$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa File: 2d54f54a-5931-4b42-adfd-9815eaa1c425.roa (raw, json) Hash identifier: D8wwobkzpeYtu6CfoH+Nc0cyqTVU58ckgpgPJaCZJDI= Subject key identifier: 06:67:0D:AC:E9:37:69:57:92:AE:A2:8E:A7:27:16:83:DC:01:EC:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DB6F56114978FD0F5CF928DECB697B84F41CAAE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa Signing time: Sun 11 Oct 2026 00:31:21 +0000 ROA not before: Sun 11 Oct 2026 00:31:21 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b6:f5:61:14:97:8f:d0:f5:cf:92:8d:ec:b6:97:b8:4f:41:ca:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 00:31:21 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=65291000a9ec07ea8504a3a3f4b11c3fa0181b8f1c7c1df923511f0824e8838c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:13:df:82:30:30:1e:5d:ee:07:0e:46:1c: 3a:54:5e:96:a6:e7:20:fd:c7:82:23:9e:05:d1:a0: 4b:f8:64:6d:3e:b7:67:23:4d:75:54:74:42:e6:a4: 5c:e6:42:a9:41:ca:86:0e:5d:b6:45:65:01:3f:b9: d7:c8:0b:94:8b:14:86:60:06:d6:a3:6b:7a:2d:13: 72:26:e4:b7:8b:d1:05:f8:0a:c5:f8:64:76:74:24: 91:bd:93:b1:40:14:6b:6a:eb:73:89:bb:3e:6b:30: 7b:ae:c6:8b:b1:e1:9a:69:6f:bf:03:47:98:17:7d: 27:fe:b2:3f:2b:9b:77:5f:63:11:65:3e:af:0a:2c: 3e:52:32:18:54:1a:0e:a0:96:72:7e:ad:1e:6c:b5: 37:ee:48:b2:ed:d5:bb:75:f3:58:22:8b:98:a7:92: fb:cb:e0:cf:46:ad:f1:37:ee:1c:ad:9d:0f:f8:09: 97:ba:4f:1d:fc:a4:2b:1a:48:8f:e8:ef:08:4f:b5: 7b:c7:a2:fc:6a:61:ff:cf:b2:e0:5f:20:6f:95:d8: 1a:f3:0f:6d:8e:ea:24:cd:09:ec:b0:03:39:a2:4d: c7:85:dd:78:e4:79:cc:69:90:c6:c8:b9:77:49:19: 4f:32:b3:b3:eb:95:50:7e:78:88:63:f1:29:a6:8d: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:67:0D:AC:E9:37:69:57:92:AE:A2:8E:A7:27:16:83:DC:01:EC:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.192.0/19 Signature Algorithm: sha256WithRSAEncryption 13:3e:39:13:bd:9f:c9:06:d6:66:40:67:27:3b:d1:eb:5b:81: 8b:31:7d:fe:7f:5a:9a:92:d5:76:ba:2c:ec:34:17:32:3a:96: 32:4f:39:51:9f:34:49:bb:99:c5:21:d2:88:9d:92:7d:d6:28: 41:88:97:92:5c:b6:b0:b8:e2:be:bd:7b:f5:11:fb:9a:46:18: d2:d4:f6:c0:2c:95:f3:e8:5c:f0:72:00:2f:6a:36:0f:10:61: fe:eb:4b:c4:dd:99:ab:5c:ca:ee:f5:0e:f9:46:79:fe:35:78: 48:7c:b1:73:99:0b:23:fa:77:0f:d0:d7:16:eb:d1:10:99:6f: 3e:f4:04:9c:83:60:67:35:86:b8:47:c0:a2:e6:3b:a2:3d:d5: 39:4d:08:ec:5d:a0:f1:8f:9a:dd:58:5c:af:98:97:5d:78:26: c2:7e:ae:e2:9b:aa:eb:f7:63:97:e6:ca:2c:a7:1e:ce:f5:97: 98:87:cd:9a:8f:b6:70:63:64:6d:07:28:aa:b3:32:a7:72:99: 3b:cf:a9:93:85:07:5c:5c:b3:a6:9d:77:13:1a:95:54:09:51: db:6b:cd:4e:5f:3f:ff:ce:ff:08:f9:27:3a:a2:a6:8b:31:70: 6c:1a:9e:87:9c:6f:9d:c9:41:1e:07:65:47:cf:85:65:7f:b4: 0d:fe:85:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbbb1YRSXj9D1z5KN7LaXuE9Byq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAzMTIxWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTI5MTAwMGE5ZWMwN2VhODUwNGEzYTNmNGIxMWMzZmEw MTgxYjhmMWM3YzFkZjkyMzUxMWYwODI0ZTg4MzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS4xPfgjAwHl3uBw5GHDpUXpam5yD9x4IjngXRoEv4ZG0+ t2cjTXVUdELmpFzmQqlByoYOXbZFZQE/udfIC5SLFIZgBtaja3otE3Im5LeL0QX4 CsX4ZHZ0JJG9k7FAFGtq63OJuz5rMHuuxoux4Zppb78DR5gXfSf+sj8rm3dfYxFl Pq8KLD5SMhhUGg6glnJ+rR5stTfuSLLt1bt181gii5inkvvL4M9GrfE37hytnQ/4 CZe6Tx38pCsaSI/o7whPtXvHovxqYf/PsuBfIG+V2BrzD22O6iTNCeywAzmiTceF 3XjkecxpkMbIuXdJGU8ys7PrlVB+eIhj8SmmjTXjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBmcNrOk3aVeSrqKOpycWg9wB7HYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkNTRmNTRhLTU5MzEtNGI0Mi1hZGZkLTk4MTVlYWExYzQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUNgMAwDQYJKoZIhvcNAQELBQADggEBABM+ORO9n8kG1mZAZyc70etbgYsx ff5/WpqS1Xa6LOw0FzI6ljJPOVGfNEm7mcUh0oidkn3WKEGIl5JctrC44r69e/UR +5pGGNLU9sAslfPoXPByAC9qNg8QYf7rS8Tdmatcyu71DvlGef41eEh8sXOZCyP6 dw/Q1xbr0RCZbz70BJyDYGc1hrhHwKLmO6I91TlNCOxdoPGPmt1YXK+Yl114JsJ+ ruKbquv3Y5fmyiynHs71l5iHzZqPtnBjZG0HKKqzMqdymTvPqZOFB1xcs6addxMa lVQJUdtrzU5fP//O/wj5JzqiposxcGwanoecb53JQR4HZUfPhWV/tA3+hSk= -----END CERTIFICATE-----Generated at Tue Nov 3 12:02:13 2026 by rpki-client