$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa264b3d-8132-4f1a-9f40-817238e6d836.roa File: aa264b3d-8132-4f1a-9f40-817238e6d836.roa (raw, json) Hash identifier: bK9ehxV9f98aJoF39fcnZJYq6bzdvOJjlftrldE21dU= Subject key identifier: 6E:FF:89:B4:02:7C:E4:77:3C:C1:FC:0D:4E:3D:2F:64:6A:82:30:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D06C5101F9A2C261ABAB808225CA6931BBEE113 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa264b3d-8132-4f1a-9f40-817238e6d836.roa Signing time: Tue 27 Oct 2026 00:40:07 +0000 ROA not before: Tue 27 Oct 2026 00:40:07 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.250.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:06:c5:10:1f:9a:2c:26:1a:ba:b8:08:22:5c:a6:93:1b:be:e1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:40:07 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=8c47e63e1bc7a78ee93ae15e274b62823851a0adf2d00dd697bdcd725c84d838, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:90:cc:90:3d:ad:5d:2b:3d:b0:61:90:59:7a: bb:14:1b:34:be:a7:e9:c0:2b:0a:de:6e:bd:32:44: d9:ae:7d:0f:4d:b6:77:08:96:04:0c:5b:33:14:0b: 97:50:8d:0f:1f:1f:0c:c9:d6:a5:4e:cd:48:a5:f3: 0c:cb:88:0d:16:73:81:b8:90:ee:52:dc:52:96:54: 85:02:ff:a3:c1:76:3b:cd:12:b2:3e:c5:6a:c1:4c: 95:66:3d:80:03:86:fc:b1:b1:43:3f:59:b1:d3:d8: 3a:9c:01:c1:0b:1e:63:f3:6b:ca:c4:98:1e:54:64: a3:27:de:c9:2d:f3:2e:38:15:dc:3e:53:7d:a3:22: 9d:f4:7b:d1:78:73:4e:fa:41:53:35:c1:c3:d1:25: 42:a7:fe:4a:e4:d9:99:18:0d:81:98:b8:b9:6b:1d: 41:11:2a:aa:dd:8c:90:7f:52:be:71:da:09:24:d6: 86:6e:84:e9:f8:ec:0b:8d:51:00:66:4d:df:57:4f: 59:8a:e4:fa:bc:5c:ca:1d:08:8e:27:5e:0e:99:f8: e9:8b:2f:ca:1d:e3:1c:08:fc:c7:e4:58:df:91:d5: 1a:c4:e1:98:a7:24:55:75:7e:a2:25:7b:e6:90:be: 22:d7:4d:c7:d8:f5:64:ab:f2:fc:9d:0f:26:54:1d: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FF:89:B4:02:7C:E4:77:3C:C1:FC:0D:4E:3D:2F:64:6A:82:30:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa264b3d-8132-4f1a-9f40-817238e6d836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.250.0.0/17 Signature Algorithm: sha256WithRSAEncryption 19:ed:30:e6:6e:dd:dd:e1:b7:c4:84:aa:ee:77:c6:a7:69:97: fe:78:16:49:55:ab:b8:f5:cc:d3:d2:68:96:37:16:ab:ac:fd: 8f:34:94:f6:07:5e:f0:e9:f0:21:78:f6:fb:e5:8d:c7:7c:a7: 85:1f:e1:c8:24:ad:ef:53:87:ed:10:f6:8c:a5:4d:e6:d2:22: ab:43:46:1c:3c:37:27:67:54:d1:5b:85:ba:57:ce:c9:b1:1f: 14:5c:c7:d0:05:31:e3:2d:2b:08:d4:71:59:54:39:b5:cc:d0: bb:e2:d1:19:10:db:e7:93:7c:b9:03:24:d3:a4:99:d9:3e:7c: c8:8d:0e:4d:77:36:c0:c7:a7:e8:a5:7c:19:10:92:a4:aa:8a: fa:68:17:b2:3e:49:42:7a:68:a0:7a:07:c9:ed:ff:2d:73:dd: 63:17:66:92:e9:26:f8:4e:75:a0:30:93:86:52:51:2a:f0:72: f8:21:c5:f1:50:5b:85:1e:c6:58:68:22:c9:e9:71:e3:48:49: 59:b6:69:70:57:9f:09:1d:ac:36:07:6a:af:c6:0e:05:b1:c6: 54:47:69:43:fe:20:3b:be:71:4c:6b:8a:4a:31:d8:25:8f:df: 79:d5:6f:cf:27:5a:16:62:1c:42:07:80:7c:b2:e4:5d:dc:2f: 2b:d9:27:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbQbFEB+aLCYaurgIIlymkxu+4RMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDA0MDA3WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzQ3ZTYzZTFiYzdhNzhlZTkzYWUxNWUyNzRiNjI4MjM4 NTFhMGFkZjJkMDBkZDY5N2JkY2Q3MjVjODRkODM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2kMyQPa1dKz2wYZBZersUGzS+p+nAKwrebr0yRNmufQ9N tncIlgQMWzMUC5dQjQ8fHwzJ1qVOzUil8wzLiA0Wc4G4kO5S3FKWVIUC/6PBdjvN ErI+xWrBTJVmPYADhvyxsUM/WbHT2DqcAcELHmPza8rEmB5UZKMn3skt8y44Fdw+ U32jIp30e9F4c076QVM1wcPRJUKn/krk2ZkYDYGYuLlrHUERKqrdjJB/Ur5x2gkk 1oZuhOn47AuNUQBmTd9XT1mK5Pq8XModCI4nXg6Z+OmLL8od4xwI/MfkWN+R1RrE 4ZinJFV1fqIle+aQviLXTcfY9WSr8vydDyZUHZ1FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbv+JtAJ85Hc8wfwNTj0vZGqCME0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhMjY0YjNkLTgxMzItNGYxYS05ZjQwLTgxNzIzOGU2ZDgzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcX+gAwDQYJKoZIhvcNAQELBQADggEBABntMOZu3d3ht8SEqu53xqdpl/54 FklVq7j1zNPSaJY3Fqus/Y80lPYHXvDp8CF49vvljcd8p4Uf4cgkre9Th+0Q9oyl TebSIqtDRhw8NydnVNFbhbpXzsmxHxRcx9AFMeMtKwjUcVlUObXM0Lvi0RkQ2+eT fLkDJNOkmdk+fMiNDk13NsDHp+ilfBkQkqSqivpoF7I+SUJ6aKB6B8nt/y1z3WMX ZpLpJvhOdaAwk4ZSUSrwcvghxfFQW4UexlhoIsnpceNISVm2aXBXnwkdrDYHaq/G DgWxxlRHaUP+IDu+cUxrikox2CWP33nVb88nWhZiHEIHgHyy5F3cLyvZJ5c= -----END CERTIFICATE-----Generated at Wed Nov 4 05:42:07 2026 by rpki-client