$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2852a1b1-2bd2-4913-9903-c634f21bdd28.roa File: 2852a1b1-2bd2-4913-9903-c634f21bdd28.roa (raw, json) Hash identifier: g58YallPNI7YaZHJu93T5zhI4v2HLBe4kRspVzBGN/0= Subject key identifier: 4F:72:1B:BE:2E:5A:AA:75:B3:57:F3:62:2D:81:52:C6:B0:3A:B0:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31CC891804C91A95C3A4A1C71D97E201F59AFC04 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2852a1b1-2bd2-4913-9903-c634f21bdd28.roa Signing time: Fri 30 Oct 2026 11:20:56 +0000 ROA not before: Fri 30 Oct 2026 11:20:56 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cc:89:18:04:c9:1a:95:c3:a4:a1:c7:1d:97:e2:01:f5:9a:fc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 30 11:20:56 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=d3162b6c49a4131ec4560fe36f4eeeb5f187ad245c85ea1f1162078a25dcc56e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:b2:8a:6b:e6:fc:01:2a:d0:e8:3d:5b:c5: 46:8b:ff:ff:b9:83:fe:68:d6:39:16:95:bb:e9:f0: 7d:48:bc:c8:34:e2:29:e8:d5:a9:22:08:0c:de:9b: 20:4a:10:55:10:1d:de:cb:48:35:82:f2:80:5d:95: 78:8d:ed:6a:f2:2b:c1:7c:57:d4:b7:e2:43:b1:6a: c5:07:b0:a2:ae:87:76:b4:ab:0a:98:92:06:35:35: 8b:8a:15:30:f7:25:b4:a3:b3:5f:7a:97:fa:19:4f: 46:5d:6d:e3:9f:ca:3d:f2:f1:20:a3:59:b0:25:a3: 7a:64:53:dc:14:e7:dd:5e:ca:e6:90:83:f5:58:cf: cc:be:c7:e6:1f:23:0b:0f:bf:f2:4e:12:35:88:9b: 96:2d:81:b3:66:26:48:ce:6f:6e:24:3a:25:50:39: 7b:2f:05:cc:bb:68:bc:c4:87:56:6b:11:80:27:e9: ba:30:31:03:77:c1:37:37:78:eb:d4:b7:31:6c:80: 50:82:69:fe:96:72:c0:75:2b:7e:7e:34:86:17:95: 28:04:cd:93:a2:23:c3:b6:e9:b4:8b:5a:70:c8:1b: 52:71:71:50:13:fa:00:51:ec:ab:51:b2:ac:bd:5a: fb:5e:1f:c1:5b:0e:f7:ee:18:b1:e3:28:e4:eb:f2: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:72:1B:BE:2E:5A:AA:75:B3:57:F3:62:2D:81:52:C6:B0:3A:B0:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2852a1b1-2bd2-4913-9903-c634f21bdd28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.145.0/24 Signature Algorithm: sha256WithRSAEncryption 65:67:42:52:b9:2f:59:22:e2:77:b6:ab:f8:a2:ed:2b:4c:02: 20:0e:fa:01:5d:8e:3c:44:a5:6a:42:2b:7d:16:a7:57:ce:1c: f6:eb:41:31:20:e7:cb:7c:18:5b:c1:b0:bd:4a:c4:8a:12:39: 7f:00:3e:f9:fe:c7:54:d8:e3:d0:65:0a:91:0f:91:77:3e:fb: 0f:28:6a:fb:79:9b:10:f4:00:fd:e2:f7:9f:c1:fa:77:8f:14: 25:3d:59:0d:ac:47:16:02:98:22:4d:f2:70:24:ee:c5:ec:83: 62:80:6e:60:4f:a0:c2:8f:90:74:c5:3e:48:92:22:eb:e6:92: bf:dc:2a:2f:0d:83:68:47:c4:f6:2a:72:12:67:a7:66:90:60: d5:0c:20:51:23:39:ac:b7:30:e7:8e:8d:e1:37:72:6b:b9:25: 43:1b:aa:c1:ac:4b:10:18:fa:39:00:73:aa:d8:85:6c:86:38: c2:8a:08:aa:ca:58:70:34:e8:39:80:4e:ac:c4:24:01:11:c4: 3c:78:77:2c:da:b9:89:3a:e5:f8:21:3f:12:87:53:70:f3:40: 93:f6:2a:3e:c0:36:72:f7:9d:0d:6b:f6:d6:f7:96:a0:c9:6e: 56:e2:c5:10:04:5f:79:c0:34:c6:40:14:d6:84:c8:e3:c2:4b: eb:53:95:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMcyJGATJGpXDpKHHHZfiAfWa/AQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDMwMTEyMDU2WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzE2MmI2YzQ5YTQxMzFlYzQ1NjBmZTM2ZjRlZWViNWYx ODdhZDI0NWM4NWVhMWYxMTYyMDc4YTI1ZGNjNTZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+AbKKa+b8ASrQ6D1bxUaL//+5g/5o1jkWlbvp8H1IvMg0 4ino1akiCAzemyBKEFUQHd7LSDWC8oBdlXiN7WryK8F8V9S34kOxasUHsKKuh3a0 qwqYkgY1NYuKFTD3JbSjs196l/oZT0ZdbeOfyj3y8SCjWbAlo3pkU9wU591eyuaQ g/VYz8y+x+YfIwsPv/JOEjWIm5YtgbNmJkjOb24kOiVQOXsvBcy7aLzEh1ZrEYAn 6bowMQN3wTc3eOvUtzFsgFCCaf6WcsB1K35+NIYXlSgEzZOiI8O26bSLWnDIG1Jx cVAT+gBR7KtRsqy9WvteH8FbDvfuGLHjKOTr8ksrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT3Ibvi5aqnWzV/NiLYFSxrA6sM8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4NTJhMWIxLTJiZDItNDkxMy05OTAzLWM2MzRmMjFiZGQyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAYbpEwDQYJKoZIhvcNAQELBQADggEBAGVnQlK5L1ki4ne2q/ii7StMAiAO +gFdjjxEpWpCK30Wp1fOHPbrQTEg58t8GFvBsL1KxIoSOX8APvn+x1TY49BlCpEP kXc++w8oavt5mxD0AP3i95/B+nePFCU9WQ2sRxYCmCJN8nAk7sXsg2KAbmBPoMKP kHTFPkiSIuvmkr/cKi8Ng2hHxPYqchJnp2aQYNUMIFEjOay3MOeOjeE3cmu5JUMb qsGsSxAY+jkAc6rYhWyGOMKKCKrKWHA06DmATqzEJAERxDx4dyzauYk65fghPxKH U3DzQJP2Kj7ANnL3nQ1r9tb3lqDJblbixRAEX3nANMZAFNaEyOPCS+tTlRQ= -----END CERTIFICATE-----Generated at Sat Oct 31 08:37:40 2026 by rpki-client