$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4edb771-ec0f-400b-84fc-81d5688f849d.roa File: c4edb771-ec0f-400b-84fc-81d5688f849d.roa (raw, json) Hash identifier: rfJyhVrKZDZYn+gtkBsMRSXP50+cZTp2/Ddmfj87PBI= Subject key identifier: B1:08:0F:6B:25:D3:F7:FF:ED:15:5A:26:FC:53:67:88:96:3F:0C:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A86989885F0F39CDB05B25C97FE1F6755E6E6DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4edb771-ec0f-400b-84fc-81d5688f849d.roa Signing time: Sun 13 Sep 2026 00:00:06 +0000 ROA not before: Sun 13 Sep 2026 00:00:06 +0000 ROA not after: Sat 12 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.66.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:86:98:98:85:f0:f3:9c:db:05:b2:5c:97:fe:1f:67:55:e6:e6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 13 00:00:06 2026 GMT Not After : Dec 12 23:59:59 2026 GMT Subject: serialNumber=789a39caf44b69608cd088a446e49a127017cfdea6ac8967eda14244f2a12fdd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:05:85:e7:d1:ca:88:39:e9:fe:f3:08:e1: ec:f7:bc:c6:25:38:ff:38:84:d1:a2:e5:44:cb:eb: 3f:ce:b2:9b:d2:57:00:ba:8d:92:c7:f1:e8:7d:6f: 5c:be:9c:7c:fb:09:5b:31:cb:58:82:88:4a:ea:25: 05:ae:b1:1b:ee:70:b2:31:1f:78:73:dc:ac:96:f7: 78:69:15:fa:24:68:61:6e:42:96:f9:72:cd:e4:bf: fc:d3:dd:21:87:88:65:a9:9a:8a:9e:ff:3a:de:2f: 17:08:97:2f:62:e4:94:b1:1a:1b:ee:d2:1e:99:59: 71:6b:4c:f0:e2:c6:1a:06:39:a8:20:b9:8b:d2:2e: 67:13:00:e7:38:a6:bb:24:49:6e:85:e3:7d:c5:fe: 1b:f1:d9:a2:a1:71:20:5c:1d:1c:25:c6:f6:b7:2c: eb:d6:9c:53:bd:d8:7f:4a:82:de:0b:40:3a:0e:6c: 03:a7:6a:30:19:f3:bb:0c:77:e5:1e:da:80:e6:f3: 3a:ef:59:84:d8:86:99:ee:a0:15:1f:fa:44:85:ac: f6:4c:42:54:69:5a:36:20:a6:52:60:11:28:3c:36: 40:7b:0e:b6:2d:5d:88:be:43:d6:9d:1b:8d:fd:8b: 52:8e:de:b7:9d:60:29:57:42:67:81:73:48:96:67: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:08:0F:6B:25:D3:F7:FF:ED:15:5A:26:FC:53:67:88:96:3F:0C:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4edb771-ec0f-400b-84fc-81d5688f849d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.66.131.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7a:90:57:6d:b2:33:98:7e:db:be:e0:f1:c4:4a:4e:9e:a8: 54:2c:66:a1:f8:37:37:eb:58:32:6e:80:de:1d:a3:00:75:6a: 72:1d:fe:fb:e9:e7:53:97:91:ed:45:95:68:e5:18:6b:38:1a: e3:55:e2:20:2d:f8:7d:80:16:68:87:70:ab:04:02:a1:30:96: d6:9a:68:de:8c:35:c9:d5:9d:c3:cf:51:f8:d7:55:ff:59:c2: e0:65:d3:02:c0:07:9e:9b:52:6c:34:ab:9d:92:55:b9:f9:ff: f4:64:de:e8:c7:5e:aa:2a:e8:be:d6:6f:67:9d:64:c6:80:61: 71:53:2e:ba:2b:5c:5a:1a:c1:68:4f:b8:a2:20:a0:eb:98:6a: ae:9c:04:50:c3:e2:6c:3c:19:19:6e:f3:d4:b4:d0:56:18:2b: 9a:a2:6b:1b:9a:f6:2f:14:aa:33:43:5a:d0:c2:c6:4c:91:ef: d6:88:c2:46:3b:0c:21:28:68:84:18:d6:32:bf:f9:9d:d8:8e: 9b:8a:5e:d2:a5:50:a0:ce:df:10:db:94:03:ab:e5:f2:16:2c: c4:a6:71:eb:cf:90:03:5e:8e:9e:66:aa:b8:ff:37:77:30:58: d2:b8:23:60:4e:c6:b2:ac:85:75:f4:93:5d:be:f0:7c:21:27: cf:2b:7c:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCoaYmIXw85zbBbJcl/4fZ1Xm5towDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEzMDAwMDA2WhcNMjYxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODlhMzljYWY0NGI2OTYwOGNkMDg4YTQ0NmU0OWExMjcw MTdjZmRlYTZhYzg5NjdlZGExNDI0NGYyYTEyZmRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhrwWF59HKiDnp/vMI4ez3vMYlOP84hNGi5UTL6z/OspvS VwC6jZLH8eh9b1y+nHz7CVsxy1iCiErqJQWusRvucLIxH3hz3KyW93hpFfokaGFu Qpb5cs3kv/zT3SGHiGWpmoqe/zreLxcIly9i5JSxGhvu0h6ZWXFrTPDixhoGOagg uYvSLmcTAOc4prskSW6F433F/hvx2aKhcSBcHRwlxva3LOvWnFO92H9Kgt4LQDoO bAOnajAZ87sMd+Ue2oDm8zrvWYTYhpnuoBUf+kSFrPZMQlRpWjYgplJgESg8NkB7 DrYtXYi+Q9adG439i1KO3redYClXQmeBc0iWZ8ZfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsQgPayXT9//tFVom/FNniJY/DAEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0ZWRiNzcxLWVjMGYtNDAwYi04NGZjLTgxZDU2ODhmODQ5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABAQoMwDQYJKoZIhvcNAQELBQADggEBACJ6kFdtsjOYftu+4PHESk6eqFQs ZqH4NzfrWDJugN4dowB1anId/vvp51OXke1FlWjlGGs4GuNV4iAt+H2AFmiHcKsE AqEwltaaaN6MNcnVncPPUfjXVf9ZwuBl0wLAB56bUmw0q52SVbn5//Rk3ujHXqoq 6L7Wb2edZMaAYXFTLrorXFoawWhPuKIgoOuYaq6cBFDD4mw8GRlu89S00FYYK5qi axua9i8UqjNDWtDCxkyR79aIwkY7DCEoaIQY1jK/+Z3YjpuKXtKlUKDO3xDblAOr 5fIWLMSmcevPkANejp5mqrj/N3cwWNK4I2BOxrKshXX0k12+8HwhJ88rfDM= -----END CERTIFICATE-----Generated at Fri Oct 30 23:04:37 2026 by rpki-client