$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579ee110-a8b2-4e29-8507-77b59ba75ce7.roa File: 579ee110-a8b2-4e29-8507-77b59ba75ce7.roa (raw, json) Hash identifier: 0bItDM7Oapao5aoGZxBY6IBZ14EKOSNzevVzn/W/Ars= Subject key identifier: 19:AF:F7:4F:F3:99:0A:39:71:84:35:99:48:2F:CB:02:24:FA:D4:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D29E3BB30A31CD43281B36F795F01DC0F542156 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579ee110-a8b2-4e29-8507-77b59ba75ce7.roa Signing time: Fri 16 Oct 2026 00:30:43 +0000 ROA not before: Fri 16 Oct 2026 00:30:43 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 203.110.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:29:e3:bb:30:a3:1c:d4:32:81:b3:6f:79:5f:01:dc:0f:54:21:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:30:43 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=5958f5aeb3da5dfe824131366e97fd32ccb8877e4b17a7b5c120bd69df425ba1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:09:8c:9f:0d:2d:14:18:f7:66:35:5a:2c: 3b:cc:0c:36:1d:d7:1c:93:bc:0a:fe:a8:54:f8:8c: 44:29:ae:ab:69:5b:dd:a4:47:d0:3f:38:c8:07:3c: 35:67:17:82:73:77:0d:fb:e8:92:da:37:2d:77:56: 43:37:3e:ab:b3:3d:13:74:94:13:da:99:24:d0:e9: 2d:b6:4b:6f:6f:51:04:12:08:47:15:02:3e:c6:3f: b1:27:35:7b:7c:99:6f:96:11:b8:2f:85:ce:0e:1d: 38:37:5d:1d:24:b9:a0:8b:f0:9c:5b:25:3a:6a:27: b2:22:64:24:17:87:5b:55:24:b7:dd:86:e7:e5:55: 7a:60:59:40:1e:71:ca:e9:7e:b5:4b:1c:ca:e9:d2: a4:da:b9:b4:90:b3:ce:1b:a7:e2:47:07:51:63:45: 19:45:84:78:c1:aa:70:22:0c:06:47:d7:a4:f3:80: 45:b1:fd:e9:f2:a8:dc:eb:8a:7c:23:3c:bd:ab:3f: 88:61:1e:8c:75:ec:b6:33:b9:87:f4:e3:7e:9e:ce: 02:39:27:36:d5:cd:86:f9:a3:e8:95:cf:11:c9:0b: f6:82:c4:a0:3b:e6:f9:14:81:4e:a3:1f:c3:f9:28: d7:d0:e0:96:ff:e7:c7:20:4d:87:03:80:59:e2:98: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AF:F7:4F:F3:99:0A:39:71:84:35:99:48:2F:CB:02:24:FA:D4:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579ee110-a8b2-4e29-8507-77b59ba75ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.110.201.0/24 Signature Algorithm: sha256WithRSAEncryption 24:22:a9:fd:ca:23:3c:9a:ac:d1:6e:04:88:2f:40:98:f0:4c: 71:a3:37:40:6c:f0:b2:bd:2d:52:c5:5a:a8:aa:6a:01:48:f5: 3c:f0:3a:38:93:f8:a8:7d:12:ae:6b:90:b8:1d:65:5d:c1:a9: b3:aa:d9:0e:0c:e0:83:e0:0e:ac:c7:88:f6:3b:f8:c6:46:3b: a5:97:1e:cf:bc:de:7d:5c:63:85:96:7d:ea:91:10:fa:59:ca: 7e:e4:5f:e4:cc:07:bf:58:0c:30:b2:3d:e9:02:63:a4:57:27: 77:f8:e2:8d:5c:18:b4:3b:51:99:b5:47:02:cf:62:4f:9e:c9: 3d:6f:2b:d7:cb:c8:17:e4:80:95:6b:9f:6c:70:bf:ee:de:af: a4:99:4e:44:c7:4b:93:3d:28:ec:fb:c2:77:9f:d8:61:61:86: 88:49:a6:8b:24:41:32:11:d2:2a:53:ee:88:7d:79:f1:41:61: 44:61:55:34:3e:72:90:7a:8c:6d:0f:cc:25:a5:2f:77:eb:cc: b7:01:60:47:65:36:58:95:80:64:ff:0a:d8:f2:28:98:66:84: 83:b0:f8:29:26:03:03:a1:e7:b4:87:67:22:17:b6:5c:4c:fe: d6:28:c8:bd:e4:b6:02:38:c5:c1:c2:f4:44:0c:ff:89:11:8d: 02:ec:e1:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXSnjuzCjHNQygbNveV8B3A9UIVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAzMDQzWhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTU4ZjVhZWIzZGE1ZGZlODI0MTMxMzY2ZTk3ZmQzMmNj Yjg4NzdlNGIxN2E3YjVjMTIwYmQ2OWRmNDI1YmExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbXAmMnw0tFBj3ZjVaLDvMDDYd1xyTvAr+qFT4jEQprqtp W92kR9A/OMgHPDVnF4Jzdw376JLaNy13VkM3PquzPRN0lBPamSTQ6S22S29vUQQS CEcVAj7GP7EnNXt8mW+WEbgvhc4OHTg3XR0kuaCL8JxbJTpqJ7IiZCQXh1tVJLfd huflVXpgWUAeccrpfrVLHMrp0qTaubSQs84bp+JHB1FjRRlFhHjBqnAiDAZH16Tz gEWx/enyqNzrinwjPL2rP4hhHox17LYzuYf0436ezgI5JzbVzYb5o+iVzxHJC/aC xKA75vkUgU6jH8P5KNfQ4Jb/58cgTYcDgFnimFQ9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGa/3T/OZCjlxhDWZSC/LAiT61KQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3OWVlMTEwLWE4YjItNGUyOS04NTA3LTc3YjU5YmE3NWNlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLbskwDQYJKoZIhvcNAQELBQADggEBACQiqf3KIzyarNFuBIgvQJjwTHGj N0Bs8LK9LVLFWqiqagFI9TzwOjiT+Kh9Eq5rkLgdZV3BqbOq2Q4M4IPgDqzHiPY7 +MZGO6WXHs+83n1cY4WWfeqREPpZyn7kX+TMB79YDDCyPekCY6RXJ3f44o1cGLQ7 UZm1RwLPYk+eyT1vK9fLyBfkgJVrn2xwv+7er6SZTkTHS5M9KOz7wnef2GFhhohJ poskQTIR0ipT7oh9efFBYURhVTQ+cpB6jG0PzCWlL3frzLcBYEdlNliVgGT/Ctjy KJhmhIOw+CkmAwOh57SHZyIXtlxM/tYoyL3ktgI4xcHC9EQM/4kRjQLs4R0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:59 2026 by rpki-client