$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5db8edcd-2022-4c36-b3e1-96ec2e01c1ed.roa File: 5db8edcd-2022-4c36-b3e1-96ec2e01c1ed.roa (raw, json) Hash identifier: 8t/prHj5EAs5QCluUatLDcct7dpRNM9M9Kzm5N6yMcU= Subject key identifier: 13:A9:8D:D7:EC:96:BB:3F:76:4F:E7:2D:54:3E:5C:10:08:9D:60:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57AD7475EBC236EDD44D85125A2F6793F086F9B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5db8edcd-2022-4c36-b3e1-96ec2e01c1ed.roa Signing time: Mon 19 Oct 2026 00:20:06 +0000 ROA not before: Mon 19 Oct 2026 00:20:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ad:74:75:eb:c2:36:ed:d4:4d:85:12:5a:2f:67:93:f0:86:f9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:20:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=359cbb60e425454d930f105801ff9588404217f3bd929dadb7557016477d9148, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:0a:80:e0:1e:6e:dc:c5:6f:ea:a7:45:aa: df:df:52:09:a1:81:47:fc:a6:da:74:ae:1e:26:28: eb:7c:03:e2:4f:37:ff:b0:f4:0f:f5:99:3a:1b:a4: f0:c8:de:00:ce:28:5c:fd:34:b2:a1:32:54:2f:89: 4f:46:37:5f:d7:32:57:c6:7d:a6:94:5c:83:bb:d7: c5:2f:c4:ba:27:79:52:b9:ee:ad:94:ff:b2:70:8c: 07:41:2a:1f:97:c3:a6:63:35:7b:32:e6:25:f0:63: ff:43:60:93:57:c3:48:8b:bf:73:ef:d5:b3:e7:86: 52:12:2f:55:3d:7b:ae:cd:86:d5:37:05:a2:a7:2f: 11:94:85:a0:bb:cb:da:b7:ed:24:7a:9e:9d:4b:75: 99:e6:99:41:91:28:5b:43:13:42:aa:47:9b:fe:24: 33:a5:fa:5f:18:45:db:bc:64:2b:f4:c7:eb:19:a7: 2d:23:bf:d8:9b:0f:a3:ed:09:86:e3:85:69:43:0c: 48:78:00:a5:a0:d4:94:d3:0b:82:2f:f4:34:4c:77: 52:17:55:c5:24:4d:df:f0:64:44:78:79:bc:cf:61: 3d:88:05:4a:e2:fa:72:d9:93:33:58:57:4c:56:11: 16:ce:c4:b6:7b:b9:9a:4e:25:82:3c:ca:56:bb:83: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:8D:D7:EC:96:BB:3F:76:4F:E7:2D:54:3E:5C:10:08:9D:60:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5db8edcd-2022-4c36-b3e1-96ec2e01c1ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.36.0/24 Signature Algorithm: sha256WithRSAEncryption a5:3f:ad:a2:70:95:de:8f:75:f4:a1:f3:33:fd:32:92:9e:56: bf:49:87:9b:d1:f4:15:b0:14:b3:0a:db:72:0c:f7:fd:82:9b: aa:02:a3:0c:05:f3:f4:7b:fe:4d:b3:b0:dd:6f:80:53:23:bc: 65:f5:6d:96:06:f1:1d:4e:7e:bd:23:b0:67:26:da:b2:da:73: f5:be:5c:1c:40:c1:1c:31:db:90:24:9e:51:f7:85:b8:44:21: 5c:75:58:f3:7b:5e:2b:2d:00:c0:3e:2d:30:f1:fd:4c:43:30: a0:30:66:c4:71:0b:b0:b9:a9:c1:7e:79:72:91:4b:5a:b2:6e: 09:b1:80:fe:3e:76:17:e9:45:03:0a:15:70:f8:bc:f1:2f:6e: 75:d0:86:9f:ce:b6:4c:c3:14:81:36:cd:a2:62:7c:7c:a5:59: 2b:49:de:2d:31:37:ca:ba:31:40:65:68:cb:d8:d5:e3:ac:4f: 3f:f4:da:9a:43:03:9d:f2:d8:a0:b5:1c:61:77:8b:dd:95:b7: 41:6d:a4:b4:79:bd:52:b2:49:44:54:e9:2f:01:40:d7:8f:f5: 0d:1e:31:7c:8c:cf:4e:0d:56:7c:a5:1f:63:75:b1:2e:36:86: 48:75:25:b7:28:96:6d:02:6a:2f:e0:b8:43:8d:16:a3:dd:da: 64:87:f9:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV610devCNu3UTYUSWi9nk/CG+bEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDAyMDA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTljYmI2MGU0MjU0NTRkOTMwZjEwNTgwMWZmOTU4ODQw NDIxN2YzYmQ5MjlkYWRiNzU1NzAxNjQ3N2Q5MTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqWwqA4B5u3MVv6qdFqt/fUgmhgUf8ptp0rh4mKOt8A+JP N/+w9A/1mTobpPDI3gDOKFz9NLKhMlQviU9GN1/XMlfGfaaUXIO718UvxLoneVK5 7q2U/7JwjAdBKh+Xw6ZjNXsy5iXwY/9DYJNXw0iLv3Pv1bPnhlISL1U9e67NhtU3 BaKnLxGUhaC7y9q37SR6np1LdZnmmUGRKFtDE0KqR5v+JDOl+l8YRdu8ZCv0x+sZ py0jv9ibD6PtCYbjhWlDDEh4AKWg1JTTC4Iv9DRMd1IXVcUkTd/wZER4ebzPYT2I BUri+nLZkzNYV0xWERbOxLZ7uZpOJYI8yla7g8UbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE6mN1+yWuz92T+ctVD5cEAidYJIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkYjhlZGNkLTIwMjItNGMzNi1iM2UxLTk2ZWMyZTAxYzFlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmCQwDQYJKoZIhvcNAQELBQADggEBAKU/raJwld6PdfSh8zP9MpKeVr9J h5vR9BWwFLMK23IM9/2Cm6oCowwF8/R7/k2zsN1vgFMjvGX1bZYG8R1Ofr0jsGcm 2rLac/W+XBxAwRwx25AknlH3hbhEIVx1WPN7XistAMA+LTDx/UxDMKAwZsRxC7C5 qcF+eXKRS1qybgmxgP4+dhfpRQMKFXD4vPEvbnXQhp/OtkzDFIE2zaJifHylWStJ 3i0xN8q6MUBlaMvY1eOsTz/02ppDA53y2KC1HGF3i92Vt0FtpLR5vVKySURU6S8B QNeP9Q0eMXyMz04NVnylH2N1sS42hkh1Jbcolm0Cai/guEONFqPd2mSH+Qg= -----END CERTIFICATE-----Generated at Tue Nov 3 20:12:46 2026 by rpki-client