$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8434c1a-9b4d-4dfa-89e0-008723c90e8f.roa File: b8434c1a-9b4d-4dfa-89e0-008723c90e8f.roa (raw, json) Hash identifier: 0RUwXdtN0iv7nQGydNhNz7Ztlx/rIpZdV03NrP7P4xg= Subject key identifier: 5B:15:D2:B6:35:1A:BE:24:0A:79:17:A0:0D:B0:A7:25:6B:BC:57:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E72B8D1D9797A78F69BD49825CCAD69098C78E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8434c1a-9b4d-4dfa-89e0-008723c90e8f.roa Signing time: Sat 10 Oct 2026 00:11:34 +0000 ROA not before: Sat 10 Oct 2026 00:11:34 +0000 ROA not after: Fri 08 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:72:b8:d1:d9:79:7a:78:f6:9b:d4:98:25:cc:ad:69:09:8c:78:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 10 00:11:34 2026 GMT Not After : Jan 8 23:59:59 2027 GMT Subject: serialNumber=14f4e4efca63e047fcc18324edd2d24d1f55c4ccd3e97793a76ef3368774f68e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:90:b9:1d:fd:93:8c:07:72:42:c4:22:31: b1:76:ab:d7:89:0a:08:81:c0:25:16:92:fd:11:92: 54:90:e9:62:0c:bb:05:66:92:5e:5d:a1:b3:95:15: e7:9a:7b:51:4e:c5:e9:07:c6:f7:21:3f:bc:9d:11: c3:8d:bc:03:b5:64:3d:3d:10:7f:2d:04:8d:b1:42: 19:90:a9:de:3f:a4:1d:71:3a:21:17:2b:8e:c1:e7: ed:db:52:78:61:25:2f:37:ba:68:a9:4f:9d:46:51: 83:50:8f:b8:8f:40:9b:9a:a1:71:f1:cd:f4:5d:1a: 7e:5b:b4:34:4f:56:52:b0:67:d5:fc:b0:c1:52:43: 6c:c1:24:7d:8a:9a:54:9b:87:4c:30:6a:ac:be:23: 0a:88:c3:24:6a:33:b8:7c:2b:7b:5c:ae:24:b1:03: 77:2e:43:bd:c2:a3:70:d4:94:da:00:57:b1:b4:88: b1:bf:cf:d6:22:50:e1:b0:eb:28:16:2f:61:ce:eb: 76:4f:ae:77:fd:27:ee:ec:ee:2c:4f:21:31:6c:13: 21:e7:b4:82:36:87:50:4f:d8:69:31:85:bd:ac:24: 5f:00:47:d6:29:42:ac:e2:3f:b6:ee:a5:18:86:8a: be:56:27:5c:fb:5e:e7:d4:dc:62:ba:f4:64:ac:f8: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:15:D2:B6:35:1A:BE:24:0A:79:17:A0:0D:B0:A7:25:6B:BC:57:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8434c1a-9b4d-4dfa-89e0-008723c90e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.202.0/24 Signature Algorithm: sha256WithRSAEncryption a2:28:10:e6:be:1d:84:27:c5:ee:49:80:9b:0c:85:8b:08:e9: a9:53:bd:cd:0f:d0:8b:af:47:b0:01:36:a6:2f:cf:ff:da:58: 86:f8:b9:9c:f7:6b:2e:9c:b8:ac:1d:f4:86:33:88:fb:83:4c: be:9f:03:ad:e2:43:8d:ce:cb:e3:90:b3:82:6c:43:fd:73:3f: 74:90:dd:f1:b2:81:c2:cd:a2:40:72:ab:bd:bc:78:5b:9f:08: 58:d8:a0:be:76:c8:59:02:36:70:f4:03:59:e8:c8:9a:83:54: ce:0d:68:df:39:ee:cf:35:d3:1e:8f:8e:ec:1c:2f:ed:ee:12: 84:b0:7a:df:b8:26:9d:17:d7:e6:c2:23:19:7e:8e:42:79:ab: 7f:c2:3b:54:af:93:ee:26:b6:27:8e:c5:93:c7:d2:62:1d:20: 22:bc:09:a8:f5:fd:12:26:ae:0b:2e:a7:1e:e2:bb:4f:72:65: 95:7e:fe:a0:cd:02:51:50:52:72:82:22:7e:e7:f6:1b:91:05: 5b:4c:cf:50:49:c9:ba:31:3f:8b:87:5e:f2:69:cf:4d:c4:b9: d4:51:a9:d0:6e:af:d8:08:2a:ea:6a:08:84:a3:c3:93:a6:97: e6:cb:12:d0:77:ee:b9:ca:0b:2b:4c:65:23:e0:33:2e:d8:9e: 8a:e4:04:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDnK40dl5enj2m9SYJcytaQmMeOMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEwMDAxMTM0WhcNMjcwMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNGY0ZTRlZmNhNjNlMDQ3ZmNjMTgzMjRlZGQyZDI0ZDFm NTVjNGNjZDNlOTc3OTNhNzZlZjMzNjg3NzRmNjhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi2ZC5Hf2TjAdyQsQiMbF2q9eJCgiBwCUWkv0RklSQ6WIM uwVmkl5dobOVFeeae1FOxekHxvchP7ydEcONvAO1ZD09EH8tBI2xQhmQqd4/pB1x OiEXK47B5+3bUnhhJS83umipT51GUYNQj7iPQJuaoXHxzfRdGn5btDRPVlKwZ9X8 sMFSQ2zBJH2KmlSbh0wwaqy+IwqIwyRqM7h8K3tcriSxA3cuQ73Co3DUlNoAV7G0 iLG/z9YiUOGw6ygWL2HO63ZPrnf9J+7s7ixPITFsEyHntII2h1BP2Gkxhb2sJF8A R9YpQqziP7bupRiGir5WJ1z7XufU3GK69GSs+I2BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWxXStjUaviQKeRegDbCnJWu8V+UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4NDM0YzFhLTliNGQtNGRmYS04OWUwLTAwODcyM2M5MGU4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7sowDQYJKoZIhvcNAQELBQADggEBAKIoEOa+HYQnxe5JgJsMhYsI6alT vc0P0IuvR7ABNqYvz//aWIb4uZz3ay6cuKwd9IYziPuDTL6fA63iQ43Oy+OQs4Js Q/1zP3SQ3fGygcLNokByq728eFufCFjYoL52yFkCNnD0A1noyJqDVM4NaN857s81 0x6PjuwcL+3uEoSwet+4Jp0X1+bCIxl+jkJ5q3/CO1Svk+4mtieOxZPH0mIdICK8 Caj1/RImrgsupx7iu09yZZV+/qDNAlFQUnKCIn7n9huRBVtMz1BJyboxP4uHXvJp z03EudRRqdBur9gIKupqCISjw5Oml+bLEtB37rnKCytMZSPgMy7YnorkBPw= -----END CERTIFICATE-----Generated at Tue Nov 3 16:15:13 2026 by rpki-client