$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa File: d02200a5-babe-4deb-9116-f1e308942b64.roa (raw, json) Hash identifier: BMbKX18U4NKD7JQc3yWqIvZNooeah7ZRBSyrE3snbXc= Subject key identifier: F8:CF:00:93:E1:A3:C5:52:ED:BE:F0:11:62:29:69:92:C6:79:8B:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68D2B665DDED4B3676E5DE7CDE8BC3BADCB4F039 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa Signing time: Thu 22 Oct 2026 01:20:41 +0000 ROA not before: Thu 22 Oct 2026 01:20:41 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d2:b6:65:dd:ed:4b:36:76:e5:de:7c:de:8b:c3:ba:dc:b4:f0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:20:41 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=b2de368892ce600729dab407fdcbec02a444970af23c8420e9c7583e26bf0d38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:02:9f:dd:2c:1e:12:dc:96:4a:93:3a:b6: 33:60:5d:2d:84:9f:8f:15:f5:a6:10:6a:c7:4b:f6: 95:27:91:56:40:e0:8e:51:7f:62:20:1c:f8:1d:4f: 69:2c:2f:3e:eb:90:0b:20:0e:2f:83:06:52:e6:88: 0e:50:b6:2f:18:2c:2b:e4:9d:72:bf:f8:0b:5f:12: 44:ae:30:d5:ac:e2:5c:df:40:08:9d:7b:d2:3b:d8: 80:10:cc:b0:d8:2b:0c:e4:45:bc:6d:1b:6b:2b:3a: 56:5c:04:fd:9a:47:00:46:83:1c:b4:26:4d:ca:85: bb:25:5f:0d:30:08:6e:a6:39:c5:39:36:ab:f5:93: 3c:95:50:86:39:e2:83:88:9e:08:ff:1d:16:05:c8: ec:b6:1d:c0:77:ce:70:6d:73:7a:db:02:1b:ee:51: 37:1c:d2:77:67:34:e5:1c:c6:62:56:22:65:69:e6: c6:a1:75:af:71:40:12:ac:4f:40:58:ed:f3:70:18: b2:5a:42:6f:bb:90:2a:a0:74:1c:b4:5b:9e:f0:56: 81:ab:24:2a:7e:55:2a:2f:33:03:cc:8b:24:93:0d: 32:73:2a:ce:66:29:03:0c:a3:57:00:1a:b5:d2:00: d9:0d:13:15:94:0a:52:ff:4a:ce:36:bb:8a:12:ec: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:00:93:E1:A3:C5:52:ED:BE:F0:11:62:29:69:92:C6:79:8B:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:e1:95:8c:b1:54:71:d8:d9:f5:fd:d6:44:e5:2d:df:8c:44: 14:bf:5e:97:e0:16:3a:3d:59:da:b2:82:c3:b8:1d:98:0c:95: cb:09:a9:4f:63:c5:dc:84:9b:3f:fd:f3:6d:95:e2:26:4e:a5: 3c:5e:1d:ab:ba:57:6b:6a:90:a9:06:f8:26:fe:ff:57:7e:a6: 7e:12:2a:67:c3:0b:ec:6a:21:ce:01:7d:b2:7d:a3:d3:e5:78: db:63:21:e6:f5:69:f3:e3:63:e0:52:ac:43:02:41:55:63:a9: 80:ae:e0:26:2c:53:6a:9d:30:ce:b3:e6:a3:06:ae:a1:e9:e9: 1f:04:d8:af:d9:8e:65:77:cb:5c:e3:52:4a:14:b7:72:b5:8d: 3c:ff:af:bb:7e:d4:70:12:91:d8:32:aa:57:4b:65:6c:9d:cb: 9e:e3:94:c1:56:95:57:63:04:49:e9:0c:39:62:8e:50:e3:6f: c5:c2:5f:f2:65:8e:53:99:14:c0:21:d0:fb:fd:01:04:06:bd: 2d:aa:95:c5:7d:fb:bd:7d:d5:5a:47:10:36:b8:6b:7d:2c:28: dd:3b:3c:15:7d:02:39:c9:7a:38:53:b0:27:8e:0b:4d:e2:5d: 98:66:09:9a:c2:ec:a3:03:f7:c9:ee:e4:91:0b:69:14:16:ba: 53:97:90:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaNK2Zd3tSzZ25d583ovDuty08DkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEyMDQxWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmRlMzY4ODkyY2U2MDA3MjlkYWI0MDdmZGNiZWMwMmE0 NDQ5NzBhZjIzYzg0MjBlOWM3NTgzZTI2YmYwZDM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmowKf3SweEtyWSpM6tjNgXS2En48V9aYQasdL9pUnkVZA 4I5Rf2IgHPgdT2ksLz7rkAsgDi+DBlLmiA5Qti8YLCvknXK/+AtfEkSuMNWs4lzf QAide9I72IAQzLDYKwzkRbxtG2srOlZcBP2aRwBGgxy0Jk3KhbslXw0wCG6mOcU5 Nqv1kzyVUIY54oOIngj/HRYFyOy2HcB3znBtc3rbAhvuUTcc0ndnNOUcxmJWImVp 5sahda9xQBKsT0BY7fNwGLJaQm+7kCqgdBy0W57wVoGrJCp+VSovMwPMiySTDTJz Ks5mKQMMo1cAGrXSANkNExWUClL/Ss42u4oS7LZLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+M8Ak+GjxVLtvvARYilpksZ5i68wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwMjIwMGE1LWJhYmUtNGRlYi05MTE2LWYxZTMwODk0MmI2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBskgwDQYJKoZIhvcNAQELBQADggEBAB3hlYyxVHHY2fX91kTlLd+MRBS/ XpfgFjo9WdqygsO4HZgMlcsJqU9jxdyEmz/9822V4iZOpTxeHau6V2tqkKkG+Cb+ /1d+pn4SKmfDC+xqIc4BfbJ9o9PleNtjIeb1afPjY+BSrEMCQVVjqYCu4CYsU2qd MM6z5qMGrqHp6R8E2K/ZjmV3y1zjUkoUt3K1jTz/r7t+1HASkdgyqldLZWydy57j lMFWlVdjBEnpDDlijlDjb8XCX/JljlOZFMAh0Pv9AQQGvS2qlcV9+7191VpHEDa4 a30sKN07PBV9AjnJejhTsCeOC03iXZhmCZrC7KMD98nu5JELaRQWulOXkII= -----END CERTIFICATE-----Generated at Sun Nov 15 19:24:02 2026 by rpki-client