$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59eeac39-db16-4a56-8c7b-26507d564197.roa File: 59eeac39-db16-4a56-8c7b-26507d564197.roa (raw, json) Hash identifier: aPxGxdjasnV4U/PGxHE4ThopcJuidrL/IicaezRq0NE= Subject key identifier: 86:5B:A4:30:51:50:75:94:A9:21:F4:FC:62:76:26:9F:2D:21:C9:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A8BE9DC26926E90C646F5E5AC0CE56C10F333AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59eeac39-db16-4a56-8c7b-26507d564197.roa Signing time: Thu 29 Oct 2026 21:52:24 +0000 ROA not before: Thu 29 Oct 2026 21:52:24 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 72.150.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8b:e9:dc:26:92:6e:90:c6:46:f5:e5:ac:0c:e5:6c:10:f3:33:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 21:52:24 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=09724c844f25f6fe559cf86000f63e3ad21ef8a97e419e9a2befdf995f43e70e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:1c:a4:12:70:22:59:69:5b:24:01:e8:0c: 0d:28:9a:80:00:cd:a4:15:98:11:32:1c:14:9c:f0: ab:54:f9:8b:54:02:61:6b:cd:86:6c:6b:27:1a:ba: 6b:26:8d:24:2c:1b:d9:c7:41:77:62:9c:04:51:b3: f7:ef:1f:63:f6:3c:aa:d2:1e:43:d5:10:96:75:b9: e1:bc:31:27:ef:80:b4:55:77:6f:8c:88:5f:fa:2c: a9:b7:24:3b:c6:68:6c:cd:a4:0d:ea:ca:1c:d5:e5: fe:4a:0e:f6:3a:c8:d9:27:f8:2f:09:d1:25:c3:8e: 11:5b:3d:3c:ea:99:64:09:5a:59:e4:4f:1c:51:7e: 4d:f2:d8:a2:dd:e3:7e:84:71:d2:76:9c:e2:4b:c6: 1c:f9:2c:a9:e5:bd:e0:89:22:bc:5c:07:2e:af:4a: 65:d1:3d:20:a7:cb:f9:de:4e:1f:5e:31:95:2e:27: ad:6f:bf:6d:88:f4:c7:5c:6a:ab:fb:fd:54:eb:e9: 54:b6:9f:5d:c8:4e:e3:ec:c4:e4:1a:34:13:9e:58: bb:3e:d6:fa:12:91:8a:a4:05:12:52:42:a8:a6:c2: 71:0d:95:2b:f7:a6:e6:df:6e:bf:f0:42:d1:33:62: f5:55:6c:98:f4:b2:dd:36:6d:12:a0:b2:13:2f:61: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5B:A4:30:51:50:75:94:A9:21:F4:FC:62:76:26:9F:2D:21:C9:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59eeac39-db16-4a56-8c7b-26507d564197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.150.0.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:d5:12:a0:b0:36:70:0c:bd:62:22:e4:a9:2e:df:be:e8:aa: 70:d7:35:fa:59:39:c2:f4:a9:71:71:02:be:21:22:d2:0c:97: c5:aa:91:e7:53:00:03:24:ae:95:e1:63:09:7f:06:3b:6a:be: 20:7b:0e:85:68:35:e4:57:ca:c8:79:23:cc:91:82:24:ed:b9: a5:aa:cb:38:79:e8:16:5e:00:46:9a:ff:49:38:fd:bc:3e:75: ef:62:a2:3a:17:0b:cb:7a:4a:4d:bf:7f:76:ad:43:2a:d9:f1: 44:ca:88:74:ee:94:95:c4:bd:ff:ad:83:bc:41:84:f3:25:2d: 2b:9c:67:18:b5:b0:e2:4a:62:e9:6a:f7:8e:17:d5:8d:3a:77: 3f:3c:f0:9a:99:b4:15:6b:fd:49:aa:79:72:86:2a:fa:4a:6a: cd:ab:3d:8e:5d:14:4e:b5:bb:4c:b1:87:e7:b7:4e:da:75:42: 2d:ef:00:3f:70:c8:24:09:15:a7:32:7c:f5:b8:9a:2e:18:bc: f5:5e:39:8f:7d:06:27:7a:e0:79:6d:14:ef:37:47:a8:bd:a7: 49:7c:1b:d7:84:f0:a1:ce:19:35:73:14:92:4c:15:13:75:70: 18:fa:1c:27:ec:f8:69:3f:68:1e:b9:ba:67:8a:a1:59:16:a3: a0:8a:3a:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeovp3CaSbpDGRvXlrAzlbBDzM60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MjE1MjI0WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTcyNGM4NDRmMjVmNmZlNTU5Y2Y4NjAwMGY2M2UzYWQy MWVmOGE5N2U0MTllOWEyYmVmZGY5OTVmNDNlNzBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDi8hykEnAiWWlbJAHoDA0omoAAzaQVmBEyHBSc8KtU+YtU AmFrzYZsaycaumsmjSQsG9nHQXdinARRs/fvH2P2PKrSHkPVEJZ1ueG8MSfvgLRV d2+MiF/6LKm3JDvGaGzNpA3qyhzV5f5KDvY6yNkn+C8J0SXDjhFbPTzqmWQJWlnk TxxRfk3y2KLd436EcdJ2nOJLxhz5LKnlveCJIrxcBy6vSmXRPSCny/neTh9eMZUu J61vv22I9Mdcaqv7/VTr6VS2n13ITuPsxOQaNBOeWLs+1voSkYqkBRJSQqimwnEN lSv3pubfbr/wQtEzYvVVbJj0st02bRKgshMvYdU7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhlukMFFQdZSpIfT8YnYmny0hyX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ZWVhYzM5LWRiMTYtNGE1Ni04YzdiLTI2NTA3ZDU2NDE5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFIlgAwDQYJKoZIhvcNAQELBQADggEBAJrVEqCwNnAMvWIi5Kku377oqnDX NfpZOcL0qXFxAr4hItIMl8WqkedTAAMkrpXhYwl/BjtqviB7DoVoNeRXysh5I8yR giTtuaWqyzh56BZeAEaa/0k4/bw+de9iojoXC8t6Sk2/f3atQyrZ8UTKiHTulJXE vf+tg7xBhPMlLSucZxi1sOJKYulq944X1Y06dz888JqZtBVr/UmqeXKGKvpKas2r PY5dFE61u0yxh+e3Ttp1Qi3vAD9wyCQJFacyfPW4mi4YvPVeOY99Bid64HltFO83 R6i9p0l8G9eE8KHOGTVzFJJMFRN1cBj6HCfs+Gk/aB65umeKoVkWo6CKOhI= -----END CERTIFICATE-----Generated at Wed Nov 4 04:14:23 2026 by rpki-client