$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0e4a5-e618-4f70-97f8-1d7e1d47f167.roa File: b7c0e4a5-e618-4f70-97f8-1d7e1d47f167.roa (raw, json) Hash identifier: k+bOhDTMdYgLNCzsDgka1l2PAlGlbvybd4orrDIxF4o= Subject key identifier: 97:2F:7C:05:0D:AC:0B:87:6D:8D:00:FB:3C:76:06:94:53:3B:72:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 344B8E23F63BF1496242F560684C8C8908CB8840 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0e4a5-e618-4f70-97f8-1d7e1d47f167.roa Signing time: Mon 19 Oct 2026 22:14:34 +0000 ROA not before: Mon 19 Oct 2026 22:14:34 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.66.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4b:8e:23:f6:3b:f1:49:62:42:f5:60:68:4c:8c:89:08:cb:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 22:14:34 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=71fa445933ada44dcb6d9e53842f6c864f3625148afd83f0c1224081ea6aceb9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:47:af:27:50:81:b3:0b:76:2b:e6:e2:10: d4:b3:24:7a:79:f9:53:f3:ff:19:38:16:0d:c6:dc: 65:57:3e:f5:7f:df:f3:34:f2:0a:32:00:90:46:02: 01:16:8d:83:03:aa:82:00:30:49:e5:69:19:65:19: 1d:be:c3:cc:e3:bd:3a:82:8f:d3:9f:e6:bb:cc:43: 05:a8:95:98:72:34:91:0c:5b:de:0b:e4:c9:91:f8: 9b:11:8c:41:86:4d:57:19:40:b7:0c:4e:0e:ac:d8: e8:15:6f:06:8d:4a:11:bd:d7:fd:92:9c:bc:b6:78: e7:74:f3:53:04:6c:5a:46:ef:55:aa:c2:04:91:57: 93:4d:58:f4:1c:ae:f5:b4:ea:e0:06:76:5d:21:7d: 11:42:dc:98:82:aa:d8:17:2f:74:1e:0a:ff:83:2e: fa:9e:99:1e:67:1d:c2:03:57:29:0b:1e:86:00:a7: 6a:bc:7f:a7:a5:5b:b0:84:11:20:2f:b1:b6:da:88: cd:6c:48:a7:6b:3e:2a:74:38:ed:68:75:3d:b6:a6: ab:d5:8c:12:9e:e8:3f:c7:e4:b0:bd:37:e3:dd:ad: e5:f7:e9:5d:86:88:3e:f6:ac:e4:21:d4:96:c6:d0: 9e:66:79:bb:9f:b5:d4:05:a0:da:c4:1e:46:43:4a: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2F:7C:05:0D:AC:0B:87:6D:8D:00:FB:3C:76:06:94:53:3B:72:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0e4a5-e618-4f70-97f8-1d7e1d47f167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.66.161.0/24 Signature Algorithm: sha256WithRSAEncryption ab:5d:61:90:a5:f4:ba:a7:af:51:49:e0:17:0e:69:a9:0f:98: 94:63:10:f5:59:de:85:bc:b8:2d:26:94:0e:05:48:49:e2:9a: 77:02:5b:d1:64:b3:49:eb:96:0e:63:78:6d:10:25:6f:d1:62: ff:64:f3:dd:b3:0e:79:9e:05:aa:5a:f7:22:5b:d9:57:19:58: 2e:ff:8a:7e:0f:b3:6d:37:ff:23:12:1e:44:ae:ea:6e:33:8d: 05:44:26:93:9e:6c:a5:d5:4a:7e:e7:df:56:72:02:93:8a:e8: 9b:28:01:dc:63:03:a2:5b:cd:04:eb:c0:31:a5:f0:d9:e2:8c: fc:4e:52:38:0a:ab:48:d8:9d:ec:fb:5d:43:fb:e6:a3:c4:a1: f6:0a:48:5f:10:33:dd:96:ea:d7:82:9f:15:92:c3:22:30:a7: 07:e4:25:4d:e8:81:83:61:5f:95:b0:f7:fb:3f:31:1d:02:7e: b9:82:91:bb:db:82:54:22:87:cb:da:3b:04:1b:4f:8c:bb:7f: 15:42:fc:a0:dc:40:ce:b5:74:7c:7b:fa:d4:e1:2f:2d:da:6d: 10:38:c4:14:63:d0:11:2c:10:c1:56:75:11:ae:67:e6:93:40: 95:e6:d5:f2:26:6a:1d:e7:20:1e:2c:4f:b8:21:0d:b6:f8:b6: 04:34:c5:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNEuOI/Y78UliQvVgaEyMiQjLiEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MjIxNDM0WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWZhNDQ1OTMzYWRhNDRkY2I2ZDllNTM4NDJmNmM4NjRm MzYyNTE0OGFmZDgzZjBjMTIyNDA4MWVhNmFjZWI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCapUevJ1CBswt2K+biENSzJHp5+VPz/xk4Fg3G3GVXPvV/ 3/M08goyAJBGAgEWjYMDqoIAMEnlaRllGR2+w8zjvTqCj9Of5rvMQwWolZhyNJEM W94L5MmR+JsRjEGGTVcZQLcMTg6s2OgVbwaNShG91/2SnLy2eOd081MEbFpG71Wq wgSRV5NNWPQcrvW06uAGdl0hfRFC3JiCqtgXL3QeCv+DLvqemR5nHcIDVykLHoYA p2q8f6elW7CEESAvsbbaiM1sSKdrPip0OO1odT22pqvVjBKe6D/H5LC9N+PdreX3 6V2GiD72rOQh1JbG0J5mebuftdQFoNrEHkZDSu2JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUly98BQ2sC4dtjQD7PHYGlFM7cs4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3YzBlNGE1LWU2MTgtNGY3MC05N2Y4LTFkN2UxZDQ3ZjE2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABAQqEwDQYJKoZIhvcNAQELBQADggEBAKtdYZCl9Lqnr1FJ4BcOaakPmJRj EPVZ3oW8uC0mlA4FSEnimncCW9Fks0nrlg5jeG0QJW/RYv9k892zDnmeBapa9yJb 2VcZWC7/in4Ps203/yMSHkSu6m4zjQVEJpOebKXVSn7n31ZyApOK6JsoAdxjA6Jb zQTrwDGl8NnijPxOUjgKq0jYnez7XUP75qPEofYKSF8QM92W6teCnxWSwyIwpwfk JU3ogYNhX5Ww9/s/MR0CfrmCkbvbglQih8vaOwQbT4y7fxVC/KDcQM61dHx7+tTh Ly3abRA4xBRj0BEsEMFWdRGuZ+aTQJXm1fImah3nIB4sT7ghDbb4tgQ0xa8= -----END CERTIFICATE-----Generated at Wed Nov 4 16:41:36 2026 by rpki-client