$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e062113-782f-4541-bd8d-8197eec8aae6.roa File: 3e062113-782f-4541-bd8d-8197eec8aae6.roa (raw, json) Hash identifier: SxuUYvX3GajSvAJuSeOSbytQDNwulpyUp3Aq7Y9Z+3k= Subject key identifier: 5D:D9:7A:EE:A5:B2:80:0B:BD:00:9E:A1:6A:D2:BA:64:AD:8D:DD:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12A5C267032931E4BB824CDE705C64937726A404 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e062113-782f-4541-bd8d-8197eec8aae6.roa Signing time: Sun 11 Oct 2026 00:07:39 +0000 ROA not before: Sun 11 Oct 2026 00:07:39 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 13.144.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a5:c2:67:03:29:31:e4:bb:82:4c:de:70:5c:64:93:77:26:a4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 00:07:39 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=d49845fd95677692f57c5e810f511595852c860de1a23e971f601256256f38c7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:78:e1:aa:7d:11:45:b8:a0:b6:b7:69:c7: 09:29:0d:16:95:ee:66:ca:b1:89:b3:d6:3c:17:7a: 39:76:4a:d3:90:ea:3a:99:d2:7e:ad:c8:4c:2a:29: 5a:af:3e:29:4c:9e:1c:9a:43:56:f0:da:4a:5b:1b: a3:f4:04:5d:41:a6:b6:6e:17:bc:59:2a:89:02:a2: 66:9f:45:c9:f4:98:20:1f:ed:80:f7:65:1b:f9:91: d1:49:33:7a:05:b3:dd:5e:10:69:ed:39:1e:6a:ec: 18:58:9d:76:43:d1:75:e2:70:f6:76:3f:3d:b4:22: 3c:ff:1a:79:d3:b2:fb:6f:7e:da:9e:e8:eb:97:d9: 93:07:1a:1b:2f:3a:fb:86:8a:57:7a:99:31:fe:35: 06:cb:15:f0:8f:81:53:53:b2:f4:7b:25:62:57:f7: 3a:e0:d5:40:36:df:85:c9:52:80:d1:18:0b:b5:33: 78:82:5d:4e:48:e1:5c:1a:93:be:c6:c6:1b:ef:4e: e0:fe:81:5c:1d:47:3d:a5:a9:48:66:fd:f6:9b:3d: f2:bc:87:81:84:06:ba:fb:59:09:7d:ac:30:90:cd: e2:61:16:93:39:47:5e:11:07:66:25:ca:09:11:f2: 26:74:7c:68:bf:83:2d:c5:f6:1d:39:45:d6:5b:68: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D9:7A:EE:A5:B2:80:0B:BD:00:9E:A1:6A:D2:BA:64:AD:8D:DD:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e062113-782f-4541-bd8d-8197eec8aae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.144.0.0/20 Signature Algorithm: sha256WithRSAEncryption a5:08:cf:bd:bf:2a:c0:61:2d:f9:9b:0b:a7:f3:95:40:71:ad: 97:61:8e:b1:26:4d:73:c5:d2:26:bf:ee:65:86:76:0f:0b:d1: f8:55:ed:96:1f:58:da:16:98:bc:6b:b6:ec:bb:f5:57:9a:2a: e7:b3:71:56:3f:41:42:ee:1a:a1:95:24:2a:0f:ee:03:df:f0: 31:a7:65:3f:58:b9:33:89:44:49:62:f0:4e:58:65:81:71:de: a2:9c:66:ec:b7:fa:ce:bf:cc:2e:2d:32:1d:cc:6c:44:02:ee: fe:ed:a4:77:1a:0a:60:94:3e:59:8f:ba:53:49:ee:b8:7d:6f: 28:cc:b7:57:44:ff:20:97:dc:db:00:46:c2:4c:f2:92:af:7c: 38:af:10:f5:39:98:d3:11:6e:a0:4e:37:c1:d2:6f:01:1f:9d: d2:a6:c8:1d:de:5a:3b:db:cd:f3:3e:dd:86:c2:d5:86:0e:6c: be:f1:8f:ac:11:c0:02:58:03:34:a9:d3:60:be:b6:96:de:85: b1:8b:56:24:82:93:b0:03:46:f0:64:91:38:24:bc:e7:29:cc: 1d:89:0d:ee:6e:b9:d3:e5:91:4a:86:c8:e7:b1:e6:31:94:5b: 0f:55:02:ba:6b:85:93:f4:07:22:4f:f6:08:7e:04:9a:07:80: 4f:0d:a4:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEqXCZwMpMeS7gkzecFxkk3cmpAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAwNzM5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDk4NDVmZDk1Njc3NjkyZjU3YzVlODEwZjUxMTU5NTg1 MmM4NjBkZTFhMjNlOTcxZjYwMTI1NjI1NmYzOGM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS8njhqn0RRbigtrdpxwkpDRaV7mbKsYmz1jwXejl2StOQ 6jqZ0n6tyEwqKVqvPilMnhyaQ1bw2kpbG6P0BF1BprZuF7xZKokComafRcn0mCAf 7YD3ZRv5kdFJM3oFs91eEGntOR5q7BhYnXZD0XXicPZ2Pz20Ijz/GnnTsvtvftqe 6OuX2ZMHGhsvOvuGild6mTH+NQbLFfCPgVNTsvR7JWJX9zrg1UA234XJUoDRGAu1 M3iCXU5I4Vwak77GxhvvTuD+gVwdRz2lqUhm/fabPfK8h4GEBrr7WQl9rDCQzeJh FpM5R14RB2YlygkR8iZ0fGi/gy3F9h05RdZbaM/TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXdl67qWygAu9AJ6hatK6ZK2N3ZMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMDYyMTEzLTc4MmYtNDU0MS1iZDhkLTgxOTdlZWM4YWFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNkAAwDQYJKoZIhvcNAQELBQADggEBAKUIz72/KsBhLfmbC6fzlUBxrZdh jrEmTXPF0ia/7mWGdg8L0fhV7ZYfWNoWmLxrtuy79VeaKuezcVY/QULuGqGVJCoP 7gPf8DGnZT9YuTOJREli8E5YZYFx3qKcZuy3+s6/zC4tMh3MbEQC7v7tpHcaCmCU PlmPulNJ7rh9byjMt1dE/yCX3NsARsJM8pKvfDivEPU5mNMRbqBON8HSbwEfndKm yB3eWjvbzfM+3YbC1YYObL7xj6wRwAJYAzSp02C+tpbehbGLViSCk7ADRvBkkTgk vOcpzB2JDe5uudPlkUqGyOex5jGUWw9VArprhZP0ByJP9gh+BJoHgE8NpN8= -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:06 2026 by rpki-client