$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db8de309-c80a-499d-b995-e402afae6b25.roa File: db8de309-c80a-499d-b995-e402afae6b25.roa (raw, json) Hash identifier: hHnxkIJyY6C9yfKSaE72EjroXDlNA1+oGQFuwtXI/eg= Subject key identifier: 3B:A1:24:2A:3E:6B:32:66:B9:6B:27:4A:FF:97:53:6D:AC:93:BA:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 558FA14A1C8B6D4FFE6F78708A8DD39C72B80741 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db8de309-c80a-499d-b995-e402afae6b25.roa Signing time: Thu 29 Oct 2026 21:52:27 +0000 ROA not before: Thu 29 Oct 2026 21:52:27 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 72.150.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8f:a1:4a:1c:8b:6d:4f:fe:6f:78:70:8a:8d:d3:9c:72:b8:07:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 21:52:27 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=7a4c2cbda73a88d42285b55391d7eae6f16c70fb5a649253f72270cadef5b399, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:e6:c1:f7:98:3e:d0:3d:dc:f3:64:1c:79: 69:86:58:10:54:34:14:2b:75:dd:41:e2:3b:95:10: e1:b4:e6:49:5c:ef:bf:ab:9b:75:86:52:b1:07:b9: 97:a6:08:cd:9d:8d:39:df:3b:1e:cc:71:90:70:80: 10:88:96:2c:ca:b2:7a:92:8f:9a:3d:74:07:1d:50: a4:3a:c4:d1:eb:e5:7e:8a:0c:12:b9:0a:dd:e1:d5: 15:13:ba:3d:a2:0e:85:4f:45:6d:7a:00:9d:5b:0d: 61:b9:d3:8e:fa:56:30:f7:01:e2:01:d5:5d:a7:d2: 36:d9:1b:03:b0:22:86:ee:1f:5c:1c:38:73:85:d9: 66:7f:41:b5:8c:4b:2a:01:8c:44:d9:4d:f7:8e:10: 4b:83:3f:2e:5b:a8:ca:63:fe:db:d3:9f:b7:e8:a9: e8:85:6d:a9:de:24:0e:72:51:ca:93:6d:79:dd:c9: 1f:42:03:5d:45:6a:51:16:d3:f1:f8:7f:0b:3e:47: 22:1f:5a:46:e1:9b:73:93:7e:83:00:b1:ba:f9:58: 09:63:46:4f:3f:85:7e:22:b5:81:b0:96:b9:90:89: 21:9a:e8:f5:30:45:b5:8f:7e:f9:d2:f8:20:a9:e8: 23:3c:bc:dd:60:7b:d4:d8:49:50:46:1e:29:c5:56: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A1:24:2A:3E:6B:32:66:B9:6B:27:4A:FF:97:53:6D:AC:93:BA:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db8de309-c80a-499d-b995-e402afae6b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.150.10.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:79:e2:98:a6:1c:c5:0d:e5:2a:ed:de:ac:5f:f6:26:0a:95: 32:12:41:53:5a:13:8c:3f:19:4e:87:10:fb:88:d9:69:48:b1: 9e:1a:1b:bd:d9:3c:d4:66:e5:4f:f5:05:9b:68:bb:82:0c:3f: 53:02:c0:4d:2b:cf:60:f1:bc:27:db:fb:02:e0:01:9f:f4:99: 68:a7:1f:08:a0:3c:ae:ba:d9:0c:f4:8a:9c:f6:ff:83:8d:c7: c7:3a:0a:5d:79:06:07:34:94:e9:d2:0f:6f:29:52:29:9f:b8: 5e:f6:19:60:42:c9:7d:6e:16:b7:b0:71:84:34:2f:11:29:68: d9:5c:30:02:31:90:c4:6a:c6:1a:a0:5d:78:4f:09:f5:c0:2b: 42:97:9d:4b:6f:92:a2:b2:0f:c3:84:6b:d2:03:d7:ea:8b:28: 7b:27:84:f2:c4:28:2b:1b:44:8d:ba:4f:2e:da:ff:e3:60:36: 28:cb:e2:68:cf:83:79:40:a8:f6:f8:ee:ad:83:20:6d:61:23: 4d:c5:fc:a5:01:c1:20:2c:2c:76:c1:01:32:df:28:cc:2d:cf: df:aa:63:e2:e6:76:d5:d7:a3:14:82:0e:32:b2:4b:76:67:2c: 75:6e:f2:24:66:ed:a5:dd:57:61:1e:5d:ce:56:a5:eb:e9:d0: fc:a8:ec:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVY+hShyLbU/+b3hwio3TnHK4B0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MjE1MjI3WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTRjMmNiZGE3M2E4OGQ0MjI4NWI1NTM5MWQ3ZWFlNmYx NmM3MGZiNWE2NDkyNTNmNzIyNzBjYWRlZjViMzk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIZubB95g+0D3c82QceWmGWBBUNBQrdd1B4juVEOG05klc 77+rm3WGUrEHuZemCM2djTnfOx7McZBwgBCIlizKsnqSj5o9dAcdUKQ6xNHr5X6K DBK5Ct3h1RUTuj2iDoVPRW16AJ1bDWG50476VjD3AeIB1V2n0jbZGwOwIobuH1wc OHOF2WZ/QbWMSyoBjETZTfeOEEuDPy5bqMpj/tvTn7foqeiFbaneJA5yUcqTbXnd yR9CA11FalEW0/H4fws+RyIfWkbhm3OTfoMAsbr5WAljRk8/hX4itYGwlrmQiSGa 6PUwRbWPfvnS+CCp6CM8vN1ge9TYSVBGHinFVkKlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO6EkKj5rMma5aydK/5dTbayTuk8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiOGRlMzA5LWM4MGEtNDk5ZC1iOTk1LWU0MDJhZmFlNmIyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFIlgowDQYJKoZIhvcNAQELBQADggEBAE154pimHMUN5Srt3qxf9iYKlTIS QVNaE4w/GU6HEPuI2WlIsZ4aG73ZPNRm5U/1BZtou4IMP1MCwE0rz2DxvCfb+wLg AZ/0mWinHwigPK662Qz0ipz2/4ONx8c6Cl15Bgc0lOnSD28pUimfuF72GWBCyX1u FrewcYQ0LxEpaNlcMAIxkMRqxhqgXXhPCfXAK0KXnUtvkqKyD8OEa9ID1+qLKHsn hPLEKCsbRI26Ty7a/+NgNijL4mjPg3lAqPb47q2DIG1hI03F/KUBwSAsLHbBATLf KMwtz9+qY+LmdtXXoxSCDjKyS3ZnLHVu8iRm7aXdV2EeXc5Wpevp0Pyo7OI= -----END CERTIFICATE-----Generated at Tue Nov 10 08:24:36 2026 by rpki-client