$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa File: c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa (raw, json) Hash identifier: HdHNnS+vJTVhaGD8Fjf+PH4skgs5f+a/wLHdFQ2H71c= Subject key identifier: 52:04:63:F8:3E:A6:05:4A:55:FF:D8:34:D3:96:1B:33:27:94:C8:27 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E3FFA5035DBAE44D310BD500A14E305838354 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa Signing time: Thu 22 Oct 2026 01:40:08 +0000 ROA not before: Thu 22 Oct 2026 01:40:08 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 216.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3f:fa:50:35:db:ae:44:d3:10:bd:50:0a:14:e3:05:83:83:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:40:08 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=2774e2b1b599ce1cbd1fbca00789e4439c102be65c05168faaf8a7c6e9ffc336, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:5f:be:c9:ff:a0:c2:eb:4e:e1:dd:bb:b0: 18:29:ab:b7:29:28:1f:45:00:57:72:70:07:ff:2b: b9:96:74:0c:71:90:ac:9b:ee:33:37:98:4a:66:5d: 68:62:75:34:31:a5:35:b4:6e:3e:d4:23:dc:22:4b: 74:45:40:e6:fd:a8:91:c3:a2:10:f2:20:7c:56:0f: ca:7a:8a:46:f9:01:4c:4e:83:ba:3f:9b:a1:bf:9e: 9a:bd:41:24:d5:92:0b:3d:b7:9a:77:c8:88:e2:9b: a5:16:04:e2:21:3a:61:42:ac:8a:a8:31:b6:5b:70: c9:16:d9:03:59:35:d1:8a:74:33:c5:f3:8a:b8:88: 13:df:89:6f:11:b7:77:01:52:29:dd:62:30:5c:af: 61:30:93:9b:09:5c:c3:e1:cc:85:41:54:6f:e3:df: 24:2b:a8:87:75:d2:0c:82:7b:4c:0b:dd:97:2e:cc: f0:45:2e:b8:15:c5:b7:9b:d9:71:6c:82:13:b2:4a: 11:88:13:bf:ab:b4:e2:cf:3d:14:82:72:79:3e:1c: 8e:af:26:f3:ed:fa:1b:81:37:26:d5:89:69:9a:3b: 78:5c:26:b0:83:32:57:88:94:01:30:2c:8b:c5:77: d8:59:cd:62:ef:f9:6c:c4:85:84:4f:fe:58:f8:29: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:63:F8:3E:A6:05:4A:55:FF:D8:34:D3:96:1B:33:27:94:C8:27 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:01:7d:ed:09:9f:79:64:67:98:c0:f5:d0:af:7e:29:36:70: 5c:e2:fb:4f:d8:a9:fe:79:41:45:be:ce:5c:16:f2:32:a3:cb: 4c:b6:f9:d7:46:02:c6:e4:a6:a6:bc:c9:d1:9d:3c:95:34:e5: d7:ea:13:68:e3:42:2b:e7:3b:04:6c:33:0f:c4:02:0d:15:25: 78:b4:54:c5:7e:0b:09:98:0f:54:bb:52:54:ae:c7:c4:8b:cd: c7:76:b1:4b:73:d0:5a:e7:83:28:a3:dc:df:fb:77:80:7f:ce: 1f:66:82:4b:f7:c7:06:5e:9d:49:eb:21:9f:e2:dd:b0:57:66: b3:7c:77:cb:ae:7d:f8:05:09:f4:31:24:b6:ec:74:ae:70:52: ff:b2:98:48:d4:67:f6:78:71:24:50:16:5a:5b:64:a2:6b:f6: f3:0f:fe:e9:66:38:e9:59:22:e9:79:e7:dc:9f:a1:f6:72:a4: cf:ff:0d:f5:92:35:ef:a9:ad:c2:37:dc:af:c4:4b:cd:52:85: 21:df:35:1b:07:e1:b7:bd:74:a8:49:79:ca:62:9b:e9:4f:71: 09:c5:fc:8d:02:4d:cc:6a:d6:5f:b9:bf:b3:91:88:a1:92:94: b3:23:17:dc:75:bf:3f:b7:55:43:e1:40:2c:92:e7:28:f0:cb: 0e:32:64:5c -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITTj/6UDXbrkTTEL1QChTjBYODVDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMjIwMTQwMDhaFw0yNzAxMjAyMzU5NTla MHoxSTBHBgNVBAUTQDI3NzRlMmIxYjU5OWNlMWNiZDFmYmNhMDA3ODllNDQzOWMx MDJiZTY1YzA1MTY4ZmFhZjhhN2M2ZTlmZmMzMzYxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANXWX77J/6DC607h3buwGCmrtykoH0UAV3JwB/8ruZZ0DHGQ rJvuMzeYSmZdaGJ1NDGlNbRuPtQj3CJLdEVA5v2okcOiEPIgfFYPynqKRvkBTE6D uj+bob+emr1BJNWSCz23mnfIiOKbpRYE4iE6YUKsiqgxtltwyRbZA1k10Yp0M8Xz iriIE9+JbxG3dwFSKd1iMFyvYTCTmwlcw+HMhUFUb+PfJCuoh3XSDIJ7TAvdly7M 8EUuuBXFt5vZcWyCE7JKEYgTv6u04s89FIJyeT4cjq8m8+36G4E3JtWJaZo7eFwm sIMyV4iUATAsi8V32FnNYu/5bMSFhE/+WPgpfEUCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBRSBGP4PqYFSlX/2DTTlhszJ5TIJzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvYzNjYzU0ZGItMmM1Ny00YWUxLTlkOWQtYWQ0MjkzNTUwOTNiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDANhIMA0GCSqGSIb3DQEBCwUAA4IBAQBCAX3tCZ95ZGeYwPXQr34pNnBc4vtP 2Kn+eUFFvs5cFvIyo8tMtvnXRgLG5KamvMnRnTyVNOXX6hNo40Ir5zsEbDMPxAIN FSV4tFTFfgsJmA9Uu1JUrsfEi83HdrFLc9Ba54Moo9zf+3eAf84fZoJL98cGXp1J 6yGf4t2wV2azfHfLrn34BQn0MSS27HSucFL/sphI1Gf2eHEkUBZaW2Sia/bzD/7p ZjjpWSLpeefcn6H2cqTP/w31kjXvqa3CN9yvxEvNUoUh3zUbB+G3vXSoSXnKYpvp T3EJxfyNAk3MatZfub+zkYihkpSzIxfcdb8/t1VD4UAskuco8MsOMmRc -----END CERTIFICATE-----Generated at Sat Oct 31 08:17:58 2026 by rpki-client