$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa File: 5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa (raw, json) Hash identifier: 1H4JHBWYkRNnObqnZqYwmzRr7xlzzqsx2HaKtMua9qE= Subject key identifier: 58:3B:E5:68:F6:18:6D:FA:DE:D1:27:CA:72:40:71:43:41:E2:07:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09C793B4099AAFE6AAD14018C47F018C58856253 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa Signing time: Tue 27 Oct 2026 00:10:10 +0000 ROA not before: Tue 27 Oct 2026 00:10:10 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 153.42.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c7:93:b4:09:9a:af:e6:aa:d1:40:18:c4:7f:01:8c:58:85:62:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:10:10 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=d084aae04e76461822fecb30b4ba3722ef2b6ce322440a0f36d90f31ea1b88ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:77:de:3a:a5:08:12:36:41:3f:3e:06:28: e0:29:c8:0f:54:97:1f:a9:e1:5c:80:d1:14:cb:bd: 81:8c:af:a4:1a:36:dc:cd:e3:df:00:b7:24:85:d0: ae:83:65:15:8d:ad:72:b4:e1:27:11:96:03:41:33: 39:9e:54:a7:8e:62:89:f2:e8:f9:ac:28:7c:80:fe: 73:64:d0:97:95:6f:98:00:e8:fa:55:ec:6a:cb:f8: 5d:50:a2:37:4f:2a:9c:24:d5:ce:9d:d3:85:39:c8: 65:dd:35:2a:5b:60:c7:a1:4b:67:ca:40:ff:2d:0a: 37:ac:2e:be:95:bc:91:5a:ae:40:42:3e:80:cd:e6: 24:a2:ef:d2:a1:67:51:44:e9:53:45:62:2e:51:87: 53:3a:43:38:0d:17:2a:48:f1:0d:cb:03:a5:fc:bb: df:e0:c8:cf:af:c8:60:a6:41:53:f2:c7:ad:1e:70: 4c:3d:44:4c:01:e8:95:93:10:28:3c:1c:62:39:67: 27:80:85:75:30:dc:ec:da:8d:de:33:a0:37:ec:e1: aa:9e:a6:e9:7c:36:78:fc:c0:10:86:cf:f2:17:9a: 9b:7c:2a:23:7c:f9:0e:71:7b:2b:3d:4e:a0:f5:3b: 8e:aa:80:66:77:11:7d:2a:17:ce:41:5e:6c:a3:d7: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3B:E5:68:F6:18:6D:FA:DE:D1:27:CA:72:40:71:43:41:E2:07:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.42.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:bf:8d:6b:b6:1b:5d:e8:f3:39:ec:84:3c:2a:8d:87:6e:a3: 1e:b9:6b:bf:df:4b:02:15:25:4b:6c:68:90:7f:22:22:cc:de: 7f:3c:97:c1:ee:14:30:61:88:b0:b8:74:76:63:22:a5:c6:82: 53:4c:a9:e7:2a:41:7b:71:52:4e:83:50:c8:29:9b:a6:c4:d1: b3:db:4c:dd:7c:3c:1b:ff:f4:bb:64:d2:56:d3:38:1e:3f:3d: dc:e0:34:02:bb:80:51:45:9b:4e:1a:bf:89:c5:59:24:40:6e: ac:a1:63:4f:b6:80:e8:8e:bb:3f:38:41:56:3a:2a:8d:39:db: 01:e9:f7:e9:d5:cf:df:5e:ad:80:27:00:14:23:cc:b8:da:58: 8f:10:6f:38:26:c7:19:5f:8a:45:5a:69:77:a0:61:4c:60:f9: 1a:a7:58:7b:65:8a:9c:9d:a8:79:bc:e7:ec:4b:c1:e6:f3:36: 30:b3:f8:af:e4:02:51:54:8c:bb:3a:ee:ee:26:46:bc:33:12: 4f:aa:55:d2:cf:65:6d:81:da:63:9b:c1:83:9d:c7:71:e5:cb: e6:53:36:a7:f7:91:59:ea:05:d7:e8:b2:14:44:19:58:be:37: 4c:7d:83:c2:df:61:3d:4f:29:76:98:b1:40:e3:c6:8d:59:cb: 04:08:db:9c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCceTtAmar+aq0UAYxH8BjFiFYlMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAxMDEwWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDg0YWFlMDRlNzY0NjE4MjJmZWNiMzBiNGJhMzcyMmVm MmI2Y2UzMjI0NDBhMGYzNmQ5MGYzMWVhMWI4OGZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClKXfeOqUIEjZBPz4GKOApyA9Ulx+p4VyA0RTLvYGMr6Qa NtzN498AtySF0K6DZRWNrXK04ScRlgNBMzmeVKeOYony6PmsKHyA/nNk0JeVb5gA 6PpV7GrL+F1QojdPKpwk1c6d04U5yGXdNSpbYMehS2fKQP8tCjesLr6VvJFarkBC PoDN5iSi79KhZ1FE6VNFYi5Rh1M6QzgNFypI8Q3LA6X8u9/gyM+vyGCmQVPyx60e cEw9REwB6JWTECg8HGI5ZyeAhXUw3Ozajd4zoDfs4aqepul8Nnj8wBCGz/IXmpt8 KiN8+Q5xeys9TqD1O46qgGZ3EX0qF85BXmyj1x4/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWDvlaPYYbfre0SfKckBxQ0HiBzEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3NjRjNWY2LTlmZTYtNDZjNS1iMWEwLTI2OGNkNzY2OTJmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCZKjANBgkqhkiG9w0BAQsFAAOCAQEANL+Na7YbXejzOeyEPCqNh26jHrlr v99LAhUlS2xokH8iIszefzyXwe4UMGGIsLh0dmMipcaCU0yp5ypBe3FSToNQyCmb psTRs9tM3Xw8G//0u2TSVtM4Hj893OA0AruAUUWbThq/icVZJEBurKFjT7aA6I67 PzhBVjoqjTnbAen36dXP316tgCcAFCPMuNpYjxBvOCbHGV+KRVppd6BhTGD5GqdY e2WKnJ2oebzn7EvB5vM2MLP4r+QCUVSMuzru7iZGvDMST6pV0s9lbYHaY5vBg53H ceXL5lM2p/eRWeoF1+iyFEQZWL43TH2Dwt9hPU8pdpixQOPGjVnLBAjbnA== -----END CERTIFICATE-----Generated at Wed Nov 4 20:10:59 2026 by rpki-client