$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa File: 52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa (raw, json) Hash identifier: LAa8t5BeAEalk1Vg6Gh42xHP104skMMdQmi1p6kD0UA= Subject key identifier: 11:F0:A8:BF:63:74:B4:E6:FC:94:51:DB:F0:4F:37:93:D9:9C:9A:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D54F6DAD44C0514C796F922D3879AA70A68EBCC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa Signing time: Tue 20 Oct 2026 00:41:33 +0000 ROA not before: Tue 20 Oct 2026 00:41:33 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 204.58.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:54:f6:da:d4:4c:05:14:c7:96:f9:22:d3:87:9a:a7:0a:68:eb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 20 00:41:33 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=d97fd605319de6e3dc8efc5f07eb1838900c898455ba99931ac417e7b52797a1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:19:66:84:2c:5d:ae:9d:e0:63:e7:a0:27: 0a:70:80:d2:0b:7f:17:be:5f:53:e2:98:a8:8f:2d: 16:dd:33:1b:ae:d0:50:81:3b:aa:8d:81:94:cf:73: 8c:9d:7f:7f:6f:be:89:8e:dc:3d:ff:b2:13:fc:f8: 71:77:43:de:2b:bb:73:53:0f:c4:6d:a5:cd:bc:5f: 30:cb:b5:a9:48:4b:43:c4:6b:91:e1:89:53:62:92: 9a:cf:88:af:7a:b5:b5:74:91:00:20:bc:ed:09:c0: d4:d5:8a:14:fa:39:af:35:d4:81:d2:88:66:d2:84: e0:ef:f5:ae:fe:d2:48:4f:4a:74:51:4c:07:00:03: fd:09:42:d5:0f:29:63:ec:87:e6:c5:38:07:0d:45: 12:d0:de:e1:7c:a2:c9:8f:b0:dc:d0:d1:dd:d6:7b: d3:2c:95:b0:8c:a4:ed:32:05:a6:50:be:5d:5f:08: 45:08:d9:73:e8:a1:bb:34:9b:0b:69:a8:a1:04:af: cd:6b:a8:61:d0:7c:18:37:c1:06:50:fc:42:27:f3: d4:ed:a5:5c:e8:9c:94:7d:93:07:b5:0c:1a:56:7f: 31:cc:a9:5a:a2:2a:4c:5d:71:83:d8:94:8b:d4:2a: c2:f9:70:fa:e9:4a:a0:b0:c9:e1:ee:e4:b3:de:35: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F0:A8:BF:63:74:B4:E6:FC:94:51:DB:F0:4F:37:93:D9:9C:9A:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.58.152.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:80:4c:3a:6b:db:cb:37:64:2d:74:91:08:a0:88:a7:e1:21: 97:ea:d8:ea:25:16:48:07:12:21:9a:75:31:26:c0:71:91:ee: 6e:d7:40:1e:8d:58:16:5b:0f:48:e4:92:30:7a:e4:e2:81:5f: 04:cb:13:26:d1:12:69:ff:de:51:65:45:b7:e5:ed:c5:f7:c3: d2:e1:04:bf:01:55:6f:6d:72:22:fb:f5:94:22:b6:77:c2:2d: 60:cf:44:dc:0a:93:90:9d:f7:12:ff:9b:0e:54:70:0c:7a:02: e3:73:39:be:70:13:8a:81:95:85:1a:a6:e9:5e:c5:07:17:c7: b9:e7:9f:80:15:c0:ab:c5:ea:c0:35:5d:98:82:e2:73:32:63: 13:aa:22:b6:30:63:21:dc:bb:c5:e6:f7:8b:59:c4:1b:ab:9a: a4:08:cf:95:20:22:10:ec:36:63:94:1e:3f:23:0b:c6:91:13: 65:d2:e7:7d:fb:9b:61:98:58:30:a7:20:f8:ef:9f:45:05:4d: d5:e0:81:be:49:ec:0e:50:da:20:7a:e9:35:13:bc:c8:95:28: ff:de:f5:5f:86:c4:92:2f:ec:f0:31:80:76:69:1e:35:6a:ea: 78:af:7c:ff:e1:00:b5:1e:c9:75:22:b1:85:a7:dd:65:b8:8e: a5:49:18:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbVT22tRMBRTHlvki04eapwpo68wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIwMDA0MTMzWhcNMjcwMTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTdmZDYwNTMxOWRlNmUzZGM4ZWZjNWYwN2ViMTgzODkw MGM4OTg0NTViYTk5OTMxYWM0MTdlN2I1Mjc5N2ExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi/RlmhCxdrp3gY+egJwpwgNILfxe+X1PimKiPLRbdMxuu 0FCBO6qNgZTPc4ydf39vvomO3D3/shP8+HF3Q94ru3NTD8Rtpc28XzDLtalIS0PE a5HhiVNikprPiK96tbV0kQAgvO0JwNTVihT6Oa811IHSiGbShODv9a7+0khPSnRR TAcAA/0JQtUPKWPsh+bFOAcNRRLQ3uF8osmPsNzQ0d3We9MslbCMpO0yBaZQvl1f CEUI2XPoobs0mwtpqKEEr81rqGHQfBg3wQZQ/EIn89TtpVzonJR9kwe1DBpWfzHM qVqiKkxdcYPYlIvUKsL5cPrpSqCwyeHu5LPeNQ5XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEfCov2N0tOb8lFHb8E83k9mcmvEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyYTk4OGU2LThiOGItNDRjNi04YzY4LTI2YWI4ZmRlZGIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALMOpgwDQYJKoZIhvcNAQELBQADggEBAB6ATDpr28s3ZC10kQigiKfhIZfq 2OolFkgHEiGadTEmwHGR7m7XQB6NWBZbD0jkkjB65OKBXwTLEybREmn/3lFlRbfl 7cX3w9LhBL8BVW9tciL79ZQitnfCLWDPRNwKk5Cd9xL/mw5UcAx6AuNzOb5wE4qB lYUapulexQcXx7nnn4AVwKvF6sA1XZiC4nMyYxOqIrYwYyHcu8Xm94tZxBurmqQI z5UgIhDsNmOUHj8jC8aRE2XS5337m2GYWDCnIPjvn0UFTdXggb5J7A5Q2iB66TUT vMiVKP/e9V+GxJIv7PAxgHZpHjVq6nivfP/hALUeyXUisYWn3WW4jqVJGLc= -----END CERTIFICATE-----Generated at Tue Nov 3 22:38:04 2026 by rpki-client