$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa File: 5238a6c5-a106-4b94-9f46-2c619db863c6.roa (raw, json) Hash identifier: zWxE46NK/2RXr6A6R/w2uUNI8ootNEbbkIYNot9JgZA= Subject key identifier: E1:C9:40:E9:50:57:63:F4:E5:E3:DD:2E:8E:D7:A3:02:22:34:F6:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A617643899BD75A0361489DA10B11E02E3B0AD7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa Signing time: Fri 23 Oct 2026 00:20:06 +0000 ROA not before: Fri 23 Oct 2026 00:20:06 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 107.150.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:61:76:43:89:9b:d7:5a:03:61:48:9d:a1:0b:11:e0:2e:3b:0a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:20:06 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=7f8bc829172f1910e8b8c0a70bcd9bc961a57019dd5889ee1b2d25e8ddd24c57, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:f9:6b:b3:21:b3:5a:1e:90:5b:36:1a:51: 0e:34:c5:ad:17:a9:72:2a:9b:96:52:d0:17:ed:bb: 25:c2:1e:26:89:2d:0f:2c:47:12:66:fc:a6:11:42: 8c:cd:a0:9f:c2:cc:c2:c6:8d:a6:93:9f:83:92:ce: c6:5b:bd:b5:08:29:b4:f6:da:63:42:36:d1:c3:aa: e9:49:04:b2:f7:3f:0d:ba:09:46:ca:6e:03:f5:fd: 80:4c:c7:9e:cb:0f:ef:ac:6a:b0:bc:c3:d0:f3:28: 76:3c:17:ca:ae:6a:40:d1:ae:64:9f:1a:38:c2:ff: cb:4e:00:6d:03:b5:8b:b9:ba:ef:9f:82:af:b5:2f: 54:4c:89:b0:cc:a7:42:22:6f:da:22:9b:35:83:d2: c9:05:25:e3:13:5b:a1:f4:3b:f0:98:49:ca:e7:9d: 22:46:62:a3:74:4e:30:f8:c1:60:ce:6c:a1:bc:15: 66:00:37:04:0c:92:f7:22:eb:1f:18:30:13:e3:13: ab:32:c7:b0:01:94:ef:64:ed:3c:0b:18:de:ea:c4: 9a:f9:97:a9:3e:5b:d7:c9:ae:69:df:3b:d6:76:17: ac:1c:bb:93:17:89:e7:5d:1f:c2:41:69:15:e5:a6: 7a:1f:7b:1e:82:f4:cc:60:71:e4:13:91:51:a3:14: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:40:E9:50:57:63:F4:E5:E3:DD:2E:8E:D7:A3:02:22:34:F6:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.150.192.0/19 Signature Algorithm: sha256WithRSAEncryption 97:e0:5b:ef:ef:15:a9:2f:52:3c:b2:9d:60:5a:52:48:fd:58: 44:26:90:59:95:c8:17:62:b0:9e:b5:a3:42:ce:76:f3:02:e4: ac:e8:b0:37:54:03:af:c5:e2:26:93:d7:53:44:d8:95:9f:3a: bd:f1:35:7e:ce:01:b3:8e:9d:60:76:5c:5d:2c:ab:6b:b7:d4: 35:7c:d2:de:a6:7b:3d:76:63:a6:e9:d6:63:87:ed:66:70:ef: 72:e0:42:52:84:ac:72:cd:72:c4:2e:66:b5:12:cf:96:5f:7d: ec:91:ba:cf:6c:a4:28:aa:40:a8:a5:ec:a2:38:6b:5f:99:cc: 7c:26:62:fa:5d:fd:3f:78:09:8f:63:78:c5:b3:a5:21:35:12: 41:82:75:77:c7:aa:a0:66:3a:3c:20:78:d5:17:d0:4e:93:ce: 55:4b:d4:55:27:df:98:65:ec:b9:8d:59:f4:07:02:69:ee:86: 96:73:55:12:6d:89:d2:3c:e8:a5:ac:de:39:26:4c:d2:a6:e6: ce:36:fc:87:1e:3d:f4:63:29:36:a3:7e:f6:64:50:b0:9c:00: 0d:ab:36:01:63:3e:75:64:71:7f:06:35:4d:e9:66:16:ee:ef: d2:e2:b2:61:d4:08:b5:39:08:28:5b:05:f8:fb:ff:ff:fb:ce: 1a:ec:a7:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSmF2Q4mb11oDYUidoQsR4C47CtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAyMDA2WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjhiYzgyOTE3MmYxOTEwZThiOGMwYTcwYmNkOWJjOTYx YTU3MDE5ZGQ1ODg5ZWUxYjJkMjVlOGRkZDI0YzU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoAPlrsyGzWh6QWzYaUQ40xa0XqXIqm5ZS0BftuyXCHiaJ LQ8sRxJm/KYRQozNoJ/CzMLGjaaTn4OSzsZbvbUIKbT22mNCNtHDqulJBLL3Pw26 CUbKbgP1/YBMx57LD++sarC8w9DzKHY8F8quakDRrmSfGjjC/8tOAG0DtYu5uu+f gq+1L1RMibDMp0Iib9oimzWD0skFJeMTW6H0O/CYScrnnSJGYqN0TjD4wWDObKG8 FWYANwQMkvci6x8YMBPjE6syx7ABlO9k7TwLGN7qxJr5l6k+W9fJrmnfO9Z2F6wc u5MXieddH8JBaRXlpnofex6C9MxgceQTkVGjFGebAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4clA6VBXY/Tl490ujtejAiI09skwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyMzhhNmM1LWExMDYtNGI5NC05ZjQ2LTJjNjE5ZGI4NjNjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVrlsAwDQYJKoZIhvcNAQELBQADggEBAJfgW+/vFakvUjyynWBaUkj9WEQm kFmVyBdisJ61o0LOdvMC5KzosDdUA6/F4iaT11NE2JWfOr3xNX7OAbOOnWB2XF0s q2u31DV80t6mez12Y6bp1mOH7WZw73LgQlKErHLNcsQuZrUSz5ZffeyRus9spCiq QKil7KI4a1+ZzHwmYvpd/T94CY9jeMWzpSE1EkGCdXfHqqBmOjwgeNUX0E6TzlVL 1FUn35hl7LmNWfQHAmnuhpZzVRJtidI86KWs3jkmTNKm5s42/IcePfRjKTajfvZk ULCcAA2rNgFjPnVkcX8GNU3pZhbu79LismHUCLU5CChbBfj7///7zhrsp4Q= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:53 2026 by rpki-client