$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa File: 5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa (raw, json) Hash identifier: LRiWPO0A2snnnhlFI38E2nC0U4Emm1ytJWYX/NFfJpc= Subject key identifier: 27:06:9E:87:BC:AF:75:6F:C6:B7:E0:EA:2B:3A:A1:8E:B7:A0:0A:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5233173231E88773C38DF9CDF51BA5E1DA3710FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa Signing time: Mon 12 Oct 2026 00:30:17 +0000 ROA not before: Mon 12 Oct 2026 00:30:17 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:33:17:32:31:e8:87:73:c3:8d:f9:cd:f5:1b:a5:e1:da:37:10:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:30:17 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=e11eaa58fba4d1a478efb5247b2867fcd802f8f8af3a82752e8189d0005cceeb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:e0:98:4e:65:39:4a:2f:47:32:b0:8f:7c: 75:a6:39:30:4a:f5:20:66:5e:73:10:42:c1:7e:2a: 2e:fa:06:1b:26:a4:b3:15:0a:16:e8:4d:b5:a4:41: 16:37:41:8d:d5:46:70:7f:b3:9d:da:fd:64:1f:2a: 21:aa:ed:a0:d7:ce:5c:20:ae:fa:5f:88:0c:c5:31: 96:1e:6a:89:ae:32:00:78:ca:ba:2a:d5:84:af:e3: de:39:48:f8:f2:ec:7e:bf:7f:c0:d1:4b:90:65:08: e9:d7:04:09:fb:f7:9a:b1:cd:80:d2:67:b2:14:53: 54:84:71:21:3a:c3:7a:e1:7e:d7:8d:8b:c4:1b:14: c2:6b:ee:df:4f:a5:10:dc:31:0a:04:34:d4:73:c2: 72:12:cc:7e:a5:ae:5c:e1:64:aa:5e:b8:10:bf:34: e7:fb:28:71:f9:e3:5c:80:1a:7b:dc:2c:fe:fe:9a: 72:dd:9d:66:76:d3:28:e4:9d:e5:0d:57:c3:ce:5f: 92:59:13:fe:fe:6f:bf:b6:69:96:d4:1e:68:cc:f6: e3:34:9b:d7:7b:1f:cf:79:a4:90:8c:80:51:0b:1c: ca:9f:6a:95:fe:c4:b2:4f:bb:91:0f:c7:15:dc:08: c5:ec:93:f1:bb:7a:a6:9b:a4:13:32:6b:88:01:ca: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:06:9E:87:BC:AF:75:6F:C6:B7:E0:EA:2B:3A:A1:8E:B7:A0:0A:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.128.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:cb:8c:da:69:c1:44:bb:f5:ac:0d:cc:f1:3b:d4:23:4f:b1: 83:de:b7:d1:2b:b6:75:b5:d7:7b:c9:b0:1b:71:3e:dd:76:23: bb:a7:de:45:7b:af:9c:74:5f:50:28:9d:b8:67:83:c7:ff:00: 99:70:7e:e1:3a:02:bb:7b:cd:ee:db:5b:b4:28:96:8c:a8:47: 9f:a8:db:b5:79:81:b6:18:24:58:5c:7c:ed:2d:c6:b0:07:ed: 18:48:1c:37:e2:76:34:26:31:21:b8:ef:d6:1d:69:ff:4e:09: 5a:2a:82:7c:33:97:01:1f:c5:8d:3d:44:4f:f8:dd:40:b2:ae: e6:c8:1a:22:4d:cd:2b:0e:fb:9b:71:5e:dc:f6:37:1e:6d:20: e9:0c:12:f8:4a:5c:cb:27:b6:5f:76:25:80:45:31:5c:45:24: 23:de:c0:3a:3e:34:cd:0e:5b:4c:e6:f3:40:62:41:5d:0c:ed: d3:cb:88:2a:04:20:ef:b7:94:78:cb:28:0d:ba:a0:f6:3c:00: a1:e2:14:8c:38:5b:c2:a9:a5:d8:4e:7b:5f:72:2d:9c:ce:c1: a5:eb:07:d8:7c:f0:25:ae:a5:5d:21:be:20:23:4b:46:96:a0: b0:5b:81:b1:ae:cd:93:ed:f8:c2:2c:61:67:cf:d4:3d:95:28: 41:f9:f6:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUjMXMjHoh3PDjfnN9Rul4do3EP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAzMDE3WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTFlYWE1OGZiYTRkMWE0NzhlZmI1MjQ3YjI4NjdmY2Q4 MDJmOGY4YWYzYTgyNzUyZTgxODlkMDAwNWNjZWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH1uCYTmU5Si9HMrCPfHWmOTBK9SBmXnMQQsF+Ki76Bhsm pLMVChboTbWkQRY3QY3VRnB/s53a/WQfKiGq7aDXzlwgrvpfiAzFMZYeaomuMgB4 yroq1YSv4945SPjy7H6/f8DRS5BlCOnXBAn795qxzYDSZ7IUU1SEcSE6w3rhfteN i8QbFMJr7t9PpRDcMQoENNRzwnISzH6lrlzhZKpeuBC/NOf7KHH541yAGnvcLP7+ mnLdnWZ20yjkneUNV8POX5JZE/7+b7+2aZbUHmjM9uM0m9d7H895pJCMgFELHMqf apX+xLJPu5EPxxXcCMXsk/G7eqabpBMya4gBysMjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJwaeh7yvdW/Gt+DqKzqhjregCnIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYzNkOWZiLTk3YWYtNGQ1YS05NTA1LWJhYmFkN2QzYjA0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPRXIAwDQYJKoZIhvcNAQELBQADggEBAH/LjNppwUS79awNzPE71CNPsYPe t9ErtnW113vJsBtxPt12I7un3kV7r5x0X1Aonbhng8f/AJlwfuE6Art7ze7bW7Qo loyoR5+o27V5gbYYJFhcfO0txrAH7RhIHDfidjQmMSG479Ydaf9OCVoqgnwzlwEf xY09RE/43UCyrubIGiJNzSsO+5txXtz2Nx5tIOkMEvhKXMsntl92JYBFMVxFJCPe wDo+NM0OW0zm80BiQV0M7dPLiCoEIO+3lHjLKA26oPY8AKHiFIw4W8KppdhOe19y LZzOwaXrB9h88CWupV0hviAjS0aWoLBbgbGuzZPt+MIsYWfP1D2VKEH59lg= -----END CERTIFICATE-----Generated at Tue Nov 3 19:21:03 2026 by rpki-client