$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa File: 5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa (raw, json) Hash identifier: E2GLgQVUSIi5s6fielahgZZONbbhoktb0xTUmQG/xA0= Subject key identifier: ED:3E:D0:09:2E:62:F2:98:3A:05:9C:99:69:9D:70:2D:13:C9:3C:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E29C4E0CBCF7969B6BFBE3AAE465958CD339609 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa Signing time: Sun 11 Oct 2026 00:20:43 +0000 ROA not before: Sun 11 Oct 2026 00:20:43 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 166.117.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:29:c4:e0:cb:cf:79:69:b6:bf:be:3a:ae:46:59:58:cd:33:96:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 00:20:43 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=0a25d3637b4237d9506d4e6c256091fe3f790f7fb2b37e64bad5eb0117da9c7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:c2:ac:ba:c4:5c:ab:bd:45:da:72:19:0a: 52:00:57:ef:56:af:9c:dc:80:c7:0a:0c:9a:49:8e: 3c:4a:2c:c8:f0:65:e5:6b:dc:a5:52:12:d0:e5:17: 55:12:f7:6a:30:5b:46:7d:f1:46:6c:9c:aa:da:25: 60:6f:42:b2:c5:a5:a5:ea:cd:dd:52:aa:61:38:82: 3e:34:6a:b7:9c:67:31:20:fb:d7:45:f7:0c:5d:99: 41:29:2a:80:5b:c8:d5:71:2b:64:3a:38:9e:d2:d4: 65:54:68:6c:c7:8d:f3:66:f1:6b:99:36:a6:72:f0: 62:cc:89:67:f4:86:f8:6e:94:9c:95:7f:bd:fc:13: d8:0e:13:56:a4:e5:41:f2:51:9c:11:0d:10:2e:bc: 53:af:2b:4d:33:76:06:3a:28:2c:b1:3f:52:ad:a6: 0b:a2:c7:15:6a:18:18:78:e5:64:a8:82:13:7a:97: 12:04:9b:e3:4b:2a:97:f8:c7:34:4d:2f:2c:1d:03: a3:df:72:d5:23:75:d0:35:03:27:ec:ed:61:7a:07: e2:8a:8a:b4:49:57:37:c6:24:fd:d9:23:03:31:43: 65:0d:30:d1:04:5f:36:71:9e:e0:15:5e:2c:2f:78: 40:88:a4:cb:8d:61:ea:50:7b:35:f1:f4:5f:9d:59: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3E:D0:09:2E:62:F2:98:3A:05:9C:99:69:9D:70:2D:13:C9:3C:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423f3a8-98c6-44e2-9df8-8c94cf09a952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.117.160.0/20 Signature Algorithm: sha256WithRSAEncryption 42:ea:81:df:1f:b3:4c:99:c0:75:0b:f3:6a:20:bd:73:47:6e: 11:3b:0e:9e:15:a3:6d:29:41:80:f3:14:a5:0e:71:14:61:d3: 16:66:a0:a6:94:4d:ba:bb:a1:e9:20:f6:d0:20:ef:e3:20:7f: 61:90:bc:b0:8d:89:25:fe:e1:be:81:d5:15:13:6b:4a:6f:b5: ff:eb:e3:fa:6a:34:0e:b4:6b:e5:c1:8c:b8:d6:a4:95:78:e4: bf:0f:f9:c7:be:85:0d:c5:3b:58:96:96:18:32:aa:c2:48:0b: 1a:04:3f:25:08:04:ce:6e:88:61:de:28:94:da:ed:ad:d9:98: 63:27:e2:67:54:1e:0c:10:5d:24:1a:29:ec:e2:a4:3e:60:39: 70:01:bf:a0:5a:6a:9a:25:a7:45:8d:d2:02:2f:f0:f7:e1:59: a9:dd:69:a7:a3:cd:56:5e:99:45:4f:ec:d4:6b:ef:ae:45:80: a0:b4:32:94:37:ac:f9:26:2d:ac:d8:c8:58:3f:82:42:08:b3: 2c:da:16:15:f2:a7:73:59:4c:e9:be:78:23:b8:41:9c:ab:35: b8:99:20:81:4e:82:50:6b:37:12:54:4e:cf:6f:79:94:79:9a: 6e:58:d5:39:9a:37:1d:07:e8:c9:6d:aa:ce:85:dd:2f:7b:16: f4:d2:58:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXinE4MvPeWm2v746rkZZWM0zlgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAyMDQzWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTI1ZDM2MzdiNDIzN2Q5NTA2ZDRlNmMyNTYwOTFmZTNm NzkwZjdmYjJiMzdlNjRiYWQ1ZWIwMTE3ZGE5YzdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSJsKsusRcq71F2nIZClIAV+9Wr5zcgMcKDJpJjjxKLMjw ZeVr3KVSEtDlF1US92owW0Z98UZsnKraJWBvQrLFpaXqzd1SqmE4gj40arecZzEg +9dF9wxdmUEpKoBbyNVxK2Q6OJ7S1GVUaGzHjfNm8WuZNqZy8GLMiWf0hvhulJyV f738E9gOE1ak5UHyUZwRDRAuvFOvK00zdgY6KCyxP1KtpguixxVqGBh45WSoghN6 lxIEm+NLKpf4xzRNLywdA6PfctUjddA1Ayfs7WF6B+KKirRJVzfGJP3ZIwMxQ2UN MNEEXzZxnuAVXiwveECIpMuNYepQezXx9F+dWWtPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7T7QCS5i8pg6BZyZaZ1wLRPJPIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0MjNmM2E4LTk4YzYtNDRlMi05ZGY4LThjOTRjZjA5YTk1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASmdaAwDQYJKoZIhvcNAQELBQADggEBAELqgd8fs0yZwHUL82ogvXNHbhE7 Dp4Vo20pQYDzFKUOcRRh0xZmoKaUTbq7oekg9tAg7+Mgf2GQvLCNiSX+4b6B1RUT a0pvtf/r4/pqNA60a+XBjLjWpJV45L8P+ce+hQ3FO1iWlhgyqsJICxoEPyUIBM5u iGHeKJTa7a3ZmGMn4mdUHgwQXSQaKezipD5gOXABv6Baapolp0WN0gIv8PfhWand aaejzVZemUVP7NRr765FgKC0MpQ3rPkmLazYyFg/gkIIsyzaFhXyp3NZTOm+eCO4 QZyrNbiZIIFOglBrNxJUTs9veZR5mm5Y1TmaNx0H6Mltqs6F3S97FvTSWC8= -----END CERTIFICATE-----Generated at Mon Nov 2 20:33:47 2026 by rpki-client