$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa File: 499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa (raw, json) Hash identifier: ieMHL5vHwp/sRuqv+89kyyK0QMzzWbfObjGYqlfc0ME= Subject key identifier: AD:AA:4A:78:13:DC:8A:DC:CB:D1:B3:68:23:FE:8F:A5:EE:FE:BC:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2826A8AFF319D833D45FF68318AF08B80BDFF3BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa Signing time: Mon 26 Oct 2026 00:31:33 +0000 ROA not before: Mon 26 Oct 2026 00:31:33 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:26:a8:af:f3:19:d8:33:d4:5f:f6:83:18:af:08:b8:0b:df:f3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:31:33 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=f6d6e6ed63510ca3836c811443e83bdb515698d1701ae4cbea6c8c393297faeb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:ea:a8:a8:37:dc:b2:2d:e7:ad:4d:69:1b: 38:89:0c:ea:c5:89:78:98:1b:10:ea:fa:73:3b:f5: 9f:4a:b8:15:92:e0:ae:c6:76:07:bd:6f:2f:1d:fb: 05:be:b2:95:22:38:ba:cb:ad:bc:8b:7a:e2:8e:ce: 32:84:76:61:44:5e:43:86:95:74:2b:69:1f:0d:d7: 79:6a:c9:40:8c:20:ba:f3:3e:53:68:9c:4c:8b:9d: f5:11:88:d7:3c:3f:74:14:10:e0:1d:f5:df:a5:99: 71:fb:1c:69:81:f7:08:89:a3:91:71:c2:b4:67:b6: bc:1b:a0:07:4d:df:b0:f4:ce:00:f2:55:38:30:8e: 71:7a:65:c5:ee:65:bc:63:61:fe:01:10:32:51:1f: 98:c9:97:a4:84:e8:8d:2f:be:db:70:13:19:94:5b: d1:02:35:fb:a3:9e:5f:ea:e4:37:b5:32:be:a9:3b: 9b:71:c0:d3:65:2f:63:16:3c:d5:ad:92:b4:1f:03: bb:67:bf:bf:4f:30:83:55:3f:7d:1c:89:b7:cf:a7: bc:9e:16:b3:bb:75:da:d8:3e:59:0a:50:c2:73:7e: b1:a9:b3:cb:f2:fb:51:2e:88:4c:65:a0:09:a6:7f: 34:a8:20:4b:e5:2a:88:89:48:2c:b9:dd:8e:4a:99: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:4A:78:13:DC:8A:DC:CB:D1:B3:68:23:FE:8F:A5:EE:FE:BC:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.185.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ea:62:62:dd:a8:b0:98:f6:a3:c5:c1:03:af:0e:93:30:a6: a6:5b:aa:76:4e:99:54:9f:67:ea:6e:58:49:4a:ae:7c:3f:3c: e2:57:a1:9b:ac:10:e6:75:91:73:a4:4b:c6:b1:5a:62:88:b3: 96:c2:8d:76:5b:32:49:96:b1:76:09:4f:a5:87:a4:ae:c6:10: 6a:fb:07:29:6b:72:26:6b:f3:79:86:de:fc:60:65:11:68:39: 5c:f5:20:4c:ed:58:89:cb:07:5a:bc:a7:35:8f:54:36:78:e2: c4:b8:51:63:fe:0b:67:b1:26:2b:74:9a:b0:6d:74:48:3f:51: fb:87:dd:c1:fe:71:8c:08:68:c1:2a:ab:08:1a:ba:81:ca:42: 35:23:de:bc:4b:b2:51:77:6c:cb:69:2b:96:49:05:a1:66:d5: 71:00:75:60:4a:16:38:c3:db:63:da:f5:87:73:df:59:38:8b: 75:82:cc:d7:a0:17:57:3a:07:49:22:f5:91:a8:99:d2:ba:99: 19:af:e3:b8:c7:e1:63:c7:c8:ad:6f:f8:91:4c:c2:f9:03:f0: f0:7f:d8:79:d8:3c:9b:ff:d8:6b:44:45:29:9a:c1:0f:bd:e1: 9f:1d:8e:73:66:c7:21:8d:92:59:07:29:bd:5b:36:6e:0f:eb: d4:3d:f1:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKCaor/MZ2DPUX/aDGK8IuAvf874wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAzMTMzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmQ2ZTZlZDYzNTEwY2EzODM2YzgxMTQ0M2U4M2JkYjUx NTY5OGQxNzAxYWU0Y2JlYTZjOGMzOTMyOTdmYWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+iuqoqDfcsi3nrU1pGziJDOrFiXiYGxDq+nM79Z9KuBWS 4K7Gdge9by8d+wW+spUiOLrLrbyLeuKOzjKEdmFEXkOGlXQraR8N13lqyUCMILrz PlNonEyLnfURiNc8P3QUEOAd9d+lmXH7HGmB9wiJo5FxwrRntrwboAdN37D0zgDy VTgwjnF6ZcXuZbxjYf4BEDJRH5jJl6SE6I0vvttwExmUW9ECNfujnl/q5De1Mr6p O5txwNNlL2MWPNWtkrQfA7tnv79PMINVP30cibfPp7yeFrO7ddrYPlkKUMJzfrGp s8vy+1EuiExloAmmfzSoIEvlKoiJSCy53Y5KmWB5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrapKeBPcitzL0bNoI/6Ppe7+vO8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5OWEyN2YwLWZiMzMtNGUzOC1iY2M4LWIzZTU0NmVjM2ZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKBbkwDQYJKoZIhvcNAQELBQADggEBAGLqYmLdqLCY9qPFwQOvDpMwpqZb qnZOmVSfZ+puWElKrnw/POJXoZusEOZ1kXOkS8axWmKIs5bCjXZbMkmWsXYJT6WH pK7GEGr7BylrciZr83mG3vxgZRFoOVz1IEztWInLB1q8pzWPVDZ44sS4UWP+C2ex Jit0mrBtdEg/UfuH3cH+cYwIaMEqqwgauoHKQjUj3rxLslF3bMtpK5ZJBaFm1XEA dWBKFjjD22Pa9Ydz31k4i3WCzNegF1c6B0ki9ZGomdK6mRmv47jH4WPHyK1v+JFM wvkD8PB/2HnYPJv/2GtERSmawQ+94Z8djnNmxyGNklkHKb1bNm4P69Q98R8= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:40 2026 by rpki-client