$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6ddae6-c083-44d5-b58d-6cc438cf4d59.roa File: bc6ddae6-c083-44d5-b58d-6cc438cf4d59.roa (raw, json) Hash identifier: grCS/nBmyRnpMczKEFL2qP3xjqrotvcVnJ3FNzZopCA= Subject key identifier: 5F:49:4C:59:1E:D1:BD:9D:99:C9:6C:33:5A:71:BC:5F:3F:64:38:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 617036D1405E48D4689767896C235A22DC0FEEC3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6ddae6-c083-44d5-b58d-6cc438cf4d59.roa Signing time: Thu 22 Oct 2026 00:50:10 +0000 ROA not before: Thu 22 Oct 2026 00:50:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:70:36:d1:40:5e:48:d4:68:97:67:89:6c:23:5a:22:dc:0f:ee:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 00:50:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=cdc6807259cad1138953213ddf634e4802f6ba21f7191ed1335b7aa66eecd2e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:96:df:60:f1:b7:13:c5:21:20:d0:58:f4: 9e:5b:51:98:2e:01:5f:14:eb:61:34:1e:9a:43:92: a4:ea:c1:1b:bc:82:2e:d5:2d:2c:c8:a1:ab:d9:41: 37:a4:45:bc:c6:3a:a1:15:aa:8f:aa:34:ca:bb:82: b8:57:a0:9b:23:8c:3e:2f:db:ba:f9:87:7e:5e:ac: e4:0b:b3:ca:0b:6b:05:08:d7:be:ef:8b:36:41:ad: 0c:59:d8:49:65:c1:21:2b:3a:50:f4:74:dc:b2:b2: 47:6c:25:e9:24:9a:96:f4:6a:ff:ee:9f:13:31:ec: e6:af:e5:ee:75:7b:0a:f0:22:aa:8a:99:57:35:7e: 58:71:36:6a:85:b3:7e:5b:1d:f7:35:83:b8:57:83: 9c:c2:9a:d4:0f:22:52:02:74:86:8f:42:04:5c:5d: d3:e0:f4:2e:b8:61:9e:e7:65:85:02:cf:fe:df:4c: a3:e9:8b:a9:8a:07:ef:dc:73:51:06:7e:af:94:68: cd:c5:25:20:14:76:7c:b2:35:5a:1e:de:4b:6b:0e: 74:06:ea:c4:66:2b:09:77:dd:09:f3:01:d8:e7:c6: e7:89:68:bd:9d:da:5a:0b:49:74:1a:d4:d6:21:ed: 89:bb:de:05:5e:54:71:ea:1b:72:a8:9c:48:68:3e: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:49:4C:59:1E:D1:BD:9D:99:C9:6C:33:5A:71:BC:5F:3F:64:38:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6ddae6-c083-44d5-b58d-6cc438cf4d59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.156.0/23 Signature Algorithm: sha256WithRSAEncryption 11:f3:ea:3f:99:56:71:96:40:1a:5b:29:a9:27:b4:6a:e1:39: 7c:e6:95:ae:92:87:ac:d6:f1:74:4c:ae:ff:21:58:7c:e2:e3: d0:0c:9e:fc:4d:c7:60:f1:4e:39:35:e6:50:57:5d:9a:e5:6e: 99:08:56:72:6e:ca:32:c8:7e:b5:b9:cb:cd:f6:74:e9:00:46: 3f:30:d9:cd:55:6b:10:11:bc:ad:5a:d3:2b:5f:60:d3:53:a3: d6:a6:5d:c6:2b:87:d8:d2:b4:2a:d5:6e:1b:2f:4e:3a:6b:2f: cb:87:da:52:1a:7b:68:eb:0d:77:ab:8b:66:50:3d:9f:56:0f: 3f:86:32:3a:0e:23:c6:3e:2c:70:e5:52:94:69:db:35:48:92: cd:74:c3:97:90:57:45:24:8d:08:f6:99:09:71:72:c8:58:14: 19:52:5e:ef:27:93:e2:c6:2c:b6:31:ea:15:95:8a:83:fd:a8: ea:e2:f5:3a:52:70:23:f1:8f:4a:36:d1:19:52:21:79:0d:e7: 83:b1:42:db:52:34:03:46:62:9c:74:9a:d5:fa:d5:a8:15:0d: 9a:1c:c6:71:fd:7c:13:29:ba:51:8b:7d:33:3c:24:8f:cf:61: ce:34:57:c0:c5:75:38:4b:68:df:9e:23:0d:7d:66:67:3e:77: 1b:a2:f9:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYXA20UBeSNRol2eJbCNaItwP7sMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDA1MDEwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZGM2ODA3MjU5Y2FkMTEzODk1MzIxM2RkZjYzNGU0ODAy ZjZiYTIxZjcxOTFlZDEzMzViN2FhNjZlZWNkMmUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjLJbfYPG3E8UhINBY9J5bUZguAV8U62E0HppDkqTqwRu8 gi7VLSzIoavZQTekRbzGOqEVqo+qNMq7grhXoJsjjD4v27r5h35erOQLs8oLawUI 177vizZBrQxZ2EllwSErOlD0dNyyskdsJekkmpb0av/unxMx7Oav5e51ewrwIqqK mVc1flhxNmqFs35bHfc1g7hXg5zCmtQPIlICdIaPQgRcXdPg9C64YZ7nZYUCz/7f TKPpi6mKB+/cc1EGfq+UaM3FJSAUdnyyNVoe3ktrDnQG6sRmKwl33QnzAdjnxueJ aL2d2loLSXQa1NYh7Ym73gVeVHHqG3KonEhoPv3LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX0lMWR7RvZ2ZyWwzWnG8Xz9kODEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjNmRkYWU2LWMwODMtNDRkNS1iNThkLTZjYzQzOGNmNGQ1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFrFpwwDQYJKoZIhvcNAQELBQADggEBABHz6j+ZVnGWQBpbKakntGrhOXzm la6Sh6zW8XRMrv8hWHzi49AMnvxNx2DxTjk15lBXXZrlbpkIVnJuyjLIfrW5y832 dOkARj8w2c1VaxARvK1a0ytfYNNTo9amXcYrh9jStCrVbhsvTjprL8uH2lIae2jr DXeri2ZQPZ9WDz+GMjoOI8Y+LHDlUpRp2zVIks10w5eQV0UkjQj2mQlxcshYFBlS Xu8nk+LGLLYx6hWVioP9qOri9TpScCPxj0o20RlSIXkN54OxQttSNANGYpx0mtX6 1agVDZocxnH9fBMpulGLfTM8JI/PYc40V8DFdThLaN+eIw19Zmc+dxui+eg= -----END CERTIFICATE-----Generated at Thu Nov 5 01:42:37 2026 by rpki-client