$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa File: 05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa (raw, json) Hash identifier: TW+eNqVxyWYgRrgb7tWa8Lfg2K18voYqapPsv28ATjg= Subject key identifier: 02:D9:0B:55:26:57:2E:BD:1C:7F:F6:7A:10:0F:59:70:A8:8D:42:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39D0A9B6C1036A39E734CA169C1EC4E1B3F62F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa Signing time: Mon 12 Oct 2026 00:10:45 +0000 ROA not before: Mon 12 Oct 2026 00:10:45 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 56.137.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d0:a9:b6:c1:03:6a:39:e7:34:ca:16:9c:1e:c4:e1:b3:f6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:10:45 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=4bbe265c483d4d37628bff90b19165892bbb66f53a40105ab81fc28fb0b9524f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:1d:34:9b:40:2e:4f:3f:ae:70:5c:35:29: c6:ca:49:72:4d:0c:4f:f8:9a:c1:7c:d0:ab:60:84: c3:fb:5d:76:c6:1e:93:71:f6:d8:06:78:5e:fb:4a: 99:a7:aa:ce:9e:31:b3:a3:d5:a4:4f:de:6c:e2:be: ca:28:0f:e0:86:8a:7f:bc:dd:d5:ac:64:5f:3b:d4: b5:42:3b:d1:89:11:3e:6d:51:c3:c6:4d:3e:b7:52: 97:51:7c:01:68:18:15:21:13:53:6c:9f:09:9f:26: 04:6d:2d:74:db:bf:14:63:69:ec:ba:08:f5:5d:6a: 36:6a:5c:ac:5a:22:1d:cb:94:51:3d:d0:3c:8f:fe: 35:87:34:72:15:19:19:64:f1:58:d0:ec:f6:88:43: a4:2a:39:e1:23:4b:77:ab:a6:6d:b2:85:36:a1:95: c7:73:6e:53:0f:68:0d:8f:f3:32:91:08:04:0b:e6: 5c:13:c6:1e:1b:2f:b9:29:76:41:e7:2d:14:0c:0c: 16:2f:1d:eb:d1:c5:bd:13:a3:54:61:4f:34:d5:d4: a2:e3:6d:40:41:01:0a:ea:6b:16:20:23:41:bb:aa: 72:63:cf:bf:4b:5f:fe:69:73:25:18:13:7b:f4:53: bb:2c:d7:a3:58:17:43:26:e2:34:ef:d7:e6:0b:af: d5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D9:0B:55:26:57:2E:BD:1C:7F:F6:7A:10:0F:59:70:A8:8D:42:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 59:ff:3f:00:8c:e9:d3:19:b7:47:9a:e0:2b:50:f2:92:b5:1b: ae:a1:01:04:19:b3:a3:4e:bf:74:4b:32:a5:70:dc:61:27:04: 97:33:df:37:98:fe:3f:6b:5a:61:50:62:5c:20:bd:3f:aa:ad: 6e:ad:2e:ba:ce:3f:57:09:d5:3a:4b:81:7d:5b:5e:c7:3e:aa: 42:80:d6:c7:3e:42:5e:16:54:65:53:2e:53:88:1c:d8:c0:3f: e4:8c:8d:6f:3f:31:c8:8f:79:e7:4b:aa:2f:32:75:fc:fb:40: 3f:90:d8:65:10:54:ec:dc:90:6e:95:a9:2a:dc:7c:70:c5:11: 39:ae:ca:f7:45:a6:b7:ed:6c:7b:3d:d1:e3:b8:1f:d9:d5:3b: 5e:f6:23:68:87:93:24:a5:81:2c:19:89:d0:12:bf:34:1d:a2: 07:c6:e6:5b:f3:76:9d:61:41:8a:c1:cc:98:7c:37:f8:d8:d5: ec:7b:ba:a1:15:f6:07:86:c1:59:d6:cc:14:0f:94:98:dc:51: 17:ac:9d:fd:79:5b:e1:5a:d2:67:6e:f8:c9:cf:66:e2:ad:2f: e6:e5:4e:55:c6:98:4b:8a:d4:03:7a:2d:73:ab:aa:2f:00:11: bf:96:6d:b0:ea:de:8d:45:ed:20:96:70:ac:e0:22:2d:f6:ed: 04:54:7e:2a -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITOdCptsEDajnnNMoWnB7E4bP2LzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMTIwMDEwNDVaFw0yNzAxMTAyMzU5NTla MHoxSTBHBgNVBAUTQDRiYmUyNjVjNDgzZDRkMzc2MjhiZmY5MGIxOTE2NTg5MmJi YjY2ZjUzYTQwMTA1YWI4MWZjMjhmYjBiOTUyNGYxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL2nHTSbQC5PP65wXDUpxspJck0MT/iawXzQq2CEw/tddsYe k3H22AZ4XvtKmaeqzp4xs6PVpE/ebOK+yigP4IaKf7zd1axkXzvUtUI70YkRPm1R w8ZNPrdSl1F8AWgYFSETU2yfCZ8mBG0tdNu/FGNp7LoI9V1qNmpcrFoiHcuUUT3Q PI/+NYc0chUZGWTxWNDs9ohDpCo54SNLd6umbbKFNqGVx3NuUw9oDY/zMpEIBAvm XBPGHhsvuSl2QectFAwMFi8d69HFvROjVGFPNNXUouNtQEEBCuprFiAjQbuqcmPP v0tf/mlzJRgTe/RTuyzXo1gXQybiNO/X5guv1d0CAwEAAaOCArAwggKsMB0GA1Ud DgQWBBQC2QtVJlcuvRx/9noQD1lwqI1CQTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMDUxMDJmZmEtNmM3Mi00ZmMxLTlhZDgtZTg4MWYzYzE5NzRlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDADiJMA0GCSqGSIb3DQEBCwUAA4IBAQBZ/z8AjOnTGbdHmuArUPKStRuuoQEE GbOjTr90SzKlcNxhJwSXM983mP4/a1phUGJcIL0/qq1urS66zj9XCdU6S4F9W17H PqpCgNbHPkJeFlRlUy5TiBzYwD/kjI1vPzHIj3nnS6ovMnX8+0A/kNhlEFTs3JBu lakq3HxwxRE5rsr3Raa37Wx7PdHjuB/Z1Tte9iNoh5MkpYEsGYnQEr80HaIHxuZb 83adYUGKwcyYfDf42NXse7qhFfYHhsFZ1swUD5SY3FEXrJ39eVvhWtJnbvjJz2bi rS/m5U5VxphLitQDei1zq6ovABG/lm2w6t6NRe0glnCs4CIt9u0EVH4q -----END CERTIFICATE-----Generated at Wed Nov 4 20:10:58 2026 by rpki-client