$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5abe8677-7da2-496c-95cc-c21ab1905b9d.roa File: 5abe8677-7da2-496c-95cc-c21ab1905b9d.roa (raw, json) Hash identifier: r+bvj7uM5/Mvva9qXZ9p2AxEy1JGn01Q3neVaVRzni8= Subject key identifier: 04:9E:E0:3D:ED:F7:0C:D3:3D:47:95:37:A3:00:2B:54:06:AE:F1:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 371F50F53695F2AEFF7460CB8241F60F8CD54A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5abe8677-7da2-496c-95cc-c21ab1905b9d.roa Signing time: Fri 23 Oct 2026 01:02:21 +0000 ROA not before: Fri 23 Oct 2026 01:02:21 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1f:50:f5:36:95:f2:ae:ff:74:60:cb:82:41:f6:0f:8c:d5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:02:21 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=dc8e4695cd0cddff0e45cad40a32b6005f1a5ecbb6e2cf1a9cd9faf7ff7f6862, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:67:90:58:32:32:e6:0f:00:5d:3d:bc:b6: 20:4c:00:48:37:da:de:23:6d:ca:ac:e1:81:d4:f8: 9f:38:01:b0:1e:ee:03:6b:f9:cc:53:e0:df:0d:f4: 5e:fb:17:de:d4:b0:46:29:b5:d9:20:a1:b4:4f:0d: e5:2c:e5:18:dc:0b:ce:ba:a9:47:54:67:55:fd:cb: 04:60:67:d9:6b:5a:39:ab:5f:6f:82:5e:9f:ba:ac: 5e:0b:4c:d1:51:09:31:57:29:94:f5:1d:77:88:d6: 68:86:a8:7c:e2:38:11:bc:b1:97:de:2e:cb:66:fb: 83:70:19:b6:c2:c3:b1:ab:82:de:7a:d2:d1:22:9b: 2d:86:f8:e9:ab:56:23:35:41:06:27:9f:0e:10:f2: 6e:af:b0:93:a0:af:57:5e:ad:32:2f:5c:03:42:c2: c2:5b:4e:2c:fc:67:d3:15:ca:55:3d:1f:21:00:4f: c3:20:bd:28:bb:b8:07:01:e3:9c:ce:14:a7:15:de: 93:9a:ae:2e:48:18:fb:31:53:17:9a:28:99:72:45: 41:5b:13:c7:cb:07:ac:a4:4d:0c:b6:bd:1f:bc:32: 30:43:55:8a:65:7a:fc:ea:69:3d:23:f0:de:c0:66: 39:d9:92:e8:8d:3e:2d:84:f4:8c:28:7f:13:60:71: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:E0:3D:ED:F7:0C:D3:3D:47:95:37:A3:00:2B:54:06:AE:F1:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5abe8677-7da2-496c-95cc-c21ab1905b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.128.0/18 Signature Algorithm: sha256WithRSAEncryption 40:b4:3d:85:4d:b0:89:26:84:2b:4b:95:d8:37:c3:25:32:7d: 21:a5:b1:95:a1:a6:45:09:b8:db:9c:86:4b:eb:dc:58:8d:28: 93:76:60:9f:7b:dd:ab:79:4c:59:46:68:0e:20:29:27:e2:e6: 3d:7d:4c:27:ce:f5:cf:7b:0a:0c:e8:43:97:e8:63:ef:b6:ed: d5:14:bf:c7:d5:79:ca:66:6c:02:51:6a:39:06:b5:31:db:bb: b7:3a:71:20:67:84:f8:02:cf:b3:45:8d:6c:35:a8:73:42:78: aa:6e:95:38:a9:66:2d:55:8c:db:20:ad:98:0d:05:07:b9:e1: 5b:67:cb:a1:0f:70:cc:9f:f7:ef:5d:a3:a9:15:cc:13:70:5d: 0d:fa:df:2c:b0:e5:4a:b3:bc:96:b9:21:a3:a3:7b:9e:9e:a9: 82:38:15:fe:dd:16:3a:02:2e:ab:96:dd:0d:03:98:f8:3c:fe: 82:7f:4d:20:08:8e:71:b9:4f:7d:63:cf:47:6c:80:b2:56:34: 0c:3d:6c:17:f8:51:a1:a8:ee:25:db:65:16:f1:64:af:dc:82: d9:28:2b:f9:92:6c:6a:b1:40:df:24:64:c6:c2:4e:e7:8f:fe: 0e:2f:1a:59:10:1f:50:db:33:1a:78:7a:66:bc:3e:c3:f5:bf: d0:65:4e:cc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITNx9Q9TaV8q7/dGDLgkH2D4zVSjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMjMwMTAyMjFaFw0yNzAxMjEyMzU5NTla MHoxSTBHBgNVBAUTQGRjOGU0Njk1Y2QwY2RkZmYwZTQ1Y2FkNDBhMzJiNjAwNWYx YTVlY2JiNmUyY2YxYTljZDlmYWY3ZmY3ZjY4NjIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJpCZ5BYMjLmDwBdPby2IEwASDfa3iNtyqzhgdT4nzgBsB7u A2v5zFPg3w30XvsX3tSwRim12SChtE8N5SzlGNwLzrqpR1RnVf3LBGBn2WtaOatf b4Jen7qsXgtM0VEJMVcplPUdd4jWaIaofOI4Ebyxl94uy2b7g3AZtsLDsauC3nrS 0SKbLYb46atWIzVBBiefDhDybq+wk6CvV16tMi9cA0LCwltOLPxn0xXKVT0fIQBP wyC9KLu4BwHjnM4UpxXek5quLkgY+zFTF5oomXJFQVsTx8sHrKRNDLa9H7wyMENV imV6/OppPSPw3sBmOdmS6I0+LYT0jCh/E2BxmK0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQEnuA97fcM0z1HlTejACtUBq7xjTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNWFiZTg2NzctN2RhMi00OTZjLTk1Y2MtYzIxYWIxOTA1YjlkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBkEJgDANBgkqhkiG9w0BAQsFAAOCAQEAQLQ9hU2wiSaEK0uV2DfDJTJ9IaWx laGmRQm425yGS+vcWI0ok3Zgn3vdq3lMWUZoDiApJ+LmPX1MJ871z3sKDOhDl+hj 77bt1RS/x9V5ymZsAlFqOQa1Mdu7tzpxIGeE+ALPs0WNbDWoc0J4qm6VOKlmLVWM 2yCtmA0FB7nhW2fLoQ9wzJ/3712jqRXME3BdDfrfLLDlSrO8lrkho6N7np6pgjgV /t0WOgIuq5bdDQOY+Dz+gn9NIAiOcblPfWPPR2yAslY0DD1sF/hRoajuJdtlFvFk r9yC2Sgr+ZJsarFA3yRkxsJO54/+Di8aWRAfUNszGnh6Zrw+w/W/0GVOzA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:21 2026 by rpki-client