$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa File: b329dcd2-1949-46fc-8852-9e7592d53c17.roa (raw, json) Hash identifier: PxAEsH+Ql43E0J4yXo9MrmRpttBrWvGOHQ+PHwfR4k8= Subject key identifier: 66:4A:04:51:A4:13:72:57:82:ED:44:8C:DF:65:14:CB:FF:D9:05:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04FC72D1200B712330E5367BE15CB211012E67A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa Signing time: Mon 26 Oct 2026 00:30:41 +0000 ROA not before: Mon 26 Oct 2026 00:30:41 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 98.82.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fc:72:d1:20:0b:71:23:30:e5:36:7b:e1:5c:b2:11:01:2e:67:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:30:41 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=324ec1f162b9ccfd0ed62338e894f48e2ed84b64f111c23568483dd211282542, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:1b:45:4a:d7:c2:31:a8:96:97:74:a7:d8: ed:df:66:e7:40:07:d3:5a:57:1d:98:35:1e:ff:f7: be:a9:2a:1c:17:92:4a:22:ac:ae:f7:23:a6:91:59: a3:41:72:45:c3:f7:9d:3d:e3:1c:79:f8:b9:02:3b: aa:09:b3:d3:3f:7a:f9:62:5d:29:26:80:4d:3f:76: 9e:b8:18:ed:9b:9a:cc:63:35:41:e1:61:aa:ef:c6: d2:f4:15:ab:ec:2e:ff:5c:df:5c:e2:82:91:c6:0c: c0:4a:11:f0:e4:47:38:45:a8:83:fa:7c:9f:13:c7: 6b:1e:8d:9a:97:c8:ac:9f:93:a9:b1:7e:cc:a1:94: ba:e7:ca:76:ac:9b:ec:06:32:b0:1a:57:81:74:cf: a0:b5:b1:8b:d3:f7:81:50:f5:75:f3:9a:15:c6:cc: 01:cc:b3:da:5c:27:b4:f0:a5:56:06:d0:65:14:fb: 0c:c5:c7:0b:41:cc:9c:1f:ff:3a:33:e7:77:e0:b3: 54:a2:86:f8:40:cc:32:52:e9:fc:be:91:26:e2:bd: 08:f9:fc:67:05:24:86:3d:50:ce:7a:d2:43:63:c9: 1e:06:01:88:dd:3c:a1:18:ce:d5:a7:21:d9:7e:6a: 72:8e:f5:dd:4e:32:e1:2c:3d:9b:21:5a:b9:fb:c1: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4A:04:51:A4:13:72:57:82:ED:44:8C:DF:65:14:CB:FF:D9:05:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.154.0/23 Signature Algorithm: sha256WithRSAEncryption 12:56:56:90:df:22:90:78:8f:f1:4f:1b:5c:04:06:b7:8f:9f: da:8c:60:25:75:56:65:d9:49:85:f3:c3:80:6e:9c:6b:dd:c5: cb:2a:c3:de:06:03:d9:16:33:c1:8c:4f:2d:5a:0a:22:ad:59: 81:09:91:a9:31:c3:1d:3a:14:20:c8:58:ed:49:d5:f8:a7:e9: 12:74:19:c4:af:b0:66:81:4d:95:83:0f:b1:3f:05:86:a2:0b: ff:14:3c:81:f9:c1:97:8e:26:cb:3e:92:29:a7:cc:9a:96:a2: 73:11:d6:5e:ec:96:da:1f:dd:1b:cb:a6:a4:fd:81:06:35:d3: 6d:b3:68:04:a3:87:ec:85:b7:e2:e3:c3:b9:06:5c:91:20:0c: 2b:d6:3b:81:33:1a:7e:8e:eb:b3:5a:1a:b2:84:23:d1:55:6a: 1d:b5:c3:19:ba:1a:40:cb:cc:15:2f:75:7d:72:51:4b:31:b0: e1:b2:e5:20:f0:a3:8f:56:71:66:65:1d:7f:63:13:75:22:2a: e5:5e:47:7f:3a:00:9d:3b:12:d3:40:d9:43:79:a6:54:63:ae: 63:4f:05:90:3c:d6:79:85:d8:62:fd:9b:9c:ef:af:17:68:2c: ab:7e:05:c9:10:07:14:cb:9d:3b:4c:dc:45:a4:96:51:05:64: ba:9e:af:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBPxy0SALcSMw5TZ74VyyEQEuZ6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAzMDQxWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjRlYzFmMTYyYjljY2ZkMGVkNjIzMzhlODk0ZjQ4ZTJl ZDg0YjY0ZjExMWMyMzU2ODQ4M2RkMjExMjgyNTQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxDhtFStfCMaiWl3Sn2O3fZudAB9NaVx2YNR7/976pKhwX kkoirK73I6aRWaNBckXD95094xx5+LkCO6oJs9M/evliXSkmgE0/dp64GO2bmsxj NUHhYarvxtL0FavsLv9c31zigpHGDMBKEfDkRzhFqIP6fJ8Tx2sejZqXyKyfk6mx fsyhlLrnynasm+wGMrAaV4F0z6C1sYvT94FQ9XXzmhXGzAHMs9pcJ7TwpVYG0GUU +wzFxwtBzJwf/zoz53fgs1SihvhAzDJS6fy+kSbivQj5/GcFJIY9UM560kNjyR4G AYjdPKEYztWnIdl+anKO9d1OMuEsPZshWrn7wX23AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZkoEUaQTcleC7USM32UUy//ZBc0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzMjlkY2QyLTE5NDktNDZmYy04ODUyLTllNzU5MmQ1M2MxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUpowDQYJKoZIhvcNAQELBQADggEBABJWVpDfIpB4j/FPG1wEBrePn9qM YCV1VmXZSYXzw4BunGvdxcsqw94GA9kWM8GMTy1aCiKtWYEJkakxwx06FCDIWO1J 1fin6RJ0GcSvsGaBTZWDD7E/BYaiC/8UPIH5wZeOJss+kimnzJqWonMR1l7sltof 3RvLpqT9gQY1022zaASjh+yFt+Ljw7kGXJEgDCvWO4EzGn6O67NaGrKEI9FVah21 wxm6GkDLzBUvdX1yUUsxsOGy5SDwo49WcWZlHX9jE3UiKuVeR386AJ07EtNA2UN5 plRjrmNPBZA81nmF2GL9m5zvrxdoLKt+BckQBxTLnTtM3EWkllEFZLqer3k= -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:37 2026 by rpki-client