$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa File: 5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa (raw, json) Hash identifier: lCVb8YOuwxJGcsmKlIWzuqumKP9ROGyEj7NMRfTNbEA= Subject key identifier: 0A:F6:23:1C:21:B6:98:50:DB:AF:6A:3D:0D:7B:94:F1:36:AA:79:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76A7AD3C7A2769E4A235859E54F2DFDC30235D23 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa Signing time: Mon 05 Oct 2026 00:30:13 +0000 ROA not before: Mon 05 Oct 2026 00:30:13 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 168.203.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a7:ad:3c:7a:27:69:e4:a2:35:85:9e:54:f2:df:dc:30:23:5d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:30:13 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=5d0a922ae34391a2074028b1e2f18899e881d222891e5048b5ba9b1307d04cfa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:95:5e:0c:ab:f9:b8:a6:8f:17:dd:03:de: 79:f4:c2:c5:10:78:01:5f:9f:2f:2b:f2:66:1e:58: e3:53:10:bb:6f:8d:bd:c8:01:23:e2:96:19:2c:ff: 28:74:0c:3b:c5:cc:75:30:29:37:f8:86:3f:08:76: 5a:03:ec:aa:22:1b:7a:e7:e7:dc:c1:d6:22:3c:29: 66:3c:8b:94:9e:3f:a2:c8:8e:d5:fb:b5:37:38:8b: e8:87:67:09:a5:03:ca:92:ac:7a:f3:ac:cf:a8:0f: 1e:f7:fc:a8:c6:33:2e:de:bc:64:83:e6:ab:11:b7: be:9c:83:f8:5d:ef:b5:4e:98:e0:c9:bd:96:f4:eb: df:c3:c8:68:a7:ea:f3:d1:9e:ec:5c:d2:fa:2f:6a: 42:a8:fc:a6:58:2f:34:d7:1b:fa:d1:e0:31:df:e8: fa:5e:4b:69:4e:2d:02:28:0b:6f:d3:ba:f2:00:20: 8f:13:22:09:81:9b:2f:71:ed:06:b8:ab:00:a9:1d: fd:e6:d7:9e:81:05:6c:21:23:31:a5:ab:b7:7f:05: f4:fd:f2:3c:f6:1b:f7:8e:11:31:f3:2b:3a:39:2d: 86:bd:a9:db:de:57:00:6a:74:d2:95:2b:4b:21:ff: be:38:60:2c:cc:48:d8:9d:28:de:c2:5e:6b:be:fb: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F6:23:1C:21:B6:98:50:DB:AF:6A:3D:0D:7B:94:F1:36:AA:79:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.203.64.0/18 Signature Algorithm: sha256WithRSAEncryption 44:ff:5a:c3:47:82:5d:4c:41:b5:92:a6:5e:0d:1d:c6:ef:c9: 05:48:2b:77:6a:31:28:75:32:44:aa:7c:e1:cd:dd:d4:28:d5: e5:38:10:10:dd:d9:46:4e:41:a2:d1:6b:2e:18:e9:25:48:73: 16:9a:83:0a:6b:e1:b1:3d:44:cf:97:8b:87:9d:f7:60:c0:15: f2:4d:96:ee:1f:a5:a4:4e:00:b8:d9:74:5b:71:3f:a7:10:36: f6:c8:e1:a6:8a:d1:83:09:cf:bd:fc:44:1c:e2:73:2e:f7:ab: 72:55:05:da:dc:9e:4d:9e:a5:ca:3e:fc:50:f7:19:2c:6c:7c: 59:03:fd:42:bb:dc:7b:5b:93:02:20:e4:ef:89:39:1f:de:90: 38:62:4d:06:fa:eb:9f:0d:01:59:3a:08:e0:5d:0b:ef:f9:57: b5:f1:e6:44:15:ab:55:44:dc:94:4e:96:a2:0a:a6:36:93:df: 77:90:50:c4:41:e0:28:41:2c:eb:1d:5a:81:a6:d2:1c:84:73: 55:87:eb:3f:a0:77:58:f8:22:92:b7:6d:9b:1d:95:23:af:10: ab:22:62:c7:7a:86:97:86:13:b3:40:df:90:06:5b:0f:0f:f4: 66:b7:71:e8:03:01:a2:71:de:24:4d:ae:b6:ff:1d:55:b0:05: 8b:1f:f0:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdqetPHonaeSiNYWeVPLf3DAjXSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAzMDEzWhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDBhOTIyYWUzNDM5MWEyMDc0MDI4YjFlMmYxODg5OWU4 ODFkMjIyODkxZTUwNDhiNWJhOWIxMzA3ZDA0Y2ZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV3ZVeDKv5uKaPF90D3nn0wsUQeAFfny8r8mYeWONTELtv jb3IASPilhks/yh0DDvFzHUwKTf4hj8IdloD7KoiG3rn59zB1iI8KWY8i5SeP6LI jtX7tTc4i+iHZwmlA8qSrHrzrM+oDx73/KjGMy7evGSD5qsRt76cg/hd77VOmODJ vZb069/DyGin6vPRnuxc0vovakKo/KZYLzTXG/rR4DHf6PpeS2lOLQIoC2/TuvIA II8TIgmBmy9x7Qa4qwCpHf3m156BBWwhIzGlq7d/BfT98jz2G/eOETHzKzo5LYa9 qdveVwBqdNKVK0sh/744YCzMSNidKN7CXmu++3tFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCvYjHCG2mFDbr2o9DXuU8TaqeQIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhNDhmZDY4LWFlMTMtNDU0Mi1iOGEwLTk0MTNmODU3M2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaoy0AwDQYJKoZIhvcNAQELBQADggEBAET/WsNHgl1MQbWSpl4NHcbvyQVI K3dqMSh1MkSqfOHN3dQo1eU4EBDd2UZOQaLRay4Y6SVIcxaagwpr4bE9RM+Xi4ed 92DAFfJNlu4fpaROALjZdFtxP6cQNvbI4aaK0YMJz738RBzicy73q3JVBdrcnk2e pco+/FD3GSxsfFkD/UK73HtbkwIg5O+JOR/ekDhiTQb6658NAVk6COBdC+/5V7Xx 5kQVq1VE3JROlqIKpjaT33eQUMRB4ChBLOsdWoGm0hyEc1WH6z+gd1j4IpK3bZsd lSOvEKsiYsd6hpeGE7NA35AGWw8P9Ga3cegDAaJx3iRNrrb/HVWwBYsf8No= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:39 2026 by rpki-client