$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a370a257-b0b1-45b9-bc8d-a5d551df362f.roa File: a370a257-b0b1-45b9-bc8d-a5d551df362f.roa (raw, json) Hash identifier: XKwMzOfWjOG0qs9sVsqTF3JfwY6FG/+3Z95laouIgP4= Subject key identifier: CC:49:C6:13:32:B1:6F:30:26:7B:CD:96:8D:53:9E:BF:B8:13:5D:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67834C5436EE25E93ABA2B2CDFD3A81266AA6F3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a370a257-b0b1-45b9-bc8d-a5d551df362f.roa Signing time: Fri 09 Oct 2026 00:40:05 +0000 ROA not before: Fri 09 Oct 2026 00:40:05 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 56.10.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:83:4c:54:36:ee:25:e9:3a:ba:2b:2c:df:d3:a8:12:66:aa:6f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 00:40:05 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=7af1ea2e7383ba8689e8c09b7ef67ecacae35cf78d0e1fa27f4a1ebd926c8280, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b0:8b:31:c8:4f:eb:dc:29:19:3a:fe:f2:86: fd:47:b7:09:08:d8:42:73:30:b5:dc:83:9c:6a:8c: 8f:60:12:82:1f:cc:69:fc:c3:53:d0:a7:1f:67:1f: a2:4f:4c:7c:4e:3b:cf:19:ef:4d:87:48:75:30:f0: b8:3d:8e:98:45:4f:96:09:85:f3:6c:93:5e:eb:04: 40:37:5f:ab:d8:18:e1:95:e1:16:7e:87:c1:94:57: c0:03:13:80:5c:43:4d:73:d2:c7:5f:9f:ed:fd:c1: 35:c9:a8:33:fd:31:b3:a3:ea:92:cd:bf:ee:a7:2a: 5d:11:5e:11:09:e5:63:22:38:0f:cf:b8:76:b2:07: 21:23:b3:af:67:86:02:6b:95:8b:30:52:1d:4f:9e: f5:a5:f5:95:1d:e9:99:0f:aa:d4:61:b5:8a:1f:d6: 69:71:87:b8:97:e7:cc:a2:c2:ce:8e:fc:ee:ac:0c: b1:3a:e1:62:4e:34:ee:5b:e5:7c:e3:76:e2:ad:41: 2b:38:08:4a:2c:89:98:23:4c:d8:fb:75:76:3f:f4: f8:f2:26:08:f1:c5:c6:b6:5f:6f:58:8b:fb:b4:21: e1:40:b1:c4:20:99:55:86:02:79:e7:0d:d9:4a:3d: 29:64:5d:ac:b5:bd:2b:26:13:ff:7d:35:92:3a:6c: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:49:C6:13:32:B1:6F:30:26:7B:CD:96:8D:53:9E:BF:B8:13:5D:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a370a257-b0b1-45b9-bc8d-a5d551df362f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.10.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:f6:89:4f:71:41:b3:05:27:22:fb:d5:6c:ee:4a:a0:af:1c: 2e:9d:40:ba:b0:b4:74:39:a0:7a:1b:03:14:f4:22:c9:b7:f1: 27:86:24:d4:39:f4:da:04:cc:3a:01:fc:c3:55:a8:d5:2a:af: 52:03:70:1d:c8:ba:5a:f2:26:85:56:b5:2c:a1:a5:aa:2a:09: 5c:cb:5c:93:72:1e:9a:1f:24:26:a6:22:0d:cf:f9:2d:20:57: b9:b2:b3:a0:78:c7:76:aa:b6:9c:df:05:a6:27:8b:c9:b1:5d: 5f:25:7a:5e:f4:30:55:62:4b:a7:fd:0c:bb:41:24:c0:82:1e: 07:9e:ff:e0:9e:fc:97:05:03:de:d1:e8:df:bc:65:78:a3:ed: 1c:50:ed:5b:75:7a:bf:10:83:3e:a9:d3:ea:ca:45:69:55:27: 1a:91:f2:ad:eb:c4:05:33:f3:7f:b9:ca:7d:e7:c7:c1:09:f8: c8:8d:29:ba:84:0d:d0:6a:f9:3e:8a:6f:ba:e5:fb:75:61:e1: 34:e4:2b:32:e4:d4:73:06:47:96:45:24:2b:f5:be:0b:f6:58: 20:dd:67:86:0f:d5:af:6a:98:64:f6:40:da:a0:77:93:96:55: 33:e4:82:74:73:ae:60:17:47:39:92:b4:85:7f:bf:fb:c8:6c: e6:7f:5d:1c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZ4NMVDbuJek6uiss39OoEmaqbzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDA0MDA1WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWYxZWEyZTczODNiYTg2ODllOGMwOWI3ZWY2N2VjYWNh ZTM1Y2Y3OGQwZTFmYTI3ZjRhMWViZDkyNmM4MjgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHsIsxyE/r3CkZOv7yhv1HtwkI2EJzMLXcg5xqjI9gEoIf zGn8w1PQpx9nH6JPTHxOO88Z702HSHUw8Lg9jphFT5YJhfNsk17rBEA3X6vYGOGV 4RZ+h8GUV8ADE4BcQ01z0sdfn+39wTXJqDP9MbOj6pLNv+6nKl0RXhEJ5WMiOA/P uHayByEjs69nhgJrlYswUh1PnvWl9ZUd6ZkPqtRhtYof1mlxh7iX58yiws6O/O6s DLE64WJONO5b5XzjduKtQSs4CEosiZgjTNj7dXY/9PjyJgjxxca2X29Yi/u0IeFA scQgmVWGAnnnDdlKPSlkXay1vSsmE/99NZI6bOTbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzEnGEzKxbzAme82WjVOev7gTXY0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNzBhMjU3LWIwYjEtNDViOS1iYzhkLWE1ZDU1MWRmMzYyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4CjANBgkqhkiG9w0BAQsFAAOCAQEANPaJT3FBswUnIvvVbO5KoK8cLp1A urC0dDmgehsDFPQiybfxJ4Yk1Dn02gTMOgH8w1Wo1SqvUgNwHci6WvImhVa1LKGl qioJXMtck3Iemh8kJqYiDc/5LSBXubKzoHjHdqq2nN8FpieLybFdXyV6XvQwVWJL p/0Mu0EkwIIeB57/4J78lwUD3tHo37xleKPtHFDtW3V6vxCDPqnT6spFaVUnGpHy revEBTPzf7nKfefHwQn4yI0puoQN0Gr5PopvuuX7dWHhNOQrMuTUcwZHlkUkK/W+ C/ZYIN1nhg/Vr2qYZPZA2qB3k5ZVM+SCdHOuYBdHOZK0hX+/+8hs5n9dHA== -----END CERTIFICATE-----Generated at Thu Nov 5 16:33:30 2026 by rpki-client