$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa File: b856ae51-66ec-4600-b64a-768473b00d4c.roa (raw, json) Hash identifier: D0Y1qfV7+0irNErKghWr0Ubu8t0g73yRguGesXwvZTM= Subject key identifier: 0B:30:4A:17:1E:97:1F:FB:82:C3:6A:CF:52:DA:34:4B:3F:70:8C:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46CE6B5CC83BBE7514F540D41E7954CBE4BD77EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa Signing time: Thu 08 Oct 2026 00:51:03 +0000 ROA not before: Thu 08 Oct 2026 00:51:03 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ce:6b:5c:c8:3b:be:75:14:f5:40:d4:1e:79:54:cb:e4:bd:77:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:51:03 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=49419131704bacece047a05c8c8d031bb032acb38caf7326e56a7158e08d7974, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:f9:c5:9c:c6:c8:82:eb:a4:6c:84:e7:69: 41:b9:92:60:71:76:ba:6d:fd:c4:ae:3d:24:09:9d: fb:1b:84:fc:9c:9f:fa:c5:15:97:cf:e2:3b:ca:d0: 5b:c0:b3:ee:42:68:dd:21:27:31:4a:72:93:0c:2a: b6:be:71:75:a3:32:23:b8:5a:bc:cb:e5:81:02:fe: 3b:2f:22:6e:63:1e:e4:84:eb:a5:36:42:1e:fb:16: 35:ca:b9:3e:b4:61:e4:f3:3e:31:8f:7a:9f:af:8a: 21:d6:09:cc:9c:83:86:44:3d:78:bf:88:a0:08:fd: b0:98:d9:5c:dc:68:c3:77:8d:d7:ba:21:40:4e:dd: 19:be:a2:32:f1:53:10:15:34:d6:ff:35:7a:b8:2d: 2f:86:6c:f9:fe:6c:c8:83:ae:76:61:4f:aa:df:17: 52:89:44:92:21:ab:75:ac:d3:8a:18:3d:95:f8:9b: ae:16:d6:46:b7:07:94:1e:a6:62:f6:40:31:d2:e1: 42:4d:37:d3:ab:25:cf:df:4a:0c:3c:3e:8a:45:84: 07:cf:42:e1:11:93:0c:7d:86:88:25:73:85:80:e1: 88:6d:59:5b:0b:a9:ef:c7:ad:36:8c:74:41:6c:dd: 87:92:f0:fb:dc:94:e2:9e:ab:86:a3:02:ea:e3:16: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:30:4A:17:1E:97:1F:FB:82:C3:6A:CF:52:DA:34:4B:3F:70:8C:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.123.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e6:2f:ab:98:ef:92:4d:45:16:1d:92:ec:a6:9b:dc:0f:5d: 14:40:19:b6:6e:e9:ee:9a:37:8b:83:3b:b2:c8:cf:2a:e4:f7: 53:c0:3d:b5:b2:e3:c8:e8:e3:c4:06:70:29:b8:cd:9e:a7:dc: 35:40:7a:c6:e7:a8:d1:32:bc:83:06:64:84:8c:84:03:94:97: 00:80:b8:ae:5a:42:b9:9e:fd:f1:53:42:5b:de:fc:75:dc:82: 1e:9f:0b:ff:76:ca:31:a4:64:d4:de:e1:19:92:bb:b7:66:7d: 59:b8:7d:a7:c5:fc:6b:bc:45:35:ce:93:19:f4:ca:6c:7c:02: 4a:91:fc:ee:26:d9:1d:44:cc:4c:6e:d2:28:12:9a:6f:f0:cb: c1:5a:67:54:46:f6:71:56:93:2f:05:e1:07:37:c2:9a:0e:6c: cc:1f:90:f5:10:69:3c:7a:cd:53:65:d7:eb:d4:0e:2c:35:b0: e2:5b:ca:73:dd:0b:c8:17:61:e8:35:d2:00:48:f5:6b:58:23: d7:e9:b5:59:d0:e0:ff:fe:06:11:9d:98:f7:b6:80:6c:b9:da: be:8e:a2:ef:5a:87:a1:ca:b7:ac:72:bd:03:f7:97:72:d2:f1: 1b:3a:ae:28:1d:4a:6a:66:96:a3:f1:55:4e:c6:9b:94:29:a3: b9:be:86:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURs5rXMg7vnUU9UDUHnlUy+S9d+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDA1MTAzWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTQxOTEzMTcwNGJhY2VjZTA0N2EwNWM4YzhkMDMxYmIw MzJhY2IzOGNhZjczMjZlNTZhNzE1OGUwOGQ3OTc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5bvnFnMbIguukbITnaUG5kmBxdrpt/cSuPSQJnfsbhPyc n/rFFZfP4jvK0FvAs+5CaN0hJzFKcpMMKra+cXWjMiO4WrzL5YEC/jsvIm5jHuSE 66U2Qh77FjXKuT60YeTzPjGPep+viiHWCcycg4ZEPXi/iKAI/bCY2VzcaMN3jde6 IUBO3Rm+ojLxUxAVNNb/NXq4LS+GbPn+bMiDrnZhT6rfF1KJRJIhq3Ws04oYPZX4 m64W1ka3B5QepmL2QDHS4UJNN9OrJc/fSgw8PopFhAfPQuERkwx9hoglc4WA4Yht WVsLqe/HrTaMdEFs3YeS8PvclOKeq4ajAurjFqXhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCzBKFx6XH/uCw2rPUto0Sz9wjPkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4NTZhZTUxLTY2ZWMtNDYwMC1iNjRhLTc2ODQ3M2IwMGQ0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HswDQYJKoZIhvcNAQELBQADggEBADLmL6uY75JNRRYdkuymm9wPXRRA GbZu6e6aN4uDO7LIzyrk91PAPbWy48jo48QGcCm4zZ6n3DVAesbnqNEyvIMGZISM hAOUlwCAuK5aQrme/fFTQlve/HXcgh6fC/92yjGkZNTe4RmSu7dmfVm4fafF/Gu8 RTXOkxn0ymx8AkqR/O4m2R1EzExu0igSmm/wy8FaZ1RG9nFWky8F4Qc3wpoObMwf kPUQaTx6zVNl1+vUDiw1sOJbynPdC8gXYeg10gBI9WtYI9fptVnQ4P/+BhGdmPe2 gGy52r6Oou9ah6HKt6xyvQP3l3LS8Rs6rigdSmpmlqPxVU7Gm5Qpo7m+hho= -----END CERTIFICATE-----Generated at Tue Nov 3 19:22:17 2026 by rpki-client