$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6177c01a-062c-4ee0-a13a-c6306967b6d0.roa File: 6177c01a-062c-4ee0-a13a-c6306967b6d0.roa (raw, json) Hash identifier: Q/7h3RIgXZIXDj+kGE+hmptllVncQQAjOhD4IIZe/rs= Subject key identifier: 99:21:82:50:6E:A9:04:83:61:88:24:F9:CB:6C:A7:44:56:BC:D3:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2117E489AABAAD2322707B5F8DFF32E7B6E7D929 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6177c01a-062c-4ee0-a13a-c6306967b6d0.roa Signing time: Fri 23 Oct 2026 00:20:07 +0000 ROA not before: Fri 23 Oct 2026 00:20:07 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 174.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:17:e4:89:aa:ba:ad:23:22:70:7b:5f:8d:ff:32:e7:b6:e7:d9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:20:07 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=4f6786136aa45e545b980148bbc82b12877809642bbe497aac2fd62bf0d88e58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:f8:7a:01:fe:d8:01:f6:42:fd:8f:6c:8c: e6:3c:6b:07:08:ef:a1:77:e2:d1:32:08:8f:32:55: bb:50:f5:a9:ec:c4:b1:fd:4e:6b:eb:11:fd:77:9f: 73:2c:62:d8:3f:1e:1c:7d:ac:98:89:a9:f6:d2:ce: 02:a4:c8:ed:14:b2:9b:e5:a1:ac:81:40:77:22:d0: ad:ae:d9:e0:11:39:b9:d1:11:0a:f1:e1:f2:51:68: 37:31:bc:c0:96:34:14:9a:ff:80:33:c0:38:a0:7b: 6d:6e:69:32:ba:05:14:4d:e6:32:69:04:4d:89:35: 8e:6a:ea:b6:d6:2a:00:9c:58:bb:22:ae:9a:7f:c6: 52:bb:0b:7d:6f:1a:0b:c3:d5:81:f7:b6:3d:cd:b4: 0e:00:f8:e3:f1:e1:41:b8:c2:ba:42:3c:90:af:a9: b6:df:3e:38:2c:03:7a:c6:69:e8:aa:77:69:68:0e: c5:b4:f7:f2:c5:dc:d3:39:8e:26:1a:9a:8c:79:27: ca:dc:b9:f8:be:42:9a:92:9d:0c:5b:c4:74:23:f9: 82:f8:04:70:7d:c1:59:5d:30:b0:2d:b4:10:f9:b1: 1f:ae:c2:0d:dc:68:cc:72:da:9a:01:85:e9:55:f3: bd:4a:e0:18:65:70:ad:74:a4:a2:73:8b:a4:3d:7d: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:21:82:50:6E:A9:04:83:61:88:24:F9:CB:6C:A7:44:56:BC:D3:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6177c01a-062c-4ee0-a13a-c6306967b6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 59:fc:98:9b:5d:27:75:55:77:9d:ee:30:52:ea:34:cf:db:33: 4f:bc:72:2c:b0:ae:fa:ec:09:fb:ac:37:45:6e:80:7f:b2:56: c4:72:4e:a9:c0:74:1c:97:71:d9:17:6d:6c:82:90:cb:d0:77: b6:82:21:f4:01:c1:11:6a:5e:15:60:a0:dd:be:d2:7d:13:12: 77:e7:e4:05:98:da:6d:a8:6d:7a:ca:82:ea:e2:09:63:a7:8c: c1:f3:ac:7e:6b:ec:a7:06:00:42:0f:27:fb:b3:1f:ab:4b:83: 34:85:c8:b0:d0:6d:9b:f7:28:e2:52:5c:5a:fd:86:2e:1f:1f: 0f:10:0b:f4:f4:27:ea:c6:af:69:28:7f:2a:0d:3d:f1:8a:1b: be:5d:92:83:da:54:a1:a9:c1:c4:61:c3:63:68:71:e5:57:cf: 50:1c:f5:7d:c2:9a:d7:11:1c:b2:cc:ed:7b:84:9b:79:66:bc: 11:7a:a6:cb:92:0e:c5:cb:4a:e4:f1:60:77:c0:2d:8f:c9:c4: 46:9e:34:b0:77:81:db:de:8d:4b:6b:f1:d4:9d:21:dc:4c:9e: 32:70:4e:48:7e:82:3e:c6:df:ba:43:63:81:84:76:87:fd:41: 18:37:d1:41:df:2b:6f:83:01:4d:99:dc:2d:66:01:fb:f4:c6: 13:28:70:db -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIRfkiaq6rSMicHtfjf8y57bn2SkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAyMDA3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjY3ODYxMzZhYTQ1ZTU0NWI5ODAxNDhiYmM4MmIxMjg3 NzgwOTY0MmJiZTQ5N2FhYzJmZDYyYmYwZDg4ZTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm1/h6Af7YAfZC/Y9sjOY8awcI76F34tEyCI8yVbtQ9ans xLH9TmvrEf13n3MsYtg/Hhx9rJiJqfbSzgKkyO0UspvloayBQHci0K2u2eARObnR EQrx4fJRaDcxvMCWNBSa/4AzwDige21uaTK6BRRN5jJpBE2JNY5q6rbWKgCcWLsi rpp/xlK7C31vGgvD1YH3tj3NtA4A+OPx4UG4wrpCPJCvqbbfPjgsA3rGaeiqd2lo DsW09/LF3NM5jiYamox5J8rcufi+QpqSnQxbxHQj+YL4BHB9wVldMLAttBD5sR+u wg3caMxy2poBhelV871K4BhlcK10pKJzi6Q9fW7hAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmSGCUG6pBINhiCT5y2ynRFa801wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxNzdjMDFhLTA2MmMtNGVlMC1hMTNhLWM2MzA2OTY3YjZkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCugTANBgkqhkiG9w0BAQsFAAOCAQEAWfyYm10ndVV3ne4wUuo0z9szT7xy LLCu+uwJ+6w3RW6Af7JWxHJOqcB0HJdx2RdtbIKQy9B3toIh9AHBEWpeFWCg3b7S fRMSd+fkBZjabahtesqC6uIJY6eMwfOsfmvspwYAQg8n+7Mfq0uDNIXIsNBtm/co 4lJcWv2GLh8fDxAL9PQn6savaSh/Kg098Yobvl2Sg9pUoanBxGHDY2hx5VfPUBz1 fcKa1xEcsszte4SbeWa8EXqmy5IOxctK5PFgd8Atj8nERp40sHeB296NS2vx1J0h 3EyeMnBOSH6CPsbfukNjgYR2h/1BGDfRQd8rb4MBTZncLWYB+/TGEyhw2w== -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:56 2026 by rpki-client