$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bada3e67-c008-4ed4-add1-6c213e7acb37.roa File: bada3e67-c008-4ed4-add1-6c213e7acb37.roa (raw, json) Hash identifier: KxvpUrvSnOhAe3HJuHerhyDxDS46bFMF48CUE6zCeTo= Subject key identifier: 18:5B:89:9E:26:96:30:8B:A2:D9:1D:9B:BE:F1:D4:BD:8B:B4:23:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CF60BAD2FBDF7FAF51F25F2F18339274322BD69 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bada3e67-c008-4ed4-add1-6c213e7acb37.roa Signing time: Thu 22 Oct 2026 00:40:10 +0000 ROA not before: Thu 22 Oct 2026 00:40:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 7224 IP address blocks: 198.14.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:0b:ad:2f:bd:f7:fa:f5:1f:25:f2:f1:83:39:27:43:22:bd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 00:40:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=8c153354be413089a677bd9b53dc7def69ba50d3d345ffd0846580f4844e5b82, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4c:fc:c7:44:72:28:8c:e7:7d:d2:a4:6c:09: 4c:73:5d:ec:1f:19:50:c7:19:86:7b:7e:3e:27:ff: 52:67:a9:e9:1d:80:9f:f8:40:15:32:da:7b:f7:5f: 94:4e:a5:2a:35:28:75:74:b2:66:f4:c5:8b:6c:bd: c6:33:f6:29:52:fa:36:fc:91:06:03:3c:b3:be:68: ee:00:2f:f3:c1:88:ad:82:b4:05:22:c1:59:d3:b1: 67:ca:d0:37:af:cd:2d:67:ba:06:cd:7c:e8:43:32: 08:c7:4a:e8:46:86:fa:77:5e:2d:5f:b2:da:63:eb: 10:46:bf:cc:fa:3b:da:ab:ed:e8:f3:a8:62:43:45: 8a:aa:dc:5c:3e:60:a7:55:9b:5b:e9:9b:05:bf:dd: 4d:30:38:37:2f:27:b7:22:5b:6f:82:86:1e:ae:99: ff:8f:5e:23:9c:6f:16:e4:d3:1b:e1:0e:77:37:81: ac:88:60:ff:e5:26:e7:f5:29:7a:6b:14:a6:8c:7e: 36:02:27:9d:c8:2e:dd:a5:ec:93:0b:9e:c2:56:e0: 65:40:f0:5a:77:8d:a1:e6:7a:c2:16:13:7a:34:f5: 42:49:e1:df:d5:85:67:8b:4b:d1:27:c4:56:d8:f5: 9e:b1:d9:da:4d:37:d9:74:63:a1:b5:75:aa:6a:a7: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5B:89:9E:26:96:30:8B:A2:D9:1D:9B:BE:F1:D4:BD:8B:B4:23:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bada3e67-c008-4ed4-add1-6c213e7acb37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.14.1.0/24 Signature Algorithm: sha256WithRSAEncryption 93:87:37:e2:72:4b:92:a1:b5:07:e9:28:fd:2d:23:ac:c2:16: ff:42:f1:a4:16:a5:e1:c4:b7:f4:f2:17:4c:ba:c2:25:dc:2d: f5:48:7b:7e:d0:e2:d5:83:7b:78:4d:42:9e:7b:ba:5c:3a:0b: 2f:94:c0:d7:d3:cf:ad:a9:aa:57:16:4a:2e:43:ce:31:0c:46: ac:18:a0:b5:04:3c:78:28:65:14:e3:c6:5b:48:7b:51:8b:8d: bf:67:f6:79:ed:82:7c:5c:d2:6d:88:dc:5b:49:d5:55:a1:94: 3a:0a:f8:06:9c:e9:6e:fd:99:d2:65:5d:37:d6:8a:ec:ed:d9: f8:95:12:4b:52:63:f9:cb:80:d1:43:76:e4:b8:20:b4:b4:58: 64:88:d0:bc:eb:f7:c2:19:78:f0:2e:92:65:7b:a1:c6:08:ae: 8c:89:8c:5a:d6:f9:9b:39:4a:dc:23:d4:95:47:37:1a:14:29: d1:28:0a:0f:0a:3e:15:5f:ae:d3:d9:99:b1:ba:13:ad:26:f3: 82:d4:ad:57:da:0c:d7:7a:77:fe:ca:54:c3:4d:69:fe:09:91: 59:b7:a4:60:78:74:52:cc:11:22:0f:66:a2:16:c0:78:ff:98: de:b4:46:f5:00:9a:41:de:ba:cb:88:12:58:a0:92:ec:e6:64: 8e:b2:ca:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPPYLrS+99/r1HyXy8YM5J0MivWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDA0MDEwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzE1MzM1NGJlNDEzMDg5YTY3N2JkOWI1M2RjN2RlZjY5 YmE1MGQzZDM0NWZmZDA4NDY1ODBmNDg0NGU1YjgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXTPzHRHIojOd90qRsCUxzXewfGVDHGYZ7fj4n/1Jnqekd gJ/4QBUy2nv3X5ROpSo1KHV0smb0xYtsvcYz9ilS+jb8kQYDPLO+aO4AL/PBiK2C tAUiwVnTsWfK0DevzS1nugbNfOhDMgjHSuhGhvp3Xi1fstpj6xBGv8z6O9qr7ejz qGJDRYqq3Fw+YKdVm1vpmwW/3U0wODcvJ7ciW2+Chh6umf+PXiOcbxbk0xvhDnc3 gayIYP/lJuf1KXprFKaMfjYCJ53ILt2l7JMLnsJW4GVA8Fp3jaHmesIWE3o09UJJ 4d/VhWeLS9EnxFbY9Z6x2dpNN9l0Y6G1dapqp4QnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGFuJniaWMIui2R2bvvHUvYu0IxQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhZGEzZTY3LWMwMDgtNGVkNC1hZGQxLTZjMjEzZTdhY2IzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGDgEwDQYJKoZIhvcNAQELBQADggEBAJOHN+JyS5KhtQfpKP0tI6zCFv9C 8aQWpeHEt/TyF0y6wiXcLfVIe37Q4tWDe3hNQp57ulw6Cy+UwNfTz62pqlcWSi5D zjEMRqwYoLUEPHgoZRTjxltIe1GLjb9n9nntgnxc0m2I3FtJ1VWhlDoK+Aac6W79 mdJlXTfWiuzt2fiVEktSY/nLgNFDduS4ILS0WGSI0Lzr98IZePAukmV7ocYIroyJ jFrW+Zs5Stwj1JVHNxoUKdEoCg8KPhVfrtPZmbG6E60m84LUrVfaDNd6d/7KVMNN af4JkVm3pGB4dFLMESIPZqIWwHj/mN60RvUAmkHeusuIEligkuzmZI6yyuM= -----END CERTIFICATE-----Generated at Mon Nov 2 18:49:01 2026 by rpki-client