$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5331f3a7-3d36-4044-88cf-e7d9b8e5cd26.roa File: 5331f3a7-3d36-4044-88cf-e7d9b8e5cd26.roa (raw, json) Hash identifier: s9lThz88duwvTqBkEewbvRpHlt0WNBnsfKXIrE/jy4U= Subject key identifier: 48:98:CB:38:38:B6:AC:95:CE:5F:55:EC:4F:10:05:92:07:4E:1D:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F75EF81755100BB3875104BC4455D19827D602E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5331f3a7-3d36-4044-88cf-e7d9b8e5cd26.roa Signing time: Wed 21 Oct 2026 00:09:45 +0000 ROA not before: Wed 21 Oct 2026 00:09:45 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:75:ef:81:75:51:00:bb:38:75:10:4b:c4:45:5d:19:82:7d:60:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 21 00:09:45 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=521165ba86f586846e886a16bc0e7e5c64c5d80e58635b3b2aac94ede23a95d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:30:da:21:6b:82:37:b2:50:e4:94:ff:e8: 46:94:10:5b:00:2d:91:d4:c3:c4:26:54:7b:7c:83: e5:80:b8:07:4c:d3:e8:7c:d5:6d:a4:2a:d6:20:35: 33:a8:83:a5:e0:cd:15:61:d0:aa:ae:5a:48:7c:5a: 73:b5:2e:58:65:c0:79:42:22:d7:c5:96:88:f1:5d: 34:cb:d7:ea:3f:c8:fb:e5:ff:17:ac:46:33:83:8f: 5f:dd:03:a1:1b:01:b8:5e:1a:dd:60:23:3b:2e:f2: a3:9d:26:e0:4d:a0:3a:da:cc:7c:e3:21:30:9c:ac: c5:ba:ad:cc:8d:ef:ae:3d:9f:a5:58:dd:19:f1:35: 61:88:29:f8:6f:19:dc:a5:0a:e4:7d:87:fa:e5:c5: d5:9a:3a:b4:8a:b2:a7:ce:cd:c9:fe:e9:26:e0:fa: 5f:6e:08:73:69:ce:06:a1:3f:79:e6:7c:ec:dd:0d: 1c:3b:e4:19:ab:d0:42:09:e6:ad:c3:d4:52:18:51: 1e:83:6f:92:f7:41:95:28:d6:7e:68:e3:41:f7:ab: 91:b5:d6:9a:c3:71:a4:b1:0e:a3:a2:1a:d5:8e:35: dd:4e:65:ff:cf:f3:dc:20:24:8f:48:92:f3:62:f5: 00:02:7a:f4:0a:42:89:b6:a7:65:c7:88:51:cd:6a: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:98:CB:38:38:B6:AC:95:CE:5F:55:EC:4F:10:05:92:07:4E:1D:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5331f3a7-3d36-4044-88cf-e7d9b8e5cd26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.57.0/24 Signature Algorithm: sha256WithRSAEncryption 64:5f:96:28:6a:4f:31:74:03:ef:0b:27:16:3b:1f:46:31:70: 0a:ea:ac:72:bf:2d:a3:2a:88:94:67:2b:71:9f:a4:b7:c0:41: ef:18:01:cb:cf:3e:77:0c:56:e8:46:f0:29:a2:8b:9e:c6:de: c9:22:be:d0:c9:6f:cc:5a:9a:ad:4a:92:e8:55:27:ec:ba:0b: 53:66:c9:2d:42:46:38:c3:38:5e:c8:7d:62:d9:98:44:8d:78: af:47:54:ff:ec:f2:c9:f8:f9:13:5e:98:2d:60:f0:49:26:6c: 96:9f:83:b6:30:f5:cb:fb:10:bc:85:d3:7e:9f:5a:da:5c:88: 83:11:b2:3a:51:d1:91:f0:92:6a:ef:f1:d8:40:22:13:70:a8: ef:6f:db:a5:e0:46:0c:f9:62:92:95:64:f6:6c:8e:54:be:ea: d1:52:47:28:29:b7:94:12:53:d3:5b:52:75:a9:58:45:b0:88: 96:31:94:1b:56:7d:d7:8f:a4:56:b9:3a:74:54:3d:94:25:57: e8:37:9c:3c:b6:00:e8:e8:72:6f:e9:9a:d5:29:69:08:17:0e: ce:55:09:7e:0e:88:f7:bb:09:78:17:4a:10:5c:f1:40:3c:13: 61:8c:66:25:73:f2:45:99:58:32:0d:3e:fb:13:10:91:b5:93: 62:ab:f6:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT3XvgXVRALs4dRBLxEVdGYJ9YC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIxMDAwOTQ1WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjExNjViYTg2ZjU4Njg0NmU4ODZhMTZiYzBlN2U1YzY0 YzVkODBlNTg2MzViM2IyYWFjOTRlZGUyM2E5NWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3DjDaIWuCN7JQ5JT/6EaUEFsALZHUw8QmVHt8g+WAuAdM 0+h81W2kKtYgNTOog6XgzRVh0KquWkh8WnO1LlhlwHlCItfFlojxXTTL1+o/yPvl /xesRjODj1/dA6EbAbheGt1gIzsu8qOdJuBNoDrazHzjITCcrMW6rcyN7649n6VY 3RnxNWGIKfhvGdylCuR9h/rlxdWaOrSKsqfOzcn+6Sbg+l9uCHNpzgahP3nmfOzd DRw75Bmr0EIJ5q3D1FIYUR6Db5L3QZUo1n5o40H3q5G11prDcaSxDqOiGtWONd1O Zf/P89wgJI9IkvNi9QACevQKQom2p2XHiFHNavt7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSJjLODi2rJXOX1XsTxAFkgdOHYMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzMzFmM2E3LTNkMzYtNDA0NC04OGNmLWU3ZDliOGU1Y2QyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAYbjkwDQYJKoZIhvcNAQELBQADggEBAGRflihqTzF0A+8LJxY7H0YxcArq rHK/LaMqiJRnK3GfpLfAQe8YAcvPPncMVuhG8Cmii57G3skivtDJb8xamq1KkuhV J+y6C1NmyS1CRjjDOF7IfWLZmESNeK9HVP/s8sn4+RNemC1g8EkmbJafg7Yw9cv7 ELyF036fWtpciIMRsjpR0ZHwkmrv8dhAIhNwqO9v26XgRgz5YpKVZPZsjlS+6tFS Rygpt5QSU9NbUnWpWEWwiJYxlBtWfdePpFa5OnRUPZQlV+g3nDy2AOjocm/pmtUp aQgXDs5VCX4OiPe7CXgXShBc8UA8E2GMZiVz8kWZWDINPvsTEJG1k2Kr9iQ= -----END CERTIFICATE-----Generated at Mon Nov 2 21:06:05 2026 by rpki-client