$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca8f4fbb-0814-416c-af01-f53b5521ff5f.roa File: ca8f4fbb-0814-416c-af01-f53b5521ff5f.roa (raw, json) Hash identifier: EoUPx4/ygRReCouAZd7xDTF5FvcF2hbW4mzU3lvVDvM= Subject key identifier: E4:94:BE:9D:FC:0D:DC:77:A3:E4:4C:BA:27:18:45:C2:BA:35:F7:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15165700237B70B26AEA3583307E04AEA7ED2AA3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca8f4fbb-0814-416c-af01-f53b5521ff5f.roa Signing time: Mon 12 Oct 2026 00:10:41 +0000 ROA not before: Mon 12 Oct 2026 00:10:41 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 150.103.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:16:57:00:23:7b:70:b2:6a:ea:35:83:30:7e:04:ae:a7:ed:2a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:10:41 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=07161af0436e525b44bc9b9cf74b5fc5511ee79d18d1f198ea37f53db4c8b578, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:7f:6e:07:03:91:fc:3a:3f:84:83:e4:12: 58:d2:92:9e:70:e4:df:ba:f1:17:7f:be:62:bd:e7: 97:3b:d6:6c:b2:25:91:0d:52:ed:e8:9a:f3:31:c7: 7e:d6:6a:aa:a5:c9:ee:14:d1:a8:d1:7f:7a:26:6c: 7f:e7:21:6d:31:9e:42:e5:64:b6:c5:9a:a0:e9:0a: f2:4f:de:4b:83:0d:93:f8:9a:2f:86:c0:de:7d:1b: ba:72:d3:6c:1d:e6:e0:43:75:c4:00:92:ce:58:65: a9:ee:dd:d1:6b:ab:84:1e:6e:b6:07:81:07:2f:c4: cb:5e:51:df:0f:11:d3:6c:c3:f4:7c:4c:94:d9:57: 29:14:69:a2:0a:79:8a:a7:53:e5:9a:e6:44:01:83: 8b:f6:3b:97:a4:fb:4c:63:22:46:7d:1b:58:0e:a1: 31:c2:4d:76:8c:8f:b3:36:39:80:75:1b:a5:22:76: b0:48:32:e0:0d:f3:8c:e5:f4:de:11:25:cb:71:e6: 92:af:ae:bd:a3:48:f3:e7:13:48:3f:75:87:a8:d1: ab:e6:d4:7c:77:56:ac:92:14:1d:27:6d:c9:7d:56: c5:92:8b:83:94:38:2b:07:19:80:4d:b7:4a:a3:a5: 80:7e:c6:63:8c:9e:56:61:0d:75:12:b0:81:10:6f: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:94:BE:9D:FC:0D:DC:77:A3:E4:4C:BA:27:18:45:C2:BA:35:F7:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca8f4fbb-0814-416c-af01-f53b5521ff5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:86:ab:a1:85:24:0f:c4:49:d9:e6:ea:f6:0f:90:01:35:d8: 10:5c:db:85:7a:47:d1:8c:b9:db:59:6b:0b:5f:5c:61:9d:99: d9:13:7b:f0:f0:30:c2:6d:f4:be:36:4d:bf:bf:2a:06:34:20: 01:58:e4:93:81:39:8b:bf:9a:83:a5:a2:b6:bc:da:24:04:33: e0:50:1b:59:19:02:56:02:e3:a5:b2:e9:44:b1:ff:03:a4:37: 68:56:bc:90:bf:58:5d:11:97:d5:f2:15:89:8b:f2:ae:99:7e: ee:a7:8c:61:1f:4c:ce:0b:4a:74:84:13:4f:5f:a5:71:67:0c: fd:31:cb:12:71:75:06:71:d7:05:1d:07:b9:73:13:c7:8d:18: a5:ef:0d:3b:c9:e5:8a:1d:06:d8:9c:b8:5c:c7:ba:60:4f:66: c6:4a:5c:86:7b:1c:e2:b0:1d:cd:a3:f0:a6:f5:58:1b:76:f1: ec:dc:60:6b:08:94:ac:a4:b0:ce:69:9a:b1:87:62:49:31:20: 12:f5:c9:05:e2:0f:48:61:67:07:87:82:7b:47:23:64:e0:4b: 50:f4:46:f2:51:3a:74:11:66:60:bc:79:ef:c9:3b:0e:b3:ca: 8e:d7:1a:2f:19:bf:b4:a0:45:fe:08:1f:22:1f:08:07:23:5d: f4:26:b7:af -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFRZXACN7cLJq6jWDMH4ErqftKqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAxMDQxWhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzE2MWFmMDQzNmU1MjViNDRiYzliOWNmNzRiNWZjNTUx MWVlNzlkMThkMWYxOThlYTM3ZjUzZGI0YzhiNTc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCHH9uBwOR/Do/hIPkEljSkp5w5N+68Rd/vmK955c71myy JZENUu3omvMxx37Waqqlye4U0ajRf3ombH/nIW0xnkLlZLbFmqDpCvJP3kuDDZP4 mi+GwN59G7py02wd5uBDdcQAks5YZanu3dFrq4QebrYHgQcvxMteUd8PEdNsw/R8 TJTZVykUaaIKeYqnU+Wa5kQBg4v2O5ek+0xjIkZ9G1gOoTHCTXaMj7M2OYB1G6Ui drBIMuAN84zl9N4RJctx5pKvrr2jSPPnE0g/dYeo0avm1Hx3VqySFB0nbcl9VsWS i4OUOCsHGYBNt0qjpYB+xmOMnlZhDXUSsIEQb/fHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5JS+nfwN3Hej5Ey6JxhFwro190cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhOGY0ZmJiLTA4MTQtNDE2Yy1hZjAxLWY1M2I1NTIxZmY1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCWZzANBgkqhkiG9w0BAQsFAAOCAQEAgIaroYUkD8RJ2ebq9g+QATXYEFzb hXpH0Yy521lrC19cYZ2Z2RN78PAwwm30vjZNv78qBjQgAVjkk4E5i7+ag6Witrza JAQz4FAbWRkCVgLjpbLpRLH/A6Q3aFa8kL9YXRGX1fIViYvyrpl+7qeMYR9MzgtK dIQTT1+lcWcM/THLEnF1BnHXBR0HuXMTx40Ype8NO8nlih0G2Jy4XMe6YE9mxkpc hnsc4rAdzaPwpvVYG3bx7NxgawiUrKSwzmmasYdiSTEgEvXJBeIPSGFnB4eCe0cj ZOBLUPRG8lE6dBFmYLx578k7DrPKjtcaLxm/tKBF/ggfIh8IByNd9Ca3rw== -----END CERTIFICATE-----Generated at Thu Nov 5 13:59:31 2026 by rpki-client