$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/590b0bb2-02a3-4691-8dcc-0f6265e81636.roa File: 590b0bb2-02a3-4691-8dcc-0f6265e81636.roa (raw, json) Hash identifier: VeTfRPyUmeJ94NABg2hm+U7S4tYnXxB90OJlq8mrYT4= Subject key identifier: C2:4F:02:5D:00:A6:75:7A:5C:F4:BF:FE:20:30:4A:7D:BC:40:52:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 784A21977616A60BFB239EE6B15CB76F022D8110 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/590b0bb2-02a3-4691-8dcc-0f6265e81636.roa Signing time: Thu 22 Oct 2026 02:21:03 +0000 ROA not before: Thu 22 Oct 2026 02:21:03 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 123.200.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4a:21:97:76:16:a6:0b:fb:23:9e:e6:b1:5c:b7:6f:02:2d:81:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:21:03 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=1e12edf924c71ab7837958c6eed58eed3c6dee13bb0b8ec20a15dd3fd040e902, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:c3:cf:49:e5:28:f8:e1:ac:1c:08:cf:33: b8:26:33:ef:ba:cb:00:f5:0d:6b:37:23:cb:d0:dc: 6a:81:69:6f:0b:12:1c:0d:02:1b:7d:29:ad:25:aa: 90:91:5f:85:a4:53:55:e4:2d:a3:89:5d:a2:e8:63: f7:9e:0d:83:4a:e9:60:80:7f:a4:d6:f4:d0:2b:04: ed:0c:1c:50:06:4e:21:38:d1:09:f5:77:c7:37:66: 3a:be:1c:c7:ed:bc:8e:5a:77:e7:72:ff:1d:26:79: f7:85:72:35:a5:ec:da:b0:b9:97:17:fc:e0:bc:e2: 7a:da:c8:dd:bc:0b:08:15:8a:1c:15:d8:92:3b:19: 63:5e:8a:66:0f:92:4d:63:d4:11:f6:e0:32:bd:77: f5:c8:4b:8b:6d:05:34:d3:5c:fb:2e:d4:c9:84:29: be:0f:40:98:43:c6:79:5d:c0:07:c4:81:a9:1c:cc: 30:57:97:09:21:24:20:02:e9:4f:45:8c:8a:d4:e2: ec:f0:8a:e8:77:f0:8d:11:81:35:8c:df:a2:6e:3b: 4d:6f:75:40:b2:1f:9e:f6:d5:fb:c9:c8:53:82:81: 22:b5:a1:b6:88:93:ed:d3:2a:85:ed:22:92:fb:3b: 28:8a:17:73:e5:b1:df:3d:57:ce:7b:ba:9d:bb:85: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4F:02:5D:00:A6:75:7A:5C:F4:BF:FE:20:30:4A:7D:BC:40:52:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/590b0bb2-02a3-4691-8dcc-0f6265e81636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.200.192.0/21 Signature Algorithm: sha256WithRSAEncryption a9:01:bb:4f:f1:7b:22:ca:22:1c:87:ed:5a:56:13:25:81:3c: d9:74:e0:2c:79:8a:b3:5a:85:2f:76:5d:10:26:72:1c:7b:2c: c6:00:58:7e:8e:43:9d:14:9e:6e:52:91:f9:85:c8:a9:09:bf: ad:71:d5:8e:c5:a6:00:89:e0:79:db:00:8e:33:d2:48:b7:01: e4:78:9b:77:6e:e2:79:b6:53:07:53:1d:97:01:b3:ec:04:c0: 4e:e7:30:0a:88:09:bc:9e:03:5e:69:51:b9:15:79:cd:69:92: 67:c6:89:ed:6f:5f:26:7b:43:97:42:a0:39:d8:14:6a:e5:b1: 35:0f:b2:0d:44:eb:1b:8f:bd:7a:5c:57:11:97:33:34:79:07: 69:60:50:08:3c:6c:e6:94:8a:4a:82:47:bf:33:b4:ff:5d:7c: a9:ae:79:7f:61:90:7a:45:b1:22:5c:ce:3e:9a:4b:2c:a3:9c: 43:17:53:21:4a:25:18:4b:b2:1e:d9:b5:01:4e:f3:de:01:43: fe:71:e0:43:7b:f8:c5:4a:eb:a9:48:cc:b2:8e:25:6a:a5:78: c2:dc:2d:93:e8:9e:dc:b6:18:4f:a1:0f:d0:58:e2:90:41:58: fe:66:c4:32:ea:73:44:12:27:13:b0:cc:ed:95:2b:5d:5b:cc: 7a:20:8e:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeEohl3YWpgv7I57msVy3bwItgRAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIyMTAzWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTEyZWRmOTI0YzcxYWI3ODM3OTU4YzZlZWQ1OGVlZDNj NmRlZTEzYmIwYjhlYzIwYTE1ZGQzZmQwNDBlOTAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4usPPSeUo+OGsHAjPM7gmM++6ywD1DWs3I8vQ3GqBaW8L EhwNAht9Ka0lqpCRX4WkU1XkLaOJXaLoY/eeDYNK6WCAf6TW9NArBO0MHFAGTiE4 0Qn1d8c3Zjq+HMftvI5ad+dy/x0mefeFcjWl7NqwuZcX/OC84nrayN28CwgVihwV 2JI7GWNeimYPkk1j1BH24DK9d/XIS4ttBTTTXPsu1MmEKb4PQJhDxnldwAfEgakc zDBXlwkhJCAC6U9FjIrU4uzwiuh38I0RgTWM36JuO01vdUCyH5721fvJyFOCgSK1 obaIk+3TKoXtIpL7OyiKF3Plsd89V857up27hSfvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwk8CXQCmdXpc9L/+IDBKfbxAUs4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5MGIwYmIyLTAyYTMtNDY5MS04ZGNjLTBmNjI2NWU4MTYzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN7yMAwDQYJKoZIhvcNAQELBQADggEBAKkBu0/xeyLKIhyH7VpWEyWBPNl0 4Cx5irNahS92XRAmchx7LMYAWH6OQ50Unm5SkfmFyKkJv61x1Y7FpgCJ4HnbAI4z 0ki3AeR4m3du4nm2UwdTHZcBs+wEwE7nMAqICbyeA15pUbkVec1pkmfGie1vXyZ7 Q5dCoDnYFGrlsTUPsg1E6xuPvXpcVxGXMzR5B2lgUAg8bOaUikqCR78ztP9dfKmu eX9hkHpFsSJczj6aSyyjnEMXUyFKJRhLsh7ZtQFO894BQ/5x4EN7+MVK66lIzLKO JWqleMLcLZPonty2GE+hD9BY4pBBWP5mxDLqc0QSJxOwzO2VK11bzHogjuU= -----END CERTIFICATE-----Generated at Tue Nov 3 01:27:14 2026 by rpki-client