$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa File: b7247667-78f2-433e-a9d4-4a2073e18b85.roa (raw, json) Hash identifier: Br+eVeXO57jzglhEmLFDhQ+hNF8HH7d/ZA5cy7jmtFA= Subject key identifier: CB:BE:E3:97:6A:DB:2E:4E:E1:33:22:BE:C9:6E:4B:D1:7B:11:8F:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7639339C1DDB2B2D9D8C8198054449269A07409A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa Signing time: Thu 08 Oct 2026 00:11:08 +0000 ROA not before: Thu 08 Oct 2026 00:11:08 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.82.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:39:33:9c:1d:db:2b:2d:9d:8c:81:98:05:44:49:26:9a:07:40:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:11:08 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=810479e4eee6fa3fbd024e8a684fcea44b4ca6a071b4de153b4d6105fc0fb3d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:db:d3:37:b5:f9:8e:71:e8:e9:27:b7:af: b5:d2:ef:36:ee:cb:82:d7:7c:cc:4f:2d:4c:15:7a: 5a:4f:f1:92:03:ab:a6:09:be:17:14:c6:d4:9d:78: 15:47:a3:31:84:4f:61:c0:54:8d:bf:89:18:0a:df: a6:96:d6:bc:06:d3:60:b3:a4:0d:21:38:59:16:94: c2:ae:d0:97:08:88:4e:a2:6a:78:d9:8e:b9:c3:1b: 8a:7a:96:1a:29:f4:c8:a5:79:41:ee:13:fe:7c:c6: 12:4a:d5:72:ca:64:5e:e6:16:42:a2:d1:54:6e:9a: c9:df:50:1d:e7:3d:20:10:d1:b3:80:b2:20:33:e3: ff:b1:42:38:92:01:01:3c:5d:b4:db:3b:d5:47:ca: ea:a6:87:9c:7c:76:99:9d:03:e5:a3:be:f6:d6:9e: 63:5b:74:32:fc:8a:80:59:75:54:50:e7:63:e6:5a: 06:82:d2:c8:43:7f:e1:bc:52:5d:de:b8:e8:72:b0: 63:18:ee:0c:c1:10:46:d1:1d:8b:2b:b7:07:f0:3a: 7f:22:79:c0:76:95:e8:a6:ba:68:8f:58:08:28:8e: 71:a9:bf:0c:70:3a:cd:8c:4a:c6:1b:1d:fe:03:51: 08:19:90:76:06:f6:ba:2a:ab:b8:f2:23:fc:78:91: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:E3:97:6A:DB:2E:4E:E1:33:22:BE:C9:6E:4B:D1:7B:11:8F:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.82.165.0/24 Signature Algorithm: sha256WithRSAEncryption 71:86:ea:16:e9:6b:d1:a3:fa:17:9b:d1:02:b8:3d:6a:2c:19: 70:2c:83:69:f1:6c:ef:90:b1:2a:68:51:1b:e2:0d:66:5f:05: f5:d7:c0:e1:6f:11:86:73:72:c0:ff:71:3a:fc:77:b8:a0:64: 0d:7d:fe:4f:f7:28:ba:7b:a5:17:2b:64:f8:19:f3:9d:0f:c8: e4:35:35:c0:90:a4:2c:34:19:43:a2:7f:96:ce:c7:a1:16:a9: eb:27:39:be:75:2d:e2:26:73:55:aa:03:e6:b7:7f:5b:7a:3b: f5:ba:fe:53:76:55:65:14:04:0d:ec:c4:c3:16:7d:61:7b:6c: db:be:4b:00:8e:8f:de:ba:31:61:65:dc:5a:d5:14:07:6f:42: f9:6c:67:9b:8e:cd:b5:35:c0:6b:d1:69:70:59:00:42:93:f8: b2:f4:3a:0b:66:33:3d:b8:53:83:8c:3a:f4:4d:37:9f:ec:36: 13:51:a8:c1:98:4d:88:40:46:4f:55:ff:05:da:59:7f:7f:90: 1c:37:29:0f:08:38:cd:d7:ac:e6:92:d5:fb:b3:97:04:1d:18: aa:26:b3:28:c8:85:d6:34:36:a5:62:f2:b5:6f:fb:a5:1c:23: d7:b0:13:25:ed:bc:ee:5f:78:4a:61:bf:e8:b0:9b:a0:f3:ad: b7:2d:4d:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdjkznB3bKy2djIGYBURJJpoHQJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAxMTA4WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTA0NzllNGVlZTZmYTNmYmQwMjRlOGE2ODRmY2VhNDRi NGNhNmEwNzFiNGRlMTUzYjRkNjEwNWZjMGZiM2QzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCirNvTN7X5jnHo6Se3r7XS7zbuy4LXfMxPLUwVelpP8ZID q6YJvhcUxtSdeBVHozGET2HAVI2/iRgK36aW1rwG02CzpA0hOFkWlMKu0JcIiE6i anjZjrnDG4p6lhop9MileUHuE/58xhJK1XLKZF7mFkKi0VRumsnfUB3nPSAQ0bOA siAz4/+xQjiSAQE8XbTbO9VHyuqmh5x8dpmdA+WjvvbWnmNbdDL8ioBZdVRQ52Pm WgaC0shDf+G8Ul3euOhysGMY7gzBEEbRHYsrtwfwOn8iecB2leimumiPWAgojnGp vwxwOs2MSsYbHf4DUQgZkHYG9roqq7jyI/x4kesXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy77jl2rbLk7hMyK+yW5L0XsRj1kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3MjQ3NjY3LTc4ZjItNDMzZS1hOWQ0LTRhMjA3M2UxOGI4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjUqUwDQYJKoZIhvcNAQELBQADggEBAHGG6hbpa9Gj+heb0QK4PWosGXAs g2nxbO+QsSpoURviDWZfBfXXwOFvEYZzcsD/cTr8d7igZA19/k/3KLp7pRcrZPgZ 850PyOQ1NcCQpCw0GUOif5bOx6EWqesnOb51LeImc1WqA+a3f1t6O/W6/lN2VWUU BA3sxMMWfWF7bNu+SwCOj966MWFl3FrVFAdvQvlsZ5uOzbU1wGvRaXBZAEKT+LL0 OgtmMz24U4OMOvRNN5/sNhNRqMGYTYhARk9V/wXaWX9/kBw3KQ8IOM3XrOaS1fuz lwQdGKomsyjIhdY0NqVi8rVv+6UcI9ewEyXtvO5feEphv+iwm6DzrbctTew= -----END CERTIFICATE-----Generated at Tue Oct 27 15:48:50 2026 by rpki-client