$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56be3fd1-9453-4923-ab19-86f844b784e1.roa File: 56be3fd1-9453-4923-ab19-86f844b784e1.roa (raw, json) Hash identifier: k5CJZzxtkuCR3U41suvaRoeGy0xNvRkmVzvQT23XQ+A= Subject key identifier: FA:AA:2D:E2:CB:BE:0C:28:4E:B8:0C:B8:F6:37:7F:A6:D8:4C:20:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 014AAB1D0E7FA7EB732D58F35703AAEC3E510E4D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56be3fd1-9453-4923-ab19-86f844b784e1.roa Signing time: Mon 05 Oct 2026 00:10:39 +0000 ROA not before: Mon 05 Oct 2026 00:10:39 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.224.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4a:ab:1d:0e:7f:a7:eb:73:2d:58:f3:57:03:aa:ec:3e:51:0e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:10:39 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=63b9aaa654e02b75b154c7a3f509c0e2ee9529b54296bb56bfb6b182420a6aa3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:39:79:6b:85:81:9d:9f:08:2b:b8:16:fd: a5:5c:af:b4:dd:d5:27:4f:a2:3e:db:8b:bf:e6:84: 06:dc:b2:a2:46:e2:c5:1c:e7:61:c8:40:3f:d9:eb: 62:92:c0:b1:5b:30:f1:13:26:96:89:5c:02:cc:9f: fb:df:86:f4:e8:94:b6:3c:03:98:13:dc:16:64:ca: 43:14:c7:db:73:32:f2:10:59:22:e1:ad:06:54:7d: 86:40:71:a2:ed:2b:85:5c:76:49:67:7b:ba:19:50: df:15:0e:5b:00:a6:e5:2c:7d:b9:ef:c9:9c:a6:a3: 04:d2:0a:a3:f9:af:a8:01:fe:7b:f2:f4:08:f9:c3: ea:4a:aa:b8:a5:e9:1f:2d:92:4b:77:6e:7d:e6:77: 9a:ca:5b:bc:e2:2e:46:07:29:79:fe:7f:45:fb:7a: 3a:a3:ce:bf:42:fa:8f:19:12:ea:31:61:48:64:d5: 9c:ce:f9:73:a3:99:cf:c7:7b:54:80:dc:00:3d:bc: f2:73:57:26:95:d8:50:bb:71:8a:36:80:8a:9f:28: a1:4b:6c:1e:23:a1:bf:28:e9:ad:06:01:1b:1a:e7: a5:25:eb:1d:af:7a:41:61:d3:80:14:53:b5:44:af: a9:b5:43:f1:b9:75:90:86:b9:73:d5:a9:3e:00:dd: a3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AA:2D:E2:CB:BE:0C:28:4E:B8:0C:B8:F6:37:7F:A6:D8:4C:20:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56be3fd1-9453-4923-ab19-86f844b784e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.224.0.0/17 Signature Algorithm: sha256WithRSAEncryption 62:11:35:3e:fc:14:a7:b3:c1:a7:f3:82:45:52:7d:d6:ee:ed: 4e:fe:a9:2f:ae:86:4c:39:44:a8:99:6e:a7:a1:57:2c:39:4b: 79:e7:0c:0a:b8:51:39:a3:9c:d5:b3:c9:dc:cf:c4:bd:2c:a1: 6a:3c:f8:38:56:41:37:f1:76:39:eb:29:3d:d8:61:31:cd:cb: a9:50:82:6e:12:2d:3f:c5:78:47:1a:9f:8b:0e:91:96:89:60: be:ab:b6:b9:53:d6:0a:7d:c2:54:19:ad:ef:a6:58:63:8d:dd: 5c:1b:d9:22:61:e0:d9:7f:80:2d:da:71:98:cd:73:cb:e7:b1: 1c:e3:29:9c:ca:07:78:f2:13:98:10:41:60:ef:64:36:15:1b: 5c:74:b7:6b:8e:5e:4c:af:c6:a3:5b:db:93:72:04:ea:89:b4: 59:f3:3f:bf:89:4e:9c:cd:6d:53:1a:4f:95:fe:47:df:ad:ed: 9f:ba:ce:6f:77:75:97:25:97:cc:3a:35:43:f0:28:a8:bd:b1: de:57:0f:4e:61:24:40:f2:fb:27:d7:d3:d0:12:8b:db:09:2e: 84:d1:cb:a5:87:97:18:2c:b9:bf:54:a0:da:eb:5b:f3:85:a8: b8:a4:15:2c:76:39:0a:81:74:42:ea:08:8f:5e:1b:33:87:b9: 2c:c5:27:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAUqrHQ5/p+tzLVjzVwOq7D5RDk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAxMDM5WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2I5YWFhNjU0ZTAyYjc1YjE1NGM3YTNmNTA5YzBlMmVl OTUyOWI1NDI5NmJiNTZiZmI2YjE4MjQyMGE2YWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSSjl5a4WBnZ8IK7gW/aVcr7Td1SdPoj7bi7/mhAbcsqJG 4sUc52HIQD/Z62KSwLFbMPETJpaJXALMn/vfhvTolLY8A5gT3BZkykMUx9tzMvIQ WSLhrQZUfYZAcaLtK4Vcdklne7oZUN8VDlsApuUsfbnvyZymowTSCqP5r6gB/nvy 9Aj5w+pKqril6R8tkkt3bn3md5rKW7ziLkYHKXn+f0X7ejqjzr9C+o8ZEuoxYUhk 1ZzO+XOjmc/He1SA3AA9vPJzVyaV2FC7cYo2gIqfKKFLbB4job8o6a0GARsa56Ul 6x2vekFh04AUU7VEr6m1Q/G5dZCGuXPVqT4A3aNtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+qot4su+DChOuAy49jd/pthMIJ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2YmUzZmQxLTk0NTMtNDkyMy1hYjE5LTg2Zjg0NGI3ODRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcP4AAwDQYJKoZIhvcNAQELBQADggEBAGIRNT78FKezwafzgkVSfdbu7U7+ qS+uhkw5RKiZbqehVyw5S3nnDAq4UTmjnNWzydzPxL0soWo8+DhWQTfxdjnrKT3Y YTHNy6lQgm4SLT/FeEcan4sOkZaJYL6rtrlT1gp9wlQZre+mWGON3Vwb2SJh4Nl/ gC3acZjNc8vnsRzjKZzKB3jyE5gQQWDvZDYVG1x0t2uOXkyvxqNb25NyBOqJtFnz P7+JTpzNbVMaT5X+R9+t7Z+6zm93dZcll8w6NUPwKKi9sd5XD05hJEDy+yfX09AS i9sJLoTRy6WHlxgsub9UoNrrW/OFqLikFSx2OQqBdELqCI9eGzOHuSzFJ1Q= -----END CERTIFICATE-----Generated at Tue Nov 3 11:16:14 2026 by rpki-client