$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa File: 0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa (raw, json) Hash identifier: 8sTiBrNWgOIj8co1tkwoW2c5/S/Vgi3umf65peEeKus= Subject key identifier: 2D:C4:78:16:74:8E:08:E9:B4:F0:E8:5B:09:68:4A:F8:85:2D:4F:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A3FD2C7EE75004AD8E893B9A5B28868ECD166BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa Signing time: Tue 20 Oct 2026 00:40:57 +0000 ROA not before: Tue 20 Oct 2026 00:40:57 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 198.207.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3f:d2:c7:ee:75:00:4a:d8:e8:93:b9:a5:b2:88:68:ec:d1:66:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 20 00:40:57 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=97794db1369dae8ae851e7b835fc88a99315ecc145cfdb0b363cbf7515eb347c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:76:04:e9:d8:73:3f:bb:65:85:c0:52:e6: a4:b5:8c:77:df:2d:d7:93:d6:d7:2c:42:08:ec:11: 7b:0f:ab:52:b8:7c:1e:b6:24:0e:54:8e:ca:5d:61: bc:a0:b4:7d:3b:54:f5:51:3f:c6:73:30:88:fb:0b: 14:28:14:f4:1d:5b:ce:dc:c2:a2:ef:d5:ca:7f:93: 0c:d1:75:fd:7f:37:70:b3:17:c6:84:1f:4b:e5:d3: ca:b1:4c:db:b5:d4:49:35:fc:de:41:5b:61:a6:f2: 31:fb:38:fc:1a:21:a0:70:a7:c9:a3:f5:36:29:d8: fb:20:a9:c8:67:9a:ac:2a:17:15:d1:24:be:e0:3c: 73:7d:d9:09:18:13:44:95:dd:45:c9:48:5c:b0:ec: 67:df:eb:27:89:09:d1:8d:d7:07:73:82:26:ea:1b: 80:57:f2:26:d8:26:9e:2b:e6:d3:5c:36:a9:8f:83: 34:e7:d1:bd:a7:bf:67:34:42:4a:48:f8:99:30:aa: a4:07:ed:30:cc:85:60:ae:13:3e:7c:01:fb:a6:b8: 1d:37:1b:1e:97:30:81:eb:b5:6c:72:3a:4c:7c:01: 3d:44:5b:dd:66:41:29:ed:98:b4:42:9d:72:f7:8d: 40:21:47:6f:3e:fe:dd:69:28:61:a6:3e:2d:82:da: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:78:16:74:8E:08:E9:B4:F0:E8:5B:09:68:4A:F8:85:2D:4F:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.207.193.0/24 Signature Algorithm: sha256WithRSAEncryption 57:80:54:44:7d:ef:c2:cd:f1:16:ee:49:f8:bd:0b:d7:4f:65: 39:31:57:e0:9a:0b:4e:a3:35:03:0a:64:c8:1c:27:dd:68:4b: d3:bb:5e:be:8e:c5:d8:fb:83:2a:1d:7c:65:0a:d7:13:16:72: ce:95:33:82:70:ff:6b:95:4c:c3:53:55:6c:49:02:78:eb:2b: 16:55:a4:11:9d:2a:cd:8d:4a:80:10:de:40:08:32:27:a5:d5: 5f:b4:3e:ff:51:ac:12:50:f0:c2:11:fe:fb:cc:74:b6:d9:f8: 93:76:e1:6b:5d:b3:75:75:59:4b:23:9b:e7:0f:0c:9c:2b:c2: ff:f6:49:40:bd:93:e5:37:b1:24:c9:04:2d:10:c3:3e:68:bb: 46:b1:5f:aa:de:65:14:63:b0:5f:f5:7c:62:f2:c0:99:61:9d: d7:4a:63:1b:5b:8a:0e:42:60:7b:b3:e6:ca:b1:77:6f:04:cb: 67:a1:d6:e4:2b:f1:05:65:f0:3f:d1:d0:be:81:25:61:88:b3: 09:7e:9b:41:fc:c4:3c:dc:52:2f:a7:13:e5:dc:f7:79:d4:0f: 40:2e:1e:a0:3b:89:a9:2b:5c:94:df:c4:f3:be:18:18:5c:a5: e9:cd:39:9e:0f:de:69:2f:62:d3:d9:db:3e:a1:58:ac:ee:a2: cc:09:84:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWj/Sx+51AErY6JO5pbKIaOzRZr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIwMDA0MDU3WhcNMjcwMTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Nzc5NGRiMTM2OWRhZThhZTg1MWU3YjgzNWZjODhhOTkz MTVlY2MxNDVjZmRiMGIzNjNjYmY3NTE1ZWIzNDdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDGnYE6dhzP7tlhcBS5qS1jHffLdeT1tcsQgjsEXsPq1K4 fB62JA5UjspdYbygtH07VPVRP8ZzMIj7CxQoFPQdW87cwqLv1cp/kwzRdf1/N3Cz F8aEH0vl08qxTNu11Ek1/N5BW2Gm8jH7OPwaIaBwp8mj9TYp2PsgqchnmqwqFxXR JL7gPHN92QkYE0SV3UXJSFyw7Gff6yeJCdGN1wdzgibqG4BX8ibYJp4r5tNcNqmP gzTn0b2nv2c0QkpI+JkwqqQH7TDMhWCuEz58AfumuB03Gx6XMIHrtWxyOkx8AT1E W91mQSntmLRCnXL3jUAhR28+/t1pKGGmPi2C2ipTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULcR4FnSOCOm08OhbCWhK+IUtTxAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmNzk4MjI1LWM5OGItNGUwZS05MTI0LWMxZmI2ZDMwZDdjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGz8EwDQYJKoZIhvcNAQELBQADggEBAFeAVER978LN8RbuSfi9C9dPZTkx V+CaC06jNQMKZMgcJ91oS9O7Xr6Oxdj7gyodfGUK1xMWcs6VM4Jw/2uVTMNTVWxJ AnjrKxZVpBGdKs2NSoAQ3kAIMiel1V+0Pv9RrBJQ8MIR/vvMdLbZ+JN24Wtds3V1 WUsjm+cPDJwrwv/2SUC9k+U3sSTJBC0Qwz5ou0axX6reZRRjsF/1fGLywJlhnddK Yxtbig5CYHuz5sqxd28Ey2eh1uQr8QVl8D/R0L6BJWGIswl+m0H8xDzcUi+nE+Xc 93nUD0AuHqA7iakrXJTfxPO+GBhcpenNOZ4P3mkvYtPZ2z6hWKzuoswJhAg= -----END CERTIFICATE-----Generated at Mon Nov 2 21:09:36 2026 by rpki-client