$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa File: 74f23cab-f771-4629-9fb9-72d19a1d7df6.roa (raw, json) Hash identifier: Gp2VKnlHW3fOGP9ZmWL75xMwjhGCx8CuNRKuFddGwm4= Subject key identifier: 5C:57:13:2D:10:60:5D:DC:31:07:0F:61:12:48:DB:53:C7:F3:0D:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2125A284A11B990CE195A88D99744901A1C4FB8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa Signing time: Mon 26 Oct 2026 00:11:16 +0000 ROA not before: Mon 26 Oct 2026 00:11:16 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:25:a2:84:a1:1b:99:0c:e1:95:a8:8d:99:74:49:01:a1:c4:fb:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:11:16 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=bece573e8064c3c0a7e54af7dd29693ff5fc6b4f9b6ce49c796c5ecddf24735b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:4b:04:12:c8:d3:9b:27:91:25:9d:cd:11: 20:33:7f:a7:b4:51:41:55:04:3f:55:bc:32:bc:52: e0:6d:7d:63:db:1e:83:47:41:4e:9c:9e:a7:bc:df: ed:56:58:9d:1b:0e:2d:d5:21:51:0c:10:50:99:c7: 37:15:21:c1:13:4c:85:93:df:0a:87:fa:f3:09:03: 01:e8:67:17:8a:8d:72:d1:96:f7:fe:ce:32:e3:8a: ef:4c:ac:d3:1c:cc:71:49:9a:77:06:3e:33:a1:9e: 26:62:fb:10:17:53:9f:8f:b1:12:f1:2e:40:6d:db: b7:6c:fd:fa:2f:4e:b4:f3:37:6c:a9:95:0b:67:6a: f9:52:a6:46:ed:0b:a3:4a:0a:56:d9:7f:6d:64:c2: 9f:b1:92:4a:0c:d4:cf:be:9f:07:74:07:2e:4a:ee: b3:99:83:1e:7f:7c:cd:66:17:1f:78:80:a4:f7:ba: cf:6c:55:ac:2a:7c:1d:30:ad:7f:b9:d2:b1:86:d9: e3:b6:3d:b5:8c:f3:d9:08:91:f0:de:32:fc:7e:ae: e7:2e:eb:39:8b:8a:13:0a:f8:b2:ca:5e:fa:9e:28: 3b:41:59:76:12:94:60:c5:43:bf:24:f8:5b:f2:7e: f1:7a:f3:c5:8e:48:7a:06:44:a2:9e:e7:7f:8b:c8: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:57:13:2D:10:60:5D:DC:31:07:0F:61:12:48:DB:53:C7:F3:0D:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption d5:61:20:13:b8:dd:43:90:1a:18:80:2e:20:62:f6:22:f4:11: 6b:6d:96:83:28:85:54:c3:96:c8:2f:13:1b:a9:3d:92:82:4f: eb:b1:13:5b:fb:9b:2f:ba:7a:ef:a4:dc:ef:c9:f8:b3:a2:79: b3:21:69:c2:9d:0c:81:59:a3:4a:29:e8:1f:c7:94:30:79:1d: eb:d1:8e:26:2a:84:37:47:fa:fd:98:b5:d9:a7:d3:dd:c8:e0: d5:93:f6:87:1e:5a:ab:02:39:36:b8:6f:7b:16:64:9d:d2:9d: 70:08:5e:66:0f:29:08:24:21:50:9a:5c:f8:38:75:a7:ab:1c: e9:47:a4:06:0d:86:6b:c2:2a:1a:f0:94:db:ab:f4:1e:71:b6: ce:2d:f5:ad:a5:db:8c:3e:26:f9:98:a4:8c:24:6c:17:6a:d0: ac:48:69:45:7f:11:2e:12:d1:ae:3d:f8:8b:9e:c0:a6:52:a0: 37:6a:f1:84:f7:9b:66:87:e5:1d:c1:e6:2d:96:96:35:6a:6e: 56:4e:22:80:4c:bd:b0:63:55:67:3c:af:df:34:40:2e:56:6d: 6b:e3:04:1d:ab:43:e9:3d:7f:50:a3:31:9a:34:5c:ad:d6:9d: b1:20:8c:70:82:7a:4e:10:a3:54:3d:bb:7b:6e:59:43:35:01: a1:f2:fe:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUISWihKEbmQzhlaiNmXRJAaHE+48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAxMTE2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWNlNTczZTgwNjRjM2MwYTdlNTRhZjdkZDI5NjkzZmY1 ZmM2YjRmOWI2Y2U0OWM3OTZjNWVjZGRmMjQ3MzViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJdEsEEsjTmyeRJZ3NESAzf6e0UUFVBD9VvDK8UuBtfWPb HoNHQU6cnqe83+1WWJ0bDi3VIVEMEFCZxzcVIcETTIWT3wqH+vMJAwHoZxeKjXLR lvf+zjLjiu9MrNMczHFJmncGPjOhniZi+xAXU5+PsRLxLkBt27ds/fovTrTzN2yp lQtnavlSpkbtC6NKClbZf21kwp+xkkoM1M++nwd0By5K7rOZgx5/fM1mFx94gKT3 us9sVawqfB0wrX+50rGG2eO2PbWM89kIkfDeMvx+rucu6zmLihMK+LLKXvqeKDtB WXYSlGDFQ78k+FvyfvF688WOSHoGRKKe53+LyHbDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXFcTLRBgXdwxBw9hEkjbU8fzDbIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0ZjIzY2FiLWY3NzEtNDYyOS05ZmI5LTcyZDE5YTFkN2RmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQMDANBgkqhkiG9w0BAQsFAAOCAQEA1WEgE7jdQ5AaGIAuIGL2IvQRa22W gyiFVMOWyC8TG6k9koJP67ETW/ubL7p676Tc78n4s6J5syFpwp0MgVmjSinoH8eU MHkd69GOJiqEN0f6/Zi12afT3cjg1ZP2hx5aqwI5NrhvexZkndKdcAheZg8pCCQh UJpc+Dh1p6sc6UekBg2Ga8IqGvCU26v0HnG2zi31raXbjD4m+ZikjCRsF2rQrEhp RX8RLhLRrj34i57AplKgN2rxhPebZoflHcHmLZaWNWpuVk4igEy9sGNVZzyv3zRA LlZta+MEHatD6T1/UKMxmjRcrdadsSCMcIJ6ThCjVD27e25ZQzUBofL+ow== -----END CERTIFICATE-----Generated at Thu Nov 5 18:47:10 2026 by rpki-client