$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a71a3d04-2b40-4706-a43a-9b48357fed2d.roa File: a71a3d04-2b40-4706-a43a-9b48357fed2d.roa (raw, json) Hash identifier: tNWd+bFm0bqhT+m2RKVI64uBvwn3dGx/dIo/2FKW4uk= Subject key identifier: 65:B6:EB:49:8B:64:C8:C4:AC:A3:07:26:0A:EE:C4:A9:CF:38:CF:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 090C2D54AF365B4ABC10BC0CD5AF5BC7F741B1C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a71a3d04-2b40-4706-a43a-9b48357fed2d.roa Signing time: Fri 09 Oct 2026 00:51:23 +0000 ROA not before: Fri 09 Oct 2026 00:51:23 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 216.216.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0c:2d:54:af:36:5b:4a:bc:10:bc:0c:d5:af:5b:c7:f7:41:b1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 00:51:23 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=0ca5000f997b56687c9dd4da2a559c23571c4667560848f8675e7cf30f6d99ba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:00:3d:2c:9e:b5:01:82:6f:b8:e3:72:19: f1:f9:26:b4:b7:c3:c7:89:5f:74:2b:b6:79:51:eb: 76:90:99:f0:eb:f1:e8:a5:0b:e5:de:c7:1a:c3:f5: 68:a9:e8:98:44:15:b7:19:b8:fc:ba:04:89:97:9a: 22:62:b1:a7:9c:ea:b0:e6:78:41:c8:bd:c0:1c:6c: 3e:3f:b5:36:ff:13:55:0c:02:ff:d0:62:5d:ac:eb: 6f:cb:82:57:d7:bc:8a:fd:72:26:c6:f7:84:f8:83: aa:13:3d:64:8f:9c:c3:c2:62:f0:d9:57:90:c0:7b: e7:b0:ef:c6:fc:ac:96:09:aa:c7:b1:47:23:7c:a4: b4:66:fd:14:b7:cc:32:9e:5a:32:0e:58:c0:bc:6f: 6f:16:6c:d2:ee:e3:fa:78:8a:32:7d:bb:9f:39:98: 92:e9:40:74:31:0c:4e:9f:82:ef:36:59:4c:a7:75: 2d:f6:dc:99:ed:ad:6c:db:5b:90:81:ea:28:08:55: d6:f3:ec:26:45:b0:d2:84:69:9e:cd:c7:35:6d:b2: 5d:11:8e:0a:9e:45:78:c6:b4:2e:62:db:06:8e:5a: 50:26:54:e8:de:59:01:99:b4:1c:93:de:6f:6e:c8: 35:9d:12:85:29:d1:d3:ed:4e:42:6c:28:5b:c0:8d: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B6:EB:49:8B:64:C8:C4:AC:A3:07:26:0A:EE:C4:A9:CF:38:CF:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a71a3d04-2b40-4706-a43a-9b48357fed2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.216.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3a:d9:54:69:54:86:b0:98:39:d4:e2:eb:99:1b:2d:11:aa:61: 92:75:7b:3d:67:d0:83:b1:cc:89:9f:03:1e:22:f9:c0:e5:ea: 23:5b:e8:21:c5:71:46:ff:50:86:2f:6a:7c:d2:29:a2:09:b0: 6e:ff:0d:d1:d7:43:18:14:fc:55:b3:91:8f:a1:92:7b:c7:b4: ff:e4:a4:dd:25:94:03:cc:34:97:9a:b6:a0:03:3b:21:ec:75: 85:b6:48:23:cc:28:ee:a1:ab:65:e0:fe:62:52:75:52:f6:2d: 27:00:1d:61:12:5d:02:dc:e1:f2:e6:3c:1f:1a:3f:cc:3e:ac: 3d:fa:49:4d:36:ed:6a:d0:13:8c:36:e5:cd:25:6e:6d:36:b2: 0c:44:18:b3:fc:e0:4a:dc:d6:09:f6:50:22:50:7e:96:16:34: bb:31:c8:3c:47:09:b6:d4:f1:61:3e:5d:1a:bf:55:06:53:63: 69:13:3b:0d:d1:30:d1:5f:30:9d:f5:b2:35:c0:7a:44:8a:3c: b5:c8:ff:bb:4b:55:33:80:7e:7b:c2:37:84:56:5a:05:aa:6e: 4b:dd:1b:12:a7:76:9c:c1:9e:30:6d:a0:c8:50:55:70:79:48: be:23:bc:86:c6:9d:c3:91:ce:55:a9:b3:d6:38:8f:4a:94:31: d7:99:5e:6e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCQwtVK82W0q8ELwM1a9bx/dBsccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDA1MTIzWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2E1MDAwZjk5N2I1NjY4N2M5ZGQ0ZGEyYTU1OWMyMzU3 MWM0NjY3NTYwODQ4Zjg2NzVlN2NmMzBmNmQ5OWJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC68QA9LJ61AYJvuONyGfH5JrS3w8eJX3QrtnlR63aQmfDr 8eilC+XexxrD9Wip6JhEFbcZuPy6BImXmiJisaec6rDmeEHIvcAcbD4/tTb/E1UM Av/QYl2s62/LglfXvIr9cibG94T4g6oTPWSPnMPCYvDZV5DAe+ew78b8rJYJqsex RyN8pLRm/RS3zDKeWjIOWMC8b28WbNLu4/p4ijJ9u585mJLpQHQxDE6fgu82WUyn dS323JntrWzbW5CB6igIVdbz7CZFsNKEaZ7NxzVtsl0RjgqeRXjGtC5i2waOWlAm VOjeWQGZtByT3m9uyDWdEoUp0dPtTkJsKFvAjVf1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZbbrSYtkyMSsowcmCu7Eqc84z3YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3MWEzZDA0LTJiNDAtNDcwNi1hNDNhLTliNDgzNTdmZWQyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwHY2DANBgkqhkiG9w0BAQsFAAOCAQEAOtlUaVSGsJg51OLrmRstEaphknV7 PWfQg7HMiZ8DHiL5wOXqI1voIcVxRv9Qhi9qfNIpogmwbv8N0ddDGBT8VbORj6GS e8e0/+Sk3SWUA8w0l5q2oAM7Iex1hbZII8wo7qGrZeD+YlJ1UvYtJwAdYRJdAtzh 8uY8Hxo/zD6sPfpJTTbtatATjDblzSVubTayDEQYs/zgStzWCfZQIlB+lhY0uzHI PEcJttTxYT5dGr9VBlNjaRM7DdEw0V8wnfWyNcB6RIo8tcj/u0tVM4B+e8I3hFZa BapuS90bEqd2nMGeMG2gyFBVcHlIviO8hsadw5HOVamz1jiPSpQx15lebg== -----END CERTIFICATE-----Generated at Wed Nov 4 01:13:23 2026 by rpki-client