$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa File: ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa (raw, json) Hash identifier: k/YDQ5urIhCvh9POZThZXDYdQo94Pp0guY9qZyYuE64= Subject key identifier: 6E:7E:19:23:99:F4:21:68:9E:04:25:64:7A:04:1C:5C:B2:DB:34:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5892B30DFAC70E24B48D8A600B425B71A280B005 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa Signing time: Sat 24 Oct 2026 00:50:10 +0000 ROA not before: Sat 24 Oct 2026 00:50:10 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 98.90.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:92:b3:0d:fa:c7:0e:24:b4:8d:8a:60:0b:42:5b:71:a2:80:b0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:50:10 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=875916faeea9e03ed7fb99cdeb43e19372bb7a0d68bc1c882ca65f56047fe384, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:ee:6a:55:c9:2d:a1:65:08:77:fe:d2:1d: 9a:44:e9:e1:e9:33:d7:df:11:f3:75:41:29:61:07: 6d:29:e0:e0:a3:cd:da:45:c6:af:59:aa:76:c9:cb: 78:4d:41:d9:d9:dc:d8:b5:fc:2f:49:8e:00:9e:48: 28:b0:85:f8:7f:f5:0d:4b:1f:ca:ab:b9:ac:d7:2c: ed:c9:29:b1:32:06:23:43:4d:63:79:d5:c4:a9:79: eb:ac:85:29:98:c5:54:5e:29:a1:51:8f:a6:46:66: 06:ff:c2:92:c3:07:52:c7:f0:ad:b5:54:38:24:66: 8e:5d:83:4d:59:0f:8b:d9:94:d6:5d:74:5f:c5:02: fd:c4:5b:ef:5d:38:a7:de:af:4c:80:a2:47:9d:06: e9:34:65:a3:4f:56:cb:f8:29:d7:40:9b:1e:22:43: 96:88:2a:2c:98:05:1a:9c:88:70:79:42:61:11:16: 60:ad:65:f5:31:43:88:e0:46:23:16:dd:45:2c:fb: 61:6f:79:19:a0:3c:97:74:42:49:d4:f2:36:ad:ca: 1d:e8:78:7e:ad:61:b8:14:4a:6a:ad:8d:1f:83:be: fc:fb:04:bc:33:d3:4c:cd:9d:d8:a1:65:55:e8:5c: 00:00:3e:6d:ef:91:9c:fa:a2:22:1c:2a:6e:e7:c9: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7E:19:23:99:F4:21:68:9E:04:25:64:7A:04:1C:5C:B2:DB:34:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.90.62.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:19:79:6c:16:ac:0a:ea:4d:1d:bd:4e:93:eb:13:71:e3:d1: 97:1d:6d:a1:ec:fc:d6:d3:1b:b7:b9:26:79:18:fc:bf:de:02: aa:db:74:f1:f6:ef:db:a8:6f:f2:d7:ac:f7:d5:8f:66:2d:2b: 31:50:c8:e3:fd:fc:9f:54:14:87:04:39:e0:68:49:b7:b7:e9: 9f:aa:28:bd:58:37:9c:aa:a8:df:fc:5f:6b:27:d6:5c:3f:11: f5:e9:91:17:cc:1e:65:ea:9a:fa:f9:c2:64:d5:cc:5a:7f:13: 2d:6d:5e:1f:60:08:33:10:30:ae:f4:d0:13:eb:75:5f:99:41: a2:5d:70:12:49:68:5c:52:56:51:a2:91:bd:a1:01:4d:20:77: 2d:9f:cf:31:32:6d:d3:f5:47:59:c6:e2:d9:e0:10:e3:80:b4: 30:11:dd:56:2f:8b:86:76:c0:b5:d1:04:85:91:19:e6:e3:62: c0:57:56:00:3a:df:9b:e8:7a:44:0d:6b:a3:fc:c6:c1:64:31: 99:ed:9c:30:27:cc:2f:ec:53:3b:db:eb:4c:90:1f:c4:22:19: e9:00:19:07:59:fe:35:3d:b9:ed:f7:d4:50:8f:48:c6:55:a5: 94:af:09:48:8c:70:42:93:fd:67:96:8a:16:dd:bb:77:6e:a5: 00:2c:3f:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWJKzDfrHDiS0jYpgC0JbcaKAsAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDA1MDEwWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzU5MTZmYWVlYTllMDNlZDdmYjk5Y2RlYjQzZTE5Mzcy YmI3YTBkNjhiYzFjODgyY2E2NWY1NjA0N2ZlMzg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtA+5qVcktoWUId/7SHZpE6eHpM9ffEfN1QSlhB20p4OCj zdpFxq9ZqnbJy3hNQdnZ3Ni1/C9JjgCeSCiwhfh/9Q1LH8qruazXLO3JKbEyBiND TWN51cSpeeushSmYxVReKaFRj6ZGZgb/wpLDB1LH8K21VDgkZo5dg01ZD4vZlNZd dF/FAv3EW+9dOKfer0yAokedBuk0ZaNPVsv4KddAmx4iQ5aIKiyYBRqciHB5QmER FmCtZfUxQ4jgRiMW3UUs+2FveRmgPJd0QknU8jatyh3oeH6tYbgUSmqtjR+Dvvz7 BLwz00zNndihZVXoXAAAPm3vkZz6oiIcKm7nyR8PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbn4ZI5n0IWieBCVkegQcXLLbNK8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhMTlmYmMwLWZhNzctNGQ0MS1hMzMwLTNjOGU4ZTBlNWM0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiWj4wDQYJKoZIhvcNAQELBQADggEBAHsZeWwWrArqTR29TpPrE3Hj0Zcd baHs/NbTG7e5JnkY/L/eAqrbdPH279uob/LXrPfVj2YtKzFQyOP9/J9UFIcEOeBo Sbe36Z+qKL1YN5yqqN/8X2sn1lw/EfXpkRfMHmXqmvr5wmTVzFp/Ey1tXh9gCDMQ MK700BPrdV+ZQaJdcBJJaFxSVlGikb2hAU0gdy2fzzEybdP1R1nG4tngEOOAtDAR 3VYvi4Z2wLXRBIWRGebjYsBXVgA635voekQNa6P8xsFkMZntnDAnzC/sUzvb60yQ H8QiGekAGQdZ/jU9ue331FCPSMZVpZSvCUiMcEKT/WeWihbdu3dupQAsP6o= -----END CERTIFICATE-----Generated at Thu Nov 5 11:23:39 2026 by rpki-client