$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a2b218-2a29-4964-b153-565ac1d505cf.roa File: 52a2b218-2a29-4964-b153-565ac1d505cf.roa (raw, json) Hash identifier: bwI8dY375+EPA9BlTKquWcJCjBWh02tZ3J/BvfQbMbE= Subject key identifier: 83:65:0A:78:AA:09:A8:14:5F:F2:68:3C:3D:D9:E0:C7:E1:A1:09:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C9B73E298594FFDC5ABEC5A3085B55E8E567D08 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a2b218-2a29-4964-b153-565ac1d505cf.roa Signing time: Tue 13 Oct 2026 00:20:05 +0000 ROA not before: Tue 13 Oct 2026 00:20:05 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.59.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9b:73:e2:98:59:4f:fd:c5:ab:ec:5a:30:85:b5:5e:8e:56:7d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:20:05 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=9609fa1997e452eabc6b06bb824e0eff05963ee2cdcf15d2182f8c84685e9128, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:cc:4d:56:ec:b3:bf:c6:ae:7b:f4:ac:a6: 28:7f:1f:8b:c4:10:61:0a:25:a7:e1:4f:d1:d3:c8: 91:d8:90:a2:a7:4b:91:c1:eb:2c:b4:9b:d9:1c:db: 57:d7:c4:83:f2:5e:59:46:4d:84:6a:90:7c:20:3b: e6:a7:ef:2b:14:3e:98:46:e0:5e:cd:2d:d6:23:f5: 21:7c:42:76:87:a1:2e:68:74:b3:29:ee:71:ba:c2: 65:e8:58:30:65:21:8e:4f:a5:17:bc:dd:0e:f0:35: bf:ab:93:ce:c4:58:9d:a2:2c:fe:90:f9:bd:41:1e: 84:29:4a:d7:7c:35:ab:a6:49:13:34:8c:6d:2e:27: cb:f1:52:ad:89:5a:bf:59:60:e2:4a:a9:23:86:d9: 7c:76:f8:56:e6:f9:f5:ed:40:12:e3:0e:67:42:5f: 52:1e:d1:b0:73:c1:12:d9:1b:82:52:76:74:3c:5f: 8e:8c:96:ad:cb:86:5e:9a:55:4a:e1:7c:8f:73:16: 86:63:71:e0:74:ad:54:66:6f:0b:f3:2d:39:68:9e: de:f9:e2:8a:53:ac:68:1b:2c:c4:98:ad:2d:92:eb: e7:8e:6d:a2:0e:0b:88:7d:74:83:31:9e:ab:ea:4f: f9:c3:82:2f:4f:6a:61:ce:7b:52:8b:c9:82:50:61: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:65:0A:78:AA:09:A8:14:5F:F2:68:3C:3D:D9:E0:C7:E1:A1:09:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a2b218-2a29-4964-b153-565ac1d505cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.59.0.0/18 Signature Algorithm: sha256WithRSAEncryption 8f:2a:08:4c:26:20:ba:95:77:96:10:61:4c:78:ec:a3:cf:28: 0a:63:3f:92:7f:d8:0e:59:81:9d:a3:fc:70:33:89:fd:9b:ac: 6d:75:30:b8:8a:45:3f:ed:2d:55:0a:a5:7c:e8:94:06:8a:64: 75:c5:d1:43:01:5a:2f:34:96:31:44:42:31:34:f6:44:fa:a2: 25:0f:51:cf:a8:0c:8c:74:e5:02:1b:5a:bf:8d:43:ce:19:f7: 1e:05:a6:96:50:97:13:80:2b:83:bc:b4:55:b2:69:8c:95:20: 9a:f7:ae:06:77:60:b6:4d:1b:80:bc:fa:2d:36:01:06:3b:e9: 52:81:f5:08:4b:da:61:82:ff:92:7c:14:c3:c5:03:4a:32:05: 96:a5:86:1c:5d:f1:9b:96:29:da:19:04:7b:2f:2e:ef:34:fa: d4:2b:e6:33:83:11:2d:6f:2c:24:e7:12:20:4f:b8:9a:b2:fc: 79:94:1a:32:f5:ae:66:7e:f0:6d:55:bf:61:82:f6:0b:65:88: e1:f0:2f:89:bd:f1:c9:39:4b:1f:c0:27:92:fd:7d:cc:e4:3a: 53:95:11:f4:aa:d8:73:5e:58:ef:b5:0a:ff:9d:55:34:a2:47: 51:17:a9:b4:41:e4:dc:8f:30:58:76:05:68:f1:e1:9e:90:06: 08:4a:92:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDJtz4phZT/3Fq+xaMIW1Xo5WfQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAyMDA1WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjA5ZmExOTk3ZTQ1MmVhYmM2YjA2YmI4MjRlMGVmZjA1 OTYzZWUyY2RjZjE1ZDIxODJmOGM4NDY4NWU5MTI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj28xNVuyzv8aue/Sspih/H4vEEGEKJafhT9HTyJHYkKKn S5HB6yy0m9kc21fXxIPyXllGTYRqkHwgO+an7ysUPphG4F7NLdYj9SF8QnaHoS5o dLMp7nG6wmXoWDBlIY5PpRe83Q7wNb+rk87EWJ2iLP6Q+b1BHoQpStd8NaumSRM0 jG0uJ8vxUq2JWr9ZYOJKqSOG2Xx2+Fbm+fXtQBLjDmdCX1Ie0bBzwRLZG4JSdnQ8 X46Mlq3Lhl6aVUrhfI9zFoZjceB0rVRmbwvzLTlont754opTrGgbLMSYrS2S6+eO baIOC4h9dIMxnqvqT/nDgi9PamHOe1KLyYJQYWVVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg2UKeKoJqBRf8mg8Pdngx+GhCWEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyYTJiMjE4LTJhMjktNDk2NC1iMTUzLTU2NWFjMWQ1MDVjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAOwAwDQYJKoZIhvcNAQELBQADggEBAI8qCEwmILqVd5YQYUx47KPPKApj P5J/2A5ZgZ2j/HAzif2brG11MLiKRT/tLVUKpXzolAaKZHXF0UMBWi80ljFEQjE0 9kT6oiUPUc+oDIx05QIbWr+NQ84Z9x4FppZQlxOAK4O8tFWyaYyVIJr3rgZ3YLZN G4C8+i02AQY76VKB9QhL2mGC/5J8FMPFA0oyBZalhhxd8ZuWKdoZBHsvLu80+tQr 5jODES1vLCTnEiBPuJqy/HmUGjL1rmZ+8G1Vv2GC9gtliOHwL4m98ck5Sx/AJ5L9 fczkOlOVEfSq2HNeWO+1Cv+dVTSiR1EXqbRB5NyPMFh2BWjx4Z6QBghKklM= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:09 2026 by rpki-client