$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d978bdce-ae2a-476f-b290-3b4fb3b50b5f.roa File: d978bdce-ae2a-476f-b290-3b4fb3b50b5f.roa (raw, json) Hash identifier: +JCKy2imra91VsKebXjZxi1uFsvkMTKP/Srij8l4zg8= Subject key identifier: CD:17:77:8D:2E:47:F2:D0:76:77:24:27:FE:6E:51:84:DC:AC:C0:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F2166F7858831D0530BE9EF9764672F1FD9EC2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d978bdce-ae2a-476f-b290-3b4fb3b50b5f.roa Signing time: Fri 30 Oct 2026 00:03:21 +0000 ROA not before: Fri 30 Oct 2026 00:03:21 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 13.184.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:21:66:f7:85:88:31:d0:53:0b:e9:ef:97:64:67:2f:1f:d9:ec:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 30 00:03:21 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=c52574ceb3672c4e011871aaf9f8404ffa66cc182e60dd66736f74cc979fa85f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:dc:1c:a2:9a:a1:2c:cb:7c:04:3f:6a:11: 89:1e:30:6d:db:7f:9b:56:63:4d:23:ac:ca:59:e1: 6e:fa:da:31:94:7f:a7:d2:56:c7:b6:8c:e7:7a:37: 20:cd:46:e5:c0:11:9b:4e:31:c3:ed:2d:90:97:7a: 9b:11:7c:c4:37:77:0b:a0:a2:9a:83:83:d5:e0:4b: 51:48:0a:04:32:31:e9:72:aa:ff:eb:76:67:d7:fc: 16:9a:0a:20:87:fc:ec:6e:d1:68:65:21:f3:b2:c0: 6f:72:4e:f6:03:61:0a:33:82:6e:af:e8:a8:56:03: 54:29:df:26:63:db:6f:36:3b:a6:b4:b2:d3:3b:e5: 7b:d5:d0:ce:e6:a5:52:8f:5e:2c:0b:aa:c4:1e:e6: e8:bd:42:88:94:1a:26:e0:5b:72:2b:fd:73:a7:f4: 0c:8a:b9:0c:91:b5:10:1e:71:1d:b7:bc:ba:92:70: a6:b0:4f:9a:e1:3a:b1:34:87:8d:7d:47:c9:0f:14: a4:d7:ce:84:7b:43:09:ae:90:9b:ce:0a:f7:d7:77: ba:01:c9:b2:20:d7:ef:68:d8:81:45:27:85:d8:29: 3c:e9:c0:9b:8d:c5:d9:84:f5:8e:91:87:f6:c9:33: c7:e2:9f:e5:d1:2a:d9:dc:90:3c:b9:e8:59:e4:2c: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:77:8D:2E:47:F2:D0:76:77:24:27:FE:6E:51:84:DC:AC:C0:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d978bdce-ae2a-476f-b290-3b4fb3b50b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.184.0.0/13 Signature Algorithm: sha256WithRSAEncryption d7:76:86:72:ad:62:20:aa:25:59:c3:46:d1:96:5c:c7:62:40: 03:8a:6b:b9:f9:27:3c:58:a8:ca:73:72:85:48:d1:5a:e7:47: 33:b5:9a:86:21:3d:12:50:4f:51:2e:51:0f:b7:61:7b:a2:52: 87:23:85:de:89:0c:d1:a6:eb:26:76:21:f4:1e:38:64:29:da: ca:2e:15:df:02:a1:ea:a5:96:13:74:c9:e3:d0:50:9e:8d:01: 23:75:d6:f1:e4:c4:7d:c6:eb:7f:e7:dc:e7:2f:8d:a2:99:33: e5:71:54:4d:cf:3d:a3:03:ca:cd:ed:22:bc:1b:10:b9:de:cc: 74:46:d3:99:16:1f:36:04:8d:df:87:a5:8a:4e:65:99:9d:09: 13:d8:00:99:8a:98:33:52:bb:9e:04:09:f1:c9:cd:89:3f:83: 0e:0d:31:68:d1:08:7e:d0:e4:c9:c3:9f:bd:26:0b:0b:ed:26: 50:95:ef:8d:2c:d7:5f:47:81:db:d8:ad:cc:bf:d6:2e:29:67: 4b:b8:a0:00:d2:1c:0b:84:dc:06:3a:55:7c:a0:8a:12:f3:db: a7:c4:99:99:73:06:be:a2:ca:b6:95:6a:a8:d4:7e:c8:73:89: 9a:72:2f:53:13:a7:a6:92:be:99:7b:83:4c:07:56:ca:2d:66: eb:b5:d7:0c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXyFm94WIMdBTC+nvl2RnLx/Z7CswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDMwMDAwMzIxWhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTI1NzRjZWIzNjcyYzRlMDExODcxYWFmOWY4NDA0ZmZh NjZjYzE4MmU2MGRkNjY3MzZmNzRjYzk3OWZhODVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbpNwcopqhLMt8BD9qEYkeMG3bf5tWY00jrMpZ4W762jGU f6fSVse2jOd6NyDNRuXAEZtOMcPtLZCXepsRfMQ3dwugopqDg9XgS1FICgQyMely qv/rdmfX/BaaCiCH/Oxu0WhlIfOywG9yTvYDYQozgm6v6KhWA1Qp3yZj2282O6a0 stM75XvV0M7mpVKPXiwLqsQe5ui9QoiUGibgW3Ir/XOn9AyKuQyRtRAecR23vLqS cKawT5rhOrE0h419R8kPFKTXzoR7QwmukJvOCvfXd7oBybIg1+9o2IFFJ4XYKTzp wJuNxdmE9Y6Rh/bJM8fin+XRKtnckDy56FnkLCKzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzRd3jS5H8tB2dyQn/m5RhNyswGEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5NzhiZGNlLWFlMmEtNDc2Zi1iMjkwLTNiNGZiM2I1MGI1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMNuDANBgkqhkiG9w0BAQsFAAOCAQEA13aGcq1iIKolWcNG0ZZcx2JAA4pr ufknPFioynNyhUjRWudHM7WahiE9ElBPUS5RD7dhe6JShyOF3okM0abrJnYh9B44 ZCnayi4V3wKh6qWWE3TJ49BQno0BI3XW8eTEfcbrf+fc5y+Nopkz5XFUTc89owPK ze0ivBsQud7MdEbTmRYfNgSN34elik5lmZ0JE9gAmYqYM1K7ngQJ8cnNiT+DDg0x aNEIftDkycOfvSYLC+0mUJXvjSzXX0eB29itzL/WLilnS7igANIcC4TcBjpVfKCK EvPbp8SZmXMGvqLKtpVqqNR+yHOJmnIvUxOnppK+mXuDTAdWyi1m67XXDA== -----END CERTIFICATE-----Generated at Tue Nov 10 15:21:08 2026 by rpki-client