWY3YzA2 MDJmMDk5MTBhZjk0NzlhZDBmZGIwYTczNDZhMWNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDILkvTQLiMFVWztBhAnIfkdzNxypC8avhAdMlXDFtRqbSX Uh+cWFMwWhlLjIhs0G8a9dAn0PqfcZvxR9tWFwZPm247K7cs2wCKoGnI/n3/X6cH mQ88Y/D9IXY9DtnzLvMNen41G9UNvTjHzIfKKrJbPD2WV8Xys9BGISk4FxCEW2Um ZEWAapaQXPunGQWQteUedPYgVZ8/544wDPtgkgDJT8B2e+9fFrVDhU48AfMLFmlD YCiuTfhsFYvFjQENhC6zYM2nTzHP4egThs6psteNFjD5nrANKvb2ig18pFZfqpm3 NCChNOWcfeThGKoN4t3RS69/hn128RmiZZ3lXF+VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPLjh3lNVbT32oubDSmZOPuic9/cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwMTVjZmY3LWNhM2MtNDM2NS04MDFhLWUyMDM4YzcxNGQ3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFAPAwDQYJKoZIhvcNAQELBQADggEBADY6SoSCMjoRLACGZnj9pB49X28J adgf/aBzDTknPmMa4MoAzlwH/mYufyneKCFfInMcEUmzQbi/nEYG91jsJhoruepZ q9DVQ0rOhKNrUJNILM3g4U1ogeiagmOR1/BxPY1OB10u1kQkRIKOEXgnyVP+0CpL 4AZPEGoPNOz8JmQYsktAdDlPaiFwgriTfTds7emPKnPJOaW/yEOFaBaBoM40BsKR 1sX4yNIeXSR7d58Y6PKQH0sAfAz0nvrDN6Neq1RLJXOA9XttRKwW6G3MUzvNCvm+ t8W/IEoX+GGa5bROC+jCiOo0i1KEDq/y2a0hDm/390AGESz+g20P0ECeQfI= -----END CERTIFICATE-----Generated at Sat Oct 31 03:24:52 2026 by rpki-client