$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af3b57d7-2fe8-4e04-ad99-1366c252299d.roa File: af3b57d7-2fe8-4e04-ad99-1366c252299d.roa (raw, json) Hash identifier: /rZNq3t7bUZ8+emhpGbwCXlGBOj6LkqNWWNI+ttGd1s= Subject key identifier: A4:99:3C:A4:24:F3:BD:CE:3A:0A:BD:AE:E4:98:E1:59:3C:8F:F2:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A3DC2A6AFA1667DE23F416DA74F962A6FEA8637 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af3b57d7-2fe8-4e04-ad99-1366c252299d.roa Signing time: Fri 23 Oct 2026 01:21:13 +0000 ROA not before: Fri 23 Oct 2026 01:21:13 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 123.200.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3d:c2:a6:af:a1:66:7d:e2:3f:41:6d:a7:4f:96:2a:6f:ea:86:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:21:13 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=2b38fffb2b0bd5901543b09cb6078acf794e105a6acf1c297fdcd181dfc83593, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:69:f2:db:95:c0:ca:1d:0f:79:83:31:14: 52:82:55:60:d9:1a:20:cc:66:c5:4e:06:a2:99:e4: 41:d0:c1:d7:67:42:ce:7a:e7:4a:11:fd:4a:0c:22: 40:63:66:5a:cb:50:65:ae:22:84:8e:5e:0c:d2:e1: 33:7d:4e:95:a5:43:38:36:58:8c:bc:1b:0f:69:14: c2:ae:bf:ba:db:04:c2:f2:18:b1:47:7b:b8:40:6d: b1:fa:8c:17:3c:09:19:8f:93:d8:af:27:d5:a9:82: 7e:26:d6:31:b7:fd:c4:eb:28:e9:53:c1:92:e1:5d: 3b:df:2d:e7:8c:65:01:60:e2:0c:9a:4a:a4:e6:e4: bc:59:ff:70:60:96:cf:de:ac:3d:8c:2d:54:4f:7c: 04:4c:db:ad:34:aa:0a:72:65:4b:1f:29:01:cf:79: 2d:ba:a2:a7:11:d3:94:81:42:ad:12:cd:07:9b:1b: 1f:52:16:11:e7:8a:b7:0c:2b:ee:df:bc:49:f5:db: c7:02:45:26:e3:9e:6e:4a:7f:e3:27:6e:ef:dc:fb: a5:eb:f0:1e:2e:6d:99:88:bd:d7:68:b5:2d:5f:34: f9:8e:1e:48:f9:77:4c:1b:52:a9:fd:24:1d:c2:2b: 83:35:6d:7a:18:cb:31:cb:e2:83:63:8b:59:b1:de: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:3C:A4:24:F3:BD:CE:3A:0A:BD:AE:E4:98:E1:59:3C:8F:F2:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af3b57d7-2fe8-4e04-ad99-1366c252299d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.200.204.0/22 Signature Algorithm: sha256WithRSAEncryption b2:72:8a:27:93:0c:3c:19:27:6a:e3:2d:34:dd:15:19:73:3a: f6:ee:51:84:2a:9d:3e:31:56:50:64:ba:f0:2a:77:2d:5a:63: d3:6d:ae:b6:8a:73:a0:0b:01:ee:e8:65:d8:64:94:99:42:ec: c0:5a:03:d2:98:b6:26:7e:e0:8b:e0:f1:f9:ef:4d:15:94:a6: 6c:92:2f:1b:93:0b:c1:5b:79:25:42:33:33:72:d0:d9:0f:b9: 6f:b4:63:22:eb:a8:7a:74:3b:ad:ce:14:74:ed:e1:19:f5:03: 18:23:b9:95:16:0f:a6:54:a0:9c:3c:70:f3:3a:1c:7e:a1:4d: 13:53:41:e0:f5:26:55:4b:8f:c6:78:a1:32:81:e9:d1:77:e5: 9d:05:57:80:83:59:d7:bc:ff:58:0e:b2:70:54:ff:5f:93:63: 80:82:0a:99:87:e7:66:0f:52:06:c0:e3:30:ed:d4:22:f8:8a: 77:a5:e8:b1:a1:05:57:61:f1:11:4a:ac:29:5d:d0:34:e8:b1: e7:d9:52:2f:60:52:c1:36:a4:74:e7:d1:aa:25:07:37:b9:54: 75:dd:d3:1a:dd:1c:0e:5f:2c:df:bd:ef:2b:49:fd:9b:45:a0: 56:ce:11:06:1a:0c:97:4e:53:66:bd:ce:22:d4:b6:ad:4f:23: 16:b0:f6:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUej3Cpq+hZn3iP0Ftp0+WKm/qhjcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEyMTEzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjM4ZmZmYjJiMGJkNTkwMTU0M2IwOWNiNjA3OGFjZjc5 NGUxMDVhNmFjZjFjMjk3ZmRjZDE4MWRmYzgzNTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTs2ny25XAyh0PeYMxFFKCVWDZGiDMZsVOBqKZ5EHQwddn Qs5650oR/UoMIkBjZlrLUGWuIoSOXgzS4TN9TpWlQzg2WIy8Gw9pFMKuv7rbBMLy GLFHe7hAbbH6jBc8CRmPk9ivJ9Wpgn4m1jG3/cTrKOlTwZLhXTvfLeeMZQFg4gya SqTm5LxZ/3Bgls/erD2MLVRPfARM2600qgpyZUsfKQHPeS26oqcR05SBQq0SzQeb Gx9SFhHnircMK+7fvEn128cCRSbjnm5Kf+Mnbu/c+6Xr8B4ubZmIvddotS1fNPmO Hkj5d0wbUqn9JB3CK4M1bXoYyzHL4oNji1mx3pdzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpJk8pCTzvc46Cr2u5JjhWTyP8ogwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmM2I1N2Q3LTJmZTgtNGUwNC1hZDk5LTEzNjZjMjUyMjk5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ7yMwwDQYJKoZIhvcNAQELBQADggEBALJyiieTDDwZJ2rjLTTdFRlzOvbu UYQqnT4xVlBkuvAqdy1aY9NtrraKc6ALAe7oZdhklJlC7MBaA9KYtiZ+4Ivg8fnv TRWUpmySLxuTC8FbeSVCMzNy0NkPuW+0YyLrqHp0O63OFHTt4Rn1AxgjuZUWD6ZU oJw8cPM6HH6hTRNTQeD1JlVLj8Z4oTKB6dF35Z0FV4CDWde8/1gOsnBU/1+TY4CC CpmH52YPUgbA4zDt1CL4inel6LGhBVdh8RFKrCld0DTosefZUi9gUsE2pHTn0aol Bze5VHXd0xrdHA5fLN+97ytJ/ZtFoFbOEQYaDJdOU2a9ziLUtq1PIxaw9l4= -----END CERTIFICATE-----Generated at Sat Oct 31 05:16:23 2026 by rpki-client