$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa File: 5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa (raw, json) Hash identifier: 5bRUVdkzA8ZS0Bfrkzv+wGN3AQ7zYMnYvGqp7OH02Kg= Subject key identifier: B1:25:9E:2B:7C:E0:35:D1:FB:C0:11:70:C2:96:ED:54:9C:50:AA:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5791612D1126E496CDA2E4A651134A32B752716D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa Signing time: Tue 06 Oct 2026 00:51:45 +0000 ROA not before: Tue 06 Oct 2026 00:51:45 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 162.213.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:91:61:2d:11:26:e4:96:cd:a2:e4:a6:51:13:4a:32:b7:52:71:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:51:45 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=0ff5db758f05368971839bbf62e5305516c20f87124557006228d36350251f9f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:23:7b:21:b3:f1:17:4d:0b:b2:ff:20:c3: c5:9c:b0:93:7f:2e:09:26:4e:ca:49:a9:03:b8:eb: c4:7a:df:12:87:2e:c1:8c:b9:b8:3f:6e:fb:35:43: 08:1d:fc:4f:6b:69:cc:15:79:59:f9:5a:11:b9:cc: 34:f5:ab:c8:d5:0c:da:9d:60:1a:74:32:6d:85:d5: 92:79:2c:e5:21:dd:14:c8:e5:e5:58:1a:7f:64:d3: 74:52:8d:f5:9b:3f:8a:12:20:bd:ae:59:66:52:79: e9:ec:6f:13:38:44:66:6c:d7:92:a9:e2:60:7d:10: 74:aa:dc:e6:db:37:95:51:61:9e:a0:2c:93:cf:55: cd:93:d5:4d:e2:2a:56:21:57:fe:0f:ad:99:77:78: 6b:da:ed:1b:3b:12:f8:eb:4d:16:e4:1b:38:b3:c9: e6:85:59:0c:00:93:d4:18:ed:da:b4:74:00:7b:01: 0d:f9:18:5c:57:a7:37:8d:e5:09:41:00:30:d8:04: 3b:17:40:f0:3e:0c:bd:b9:a0:8e:f9:68:85:5e:a7: 9d:45:7b:a9:1f:67:4c:d0:d1:34:ce:67:69:69:e6: e3:d2:92:42:aa:db:0d:3c:a1:b1:0a:d2:ed:d4:c1: 0a:6b:32:27:53:c1:c0:5c:0f:4c:8a:81:63:d2:9d: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:25:9E:2B:7C:E0:35:D1:FB:C0:11:70:C2:96:ED:54:9C:50:AA:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.213.232.0/24 Signature Algorithm: sha256WithRSAEncryption 40:46:24:6c:4d:a8:c1:f7:e4:17:1b:59:64:23:61:d1:3d:df: 17:d5:68:3d:91:69:41:0d:e2:8f:1d:02:98:c9:c6:2f:de:4e: f3:b8:6f:b5:92:f1:1d:8d:94:de:0d:12:c3:d4:e3:01:22:40: c1:05:3c:95:25:1b:4d:49:ca:a0:3d:1e:f8:84:c9:31:99:1a: 92:98:28:46:19:a3:23:a3:e0:ff:a6:5d:e0:58:80:4d:36:0a: 56:3a:52:55:22:a4:91:ac:2e:62:4a:2e:2a:df:6c:27:2e:d5: b3:16:df:61:c4:24:ec:b0:93:54:8a:48:60:42:6e:2d:e5:9e: 1d:ac:41:f2:c4:74:fb:11:db:20:7e:5e:63:1b:4f:df:5b:7e: 5b:09:4d:84:e0:e9:0c:8b:a3:f4:65:8f:78:64:42:27:7d:77: 02:2f:c0:d1:cf:84:05:d6:e0:01:99:33:8d:5a:94:4f:fd:c8: b8:ab:26:3d:29:a3:e6:0b:23:9d:42:9b:ed:19:21:7d:d4:41: 9f:37:46:36:46:81:af:c2:a0:25:b2:dc:6e:30:46:4d:44:81: 4d:4d:2c:74:ed:52:ed:7b:9d:eb:27:a5:81:91:cb:b0:1f:d5: 89:a8:b6:f4:3a:76:13:ab:25:b2:37:2f:a5:b1:14:12:ee:13: 62:db:34:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV5FhLREm5JbNouSmURNKMrdScW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA1MTQ1WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmY1ZGI3NThmMDUzNjg5NzE4MzliYmY2MmU1MzA1NTE2 YzIwZjg3MTI0NTU3MDA2MjI4ZDM2MzUwMjUxZjlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1ciN7IbPxF00Lsv8gw8WcsJN/LgkmTspJqQO468R63xKH LsGMubg/bvs1Qwgd/E9racwVeVn5WhG5zDT1q8jVDNqdYBp0Mm2F1ZJ5LOUh3RTI 5eVYGn9k03RSjfWbP4oSIL2uWWZSeensbxM4RGZs15Kp4mB9EHSq3ObbN5VRYZ6g LJPPVc2T1U3iKlYhV/4PrZl3eGva7Rs7EvjrTRbkGzizyeaFWQwAk9QY7dq0dAB7 AQ35GFxXpzeN5QlBADDYBDsXQPA+DL25oI75aIVep51Fe6kfZ0zQ0TTOZ2lp5uPS kkKq2w08obEK0u3UwQprMidTwcBcD0yKgWPSneH3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsSWeK3zgNdH7wBFwwpbtVJxQqjEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlNzU4N2I5LWM5M2ItNDE2ZS04YTk2LWIxNDQ0OGNjMWJjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi1egwDQYJKoZIhvcNAQELBQADggEBAEBGJGxNqMH35BcbWWQjYdE93xfV aD2RaUEN4o8dApjJxi/eTvO4b7WS8R2NlN4NEsPU4wEiQMEFPJUlG01JyqA9HviE yTGZGpKYKEYZoyOj4P+mXeBYgE02ClY6UlUipJGsLmJKLirfbCcu1bMW32HEJOyw k1SKSGBCbi3lnh2sQfLEdPsR2yB+XmMbT99bflsJTYTg6QyLo/Rlj3hkQid9dwIv wNHPhAXW4AGZM41alE/9yLirJj0po+YLI51Cm+0ZIX3UQZ83RjZGga/CoCWy3G4w Rk1EgU1NLHTtUu17nesnpYGRy7Af1YmotvQ6dhOrJbI3L6WxFBLuE2LbNFQ= -----END CERTIFICATE-----Generated at Tue Oct 27 16:22:43 2026 by rpki-client