$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e8a746b-196e-4958-804c-1ff8ad621b8e.roa File: 5e8a746b-196e-4958-804c-1ff8ad621b8e.roa (raw, json) Hash identifier: 85TXpJH8yOiArtlI8lkJTUxhbxzwDeozO2mBGzFLBnw= Subject key identifier: 35:A4:B6:D9:CF:7F:F1:D9:AB:CB:4C:98:1C:8D:C5:D0:74:BB:AF:08 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2685C789C4131D1E0B916A0C87AC2186973E4098 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e8a746b-196e-4958-804c-1ff8ad621b8e.roa Signing time: Fri 16 Oct 2026 00:10:38 +0000 ROA not before: Fri 16 Oct 2026 00:10:38 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 121.95.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:85:c7:89:c4:13:1d:1e:0b:91:6a:0c:87:ac:21:86:97:3e:40:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:10:38 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=08c89833f394e451392ad518ec54d541aaec9c3243d0adabed140872b54e5b68, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:32:da:78:0b:8d:b7:2f:bf:db:ad:13:61: 80:e0:c6:c7:7f:27:06:81:7d:01:0e:35:db:ee:19: 8d:f0:c9:e9:0b:a8:54:e7:ce:8c:8b:02:ee:fc:c5: cf:45:d0:bb:66:42:3e:df:b0:18:97:a3:b5:b7:44: 78:1a:9c:e1:d4:11:ec:4b:9e:32:9c:0d:57:c9:40: 11:d9:ec:ac:7f:f3:bf:f4:9a:89:b2:51:9b:38:86: 87:1e:49:28:b6:30:3f:63:1d:e5:f7:ca:98:84:f5: 70:55:9a:20:80:61:81:78:b3:fe:d6:e7:75:9c:41: 69:2f:10:8e:6e:0f:a5:90:06:c8:7e:78:b3:dc:b8: f1:77:a4:e8:ad:96:d6:ce:94:73:07:52:e1:cf:0f: 8b:89:a2:42:1f:b5:3c:2d:aa:87:22:55:32:a5:a6: ef:2c:58:bd:be:90:97:83:cc:c9:7a:70:9b:c1:65: e1:0e:07:05:44:b4:e9:97:c0:28:ee:22:48:60:be: 67:57:ef:3a:4e:b2:07:b0:b8:00:d1:86:df:d5:d4: ca:a2:29:70:99:2b:3a:36:b3:e3:90:15:90:e2:f4: e6:aa:73:d3:09:dd:fd:b6:8b:6d:c2:d1:92:01:2f: f6:0e:d6:7b:34:38:70:22:4f:16:8e:a0:dd:01:b2: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:B6:D9:CF:7F:F1:D9:AB:CB:4C:98:1C:8D:C5:D0:74:BB:AF:08 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e8a746b-196e-4958-804c-1ff8ad621b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.95.128.0/17 Signature Algorithm: sha256WithRSAEncryption 90:aa:5a:51:76:ed:d9:6a:9f:0a:50:f7:aa:af:ab:15:e1:bc: 79:0d:00:93:4f:5f:cb:36:3a:e6:f8:5e:99:f1:83:10:39:e5: 0f:a3:1e:80:27:19:d6:e0:40:33:97:bb:cd:22:37:d1:58:54: 09:e4:49:80:5f:c3:58:2f:7a:20:29:97:55:42:3a:b2:72:d2: 06:76:09:86:61:f8:20:2e:5c:47:cc:20:04:6a:e4:8f:80:b4: a3:8a:56:66:ba:9d:c6:20:19:ab:6d:f5:36:85:c3:1d:96:f9: 09:7e:6c:02:09:55:6c:50:82:e7:9f:c8:b0:0e:79:19:8a:44: 69:ba:4e:78:68:47:88:3c:b9:d5:e1:ba:b6:d4:28:3c:7b:c2: de:d0:58:c9:f7:98:94:17:94:54:fd:cc:3c:c0:b0:9a:71:6e: ec:13:99:16:81:4b:f5:25:1b:4e:9a:7f:d4:82:f6:ca:10:e0: 44:78:ae:45:a4:d7:85:f3:96:67:ab:ea:b7:68:26:9b:0c:37: b2:b6:13:e5:af:37:03:c8:b8:e8:43:e2:ad:7a:a2:5d:a3:61: 3d:3a:55:b2:81:82:a7:e5:7c:a1:ea:f7:66:26:49:ad:d8:f9: d1:0a:29:e1:b2:08:e3:06:bb:60:14:09:a4:5a:d0:6f:6c:a2: ea:b9:35:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJoXHicQTHR4LkWoMh6whhpc+QJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAxMDM4WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGM4OTgzM2YzOTRlNDUxMzkyYWQ1MThlYzU0ZDU0MWFh ZWM5YzMyNDNkMGFkYWJlZDE0MDg3MmI1NGU1YjY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRYDLaeAuNty+/260TYYDgxsd/JwaBfQEONdvuGY3wyekL qFTnzoyLAu78xc9F0LtmQj7fsBiXo7W3RHganOHUEexLnjKcDVfJQBHZ7Kx/87/0 momyUZs4hoceSSi2MD9jHeX3ypiE9XBVmiCAYYF4s/7W53WcQWkvEI5uD6WQBsh+ eLPcuPF3pOitltbOlHMHUuHPD4uJokIftTwtqociVTKlpu8sWL2+kJeDzMl6cJvB ZeEOBwVEtOmXwCjuIkhgvmdX7zpOsgewuADRht/V1MqiKXCZKzo2s+OQFZDi9Oaq c9MJ3f22i23C0ZIBL/YO1ns0OHAiTxaOoN0Bsl5XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNaS22c9/8dmry0yYHI3F0HS7rwgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlOGE3NDZiLTE5NmUtNDk1OC04MDRjLTFmZjhhZDYyMWI4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd5X4AwDQYJKoZIhvcNAQELBQADggEBAJCqWlF27dlqnwpQ96qvqxXhvHkN AJNPX8s2Oub4XpnxgxA55Q+jHoAnGdbgQDOXu80iN9FYVAnkSYBfw1gveiApl1VC OrJy0gZ2CYZh+CAuXEfMIARq5I+AtKOKVma6ncYgGatt9TaFwx2W+Ql+bAIJVWxQ guefyLAOeRmKRGm6TnhoR4g8udXhurbUKDx7wt7QWMn3mJQXlFT9zDzAsJpxbuwT mRaBS/UlG06af9SC9soQ4ER4rkWk14Xzlmer6rdoJpsMN7K2E+WvNwPIuOhD4q16 ol2jYT06VbKBgqflfKHq92YmSa3Y+dEKKeGyCOMGu2AUCaRa0G9souq5NYo= -----END CERTIFICATE-----Generated at Wed Nov 4 05:51:55 2026 by rpki-client