$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa File: 5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa (raw, json) Hash identifier: 5+nELcQN8eMItGipeeepLjjTqR+kY1oi9W6M9ptBx88= Subject key identifier: 73:F5:62:54:8A:1E:7E:47:D9:98:13:25:79:4F:81:93:E3:EB:BC:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 132A2798627CDC4E382CB8A029B47D9ED8769B7B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa Signing time: Thu 08 Oct 2026 00:51:38 +0000 ROA not before: Thu 08 Oct 2026 00:51:38 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2a:27:98:62:7c:dc:4e:38:2c:b8:a0:29:b4:7d:9e:d8:76:9b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:51:38 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=c9a1f96b0bd6508dd4741b798af3d3511fb09acf3e29a8cefff95a0fc212a5f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:f8:50:f9:4d:83:80:0c:6d:37:b4:28:ba: d8:a5:60:34:19:ef:14:a2:98:42:e5:87:4e:09:77: ff:df:96:d7:28:fd:4d:4f:83:12:65:e6:f2:38:2c: 7f:1b:b1:1b:59:79:ff:8b:ba:85:9d:12:01:00:0f: d0:c0:72:c6:d6:97:a6:cf:cb:cb:ba:bd:75:3e:58: ea:5e:8c:c6:c5:5b:d8:82:61:45:ca:38:57:5a:66: f9:a3:10:51:28:e5:0e:29:ad:08:fa:2e:f4:34:a2: 07:79:62:f5:e3:6d:fb:1c:0c:46:74:99:4a:3b:e5: 2e:2c:af:4f:80:f8:cc:a2:7d:15:18:e8:e3:fd:3a: c0:e1:4a:d2:81:1c:58:21:c7:1f:34:18:44:c3:9b: 18:ee:bd:3e:da:84:fe:11:9a:33:bd:63:1e:18:a9: e1:c5:ba:f1:cb:06:82:e8:86:4a:a5:9e:41:0d:6a: ef:50:2f:f1:84:23:68:19:ea:2d:a2:17:bf:ec:32: 4b:0a:4c:4e:3d:b7:e4:a6:5b:16:14:a6:f2:6b:fa: a2:13:95:d8:81:f7:0f:58:62:d8:3e:af:01:d1:3e: 8e:eb:a9:0b:c4:74:f4:f2:63:6f:d0:2f:bb:82:55: 33:46:fb:7b:83:92:36:b2:86:f8:6f:29:6a:0d:c9: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:62:54:8A:1E:7E:47:D9:98:13:25:79:4F:81:93:E3:EB:BC:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.249.0/24 Signature Algorithm: sha256WithRSAEncryption 60:5b:d1:db:24:2a:5d:9e:84:6f:a1:fc:89:36:a8:57:58:9d: 7c:4d:78:f8:fd:f4:e8:21:c0:e0:80:38:ec:46:a2:f9:b4:a0: ad:3b:52:c4:e3:ea:7e:e1:8e:2b:4d:69:9b:56:3e:a2:73:e6: dd:1f:ad:a0:95:2f:82:52:7b:ba:a1:dc:64:49:6f:bf:60:61: cb:53:ce:6f:80:17:88:18:e3:df:58:b8:28:03:95:1f:93:d5: e7:ba:6e:81:76:64:f3:9e:fb:77:10:62:ba:11:35:e7:37:9f: ee:6b:f5:a8:94:01:9c:63:63:26:1e:ec:e0:0e:f7:11:f1:af: d1:bc:41:df:22:c9:91:bf:b4:c1:02:eb:ac:3b:2b:c0:32:71: a8:6b:30:45:52:fa:a0:b9:b5:16:44:e9:41:bd:63:23:9f:3d: 47:db:b0:85:f6:c7:6f:2e:42:e3:3b:12:a1:53:8e:d3:8f:75: f5:3b:93:80:e6:bf:d4:6a:2c:4e:42:9e:84:6f:cc:fb:eb:02: 78:3d:4c:df:b9:42:bd:dd:ea:79:aa:3e:2b:e3:34:1b:2c:6e: 4f:71:7b:25:6b:08:39:b6:62:22:3e:38:f8:8b:80:7a:c0:a7: 60:24:ea:1a:78:5c:93:13:29:4a:81:92:60:1f:2b:1a:ce:d3: b0:b9:d2:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEyonmGJ83E44LLigKbR9nth2m3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDA1MTM4WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWExZjk2YjBiZDY1MDhkZDQ3NDFiNzk4YWYzZDM1MTFm YjA5YWNmM2UyOWE4Y2VmZmY5NWEwZmMyMTJhNWYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTQ/hQ+U2DgAxtN7QoutilYDQZ7xSimELlh04Jd//fltco /U1PgxJl5vI4LH8bsRtZef+LuoWdEgEAD9DAcsbWl6bPy8u6vXU+WOpejMbFW9iC YUXKOFdaZvmjEFEo5Q4prQj6LvQ0ogd5YvXjbfscDEZ0mUo75S4sr0+A+MyifRUY 6OP9OsDhStKBHFghxx80GETDmxjuvT7ahP4RmjO9Yx4YqeHFuvHLBoLohkqlnkEN au9QL/GEI2gZ6i2iF7/sMksKTE49t+SmWxYUpvJr+qITldiB9w9YYtg+rwHRPo7r qQvEdPTyY2/QL7uCVTNG+3uDkjayhvhvKWoNydgxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc/ViVIoefkfZmBMleU+Bk+PrvGUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViZGIyMDI1LTcxODEtNDM5Zi04YmQ4LWQxMDkxYzFmOGQ3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTfkwDQYJKoZIhvcNAQELBQADggEBAGBb0dskKl2ehG+h/Ik2qFdYnXxN ePj99OghwOCAOOxGovm0oK07UsTj6n7hjitNaZtWPqJz5t0fraCVL4JSe7qh3GRJ b79gYctTzm+AF4gY499YuCgDlR+T1ee6boF2ZPOe+3cQYroRNec3n+5r9aiUAZxj YyYe7OAO9xHxr9G8Qd8iyZG/tMEC66w7K8AycahrMEVS+qC5tRZE6UG9YyOfPUfb sIX2x28uQuM7EqFTjtOPdfU7k4Dmv9RqLE5CnoRvzPvrAng9TN+5Qr3d6nmqPivj NBssbk9xeyVrCDm2YiI+OPiLgHrAp2Ak6hp4XJMTKUqBkmAfKxrO07C50k4= -----END CERTIFICATE-----Generated at Tue Nov 3 06:20:46 2026 by rpki-client