$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0ac6a-ca60-4958-a561-37454c1f561b.roa File: 0cb0ac6a-ca60-4958-a561-37454c1f561b.roa (raw, json) Hash identifier: dxNHBtSM6bxMqnFBB6QlSa6hREbhVYDUMgFrEaAxto4= Subject key identifier: FD:CA:A5:C4:2B:83:E1:65:7A:BD:EF:F2:A5:26:54:31:92:D5:5D:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15FF0AABC8CAD64803BB4D5897CEA8825C7D7D89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0ac6a-ca60-4958-a561-37454c1f561b.roa Signing time: Sat 24 Oct 2026 00:41:14 +0000 ROA not before: Sat 24 Oct 2026 00:41:14 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.193.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ff:0a:ab:c8:ca:d6:48:03:bb:4d:58:97:ce:a8:82:5c:7d:7d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:41:14 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=188689a23d72ae282bb4460de61067ac16e445542376223a4a3214fa05ad531c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:cf:90:6c:79:56:99:a2:b6:ab:3e:62:4d: 5a:65:3e:d0:ff:0d:74:25:68:ae:77:a5:ff:48:0f: c4:82:a6:3b:a4:43:93:b5:ff:44:b7:be:07:f5:a7: 92:e0:82:e4:c6:ec:d2:6f:93:6e:2e:26:4d:9a:eb: cb:77:11:b2:df:58:3c:1f:7f:76:bf:73:5f:20:52: f1:6d:77:d9:53:55:d2:d8:f2:2a:3b:94:7c:2b:1b: 30:e7:1e:ad:f9:5a:ec:5f:9f:14:11:95:c6:db:93: 8d:58:fd:27:21:f7:15:74:40:51:fb:01:e6:e7:dd: 4a:71:58:e7:ef:3c:c0:e4:37:83:24:c0:06:fb:eb: a5:ad:8f:16:50:dc:91:fd:7c:76:be:46:e6:b8:bf: 0a:1f:e8:aa:1c:6c:bf:b4:5d:27:91:4d:ea:b6:90: 7d:b7:4c:be:32:26:1c:1c:96:b1:d4:29:09:9d:33: 21:85:a8:ce:e7:91:0c:8c:6d:06:2e:01:47:74:a0: 26:99:06:c3:10:5c:d1:d8:b8:ba:fd:97:74:da:32: ce:79:c0:08:83:ca:40:a6:50:00:74:fd:aa:e8:96: 84:46:b3:5b:e1:0b:7d:eb:b3:0d:2e:db:e1:c0:ac: a1:71:fd:5b:83:0a:0b:fc:20:30:6f:bd:75:f4:ff: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CA:A5:C4:2B:83:E1:65:7A:BD:EF:F2:A5:26:54:31:92:D5:5D:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0ac6a-ca60-4958-a561-37454c1f561b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:b2:93:5c:e5:6c:fc:ae:f6:40:f6:db:e6:3d:38:ae:b3:7f: ef:98:23:5a:32:6c:6c:68:20:00:bb:07:df:3c:6f:29:db:af: 16:e7:3a:09:36:f2:8b:1a:85:ce:aa:27:1e:3b:e1:9c:25:57: 93:ab:0a:81:c4:8c:1e:27:5e:68:cf:47:22:80:59:2b:ef:a9: 4f:c7:a5:24:f8:ae:e2:84:63:7d:7d:5d:1c:c8:ed:6f:2a:c7: 01:02:58:63:2a:90:12:59:5f:d6:20:37:47:64:53:83:37:44: 95:c2:b3:65:50:75:7b:98:57:d1:54:7f:fd:2c:67:33:c3:92: 77:42:06:a0:97:f5:bc:e3:6b:d8:e2:cc:a0:cc:a3:c4:ce:aa: 49:ba:ed:59:51:82:a3:ad:a0:1a:f7:52:0e:6b:82:04:2c:d4: 1f:a7:c5:90:40:c5:e2:0d:35:5b:d8:86:86:27:bf:39:e2:77: 6b:d0:bd:e5:1d:54:68:e3:75:f3:da:b4:78:a1:44:84:50:35: 1a:3b:18:9e:f8:9f:38:0a:e9:48:21:7b:14:a9:91:21:a6:4d: 9f:0e:cb:14:6a:77:6a:3a:2d:c9:22:2e:d9:0b:38:1b:99:00: c5:a5:b6:b7:14:15:8d:37:34:ac:5f:70:3e:16:d5:2e:2f:5e: fb:a0:55:6e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFf8Kq8jK1kgDu01Yl86oglx9fYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDA0MTE0WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODg2ODlhMjNkNzJhZTI4MmJiNDQ2MGRlNjEwNjdhYzE2 ZTQ0NTU0MjM3NjIyM2E0YTMyMTRmYTA1YWQ1MzFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXZ8+QbHlWmaK2qz5iTVplPtD/DXQlaK53pf9ID8SCpjuk Q5O1/0S3vgf1p5LgguTG7NJvk24uJk2a68t3EbLfWDwff3a/c18gUvFtd9lTVdLY 8io7lHwrGzDnHq35WuxfnxQRlcbbk41Y/Sch9xV0QFH7Aebn3UpxWOfvPMDkN4Mk wAb766WtjxZQ3JH9fHa+Rua4vwof6KocbL+0XSeRTeq2kH23TL4yJhwclrHUKQmd MyGFqM7nkQyMbQYuAUd0oCaZBsMQXNHYuLr9l3TaMs55wAiDykCmUAB0/aroloRG s1vhC33rsw0u2+HArKFx/VuDCgv8IDBvvXX0/xfNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/cqlxCuD4WV6ve/ypSZUMZLVXV4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjYjBhYzZhLWNhNjAtNDk1OC1hNTYxLTM3NDU0YzFmNTYxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4wTANBgkqhkiG9w0BAQsFAAOCAQEAoLKTXOVs/K72QPbb5j04rrN/75gj WjJsbGggALsH3zxvKduvFuc6CTbyixqFzqonHjvhnCVXk6sKgcSMHideaM9HIoBZ K++pT8elJPiu4oRjfX1dHMjtbyrHAQJYYyqQEllf1iA3R2RTgzdElcKzZVB1e5hX 0VR//SxnM8OSd0IGoJf1vONr2OLMoMyjxM6qSbrtWVGCo62gGvdSDmuCBCzUH6fF kEDF4g01W9iGhie/OeJ3a9C95R1UaON189q0eKFEhFA1GjsYnvifOArpSCF7FKmR IaZNnw7LFGp3ajotySIu2Qs4G5kAxaW2txQVjTc0rF9wPhbVLi9e+6BVbg== -----END CERTIFICATE-----Generated at Tue Nov 3 12:05:57 2026 by rpki-client