$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c69a2e-633e-4ef2-82c1-548d8d35456f.roa File: 33c69a2e-633e-4ef2-82c1-548d8d35456f.roa (raw, json) Hash identifier: p/Egl4NpDNOe+8wAdRqWV+CLYkg3kJBa7NaZRM56s+Q= Subject key identifier: E9:7C:35:45:F4:43:44:61:FC:D2:AF:D3:DF:CA:EB:39:1D:01:52:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52192535D71FE452346DF6108557AA1A872B6326 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c69a2e-633e-4ef2-82c1-548d8d35456f.roa Signing time: Fri 16 Oct 2026 00:31:47 +0000 ROA not before: Fri 16 Oct 2026 00:31:47 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 203.110.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:19:25:35:d7:1f:e4:52:34:6d:f6:10:85:57:aa:1a:87:2b:63:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:31:47 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=eaccca64e28ff48bc22af5ab68cc73913de4c31cd6ba8f8a71e0636984bb85f4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:e6:77:60:92:f4:a0:92:84:61:c6:16:e4: f8:9c:80:c2:73:fe:62:95:12:42:58:d3:c2:6e:7a: 1d:34:56:47:ae:c4:ea:13:73:91:10:cd:79:81:7d: 12:a1:4d:50:d1:4c:19:2c:83:ea:e5:f9:64:94:32: 95:aa:b3:87:88:43:91:67:1b:89:37:ee:d2:8d:ef: d3:7e:f8:db:7d:9e:40:a1:9e:b2:8f:8a:ab:77:a2: f1:16:ea:f1:b9:9a:ce:b2:5d:bb:99:98:c8:45:57: fa:e6:17:55:82:ad:7c:86:17:1b:1d:ce:b9:4d:ff: 89:20:3a:51:64:c3:8b:75:af:ff:e1:da:15:24:2e: 9d:33:62:8d:b5:77:d2:f6:92:d6:73:71:fe:70:bd: 49:c1:a3:45:81:8d:c0:b2:d0:2a:b3:8f:f6:a9:36: 36:c4:d8:df:dd:a9:c4:82:4f:2b:66:fd:87:7d:66: 6f:32:79:03:2b:52:ae:07:a3:70:53:17:13:37:7b: 42:1c:08:39:1a:42:90:ec:90:af:2e:a4:4e:f6:f7: 71:6e:27:19:53:12:33:c3:fc:a0:f5:49:7d:49:3b: c6:cb:99:6c:0f:63:98:16:47:30:b8:1f:f8:91:70: 27:0b:36:e0:d2:90:e9:ba:93:b5:e6:b2:96:ef:9b: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7C:35:45:F4:43:44:61:FC:D2:AF:D3:DF:CA:EB:39:1D:01:52:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c69a2e-633e-4ef2-82c1-548d8d35456f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.110.204.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:e5:95:c7:c8:26:2c:bf:4e:93:11:f9:39:66:4d:db:f9:81: 3a:92:f8:3f:96:81:77:73:5d:4c:2e:62:ea:69:e1:80:1a:85: c4:23:0c:df:97:bf:8b:ac:1c:76:80:68:73:ba:1b:47:e5:78: 84:6b:c7:b9:f1:76:8f:18:69:28:cc:b3:eb:9f:cc:1f:0d:cd: f8:02:91:7e:f6:40:96:31:1e:82:7b:e4:60:04:63:15:19:d1: 3d:24:09:8a:1a:ed:4c:2f:a6:16:57:3b:22:06:ae:84:6b:08: 79:57:49:c6:6f:50:d7:42:1c:2b:bf:de:a8:2f:9c:e6:2d:ff: 53:9f:4d:27:58:65:ba:39:95:6c:26:46:51:71:29:f6:c9:46: 8d:e4:7c:94:67:8e:f7:43:7b:c7:10:a2:cc:50:87:ba:a2:00: 5b:b5:9e:3a:75:fc:54:4d:f9:33:09:6b:67:16:20:8a:4c:a7: 4c:0c:90:e0:ed:21:81:7d:06:16:0f:4f:ae:14:df:fe:01:34: b5:41:79:ee:cf:95:df:14:29:54:44:ce:3b:72:cf:bb:07:cd: a4:ce:41:ab:0d:44:56:b9:89:c5:cd:f9:c5:71:82:f0:9c:bc: 70:c7:e5:69:40:e0:ac:dc:56:bc:cf:06:a0:47:e8:72:da:8c: 60:3d:ab:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUhklNdcf5FI0bfYQhVeqGocrYyYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAzMTQ3WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWNjY2E2NGUyOGZmNDhiYzIyYWY1YWI2OGNjNzM5MTNk ZTRjMzFjZDZiYThmOGE3MWUwNjM2OTg0YmI4NWY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2XeZ3YJL0oJKEYcYW5PicgMJz/mKVEkJY08Jueh00Vkeu xOoTc5EQzXmBfRKhTVDRTBksg+rl+WSUMpWqs4eIQ5FnG4k37tKN79N++Nt9nkCh nrKPiqt3ovEW6vG5ms6yXbuZmMhFV/rmF1WCrXyGFxsdzrlN/4kgOlFkw4t1r//h 2hUkLp0zYo21d9L2ktZzcf5wvUnBo0WBjcCy0Cqzj/apNjbE2N/dqcSCTytm/Yd9 Zm8yeQMrUq4Ho3BTFxM3e0IcCDkaQpDskK8upE7293FuJxlTEjPD/KD1SX1JO8bL mWwPY5gWRzC4H/iRcCcLNuDSkOm6k7Xmspbvm8XRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6Xw1RfRDRGH80q/T38rrOR0BUjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzYzY5YTJlLTYzM2UtNGVmMi04MmMxLTU0OGQ4ZDM1NDU2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLbswwDQYJKoZIhvcNAQELBQADggEBAD3llcfIJiy/TpMR+TlmTdv5gTqS +D+WgXdzXUwuYupp4YAahcQjDN+Xv4usHHaAaHO6G0fleIRrx7nxdo8YaSjMs+uf zB8NzfgCkX72QJYxHoJ75GAEYxUZ0T0kCYoa7UwvphZXOyIGroRrCHlXScZvUNdC HCu/3qgvnOYt/1OfTSdYZbo5lWwmRlFxKfbJRo3kfJRnjvdDe8cQosxQh7qiAFu1 njp1/FRN+TMJa2cWIIpMp0wMkODtIYF9BhYPT64U3/4BNLVBee7Pld8UKVREzjty z7sHzaTOQasNRFa5icXN+cVxgvCcvHDH5WlA4KzcVrzPBqBH6HLajGA9q98= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:10 2026 by rpki-client