$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c92727-5476-4ca8-b0f5-f9a7077dae49.roa File: 48c92727-5476-4ca8-b0f5-f9a7077dae49.roa (raw, json) Hash identifier: /QFAlRuIUsoWF1rlrQ6w5w0XT/LudqoX/ZLeBCGZC4s= Subject key identifier: 4D:4C:2C:74:86:C1:39:1B:8B:D4:E2:ED:1F:6D:2A:9F:0C:11:F3:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 582735D63EF0F4FE11767D61D57C27096B932992 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c92727-5476-4ca8-b0f5-f9a7077dae49.roa Signing time: Sun 18 Oct 2026 00:31:10 +0000 ROA not before: Sun 18 Oct 2026 00:31:10 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:27:35:d6:3e:f0:f4:fe:11:76:7d:61:d5:7c:27:09:6b:93:29:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 18 00:31:10 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=9788340b62d30ec44adaaeded4d3a8edd43ea9ae3887417851a738939b1057ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:0a:eb:81:74:b2:59:27:fc:ac:35:97:64: e6:6a:99:ab:b2:0b:ef:d2:9e:a7:ba:ae:37:9f:92: 27:40:c4:a0:b2:74:7d:e3:ea:a0:86:cf:f0:55:79: d1:0e:e3:80:3f:1e:e8:38:dd:3e:d4:6a:f7:a0:9e: c5:4e:3d:5d:ba:c9:db:11:8a:6f:95:cb:6a:26:a7: 50:6a:0f:87:e9:b4:a7:40:dc:28:32:00:e6:00:4e: b3:59:21:f7:06:80:03:da:f3:52:70:22:1b:27:69: 6b:df:70:c5:95:19:e8:13:43:0f:0b:43:0c:8e:06: 5a:7f:69:fe:e4:75:c0:12:c0:e4:1b:db:16:7d:48: 8a:a0:9e:02:f2:44:f5:44:79:6a:58:11:1c:3f:bd: cc:66:60:cf:81:73:a1:da:94:af:be:8a:12:b3:32: fa:60:84:06:65:ee:4d:eb:f2:54:79:c8:1b:32:a8: 65:ff:c1:14:bd:e6:38:cc:d2:8c:0e:be:bf:9a:c1: f1:ab:55:1a:33:bf:23:ac:ad:ea:96:f0:7d:7b:ec: e4:4a:a3:12:44:7c:b5:5f:70:3c:eb:0e:56:ab:37: 3f:2b:b3:d3:2d:6a:8c:f2:a8:ba:66:e8:3b:25:4b: d9:64:11:71:54:6e:dd:b1:a7:78:b7:f9:b6:ff:a9: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:2C:74:86:C1:39:1B:8B:D4:E2:ED:1F:6D:2A:9F:0C:11:F3:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c92727-5476-4ca8-b0f5-f9a7077dae49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.27.0/24 Signature Algorithm: sha256WithRSAEncryption d3:d2:0a:15:fa:f1:45:39:b0:bb:76:dd:67:42:b9:39:c8:f1: d4:56:5c:77:59:96:d2:1f:b9:af:d6:52:05:5d:fa:da:52:34: 65:d5:5a:f3:0b:27:52:af:dc:50:51:1c:29:91:54:0d:79:f6: 6f:46:87:0c:62:07:ca:ca:17:dd:46:80:ca:b6:bf:f1:5f:2a: b9:96:ae:da:ad:9b:ff:28:8a:50:76:3d:76:99:e0:22:bb:81: 7e:9e:08:6a:4e:15:39:de:77:3f:01:74:fc:16:1f:31:e8:ce: 31:e0:4d:86:d4:9c:43:61:56:cc:e5:92:85:73:32:d2:25:56: b7:65:1f:06:39:19:62:93:ba:cd:1b:8a:11:0a:31:ee:87:0e: a7:df:eb:36:4c:60:de:6b:a8:0c:f1:05:f9:47:28:ad:17:f9: f1:fb:1f:03:31:a6:c4:b3:20:66:09:1f:06:af:57:8f:a8:19: bf:02:4a:45:3d:b9:a3:f8:d8:31:3a:4e:ee:d0:8a:1f:38:a6: 0d:7b:5f:c6:84:33:ba:52:0d:56:64:6c:2a:07:52:61:96:9e: 29:bf:43:ca:57:03:f0:85:fe:0f:fc:66:d8:cc:a5:92:6d:c6: be:00:c1:3d:df:1d:71:61:ac:4c:82:2d:c6:7e:da:ed:fe:27: fe:10:75:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWCc11j7w9P4Rdn1h1XwnCWuTKZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE4MDAzMTEwWhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Nzg4MzQwYjYyZDMwZWM0NGFkYWFlZGVkNGQzYThlZGQ0 M2VhOWFlMzg4NzQxNzg1MWE3Mzg5MzliMTA1N2ZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+CArrgXSyWSf8rDWXZOZqmauyC+/Snqe6rjefkidAxKCy dH3j6qCGz/BVedEO44A/Hug43T7UavegnsVOPV26ydsRim+Vy2omp1BqD4fptKdA 3CgyAOYATrNZIfcGgAPa81JwIhsnaWvfcMWVGegTQw8LQwyOBlp/af7kdcASwOQb 2xZ9SIqgngLyRPVEeWpYERw/vcxmYM+Bc6HalK++ihKzMvpghAZl7k3r8lR5yBsy qGX/wRS95jjM0owOvr+awfGrVRozvyOsreqW8H177ORKoxJEfLVfcDzrDlarNz8r s9MtaozyqLpm6DslS9lkEXFUbt2xp3i3+bb/qb9VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTUwsdIbBORuL1OLtH20qnwwR84wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4YzkyNzI3LTU0NzYtNGNhOC1iMGY1LWY5YTcwNzdkYWU0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWxswDQYJKoZIhvcNAQELBQADggEBANPSChX68UU5sLt23WdCuTnI8dRW XHdZltIfua/WUgVd+tpSNGXVWvMLJ1Kv3FBRHCmRVA159m9GhwxiB8rKF91GgMq2 v/FfKrmWrtqtm/8oilB2PXaZ4CK7gX6eCGpOFTnedz8BdPwWHzHozjHgTYbUnENh VszlkoVzMtIlVrdlHwY5GWKTus0bihEKMe6HDqff6zZMYN5rqAzxBflHKK0X+fH7 HwMxpsSzIGYJHwavV4+oGb8CSkU9uaP42DE6Tu7Qih84pg17X8aEM7pSDVZkbCoH UmGWnim/Q8pXA/CF/g/8ZtjMpZJtxr4AwT3fHXFhrEyCLcZ+2u3+J/4QdeM= -----END CERTIFICATE-----Generated at Wed Nov 4 05:56:43 2026 by rpki-client