$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3a6b14e-3266-49e5-897a-d63df88c37a3.roa File: d3a6b14e-3266-49e5-897a-d63df88c37a3.roa (raw, json) Hash identifier: ri7w2KrEFJIBz3xw6MkkQk/KEMmNg6nqssS259pizp4= Subject key identifier: 01:36:4B:B6:0D:E8:30:1B:48:6B:2A:50:C5:09:44:CB:E5:22:03:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E28E137A9F09DCCDFDD9DCE4DEB195441993837 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3a6b14e-3266-49e5-897a-d63df88c37a3.roa Signing time: Thu 01 Oct 2026 00:00:25 +0000 ROA not before: Thu 01 Oct 2026 00:00:25 +0000 ROA not after: Wed 30 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 173.83.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:28:e1:37:a9:f0:9d:cc:df:dd:9d:ce:4d:eb:19:54:41:99:38:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 1 00:00:25 2026 GMT Not After : Dec 30 23:59:59 2026 GMT Subject: serialNumber=21f1ea4b2f5879a94d3850eb73416f2aca7e356571ea3739487f08baaf1422d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:09:6b:98:56:e5:17:ae:44:e0:f8:1d:af: bb:cc:3d:3d:33:34:bc:3b:d2:9b:52:c1:0f:8b:7f: 31:09:fc:75:66:06:3a:85:84:53:4e:92:a4:19:b1: 04:48:85:2e:d4:ad:27:b9:9e:1a:90:59:15:6b:c5: 2f:12:63:9d:ce:f6:ab:b6:5b:4a:f8:a2:5a:db:46: 1e:a4:40:7f:30:c1:5b:ed:12:50:bf:f4:9b:9b:51: 89:4a:19:39:e5:53:28:9f:75:cd:cb:78:d8:5f:bc: 00:b7:31:8d:db:1c:e4:2e:6e:79:d3:cb:6d:49:40: ef:1e:93:a4:03:a1:15:c1:65:54:8c:d0:67:92:ec: 88:bc:63:1d:bc:9d:4c:5e:b9:4c:88:b6:6f:83:b6: 86:4f:c8:12:bd:88:d7:c5:21:a4:13:ee:4d:3a:9e: ed:e8:ec:9a:24:9b:68:43:61:2b:7c:e9:dc:3d:7f: 00:fa:c4:6b:21:0e:74:99:f7:43:37:f7:a2:20:5c: 43:49:b2:a0:56:1a:94:42:3f:9e:82:43:9f:14:58: 82:d3:a4:24:88:88:fe:85:17:b5:66:cc:c0:e5:c9: ca:9c:d6:c5:2a:44:42:8e:a1:a9:8a:33:b6:94:e5: a7:d0:d3:61:03:ea:28:a6:25:c2:e8:8d:f2:cb:46: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:4B:B6:0D:E8:30:1B:48:6B:2A:50:C5:09:44:CB:E5:22:03:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3a6b14e-3266-49e5-897a-d63df88c37a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.83.192.0/18 Signature Algorithm: sha256WithRSAEncryption c5:80:a9:2d:49:7f:20:e9:fd:81:8d:03:0c:c4:ff:fa:51:1e: 14:ca:97:1c:be:9d:aa:1a:71:f2:de:3f:68:56:f5:e2:34:5d: 1b:5e:fc:c3:4c:96:1c:c9:a7:96:be:aa:60:e4:a7:3d:6b:e1: e2:14:bb:63:a6:a8:c8:7e:69:03:be:4c:13:55:99:d6:4b:d4: 17:68:e2:f2:af:6c:bb:4d:c1:d5:34:57:01:d6:09:5d:70:69: 3c:af:50:4b:6e:1a:5b:30:a0:61:e6:b3:fe:9b:01:95:72:8c: f7:1d:eb:bf:3f:4e:28:6d:3e:d9:89:81:af:d7:50:87:b8:c0: e6:1f:d7:82:6f:33:cd:1f:80:af:12:11:fe:f3:b0:12:da:23: 29:ff:ba:a2:e9:1c:42:1e:2e:da:19:e5:87:42:04:24:ed:57: ff:86:0f:b3:bb:c3:53:79:52:6f:e8:5f:94:68:de:e3:7d:77: e8:f9:df:4a:69:d1:be:45:64:87:ee:56:b5:0f:11:9a:1b:07: 77:dd:86:19:8c:c5:fb:60:7e:cc:4c:46:8d:b2:00:e7:8e:21: 08:ef:ee:86:af:7f:21:83:f0:9c:7f:0d:c5:8e:01:6f:02:cf: c8:a0:0e:a4:e7:c8:22:d5:1d:8f:b0:ce:e8:f6:64:35:da:9f: cf:a7:4b:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDijhN6nwnczf3Z3OTesZVEGZODcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDAxMDAwMDI1WhcNMjYxMjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWYxZWE0YjJmNTg3OWE5NGQzODUwZWI3MzQxNmYyYWNh N2UzNTY1NzFlYTM3Mzk0ODdmMDhiYWFmMTQyMmQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtcQlrmFblF65E4Pgdr7vMPT0zNLw70ptSwQ+LfzEJ/HVm BjqFhFNOkqQZsQRIhS7UrSe5nhqQWRVrxS8SY53O9qu2W0r4olrbRh6kQH8wwVvt ElC/9JubUYlKGTnlUyifdc3LeNhfvAC3MY3bHOQubnnTy21JQO8ek6QDoRXBZVSM 0GeS7Ii8Yx28nUxeuUyItm+DtoZPyBK9iNfFIaQT7k06nu3o7Jokm2hDYSt86dw9 fwD6xGshDnSZ90M396IgXENJsqBWGpRCP56CQ58UWILTpCSIiP6FF7VmzMDlycqc 1sUqREKOoamKM7aU5afQ02ED6iimJcLojfLLRroRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUATZLtg3oMBtIaypQxQlEy+UiA0IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzYTZiMTRlLTMyNjYtNDllNS04OTdhLWQ2M2RmODhjMzdhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAatU8AwDQYJKoZIhvcNAQELBQADggEBAMWAqS1JfyDp/YGNAwzE//pRHhTK lxy+naoacfLeP2hW9eI0XRte/MNMlhzJp5a+qmDkpz1r4eIUu2OmqMh+aQO+TBNV mdZL1Bdo4vKvbLtNwdU0VwHWCV1waTyvUEtuGlswoGHms/6bAZVyjPcd678/Tiht PtmJga/XUIe4wOYf14JvM80fgK8SEf7zsBLaIyn/uqLpHEIeLtoZ5YdCBCTtV/+G D7O7w1N5Um/oX5Ro3uN9d+j530pp0b5FZIfuVrUPEZobB3fdhhmMxftgfsxMRo2y AOeOIQjv7oavfyGD8Jx/DcWOAW8Cz8igDqTnyCLVHY+wzuj2ZDXan8+nS/g= -----END CERTIFICATE-----Generated at Wed Oct 7 22:31:04 2026 by rpki-client