$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa File: bc98b8a4-19f3-4303-9456-ca95391c61c5.roa (raw, json) Hash identifier: K2pxHwVZS5Sxe6v/wEjpcXubOSzLTEko7KO5E+Uzvc8= Subject key identifier: 3F:7C:82:F8:DC:F1:86:FB:AE:E3:75:28:59:A3:9F:40:F8:C1:69:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 096F03985FB616B3270B9F8FF84FE085B01A5BBD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa Signing time: Fri 23 Oct 2026 01:41:10 +0000 ROA not before: Fri 23 Oct 2026 01:41:10 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6f:03:98:5f:b6:16:b3:27:0b:9f:8f:f8:4f:e0:85:b0:1a:5b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:41:10 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=81755406b84989ce157b35d1208ae9c70da6c95f9cacf33b7a4a15250da4833b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:c0:6c:c1:26:2d:8a:04:e6:34:09:51:f6: 3e:37:07:91:51:86:82:c6:f9:36:32:ac:d9:35:b4: 63:46:e6:af:39:a6:ec:7b:92:52:f7:d0:5d:9a:99: 74:b0:27:a4:5d:e6:9e:27:11:77:dd:88:8a:8a:c7: 64:4b:47:16:df:64:1a:38:62:6e:0c:8b:5f:75:40: f2:bf:64:0c:69:a9:24:2e:05:30:50:47:86:31:de: 6c:e7:03:7a:05:ac:7c:0a:56:24:ad:37:8a:48:9b: f2:3a:05:ad:91:1c:c8:2e:88:70:e8:bb:a8:8e:5f: f6:b3:2b:d0:04:b8:8f:21:d5:fa:c9:f6:07:8d:a2: c8:82:76:2c:07:71:4a:26:d6:0b:ca:82:84:b6:24: e2:3c:ea:69:58:af:98:eb:9c:a4:bb:7c:bb:ff:c9: 38:f9:bf:4c:b1:51:f9:29:ce:b0:d1:c2:3d:3d:3c: 7d:50:e9:19:79:85:9e:52:f0:70:7a:83:42:22:6c: b9:e4:9b:f3:a3:24:55:48:e5:bc:76:75:55:bc:36: 85:73:03:8a:1d:54:0e:87:b1:0d:95:eb:31:38:f3: 21:0d:23:c1:e6:1c:25:37:8f:2e:ba:c1:41:d8:ce: 92:43:93:f1:e5:e7:4b:76:35:f8:48:2a:59:b6:e4: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7C:82:F8:DC:F1:86:FB:AE:E3:75:28:59:A3:9F:40:F8:C1:69:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.0.0/18 Signature Algorithm: sha256WithRSAEncryption 68:91:d5:7e:28:be:dc:82:a8:5f:57:60:d9:1f:b3:50:ed:1e: 6f:64:3d:99:a9:1e:0b:da:42:9e:a0:60:c1:c2:bc:cf:e0:d2: 83:d1:27:00:7d:55:35:44:c7:50:93:ff:72:43:64:ea:44:97: 5e:29:84:42:95:21:e8:db:d6:3b:c1:40:4d:87:f7:f5:13:0c: f1:e9:09:22:27:bc:f4:12:ae:82:a0:71:82:15:8c:16:b5:b7: bf:b6:f7:f2:28:f8:d2:11:6b:44:c6:65:30:8b:b7:a2:8f:1e: 0d:e8:44:df:93:80:86:c8:c2:65:83:37:3f:08:b6:9c:61:6a: 77:2b:e5:cb:53:7d:0f:dc:ca:9f:0e:14:fe:aa:ae:4b:c9:80: 74:85:0b:ac:b2:41:c1:f0:50:b1:38:31:b8:06:e6:a5:7a:a3: eb:f9:6f:5b:e2:08:10:1f:8c:6b:91:38:77:ef:4a:94:40:7c: bd:9d:17:e4:39:b1:64:d5:c9:08:1d:30:e3:4d:90:a2:80:11: 92:11:21:ec:16:80:e0:a2:f5:32:9d:ec:2d:18:75:2c:67:b0: 5a:65:82:3c:ef:6f:5f:84:66:b1:c3:aa:5a:17:82:f2:21:15: 2e:5b:a4:2a:ed:08:67:c8:bd:25:2a:1e:66:d1:3c:df:27:cb: 0d:c5:c3:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCW8DmF+2FrMnC5+P+E/ghbAaW70wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDE0MTEwWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTc1NTQwNmI4NDk4OWNlMTU3YjM1ZDEyMDhhZTljNzBk YTZjOTVmOWNhY2YzM2I3YTRhMTUyNTBkYTQ4MzNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoYMBswSYtigTmNAlR9j43B5FRhoLG+TYyrNk1tGNG5q85 pux7klL30F2amXSwJ6Rd5p4nEXfdiIqKx2RLRxbfZBo4Ym4Mi191QPK/ZAxpqSQu BTBQR4Yx3mznA3oFrHwKViStN4pIm/I6Ba2RHMguiHDou6iOX/azK9AEuI8h1frJ 9geNosiCdiwHcUom1gvKgoS2JOI86mlYr5jrnKS7fLv/yTj5v0yxUfkpzrDRwj09 PH1Q6Rl5hZ5S8HB6g0IibLnkm/OjJFVI5bx2dVW8NoVzA4odVA6HsQ2V6zE48yEN I8HmHCU3jy66wUHYzpJDk/Hl50t2NfhIKlm25HklAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP3yC+Nzxhvuu43UoWaOfQPjBaTYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjOThiOGE0LTE5ZjMtNDMwMy05NDU2LWNhOTUzOTFjNjFjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYXFgAwDQYJKoZIhvcNAQELBQADggEBAGiR1X4ovtyCqF9XYNkfs1DtHm9k PZmpHgvaQp6gYMHCvM/g0oPRJwB9VTVEx1CT/3JDZOpEl14phEKVIejb1jvBQE2H 9/UTDPHpCSInvPQSroKgcYIVjBa1t7+29/Io+NIRa0TGZTCLt6KPHg3oRN+TgIbI wmWDNz8Itpxhancr5ctTfQ/cyp8OFP6qrkvJgHSFC6yyQcHwULE4MbgG5qV6o+v5 b1viCBAfjGuROHfvSpRAfL2dF+Q5sWTVyQgdMONNkKKAEZIRIewWgOCi9TKd7C0Y dSxnsFplgjzvb1+EZrHDqloXgvIhFS5bpCrtCGfIvSUqHmbRPN8nyw3Fw50= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:31 2026 by rpki-client