$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa File: 20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa (raw, json) Hash identifier: izJjq71DarrCZMHA1yxEy4Z/3Uqr+KSCqoG71xX69Co= Subject key identifier: E2:B9:1C:15:7C:CC:75:B3:49:29:DA:DC:1C:88:32:BE:DE:3B:2F:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 470E6E039A8B5F435B56418B0F4C1332F2A72647 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa Signing time: Tue 27 Oct 2026 00:30:14 +0000 ROA not before: Tue 27 Oct 2026 00:30:14 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0e:6e:03:9a:8b:5f:43:5b:56:41:8b:0f:4c:13:32:f2:a7:26:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:30:14 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=0387b4a9c3be526c3106927ea58c6294df4ccdb7a299c630b3982ccb48818aca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:26:53:16:c3:b8:99:71:93:23:af:2c:d2: e9:14:e8:94:f9:a9:45:df:aa:4b:1c:35:08:81:82: 0a:67:1e:1c:2a:6e:9f:a4:b1:21:b5:28:df:d8:02: d0:82:89:3b:ee:12:8d:59:4d:45:12:86:1e:55:d6: ce:fb:df:f1:a8:92:a8:3c:0d:85:68:30:9c:d5:71: 86:4e:b7:27:85:5e:7e:56:fb:1c:53:52:ba:12:43: ff:18:ec:90:91:3e:37:a3:0c:6d:af:d7:23:63:17: bf:7b:bd:fb:c5:8a:86:42:83:eb:65:b0:4a:f2:ad: 9b:8d:cf:ea:ff:c2:69:0a:fb:26:d3:26:f8:78:ce: 42:f9:fc:88:85:49:ed:9e:09:42:a9:e5:f8:f2:30: 2c:79:a4:4e:1e:19:ba:49:eb:2c:cc:1f:ba:3e:57: 92:df:3e:1b:38:67:a2:7d:5b:9e:8e:c9:82:a6:30: 7f:cd:6f:94:b1:5e:3c:67:4e:a5:65:49:4a:92:35: c1:6a:96:3b:04:77:e2:49:5a:d8:f6:74:65:7b:12: d5:c4:f1:8c:81:60:a3:69:9f:e3:b7:27:c1:a7:d5: 11:42:97:5d:5c:0e:0d:3d:4c:e7:d9:a8:18:8c:26: ff:30:b1:01:ec:16:f6:9c:25:d1:6b:01:0a:cd:48: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B9:1C:15:7C:CC:75:B3:49:29:DA:DC:1C:88:32:BE:DE:3B:2F:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.32.0/19 Signature Algorithm: sha256WithRSAEncryption 99:96:49:74:3d:a3:e4:34:da:09:2a:d3:d6:e5:01:48:a9:26: 72:c0:d9:f9:53:00:b5:4b:e6:e8:84:19:0d:01:76:b5:a5:09: cf:bb:74:92:38:62:65:96:2e:9f:40:db:92:48:05:98:48:f2: b2:ec:32:02:d4:76:b1:f3:fb:f6:ea:6b:f4:9c:68:30:58:93: c4:6a:a2:19:ee:6a:9f:93:04:07:fe:1b:c5:6e:3d:c6:59:12: 15:8e:eb:7c:dd:1e:b8:ae:c4:50:c0:e1:95:4e:7c:fb:9f:4e: 59:7a:3c:29:65:99:ed:b2:5a:09:45:f5:e6:6c:e4:b4:b0:45: a4:2d:d0:ca:2d:da:67:12:0e:c2:6e:44:14:5f:2f:68:63:a5: ab:de:38:52:27:fa:fe:e4:34:37:60:e9:45:19:46:8f:0c:c2: df:8f:c2:1c:bd:ac:84:77:6d:9a:3f:d9:41:f4:f6:1f:b5:b2: 91:74:01:66:c0:75:79:35:b3:b5:14:4e:66:70:25:37:b4:40: 01:78:39:e6:ef:fe:eb:3b:11:d4:97:dd:c2:fb:30:7e:41:cf: cb:c4:00:5d:74:83:c1:21:e6:70:5a:35:52:67:66:48:0e:1c: 87:a6:eb:4d:d5:c5:36:88:5e:6e:4a:61:c7:87:fc:b3:98:17: 95:d0:c0:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURw5uA5qLX0NbVkGLD0wTMvKnJkcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAzMDE0WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzg3YjRhOWMzYmU1MjZjMzEwNjkyN2VhNThjNjI5NGRm NGNjZGI3YTI5OWM2MzBiMzk4MmNjYjQ4ODE4YWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCubSZTFsO4mXGTI68s0ukU6JT5qUXfqkscNQiBggpnHhwq bp+ksSG1KN/YAtCCiTvuEo1ZTUUShh5V1s773/Gokqg8DYVoMJzVcYZOtyeFXn5W +xxTUroSQ/8Y7JCRPjejDG2v1yNjF797vfvFioZCg+tlsEryrZuNz+r/wmkK+ybT Jvh4zkL5/IiFSe2eCUKp5fjyMCx5pE4eGbpJ6yzMH7o+V5LfPhs4Z6J9W56OyYKm MH/Nb5SxXjxnTqVlSUqSNcFqljsEd+JJWtj2dGV7EtXE8YyBYKNpn+O3J8Gn1RFC l11cDg09TOfZqBiMJv8wsQHsFvacJdFrAQrNSLC9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4rkcFXzMdbNJKdrcHIgyvt47L2MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwZWNkODNkLWU2YzItNGQ3NS1iOWNiLThhNzg5ODE3MmFkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOSAwDQYJKoZIhvcNAQELBQADggEBAJmWSXQ9o+Q02gkq09blAUipJnLA 2flTALVL5uiEGQ0BdrWlCc+7dJI4YmWWLp9A25JIBZhI8rLsMgLUdrHz+/bqa/Sc aDBYk8Rqohnuap+TBAf+G8VuPcZZEhWO63zdHriuxFDA4ZVOfPufTll6PCllme2y WglF9eZs5LSwRaQt0Mot2mcSDsJuRBRfL2hjpaveOFIn+v7kNDdg6UUZRo8Mwt+P why9rIR3bZo/2UH09h+1spF0AWbAdXk1s7UUTmZwJTe0QAF4Oebv/us7EdSX3cL7 MH5Bz8vEAF10g8Eh5nBaNVJnZkgOHIem603VxTaIXm5KYceH/LOYF5XQwMQ= -----END CERTIFICATE-----Generated at Sat Oct 31 05:39:16 2026 by rpki-client