$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/529f0e1a-7620-45bf-8b48-555386b97be2.roa File: 529f0e1a-7620-45bf-8b48-555386b97be2.roa (raw, json) Hash identifier: BQFklh5QCxuGi4YoRyXXy0ZSwGw8hVp5AO/erMxS0Uk= Subject key identifier: 6E:D9:DA:83:C3:D8:9C:A8:76:3A:59:6C:D0:D7:BA:E1:E5:D6:51:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72A1744CD1FADAD848AA4F07D8C7CA04FBB71243 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/529f0e1a-7620-45bf-8b48-555386b97be2.roa Signing time: Sat 24 Oct 2026 00:21:15 +0000 ROA not before: Sat 24 Oct 2026 00:21:15 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.68.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a1:74:4c:d1:fa:da:d8:48:aa:4f:07:d8:c7:ca:04:fb:b7:12:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:21:15 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=935b2d41d6ff7544ab8ee3f34154a7ea2072b5532f84d643f55cfc33dabf009a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:2d:1a:d5:56:46:34:e5:97:b0:2d:e8:63: 03:04:6f:4b:cb:f9:fc:da:aa:56:de:82:33:b7:b0: 9c:88:21:00:af:35:88:60:32:a6:c3:b5:6c:e2:57: 52:c0:6c:93:53:ca:fa:97:d8:e1:c2:11:88:7a:9f: 77:19:7b:64:d5:17:14:74:70:dc:38:48:59:be:d8: 47:c9:b9:45:28:6e:54:ea:36:1d:f6:64:4d:f9:53: 73:35:dc:1a:3c:94:d0:38:01:7f:7a:98:d4:95:4d: 18:c1:4b:9c:3e:94:a4:f9:8a:ba:d6:79:21:09:2f: 79:a8:56:61:32:82:85:87:ae:7e:3d:c0:cd:32:d9: 91:28:76:db:5d:f0:10:3f:ab:27:e4:e4:1f:fe:d0: 81:35:87:80:77:7d:01:94:fc:5f:eb:3c:d5:a5:0a: 5b:7a:79:39:6d:63:5e:87:17:f7:17:2e:14:7f:f2: 09:87:68:79:93:81:42:63:88:23:a1:83:ec:74:46: e8:6b:b6:ce:74:f0:a6:89:32:c3:17:ba:68:13:81: 7e:b6:b0:c1:3e:9d:97:82:2a:a1:da:bd:72:da:f1: 26:7d:85:3c:ff:ec:dc:fb:9b:f7:fb:75:27:a6:ae: be:db:7a:8e:1f:32:bb:44:d6:1b:fb:21:af:d3:5f: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D9:DA:83:C3:D8:9C:A8:76:3A:59:6C:D0:D7:BA:E1:E5:D6:51:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/529f0e1a-7620-45bf-8b48-555386b97be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 47:f1:f8:b2:98:a6:37:d3:50:6d:4c:b5:2a:2f:23:7e:e6:5b: 0c:10:4a:60:f6:76:d6:10:0f:35:6d:65:8a:e5:d0:af:bd:b4: 20:9d:67:74:dd:5d:a5:7b:40:77:5b:1d:d6:a8:45:a3:8d:66: 9e:14:04:66:21:96:25:27:29:b1:68:bd:13:73:66:cb:63:a5: af:38:53:d6:cb:64:13:3c:cd:de:9a:03:31:92:a3:f6:71:93: ff:35:ce:8b:9c:70:fd:40:fd:e3:70:d2:9c:a3:38:72:c9:c3: bc:26:24:3d:c2:4a:f8:54:8b:88:0d:8f:90:91:86:1b:28:1d: 08:79:8d:62:e9:8e:3a:e5:b5:3b:b9:02:a4:bf:a7:39:18:bc: 27:50:05:f9:5b:3b:9c:05:62:34:7e:91:60:70:4e:81:49:df: 7a:51:7c:49:ed:ff:09:bb:15:cf:1e:76:22:de:02:0b:39:a5: 5a:a5:a6:2d:05:cf:de:41:9e:d0:54:04:24:c9:c9:ed:ba:b0: 39:08:bc:5c:2c:a4:af:ee:88:f7:a9:8c:34:ef:38:b2:08:c1: 02:ee:04:79:fb:fc:33:d2:17:48:8b:77:00:8e:6c:ad:6d:15: 3f:ba:d2:d4:52:47:0b:77:3f:71:a7:7d:57:09:2f:b4:94:91: f0:99:6f:29 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcqF0TNH62thIqk8H2MfKBPu3EkMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAyMTE1WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzViMmQ0MWQ2ZmY3NTQ0YWI4ZWUzZjM0MTU0YTdlYTIw NzJiNTUzMmY4NGQ2NDNmNTVjZmMzM2RhYmYwMDlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfTi0a1VZGNOWXsC3oYwMEb0vL+fzaqlbegjO3sJyIIQCv NYhgMqbDtWziV1LAbJNTyvqX2OHCEYh6n3cZe2TVFxR0cNw4SFm+2EfJuUUoblTq Nh32ZE35U3M13Bo8lNA4AX96mNSVTRjBS5w+lKT5irrWeSEJL3moVmEygoWHrn49 wM0y2ZEodttd8BA/qyfk5B/+0IE1h4B3fQGU/F/rPNWlClt6eTltY16HF/cXLhR/ 8gmHaHmTgUJjiCOhg+x0Ruhrts508KaJMsMXumgTgX62sME+nZeCKqHavXLa8SZ9 hTz/7Nz7m/f7dSemrr7beo4fMrtE1hv7Ia/TXyhJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbtnag8PYnKh2Olls0Ne64eXWUUgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyOWYwZTFhLTc2MjAtNDViZi04YjQ4LTU1NTM4NmI5N2JlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4RDANBgkqhkiG9w0BAQsFAAOCAQEAR/H4spimN9NQbUy1Ki8jfuZbDBBK YPZ21hAPNW1liuXQr720IJ1ndN1dpXtAd1sd1qhFo41mnhQEZiGWJScpsWi9E3Nm y2OlrzhT1stkEzzN3poDMZKj9nGT/zXOi5xw/UD943DSnKM4csnDvCYkPcJK+FSL iA2PkJGGGygdCHmNYumOOuW1O7kCpL+nORi8J1AF+Vs7nAViNH6RYHBOgUnfelF8 Se3/CbsVzx52It4CCzmlWqWmLQXP3kGe0FQEJMnJ7bqwOQi8XCykr+6I96mMNO84 sgjBAu4Eefv8M9IXSIt3AI5srW0VP7rS1FJHC3c/cad9VwkvtJSR8JlvKQ== -----END CERTIFICATE-----Generated at Tue Nov 3 22:37:33 2026 by rpki-client