$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbc01a10-6357-4a03-ba15-88ba06c03419.roa File: bbc01a10-6357-4a03-ba15-88ba06c03419.roa (raw, json) Hash identifier: O+pXBiOA30oCDHiju3qij2azF8xbCZ5iU3ZNLD/6YuU= Subject key identifier: B8:1F:0E:A7:B8:00:14:57:BE:82:0F:5C:69:DC:E7:FE:8E:EC:96:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CA7787850DEF0474753181D2D812A280E8FF0E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbc01a10-6357-4a03-ba15-88ba06c03419.roa Signing time: Sat 10 Oct 2026 00:10:32 +0000 ROA not before: Sat 10 Oct 2026 00:10:32 +0000 ROA not after: Fri 08 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a7:78:78:50:de:f0:47:47:53:18:1d:2d:81:2a:28:0e:8f:f0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 10 00:10:32 2026 GMT Not After : Jan 8 23:59:59 2027 GMT Subject: serialNumber=6fd5def293e4d5136382b35e85df999a882cd2f910cb2c3703ef662ed13aa195, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:82:f7:ee:6b:21:6e:0f:13:7e:6a:ca:72: 72:b2:94:32:b1:c4:6b:58:88:bb:ba:c7:4d:8c:0e: f1:3b:a3:23:20:4d:cf:6e:c4:fb:8d:30:da:27:a4: 39:55:24:9d:74:3b:fe:a1:3f:d6:65:47:a8:67:5c: 48:b6:78:78:01:14:4b:03:a2:29:05:96:8a:a3:85: 78:f2:c0:e3:39:30:e2:2f:39:1c:c4:32:14:d3:71: 43:e3:f3:ea:9d:1d:b8:f5:a8:0e:54:46:37:8f:fd: c5:0a:ee:9e:88:57:1f:79:8c:9f:9a:26:cd:14:c2: c0:c1:c0:f3:77:b4:4e:9f:57:3e:55:95:19:ce:0e: 90:60:56:58:c9:77:13:c5:dd:a5:1e:a6:89:b0:a4: c2:06:25:59:f0:f9:6e:23:b3:73:00:35:c3:ba:ca: 2b:3d:75:b3:f6:ca:c1:2e:b6:f9:30:27:80:e9:f7: 81:6c:80:ac:0a:94:6a:56:a6:93:47:68:a2:41:72: 26:09:63:8d:02:b8:5b:1c:66:2a:a4:20:8d:16:f0: 19:37:49:9d:78:5b:72:5c:4d:b5:b1:2a:f6:dc:75: de:58:4e:be:4b:22:07:7b:65:04:3c:0e:94:3f:e7: e2:d0:dc:09:2d:8c:df:be:1a:6d:27:79:da:d5:a9: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1F:0E:A7:B8:00:14:57:BE:82:0F:5C:69:DC:E7:FE:8E:EC:96:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbc01a10-6357-4a03-ba15-88ba06c03419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.175.0/24 Signature Algorithm: sha256WithRSAEncryption b3:ca:0a:36:7a:31:4e:22:b5:da:ee:e1:8c:09:fc:e1:32:8a: a4:67:26:b5:b5:01:42:b8:ee:be:92:0f:55:56:3e:35:dc:98: 4a:30:5f:c3:6f:55:2f:09:ab:fb:0e:a7:33:fc:45:f0:18:0b: fd:a0:72:3e:34:af:43:43:04:20:ff:0f:74:89:3c:ad:50:73: d7:b8:06:53:89:1a:f5:52:2b:76:25:57:7e:15:26:42:18:94: 59:3e:33:08:2f:a7:5a:7d:75:82:7f:a8:cf:d5:7f:3d:4e:bb: 40:9c:cb:57:ff:07:5a:22:bc:32:cb:2f:76:50:3c:9c:ff:fb: da:b2:b5:9d:d1:ae:e2:35:90:0a:13:a5:96:00:ca:72:f0:24: 9e:16:32:f8:c7:4f:b7:14:28:07:12:0a:9f:77:f7:3a:b5:64: 36:c1:ca:33:b4:71:4f:8d:82:e9:75:33:a0:07:0e:9a:f3:48: 15:71:72:b9:a9:ef:cc:32:f2:6c:2b:93:40:98:97:53:a5:fd: 8f:6c:93:c2:77:04:76:f9:25:47:93:f9:3b:df:d3:fb:9b:2e: fc:e7:79:da:0a:4c:08:8c:b8:bd:b3:71:c3:11:cf:74:75:e8: 19:83:c1:89:65:51:16:b2:ab:85:fc:23:72:87:b8:a8:2f:0b: f5:92:69:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTKd4eFDe8EdHUxgdLYEqKA6P8OIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEwMDAxMDMyWhcNMjcwMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmQ1ZGVmMjkzZTRkNTEzNjM4MmIzNWU4NWRmOTk5YTg4 MmNkMmY5MTBjYjJjMzcwM2VmNjYyZWQxM2FhMTk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6OIL37mshbg8TfmrKcnKylDKxxGtYiLu6x02MDvE7oyMg Tc9uxPuNMNonpDlVJJ10O/6hP9ZlR6hnXEi2eHgBFEsDoikFloqjhXjywOM5MOIv ORzEMhTTcUPj8+qdHbj1qA5URjeP/cUK7p6IVx95jJ+aJs0UwsDBwPN3tE6fVz5V lRnODpBgVljJdxPF3aUepomwpMIGJVnw+W4js3MANcO6yis9dbP2ysEutvkwJ4Dp 94FsgKwKlGpWppNHaKJBciYJY40CuFscZiqkII0W8Bk3SZ14W3JcTbWxKvbcdd5Y Tr5LIgd7ZQQ8DpQ/5+LQ3AktjN++Gm0nedrVqWtZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuB8Op7gAFFe+gg9cadzn/o7slhkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiYzAxYTEwLTYzNTctNGEwMy1iYTE1LTg4YmEwNmMwMzQxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7q8wDQYJKoZIhvcNAQELBQADggEBALPKCjZ6MU4itdru4YwJ/OEyiqRn JrW1AUK47r6SD1VWPjXcmEowX8NvVS8Jq/sOpzP8RfAYC/2gcj40r0NDBCD/D3SJ PK1Qc9e4BlOJGvVSK3YlV34VJkIYlFk+Mwgvp1p9dYJ/qM/Vfz1Ou0Ccy1f/B1oi vDLLL3ZQPJz/+9qytZ3RruI1kAoTpZYAynLwJJ4WMvjHT7cUKAcSCp939zq1ZDbB yjO0cU+Ngul1M6AHDprzSBVxcrmp78wy8mwrk0CYl1Ol/Y9sk8J3BHb5JUeT+Tvf 0/ubLvznedoKTAiMuL2zccMRz3R16BmDwYllURayq4X8I3KHuKgvC/WSaSc= -----END CERTIFICATE-----Generated at Wed Nov 4 05:36:54 2026 by rpki-client