$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa File: b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa (raw, json) Hash identifier: 1aDVOEuyxAdkZdYA7yg4YCmBQK8JzrP4AetgRzGTM7A= Subject key identifier: 15:E6:B1:AA:7C:A4:AD:56:DA:9D:32:9C:FB:6E:80:F1:B6:CD:0E:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0802EABD7418DF6E8F0C958137E5D12708290FC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa Signing time: Tue 06 Oct 2026 00:02:36 +0000 ROA not before: Tue 06 Oct 2026 00:02:36 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:02:ea:bd:74:18:df:6e:8f:0c:95:81:37:e5:d1:27:08:29:0f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:02:36 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=39b9c1a988107450d0ae324d02ebb24a0fe606e02655c0e4600c14cf313b2850, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:55:8d:9f:e2:31:f0:c0:7d:df:e6:f2:23: 3b:9c:3f:1f:95:6e:dd:30:ed:3f:42:40:1a:32:db: 28:5b:28:ad:83:27:3f:1a:95:0b:a8:8d:e7:09:ed: 15:52:1b:92:91:04:61:5d:c1:24:41:af:7c:ab:2f: 12:39:ff:0c:6c:63:e9:3b:c2:27:e1:c6:fe:ec:5f: 8c:68:1e:ef:e6:81:0f:8c:96:2c:71:b6:24:e8:65: 6a:4d:5f:e0:b8:59:af:3b:a4:98:d7:b7:16:13:36: 0a:ef:6e:ad:84:52:63:40:ad:e2:3a:d3:eb:90:29: b1:30:ba:dd:7b:7f:07:4e:b7:30:19:13:2b:a8:99: ef:48:d6:a5:28:9a:3b:e9:a7:a1:c6:1a:a5:cd:ea: 31:41:87:4e:ca:18:e0:92:1f:fa:8c:48:ce:0d:6d: 23:ec:f7:1d:f8:c0:6e:33:f5:01:4d:0e:54:bd:29: 92:37:f0:9d:2f:74:33:33:8d:a8:0a:86:8c:cc:84: 6e:c2:2e:df:06:7c:aa:ac:54:8d:9a:8b:8a:8d:99: f1:6c:b9:6a:93:2f:2d:13:93:91:cd:e2:80:0f:46: 05:5c:3c:fb:4f:63:c0:a5:24:eb:4e:c2:68:15:db: 72:35:c3:0e:e4:84:f0:15:09:45:8b:57:cd:a2:9e: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E6:B1:AA:7C:A4:AD:56:DA:9D:32:9C:FB:6E:80:F1:B6:CD:0E:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.135.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a2:2b:4b:a4:f0:0f:e8:ea:3d:79:7f:9b:2a:9f:b8:a0:c4: 1a:d2:9c:6a:59:b4:4c:52:a5:3d:c8:93:cf:37:73:c9:1a:9b: d7:92:b3:70:27:f3:3b:9d:67:5f:22:a8:da:d1:11:27:cd:f5: 7b:64:bb:18:79:f8:f2:e4:8c:67:60:cb:f9:eb:eb:eb:d5:f5: 5e:91:15:f5:8c:1e:3a:3f:ee:36:17:4f:f8:09:19:96:22:d9: 85:7d:7b:66:f0:a7:b7:5c:c4:cb:cf:f3:55:7f:37:ed:96:c9: cd:e2:8a:47:f5:1c:be:ab:ab:3c:b3:e2:4b:58:8f:aa:81:5f: 02:fe:47:1f:bb:97:89:57:d9:99:49:99:2c:2c:22:7a:9a:55: 4f:05:14:2e:88:a6:66:65:90:d4:18:96:b6:96:08:fd:e9:0e: 7c:e3:1e:71:72:e4:d6:24:d5:f9:65:4d:c8:27:88:77:18:f9: a3:99:44:a1:d5:90:48:6c:a0:8a:0b:7d:91:e9:77:56:0e:f3: 69:1e:ac:ac:ac:c5:88:c6:8f:10:23:44:26:5d:9f:8c:01:82: 28:91:cc:84:6f:9d:38:79:2a:65:7c:39:35:b5:b0:ac:0b:da: 3c:a8:f4:ec:03:e2:3d:fa:73:0b:cf:83:65:3e:a7:f4:0b:2e: ea:14:5b:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCALqvXQY326PDJWBN+XRJwgpD8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAwMjM2WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWI5YzFhOTg4MTA3NDUwZDBhZTMyNGQwMmViYjI0YTBm ZTYwNmUwMjY1NWMwZTQ2MDBjMTRjZjMxM2IyODUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz3lWNn+Ix8MB93+byIzucPx+Vbt0w7T9CQBoy2yhbKK2D Jz8alQuojecJ7RVSG5KRBGFdwSRBr3yrLxI5/wxsY+k7wifhxv7sX4xoHu/mgQ+M lixxtiToZWpNX+C4Wa87pJjXtxYTNgrvbq2EUmNAreI60+uQKbEwut17fwdOtzAZ Eyuome9I1qUomjvpp6HGGqXN6jFBh07KGOCSH/qMSM4NbSPs9x34wG4z9QFNDlS9 KZI38J0vdDMzjagKhozMhG7CLt8GfKqsVI2ai4qNmfFsuWqTLy0Tk5HN4oAPRgVc PPtPY8ClJOtOwmgV23I1ww7khPAVCUWLV82inrdJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFeaxqnykrVbanTKc+26A8bbNDjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0ZmEzNGMwLTRkNGUtNDFkZi1iNTQ4LWI1NWU2ZTNhZWJjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM34cwDQYJKoZIhvcNAQELBQADggEBAJyiK0uk8A/o6j15f5sqn7igxBrS nGpZtExSpT3Ik883c8kam9eSs3An8zudZ18iqNrRESfN9Xtkuxh5+PLkjGdgy/nr 6+vV9V6RFfWMHjo/7jYXT/gJGZYi2YV9e2bwp7dcxMvP81V/N+2Wyc3iikf1HL6r qzyz4ktYj6qBXwL+Rx+7l4lX2ZlJmSwsInqaVU8FFC6IpmZlkNQYlraWCP3pDnzj HnFy5NYk1fllTcgniHcY+aOZRKHVkEhsoIoLfZHpd1YO82kerKysxYjGjxAjRCZd n4wBgiiRzIRvnTh5KmV8OTW1sKwL2jyo9OwD4j36cwvPg2U+p/QLLuoUW58= -----END CERTIFICATE-----Generated at Sat Oct 31 22:48:49 2026 by rpki-client