$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5332b03c-61a9-413c-af32-f67a7d5c8781.roa File: 5332b03c-61a9-413c-af32-f67a7d5c8781.roa (raw, json) Hash identifier: uIA6jpQoWZ5U4AafjZts6yJzJnHWabOBQO2g1T+1eX4= Subject key identifier: 37:1D:AF:D5:0A:99:B2:89:D2:C6:9B:CD:10:2E:E4:7B:06:E2:C1:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B9E9EECB3F8A5FA6DC37552AB37BECA3AA01F5E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5332b03c-61a9-413c-af32-f67a7d5c8781.roa Signing time: Tue 13 Oct 2026 00:09:05 +0000 ROA not before: Tue 13 Oct 2026 00:09:05 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9e:9e:ec:b3:f8:a5:fa:6d:c3:75:52:ab:37:be:ca:3a:a0:1f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:09:05 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=5fe6832e715357ae0e0d2fb3cedab01439286f97309039ba6f303a690eb0e07a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:18:92:76:cc:fd:b7:63:1e:17:2e:cc:23: e5:53:33:7b:22:49:dd:0b:5d:57:17:32:b9:b3:f8: f2:9f:35:8b:93:86:89:1d:3a:cc:0a:95:9e:89:a8: 7a:4e:48:93:57:16:b1:92:f4:c3:54:b0:ee:e3:94: a5:7e:28:fa:ea:de:d6:d6:55:12:8c:76:48:3f:d0: 20:eb:46:d5:d4:18:23:45:0a:af:f7:08:7c:5d:03: 17:4f:34:57:11:62:34:e2:8a:4b:c7:b6:b3:f6:34: b9:a1:69:f4:38:fc:6e:fe:51:94:76:99:09:03:c1: ed:ec:75:51:eb:93:c7:f3:31:8f:e3:17:01:6a:24: 69:06:a2:02:ed:52:68:78:61:60:6f:22:68:2f:8d: 58:a0:0e:07:93:c6:46:07:cf:26:12:ca:69:23:12: a3:ab:95:14:af:66:c7:5a:e7:64:59:ee:94:16:5d: 3d:f7:2b:42:60:31:7b:c2:ec:25:06:43:3d:47:99: 01:3f:d4:9b:0e:43:7a:f2:93:fa:cd:10:fb:59:ad: a8:7c:28:66:e0:36:52:71:7b:4d:da:54:16:0e:bd: 31:51:e3:80:8a:af:e7:f9:b4:05:5e:71:59:95:99: 26:4b:fc:9e:6e:5e:6f:a9:b6:91:0b:ef:15:4c:e5: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1D:AF:D5:0A:99:B2:89:D2:C6:9B:CD:10:2E:E4:7B:06:E2:C1:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5332b03c-61a9-413c-af32-f67a7d5c8781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.19.0/24 Signature Algorithm: sha256WithRSAEncryption 65:2c:f9:b6:d5:f3:96:72:1b:bf:25:43:7e:9d:f4:27:49:c3: ef:9c:a6:19:33:ea:a5:51:7a:b0:e0:39:55:fb:18:49:a1:22: 87:3f:d7:00:c9:5a:0f:6c:0b:9d:4e:07:20:04:6b:b0:8d:6e: 7b:a4:94:9b:63:e1:e5:3b:89:31:c1:52:3f:1d:02:20:d7:86: 58:0a:1f:00:89:ac:7f:17:86:bd:b9:d4:4b:61:ff:ff:89:df: c0:77:99:95:b0:92:7b:5e:83:f8:6e:ad:50:94:69:26:8c:63: 1b:c4:e6:4a:4d:f5:6e:57:76:aa:bc:db:47:8f:7f:c4:69:90: a6:28:78:40:45:5e:97:a0:64:19:ac:3e:f2:8b:ab:98:ae:b7: 34:5c:b2:06:1a:50:a5:b9:34:ed:cd:a2:45:7f:1f:cb:84:64: e8:3b:79:2c:a1:12:72:71:e2:25:a8:4f:01:3e:9a:05:96:99: e3:a0:8c:98:ab:94:20:46:87:f6:6e:aa:d6:04:4e:36:ec:78: 97:c2:08:af:0e:18:9c:41:97:56:e4:36:ee:50:c1:ad:94:82: a5:50:3c:6f:09:9d:fe:c5:b9:54:fe:3f:ce:60:01:df:00:7e: 9f:f5:e8:89:85:65:b8:bc:13:cf:65:1b:c8:ee:dc:02:3b:f2: 78:9a:c7:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO56e7LP4pfptw3VSqze+yjqgH14wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAwOTA1WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmU2ODMyZTcxNTM1N2FlMGUwZDJmYjNjZWRhYjAxNDM5 Mjg2Zjk3MzA5MDM5YmE2ZjMwM2E2OTBlYjBlMDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDUxiSdsz9t2MeFy7MI+VTM3siSd0LXVcXMrmz+PKfNYuT hokdOswKlZ6JqHpOSJNXFrGS9MNUsO7jlKV+KPrq3tbWVRKMdkg/0CDrRtXUGCNF Cq/3CHxdAxdPNFcRYjTiikvHtrP2NLmhafQ4/G7+UZR2mQkDwe3sdVHrk8fzMY/j FwFqJGkGogLtUmh4YWBvImgvjVigDgeTxkYHzyYSymkjEqOrlRSvZsda52RZ7pQW XT33K0JgMXvC7CUGQz1HmQE/1JsOQ3ryk/rNEPtZrah8KGbgNlJxe03aVBYOvTFR 44CKr+f5tAVecVmVmSZL/J5uXm+ptpEL7xVM5QpDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNx2v1QqZsonSxpvNEC7kewbiwXwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzMzJiMDNjLTYxYTktNDEzYy1hZjMyLWY2N2E3ZDVjODc4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjlhMwDQYJKoZIhvcNAQELBQADggEBAGUs+bbV85ZyG78lQ36d9CdJw++c phkz6qVRerDgOVX7GEmhIoc/1wDJWg9sC51OByAEa7CNbnuklJtj4eU7iTHBUj8d AiDXhlgKHwCJrH8Xhr251Eth//+J38B3mZWwknteg/hurVCUaSaMYxvE5kpN9W5X dqq820ePf8RpkKYoeEBFXpegZBmsPvKLq5iutzRcsgYaUKW5NO3NokV/H8uEZOg7 eSyhEnJx4iWoTwE+mgWWmeOgjJirlCBGh/ZuqtYETjbseJfCCK8OGJxBl1bkNu5Q wa2UgqVQPG8Jnf7FuVT+P85gAd8Afp/16ImFZbi8E89lG8ju3AI78niax2c= -----END CERTIFICATE-----Generated at Tue Nov 3 12:08:10 2026 by rpki-client