$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e26ca5a-ce48-474a-870f-46d022e8de2b.roa File: 0e26ca5a-ce48-474a-870f-46d022e8de2b.roa (raw, json) Hash identifier: irFuAEo+5gEwlNQNfnKgZDkbOXLBri9XZ0nuCLxz55Q= Subject key identifier: 07:54:30:46:B1:77:11:0E:03:01:B1:8A:BC:8D:A0:4C:6B:33:18:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B8CDB29D060B39DADFB7B2AE0F85F0E5D6D9850 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e26ca5a-ce48-474a-870f-46d022e8de2b.roa Signing time: Tue 06 Oct 2026 00:40:05 +0000 ROA not before: Tue 06 Oct 2026 00:40:05 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.109.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8c:db:29:d0:60:b3:9d:ad:fb:7b:2a:e0:f8:5f:0e:5d:6d:98:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:40:05 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=aea38bd0f0b06178a23a1cdb563a4bd3f8d455bf73759723da703af593e79946, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:26:32:05:69:05:e7:e0:55:80:fb:bc:66: 4f:ef:31:3e:6f:fc:2e:d6:87:fd:74:4b:12:fe:f7: cc:08:ae:e5:7a:06:de:fc:31:d5:94:95:bf:b0:98: b1:b9:cc:15:11:49:7f:e4:38:27:66:62:f2:83:56: 01:c2:4c:e2:fa:3e:5c:97:12:c4:5d:e8:8d:31:0d: 8d:23:d0:6c:d1:a6:ae:17:2a:3f:14:b4:4f:3f:ae: 0d:20:72:ce:25:1d:70:e0:6e:60:f5:8d:5a:05:71: a6:45:74:72:b1:8d:5a:c1:cc:02:35:81:8d:bf:e3: 58:91:6f:9c:26:0d:71:82:e6:05:c4:af:b3:80:d4: 12:a5:10:7b:22:91:55:85:46:40:3a:d4:84:cd:c7: c0:47:8f:8b:5f:a6:14:96:56:8b:a3:33:15:7c:a7: 3b:3a:0e:e0:39:b1:7a:7c:c2:1e:97:19:92:cd:d5: 35:af:40:db:9e:7e:ce:cc:b4:2c:ca:67:4b:3b:db: 11:7c:33:f7:34:84:c0:4e:c3:03:1d:36:b8:f9:3a: 2b:53:6a:6c:96:62:0b:9b:12:3f:c1:65:c3:f8:e1: 7b:64:6e:39:d9:f0:3e:de:09:67:d0:f8:58:08:2b: 6c:71:9f:63:35:63:37:bb:04:8d:09:21:89:d3:a0: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:30:46:B1:77:11:0E:03:01:B1:8A:BC:8D:A0:4C:6B:33:18:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e26ca5a-ce48-474a-870f-46d022e8de2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.109.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8c:a2:c0:d6:27:f7:48:37:1d:01:db:0a:8f:df:2a:33:9e:1e: 7c:c7:ab:f8:89:45:6a:81:c3:6f:aa:26:da:33:68:4c:4d:b0: 2d:32:c7:73:19:d9:57:ed:bd:99:6f:fd:69:64:a7:04:f4:b3: cf:96:5a:df:c7:9d:d4:f2:58:bf:5e:c3:c5:ba:ae:87:b3:ec: 26:f6:40:fe:b4:9c:32:3e:75:b3:d4:14:eb:03:3f:bf:75:4c: 15:fc:de:b9:c1:58:39:8a:16:1a:d3:1d:4f:97:a3:36:42:ae: f8:0b:0e:81:43:f2:72:ea:79:27:ac:8e:17:90:2f:a7:57:ab: 31:fe:05:b1:40:f0:43:20:19:27:50:0f:8e:eb:a4:8f:42:25: 1d:60:8e:7f:d1:07:aa:5e:74:08:30:a2:91:19:fd:9f:23:b9: 12:36:25:de:40:10:37:73:28:9a:f4:33:97:e1:25:a8:9d:b7: 6b:31:60:e3:e0:ab:10:46:51:2e:3a:aa:8a:d4:95:7f:51:b9: 94:b0:3c:eb:09:37:9d:34:c8:81:94:af:d5:a3:67:83:7f:c2: e2:da:ca:b3:2d:48:31:1b:8e:45:59:3d:ca:cc:7b:f3:cf:5e: 24:69:c6:33:25:56:c9:01:91:47:a2:69:f9:56:bc:ec:4b:1b: ed:47:97:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW4zbKdBgs52t+3sq4PhfDl1tmFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA0MDA1WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWEzOGJkMGYwYjA2MTc4YTIzYTFjZGI1NjNhNGJkM2Y4 ZDQ1NWJmNzM3NTk3MjNkYTcwM2FmNTkzZTc5OTQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCUCYyBWkF5+BVgPu8Zk/vMT5v/C7Wh/10SxL+98wIruV6 Bt78MdWUlb+wmLG5zBURSX/kOCdmYvKDVgHCTOL6PlyXEsRd6I0xDY0j0GzRpq4X Kj8UtE8/rg0gcs4lHXDgbmD1jVoFcaZFdHKxjVrBzAI1gY2/41iRb5wmDXGC5gXE r7OA1BKlEHsikVWFRkA61ITNx8BHj4tfphSWVoujMxV8pzs6DuA5sXp8wh6XGZLN 1TWvQNuefs7MtCzKZ0s72xF8M/c0hMBOwwMdNrj5OitTamyWYgubEj/BZcP44Xtk bjnZ8D7eCWfQ+FgIK2xxn2M1Yze7BI0JIYnToC0XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB1QwRrF3EQ4DAbGKvI2gTGszGEQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlMjZjYTVhLWNlNDgtNDc0YS04NzBmLTQ2ZDAyMmU4ZGUyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfRbQAwDQYJKoZIhvcNAQELBQADggEBAIyiwNYn90g3HQHbCo/fKjOeHnzH q/iJRWqBw2+qJtozaExNsC0yx3MZ2VftvZlv/WlkpwT0s8+WWt/HndTyWL9ew8W6 roez7Cb2QP60nDI+dbPUFOsDP791TBX83rnBWDmKFhrTHU+XozZCrvgLDoFD8nLq eSesjheQL6dXqzH+BbFA8EMgGSdQD47rpI9CJR1gjn/RB6pedAgwopEZ/Z8juRI2 Jd5AEDdzKJr0M5fhJaidt2sxYOPgqxBGUS46qorUlX9RuZSwPOsJN500yIGUr9Wj Z4N/wuLayrMtSDEbjkVZPcrMe/PPXiRpxjMlVskBkUeiaflWvOxLG+1HlxU= -----END CERTIFICATE-----Generated at Sat Oct 31 05:16:12 2026 by rpki-client