$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2cf0f28-ba6b-45fd-a861-271ae6d7e982.roa File: c2cf0f28-ba6b-45fd-a861-271ae6d7e982.roa (raw, json) Hash identifier: OWvQWyPNWIuUxql74GRRrwVj+CCK8aD9e2s33RvIkX0= Subject key identifier: 96:BF:F4:05:CB:25:9C:EC:AD:BA:CF:26:B9:70:E4:5B:84:0C:03:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11149CDFFED208B49931DA5F8155427CBA5B7959 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2cf0f28-ba6b-45fd-a861-271ae6d7e982.roa Signing time: Tue 06 Oct 2026 00:40:42 +0000 ROA not before: Tue 06 Oct 2026 00:40:42 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 70.236.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:14:9c:df:fe:d2:08:b4:99:31:da:5f:81:55:42:7c:ba:5b:79:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:40:42 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=e867051ada92d79def76cc3592eb117c1efbc6626db9d797796a1cdc1cedf641, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e0:00:1a:c2:35:6f:da:f8:4a:12:08:04:de: 86:ca:69:52:a8:e7:eb:5c:8b:a3:4e:4e:52:87:57: 38:fb:9f:27:bf:b3:67:ed:bc:05:3e:61:45:b5:5e: 71:6d:3f:4e:83:9c:3d:7d:81:3a:cc:e2:13:b1:72: 34:91:28:e1:0b:a3:9d:a8:6e:42:44:c2:44:a2:75: df:96:7e:7a:c2:bb:44:be:c6:52:bc:c3:7b:2f:25: 61:a1:71:20:f5:47:15:f3:1a:69:96:76:1f:3a:cd: 28:9c:c9:03:77:c4:c9:f2:6f:a4:b3:e5:8e:2f:25: 9c:72:f9:b7:43:a6:b5:7b:4f:df:d8:6d:d2:8f:db: a3:12:25:e6:74:19:73:21:94:f8:5f:b7:9b:79:b8: 5b:34:b9:ac:26:56:88:19:7a:86:cb:57:9b:c3:65: 5e:5a:4c:a3:6b:94:a1:1e:d6:27:7e:a3:dc:ac:11: a8:cb:c5:bb:e5:d3:41:60:85:ac:88:76:67:16:17: 69:19:a6:8d:96:ab:1f:c0:dc:e6:5a:4b:1a:b5:6a: af:46:8d:31:90:db:09:e2:d2:a9:95:04:a9:fa:a7: cf:6d:23:73:5a:06:dd:63:ab:13:91:a0:b2:2c:50: 31:a9:0a:2c:40:68:3b:9e:c3:87:fc:46:60:be:6f: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:F4:05:CB:25:9C:EC:AD:BA:CF:26:B9:70:E4:5B:84:0C:03:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2cf0f28-ba6b-45fd-a861-271ae6d7e982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.236.0.0/18 Signature Algorithm: sha256WithRSAEncryption 44:a9:90:e2:4b:14:dd:d7:b6:c5:c6:2d:84:cd:7a:f5:e2:33: 08:07:36:41:15:a7:3b:39:60:3b:5f:66:20:5c:6d:04:25:f0: cd:ce:43:55:86:f9:56:19:f2:d3:cf:31:b7:9e:5b:cd:4e:8e: 6c:48:08:71:83:a4:90:07:9e:bb:ea:a2:14:2f:50:86:5b:3d: 5d:0c:e6:e7:2a:b3:31:ec:01:ea:51:26:55:6d:49:8f:38:4e: 24:f5:a1:e5:db:21:84:23:9b:f3:a3:98:68:bd:86:87:5d:65: 61:03:ec:a0:d9:6b:4e:7b:25:23:67:0b:69:f7:15:69:e2:80: 78:9f:8f:db:c8:6d:eb:e0:96:e5:e1:15:45:6b:e4:1f:f3:82: ae:28:f3:5e:29:6a:d6:92:ea:0b:22:90:8d:b0:ce:78:7c:5c: 3c:0d:55:9d:f2:e1:96:f9:e4:9a:22:77:65:76:47:23:5f:d3: bc:28:63:63:e9:6f:d2:d9:84:02:40:45:14:c1:a0:4a:4f:cc: 78:db:33:57:52:f3:ad:f9:f3:63:7a:6a:15:58:97:fa:60:be: 72:c0:f2:9e:c5:f4:01:76:b1:ea:8c:39:61:c9:cf:01:e3:87: 1d:7b:09:c2:ff:f4:95:6f:b6:66:1b:df:01:64:91:e1:4c:57: 66:81:4a:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUERSc3/7SCLSZMdpfgVVCfLpbeVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA0MDQyWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODY3MDUxYWRhOTJkNzlkZWY3NmNjMzU5MmViMTE3YzFl ZmJjNjYyNmRiOWQ3OTc3OTZhMWNkYzFjZWRmNjQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL4AAawjVv2vhKEggE3obKaVKo5+tci6NOTlKHVzj7nye/ s2ftvAU+YUW1XnFtP06DnD19gTrM4hOxcjSRKOELo52obkJEwkSidd+WfnrCu0S+ xlK8w3svJWGhcSD1RxXzGmmWdh86zSicyQN3xMnyb6Sz5Y4vJZxy+bdDprV7T9/Y bdKP26MSJeZ0GXMhlPhft5t5uFs0uawmVogZeobLV5vDZV5aTKNrlKEe1id+o9ys EajLxbvl00FghayIdmcWF2kZpo2Wqx/A3OZaSxq1aq9GjTGQ2wni0qmVBKn6p89t I3NaBt1jqxORoLIsUDGpCixAaDuew4f8RmC+b2ftAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlr/0BcslnOytus8muXDkW4QMA+AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyY2YwZjI4LWJhNmItNDVmZC1hODYxLTI3MWFlNmQ3ZTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG7AAwDQYJKoZIhvcNAQELBQADggEBAESpkOJLFN3XtsXGLYTNevXiMwgH NkEVpzs5YDtfZiBcbQQl8M3OQ1WG+VYZ8tPPMbeeW81OjmxICHGDpJAHnrvqohQv UIZbPV0M5ucqszHsAepRJlVtSY84TiT1oeXbIYQjm/OjmGi9hoddZWED7KDZa057 JSNnC2n3FWnigHifj9vIbevgluXhFUVr5B/zgq4o814pataS6gsikI2wznh8XDwN VZ3y4Zb55Joid2V2RyNf07woY2Ppb9LZhAJARRTBoEpPzHjbM1dS863582N6ahVY l/pgvnLA8p7F9AF2seqMOWHJzwHjhx17CcL/9JVvtmYb3wFkkeFMV2aBSsk= -----END CERTIFICATE-----Generated at Sat Oct 31 08:14:25 2026 by rpki-client