$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c092c40f-f687-40dd-89ff-780fa8bead0b.roa File: c092c40f-f687-40dd-89ff-780fa8bead0b.roa (raw, json) Hash identifier: 88KxPy1d+Mv/ou4EBfP5zm+6TEmitNQSp+O7hSoidZA= Subject key identifier: 7B:87:DF:AF:6B:A5:6F:2F:C1:1A:3B:CC:09:5C:A5:F4:E6:7E:93:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E1585D17361AA05EB60436FD25F0B83C55B484E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c092c40f-f687-40dd-89ff-780fa8bead0b.roa Signing time: Mon 19 Oct 2026 01:21:28 +0000 ROA not before: Mon 19 Oct 2026 01:21:28 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:15:85:d1:73:61:aa:05:eb:60:43:6f:d2:5f:0b:83:c5:5b:48:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:21:28 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=8395160ec6a42196fddce029a2a0c2ed12a94737c4b9c14110f6556b1c7feead, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:d0:11:91:45:4d:b4:01:6b:69:3c:7d:7b: e4:94:70:92:3c:91:91:1b:c9:07:a9:fc:86:5c:9e: 27:a4:07:3e:9e:27:a5:38:c4:fc:d3:77:81:05:f1: d7:94:1c:a4:b8:9e:99:b6:55:c9:e2:9e:d1:06:ae: 9f:9b:00:58:b1:05:46:37:3f:6c:f4:60:28:79:af: 1a:a7:50:39:36:a6:1f:c3:61:cc:90:01:73:02:da: 05:5c:6d:c8:c2:c1:79:0e:46:4d:d2:bc:15:2e:05: ee:2e:82:eb:f8:26:47:0a:9a:92:f6:27:27:99:d2: d9:72:1f:18:bd:c8:25:f4:46:a3:0e:ec:f7:a3:9a: 89:a4:70:28:b8:bf:50:4a:0d:b8:b1:88:8b:d0:37: e8:6c:73:4a:e3:fc:02:c1:58:e4:43:b0:77:1c:fe: 70:db:06:8c:5c:b3:3c:8d:52:83:1b:f1:e9:09:4a: d8:41:a7:3a:26:5d:ab:07:a3:97:fd:47:05:34:c8: ba:3f:a2:1f:1f:a5:8f:46:9d:b0:1c:5d:4d:91:22: bd:36:bf:22:da:03:ec:08:e3:22:af:74:60:cd:0a: 39:77:b2:79:9f:61:3f:7f:8a:02:c8:67:3e:43:be: 09:9e:91:68:52:8d:60:75:a4:34:0d:69:ad:49:38: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:87:DF:AF:6B:A5:6F:2F:C1:1A:3B:CC:09:5C:A5:F4:E6:7E:93:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c092c40f-f687-40dd-89ff-780fa8bead0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.94.0/24 Signature Algorithm: sha256WithRSAEncryption a8:05:50:cc:57:eb:17:a2:0c:48:c5:0d:84:5e:26:70:5c:b6: 13:69:b6:ff:0a:d6:16:b5:f0:0e:f6:7e:dd:e4:53:a5:32:2d: fc:a1:c8:eb:d6:af:20:53:c4:99:ec:36:9e:3d:cb:fb:96:7b: c3:15:c0:64:ce:01:5f:8e:d5:b7:c0:73:de:4e:fd:2c:be:c7: c9:0d:e8:84:2b:89:d0:cd:5a:a3:13:b1:7e:ad:a1:a2:77:ff: f4:dd:02:81:d9:7c:c4:6b:19:94:47:b0:1e:bd:ce:da:b1:7c: bd:a6:56:27:1f:87:78:f7:d3:28:bc:a7:4c:dd:c8:64:5e:14: 46:79:2a:67:28:06:44:ac:be:b0:ad:a9:ac:d1:df:11:4f:4b: d0:0b:67:e6:c9:2f:e3:b8:0e:87:25:29:cb:7d:1a:1e:43:1f: 8a:a5:a4:ce:aa:4e:f3:37:0c:bf:c4:87:d1:84:46:b1:a7:10: 8a:da:cf:be:7d:37:36:a3:32:34:bc:39:68:2b:50:1d:03:5c: 9a:7e:4a:97:4e:f9:d6:16:37:f7:5f:4c:b8:44:00:72:e9:af: b0:fb:e8:b9:d9:87:2e:f4:bf:d4:d2:28:a1:db:39:3b:4f:63: 47:c0:e1:01:4c:45:c8:9d:09:2d:12:83:2d:da:0a:ee:b0:86: 0c:af:f0:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPhWF0XNhqgXrYENv0l8Lg8VbSE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDEyMTI4WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mzk1MTYwZWM2YTQyMTk2ZmRkY2UwMjlhMmEwYzJlZDEy YTk0NzM3YzRiOWMxNDExMGY2NTU2YjFjN2ZlZWFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChvNARkUVNtAFraTx9e+SUcJI8kZEbyQep/IZcniekBz6e J6U4xPzTd4EF8deUHKS4npm2VcnintEGrp+bAFixBUY3P2z0YCh5rxqnUDk2ph/D YcyQAXMC2gVcbcjCwXkORk3SvBUuBe4uguv4JkcKmpL2JyeZ0tlyHxi9yCX0RqMO 7PejmomkcCi4v1BKDbixiIvQN+hsc0rj/ALBWORDsHcc/nDbBoxcszyNUoMb8ekJ SthBpzomXasHo5f9RwU0yLo/oh8fpY9GnbAcXU2RIr02vyLaA+wI4yKvdGDNCjl3 snmfYT9/igLIZz5DvgmekWhSjWB1pDQNaa1JOPiVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe4ffr2ulby/BGjvMCVyl9OZ+k7MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwOTJjNDBmLWY2ODctNDBkZC04OWZmLTc4MGZhOGJlYWQwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmF4wDQYJKoZIhvcNAQELBQADggEBAKgFUMxX6xeiDEjFDYReJnBcthNp tv8K1ha18A72ft3kU6UyLfyhyOvWryBTxJnsNp49y/uWe8MVwGTOAV+O1bfAc95O /Sy+x8kN6IQridDNWqMTsX6toaJ3//TdAoHZfMRrGZRHsB69ztqxfL2mVicfh3j3 0yi8p0zdyGReFEZ5KmcoBkSsvrCtqazR3xFPS9ALZ+bJL+O4DoclKct9Gh5DH4ql pM6qTvM3DL/Eh9GERrGnEIraz759NzajMjS8OWgrUB0DXJp+SpdO+dYWN/dfTLhE AHLpr7D76LnZhy70v9TSKKHbOTtPY0fA4QFMRcidCS0Sgy3aCu6whgyv8KA= -----END CERTIFICATE-----Generated at Sat Oct 31 09:39:31 2026 by rpki-client