$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa File: b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa (raw, json) Hash identifier: ZnbwflRKA4ngReAZYdmobcIWRIEFR7s/xdFCM9ecs8g= Subject key identifier: B0:80:5F:2F:95:10:27:37:36:97:9F:CE:F2:E6:A6:C6:27:C9:A3:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6775FB0534E643203BBBCDE4DFCA09FCAC42F9B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa Signing time: Tue 06 Oct 2026 00:51:51 +0000 ROA not before: Tue 06 Oct 2026 00:51:51 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.91.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:75:fb:05:34:e6:43:20:3b:bb:cd:e4:df:ca:09:fc:ac:42:f9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:51:51 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=66a51f12c7523b149d35033a616c8188dda1d0c67dfdf9ad517e4e76648b7716, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:ea:1b:58:69:82:2d:7c:fd:27:ae:60:f3: ff:b5:cc:1e:3d:38:d0:c4:41:40:4e:6c:31:37:d9: 41:04:11:ac:c5:8d:e4:3a:9b:54:17:59:50:99:e8: a3:50:5d:af:9d:46:3a:06:9a:9a:0e:92:e3:90:9b: d0:77:bf:61:53:b5:d9:7f:9c:e8:27:59:9a:39:6c: 98:1b:5b:71:02:70:3f:75:02:c1:80:77:4d:89:fc: dd:ae:b7:3b:7e:33:ea:41:da:f3:5f:bb:cf:5a:78: 99:3c:10:a3:55:41:55:79:b8:47:ba:8d:83:ff:9c: 04:a0:d9:a9:57:16:68:6a:7f:dc:e1:b0:c6:b7:40: 03:0b:cb:a5:11:5b:6f:3e:72:af:95:a5:c7:18:30: 78:e3:f1:1f:00:13:7d:b9:36:5c:5e:f0:03:1a:92: f3:7b:e6:d8:ee:dc:a0:7f:9f:36:23:6d:63:ff:06: fa:70:9b:f1:a2:11:ba:52:75:da:1e:89:ce:db:1b: a6:7c:a4:7e:ef:4b:6c:05:1a:53:11:d9:5b:f2:75: 46:40:33:f5:a7:c0:06:c1:81:9b:34:d2:28:b2:46: f1:a7:03:0c:7e:f0:cb:91:43:94:3e:1d:4f:b0:39: 90:f7:20:3d:e3:ea:5e:27:8c:38:bd:84:6b:8f:03: b9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:80:5F:2F:95:10:27:37:36:97:9F:CE:F2:E6:A6:C6:27:C9:A3:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.91.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4e:ed:63:ce:63:8e:ca:2b:ac:b5:45:ab:5b:ed:89:19:49:ee: 23:b4:50:36:1a:7d:ab:c9:0f:56:42:e8:16:39:46:9d:86:6a: fe:9a:81:55:f0:4d:e0:4b:56:6b:13:69:c0:0f:a9:4c:d5:e5: a8:e4:8c:b5:ce:11:c0:90:45:bc:fb:ab:9a:91:70:1b:0e:b0: ea:a6:9c:05:78:4d:a5:35:dd:9b:77:55:cd:32:82:a0:5f:bb: f6:c3:fc:08:5e:8c:aa:47:12:44:5e:a7:97:ac:b9:04:99:f9: fd:75:df:32:43:6c:33:c3:fa:84:81:5d:29:ff:9e:3e:7a:4a: 41:4a:05:7d:8b:b0:0f:a4:5e:0b:45:e6:9d:89:01:e8:f7:ff: 33:09:a3:57:da:bc:c2:62:ce:80:55:0a:71:3b:5a:35:7e:05: de:76:c5:b7:f6:51:e7:ec:2e:0d:d1:17:1b:aa:bf:71:03:36: ae:0a:f9:c2:90:6d:3a:ba:c5:ae:09:77:df:c6:77:d9:67:52: b7:af:42:56:eb:07:a7:a7:d6:06:cc:83:a7:85:dc:1d:7b:33: ff:95:e5:81:c6:70:77:26:17:39:7c:de:a5:45:63:e6:bb:a3: a5:84:1e:a8:90:9a:b3:09:69:0e:a9:7c:03:7b:7e:0e:58:0e: fe:36:d0:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ3X7BTTmQyA7u83k38oJ/KxC+bkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA1MTUxWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmE1MWYxMmM3NTIzYjE0OWQzNTAzM2E2MTZjODE4OGRk YTFkMGM2N2RmZGY5YWQ1MTdlNGU3NjY0OGI3NzE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbkeobWGmCLXz9J65g8/+1zB49ONDEQUBObDE32UEEEazF jeQ6m1QXWVCZ6KNQXa+dRjoGmpoOkuOQm9B3v2FTtdl/nOgnWZo5bJgbW3ECcD91 AsGAd02J/N2utzt+M+pB2vNfu89aeJk8EKNVQVV5uEe6jYP/nASg2alXFmhqf9zh sMa3QAMLy6URW28+cq+VpccYMHjj8R8AE325Nlxe8AMakvN75tju3KB/nzYjbWP/ Bvpwm/GiEbpSddoeic7bG6Z8pH7vS2wFGlMR2VvydUZAM/WnwAbBgZs00iiyRvGn Awx+8MuRQ5Q+HU+wOZD3ID3j6l4njDi9hGuPA7k5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsIBfL5UQJzc2l5/O8uamxifJoxQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyYzJiODVhLTY3MjYtNGVhMi05NmU0LWQzNGMxMjMxYzI2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAW8AwDQYJKoZIhvcNAQELBQADggEBAE7tY85jjsorrLVFq1vtiRlJ7iO0 UDYafavJD1ZC6BY5Rp2Gav6agVXwTeBLVmsTacAPqUzV5ajkjLXOEcCQRbz7q5qR cBsOsOqmnAV4TaU13Zt3Vc0ygqBfu/bD/AhejKpHEkRep5esuQSZ+f113zJDbDPD +oSBXSn/nj56SkFKBX2LsA+kXgtF5p2JAej3/zMJo1favMJizoBVCnE7WjV+Bd52 xbf2UefsLg3RFxuqv3EDNq4K+cKQbTq6xa4Jd9/Gd9lnUrevQlbrB6en1gbMg6eF 3B17M/+V5YHGcHcmFzl83qVFY+a7o6WEHqiQmrMJaQ6pfAN7fg5YDv420Ks= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:11 2026 by rpki-client