$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa File: 0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa (raw, json) Hash identifier: YcqZD+U1G6XtyER0sKt4Hta7u2UdR2xjFmzrHzHCABY= Subject key identifier: E5:9C:74:9B:E5:FF:F5:C6:34:43:0C:B6:7F:B9:52:51:0A:B5:4C:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F7348EC5BCE784830D301DD782F765121B69211 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa Signing time: Mon 05 Oct 2026 00:31:44 +0000 ROA not before: Mon 05 Oct 2026 00:31:44 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.148.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:73:48:ec:5b:ce:78:48:30:d3:01:dd:78:2f:76:51:21:b6:92:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:31:44 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=47ef6aa431b563104838a3ebbf6e1f88ff1932fcfc32cc7ec88364a7d7853e58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:27:3d:c5:44:4d:1d:1b:85:5b:59:1b:1e: b0:0a:5f:16:3e:d2:73:a7:9b:68:c5:22:c7:05:89: 8f:8c:b4:b6:ae:0f:92:a1:1f:0d:87:75:12:6c:0d: 87:ee:0a:0f:62:a5:ea:b1:27:76:7d:cf:82:b8:65: 5d:15:fe:96:42:5a:86:3a:ea:96:ad:7e:75:cd:f6: cc:4c:e8:9d:e4:e9:1e:15:68:4f:15:70:8b:bc:11: d8:47:30:70:b2:d8:70:75:92:e0:77:6c:01:2e:c8: 27:5c:de:8b:1d:2d:a2:22:19:f3:d3:8a:5e:e5:67: a7:d1:56:99:28:a2:cd:d8:52:01:eb:9a:4f:b4:12: c9:4d:5f:88:7f:c2:b1:f1:2e:74:3d:cb:8a:65:14: 17:03:ab:4e:16:ff:66:49:b1:7e:c7:9a:10:d2:17: 0d:63:d5:32:1d:61:03:78:b8:32:da:18:ed:dc:2f: cd:91:27:dd:59:cd:4d:b1:a5:89:5b:51:64:e1:a1: 84:2c:29:e1:e7:16:84:a6:75:b7:ca:0e:6d:9d:e7: 36:c0:5b:1f:59:ea:43:2d:7b:54:2f:44:f3:7d:a7: f1:4b:e6:db:85:4e:5e:99:73:bf:f0:76:87:ae:17: 4c:61:4c:c5:66:fa:90:b3:a6:be:df:82:46:18:99: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9C:74:9B:E5:FF:F5:C6:34:43:0C:B6:7F:B9:52:51:0A:B5:4C:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.148.128.0/17 Signature Algorithm: sha256WithRSAEncryption 32:db:d1:d5:d9:ed:c7:38:37:5e:e9:2e:aa:aa:93:26:01:08: ed:6b:4e:b9:e8:16:11:b1:5d:8b:32:ee:e0:b5:04:69:dc:7e: ca:5d:45:31:b7:61:a5:57:ad:e2:9f:a5:f7:d9:bd:04:f5:b0: 56:5d:49:9b:fd:f6:0c:03:6d:c8:c3:8f:60:23:30:a8:fa:72: 3b:64:92:63:72:45:73:0a:af:0d:54:1b:03:a2:0e:88:c1:e3: 17:23:ca:7e:e7:17:55:f4:4a:b7:33:ba:0e:1a:09:66:5f:9c: 29:bb:23:cb:c9:ee:79:fb:1f:0e:8f:e0:f4:e3:b7:d2:b7:99: 49:9b:8c:01:d5:3e:0e:5d:2c:5f:42:ad:b3:40:09:50:92:27: b0:89:f4:56:52:ec:3e:97:12:48:bc:6e:6c:4f:b9:01:64:ae: a2:20:cf:37:aa:a9:e3:c8:ad:06:0d:19:9e:94:98:ec:a9:9e: 29:b6:2b:5d:b3:e4:75:25:1c:ed:e1:74:3a:8d:dd:2b:66:81: cc:c1:e0:52:4a:82:d9:a1:ce:c3:2e:85:09:a9:89:7a:80:a6: 39:3f:64:49:0f:10:48:75:17:b7:a7:ee:9a:1a:05:b0:3d:78: 3e:2d:96:45:49:a5:5c:d9:8f:6d:0f:7b:b9:9c:89:85:dd:eb: 97:b5:ca:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH3NI7FvOeEgw0wHdeC92USG2khEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAzMTQ0WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2VmNmFhNDMxYjU2MzEwNDgzOGEzZWJiZjZlMWY4OGZm MTkzMmZjZmMzMmNjN2VjODgzNjRhN2Q3ODUzZTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6CSc9xURNHRuFW1kbHrAKXxY+0nOnm2jFIscFiY+MtLau D5KhHw2HdRJsDYfuCg9ipeqxJ3Z9z4K4ZV0V/pZCWoY66patfnXN9sxM6J3k6R4V aE8VcIu8EdhHMHCy2HB1kuB3bAEuyCdc3osdLaIiGfPTil7lZ6fRVpkoos3YUgHr mk+0EslNX4h/wrHxLnQ9y4plFBcDq04W/2ZJsX7HmhDSFw1j1TIdYQN4uDLaGO3c L82RJ91ZzU2xpYlbUWThoYQsKeHnFoSmdbfKDm2d5zbAWx9Z6kMte1QvRPN9p/FL 5tuFTl6Zc7/wdoeuF0xhTMVm+pCzpr7fgkYYmeP9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5Zx0m+X/9cY0Qwy2f7lSUQq1TKYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjZDAzNzc4LTA0MDktNGQzZS1hN2ZiLTZkZWE2OGI5YzEzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQlIAwDQYJKoZIhvcNAQELBQADggEBADLb0dXZ7cc4N17pLqqqkyYBCO1r TrnoFhGxXYsy7uC1BGncfspdRTG3YaVXreKfpffZvQT1sFZdSZv99gwDbcjDj2Aj MKj6cjtkkmNyRXMKrw1UGwOiDojB4xcjyn7nF1X0Srczug4aCWZfnCm7I8vJ7nn7 Hw6P4PTjt9K3mUmbjAHVPg5dLF9CrbNACVCSJ7CJ9FZS7D6XEki8bmxPuQFkrqIg zzeqqePIrQYNGZ6UmOypnim2K12z5HUlHO3hdDqN3StmgczB4FJKgtmhzsMuhQmp iXqApjk/ZEkPEEh1F7en7poaBbA9eD4tlkVJpVzZj20Pe7mciYXd65e1yvo= -----END CERTIFICATE-----Generated at Wed Nov 4 05:37:10 2026 by rpki-client