$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a64475c4-4e72-4427-8384-c08a7d2cca65.roa File: a64475c4-4e72-4427-8384-c08a7d2cca65.roa (raw, json) Hash identifier: 7zZP2PraPnzsQsD2xkFj+DN9cWTJf5C6nAhdn7iP5eg= Subject key identifier: 72:CF:37:DC:97:91:B3:1F:A3:C4:78:E5:67:9C:30:CD:97:BB:43:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E7EA19452957659C548EA18E085B57D89355A34 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a64475c4-4e72-4427-8384-c08a7d2cca65.roa Signing time: Sat 24 Oct 2026 01:03:29 +0000 ROA not before: Sat 24 Oct 2026 01:03:29 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 220.157.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7e:a1:94:52:95:76:59:c5:48:ea:18:e0:85:b5:7d:89:35:5a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 01:03:29 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=963e9cd5c159919bbc556dd7962b639c87a0bda3bdc14245208d724beaee720b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:6f:89:4e:dd:c3:dc:c1:c3:40:eb:9d:a6: 10:ec:cd:df:95:47:15:58:cd:f6:34:fa:07:21:82: 5e:0d:40:3f:2e:be:34:9d:38:66:12:16:1a:5e:99: 16:77:29:a7:32:5b:ae:26:51:17:95:95:42:e8:fa: 9e:58:bd:44:f2:27:c6:2d:d4:cc:b2:a7:c4:48:02: 68:ba:84:0b:d1:10:13:9c:bb:23:2c:a8:c6:d9:4c: af:86:9f:b4:d9:8d:e8:3a:6a:e4:f1:ab:fd:01:3e: 7f:cf:1c:e2:5b:bc:14:f7:c7:93:09:6d:42:d7:e9: cb:4e:b4:38:0d:7e:7c:71:8a:db:ef:ff:ba:39:01: 78:3e:c4:9d:ee:84:d1:65:bf:1a:70:6c:7d:23:c3: c8:85:1f:a2:8d:1d:de:e7:20:5e:c3:e2:1b:f5:62: 67:41:ea:73:48:14:60:ba:c1:00:4f:b4:4c:2e:64: ad:53:78:5c:85:2d:39:77:4c:4b:5e:85:12:03:73: cf:b9:76:8f:d5:c0:9c:53:3b:dc:83:2c:d8:16:2a: 05:d5:aa:98:f4:24:96:e4:db:c4:72:5e:9e:3a:43: 68:9c:3e:59:2f:9f:f8:fc:65:ee:02:47:6a:92:7e: 78:8d:a8:39:d1:48:c8:f3:69:2f:fe:7e:79:67:9f: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CF:37:DC:97:91:B3:1F:A3:C4:78:E5:67:9C:30:CD:97:BB:43:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a64475c4-4e72-4427-8384-c08a7d2cca65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.88.0/23 Signature Algorithm: sha256WithRSAEncryption 75:a0:34:3d:98:73:b1:e1:6e:1f:7b:d7:74:1f:d9:67:10:b4: 7a:e9:05:9d:eb:07:53:39:6d:df:e9:c7:2e:e6:36:c5:88:0b: 75:45:38:f7:20:ac:58:6f:81:22:aa:d7:06:34:4d:d8:75:35: 84:24:2f:29:94:31:74:c1:7c:19:89:3b:d8:a9:bd:ff:83:29: ef:53:5b:6f:9b:71:35:d2:00:3e:93:98:af:22:39:31:ed:9c: 74:22:65:89:5b:7f:cc:3f:bb:2b:54:40:35:e7:c2:2a:03:81: a4:7c:ab:c3:29:08:9c:db:d5:4c:eb:9d:e7:da:f8:10:46:9c: c7:d7:b9:eb:1a:1a:84:af:0a:b2:4e:73:0e:a2:d2:a6:7e:c4: 2d:9e:ec:ca:5c:61:5e:c7:3d:96:a6:c3:8e:13:ed:4e:2d:06: b3:2c:e9:8f:a1:78:9d:43:35:6b:7c:82:61:af:22:0a:4c:49: 74:f4:ac:2e:2e:9c:39:f4:57:62:fe:e1:f3:f4:84:2d:0d:82: 7d:89:ef:47:4c:4f:9c:c6:92:a1:34:03:8c:60:32:0f:f7:29: 00:0e:6a:d9:b3:65:9b:52:ba:42:50:9a:49:ae:2e:59:73:a4: 01:94:3d:85:af:63:4f:5b:57:ca:cf:f0:10:52:fa:5f:b1:a9: 7e:5e:28:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfn6hlFKVdlnFSOoY4IW1fYk1WjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDEwMzI5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjNlOWNkNWMxNTk5MTliYmM1NTZkZDc5NjJiNjM5Yzg3 YTBiZGEzYmRjMTQyNDUyMDhkNzI0YmVhZWU3MjBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJb2+JTt3D3MHDQOudphDszd+VRxVYzfY0+gchgl4NQD8u vjSdOGYSFhpemRZ3KacyW64mUReVlULo+p5YvUTyJ8Yt1Myyp8RIAmi6hAvREBOc uyMsqMbZTK+Gn7TZjeg6auTxq/0BPn/PHOJbvBT3x5MJbULX6ctOtDgNfnxxitvv /7o5AXg+xJ3uhNFlvxpwbH0jw8iFH6KNHd7nIF7D4hv1YmdB6nNIFGC6wQBPtEwu ZK1TeFyFLTl3TEtehRIDc8+5do/VwJxTO9yDLNgWKgXVqpj0JJbk28RyXp46Q2ic Plkvn/j8Ze4CR2qSfniNqDnRSMjzaS/+fnlnn7OBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcs833JeRsx+jxHjlZ5wwzZe7Q7UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NDQ3NWM0LTRlNzItNDQyNy04Mzg0LWMwOGE3ZDJjY2E2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnVgwDQYJKoZIhvcNAQELBQADggEBAHWgND2Yc7Hhbh9713Qf2WcQtHrp BZ3rB1M5bd/pxy7mNsWIC3VFOPcgrFhvgSKq1wY0Tdh1NYQkLymUMXTBfBmJO9ip vf+DKe9TW2+bcTXSAD6TmK8iOTHtnHQiZYlbf8w/uytUQDXnwioDgaR8q8MpCJzb 1Uzrnefa+BBGnMfXuesaGoSvCrJOcw6i0qZ+xC2e7MpcYV7HPZamw44T7U4tBrMs 6Y+heJ1DNWt8gmGvIgpMSXT0rC4unDn0V2L+4fP0hC0Ngn2J70dMT5zGkqE0A4xg Mg/3KQAOatmzZZtSukJQmkmuLllzpAGUPYWvY09bV8rP8BBS+l+xqX5eKJw= -----END CERTIFICATE-----Generated at Mon Nov 2 16:45:28 2026 by rpki-client