$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef1acbb-4588-4daa-b2a0-52229c143ff0.roa File: 5ef1acbb-4588-4daa-b2a0-52229c143ff0.roa (raw, json) Hash identifier: udgfSR7tbowv80j66vFe+qpmP55UJxt7HPjegvR8uSg= Subject key identifier: 64:EA:73:E4:A7:74:08:3C:05:FD:96:77:31:91:9D:17:87:C3:C9:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0913E9CD09192FA34353D8BF5E4D354CB099D501 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef1acbb-4588-4daa-b2a0-52229c143ff0.roa Signing time: Fri 23 Oct 2026 01:31:13 +0000 ROA not before: Fri 23 Oct 2026 01:31:13 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 40.174.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:13:e9:cd:09:19:2f:a3:43:53:d8:bf:5e:4d:35:4c:b0:99:d5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:31:13 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=fd267bfb899ea18c7f2cb70946a94fe2d91b95254555e68de6486c0542e4c8cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:0f:fe:ff:5e:49:36:aa:b2:02:de:21:46: d8:b9:09:a9:f7:77:50:f4:ab:13:49:d9:18:07:cb: 3f:84:70:09:2e:e1:1e:c6:75:f9:b5:aa:e5:8c:b6: 45:62:48:09:96:d8:56:61:95:cb:0f:d0:ff:e7:b7: e5:e7:31:9e:82:3b:c9:4a:5f:ad:35:cb:f8:96:8b: 42:fb:5b:b2:94:ec:eb:61:67:e9:f3:d9:ed:00:61: 26:4d:74:b5:d4:85:9f:2d:a1:5c:88:94:4f:c9:45: d3:71:d4:78:cf:72:b8:96:1a:39:b4:bb:3c:f3:77: 31:ce:fa:f5:39:1b:4e:af:04:21:19:c2:be:57:39: 23:3d:fa:b9:8c:85:c6:60:f1:05:5d:68:50:4c:fd: 5d:ed:4b:f1:05:b3:2f:4a:36:10:f6:bc:d8:8f:62: 4c:50:0c:c8:1a:86:fb:9b:4c:0a:79:ac:3f:a3:de: 0f:4e:1b:b6:f5:fb:2c:6a:39:64:c5:38:3b:d3:ca: 5c:be:2e:9a:eb:e0:d8:40:e1:b7:c3:96:cd:28:7a: a1:2a:ab:93:d5:a2:96:e4:63:2a:55:ed:c3:0d:69: 7d:50:ff:2e:95:a8:78:38:8e:e7:5d:4e:2c:56:c2: 2f:82:f1:bd:8b:bb:51:59:60:46:5f:3f:4d:8c:c7: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:73:E4:A7:74:08:3C:05:FD:96:77:31:91:9D:17:87:C3:C9:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef1acbb-4588-4daa-b2a0-52229c143ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.174.0.0/15 Signature Algorithm: sha256WithRSAEncryption 07:71:2b:02:60:93:c3:92:f9:8b:88:f1:42:3b:2d:c9:86:5a: 74:22:82:04:66:77:5e:8b:d7:82:49:41:b5:85:e1:cc:2c:ef: cb:dc:53:a4:d8:b0:d1:de:1d:a4:57:72:ab:f1:e5:cb:08:e6: 45:5f:bc:f3:cb:b0:12:56:ad:53:fa:ff:de:d9:be:df:d4:49: 23:7c:44:5d:23:4b:2a:fa:5e:2c:05:da:d2:5f:53:31:98:3b: 62:41:a9:76:99:4b:f5:05:fa:55:73:e6:10:e9:b1:88:43:26: 49:2b:57:ed:6a:c5:2e:d3:4c:dc:55:ab:59:c3:46:ef:53:73: c7:30:4c:21:bd:2a:b2:aa:12:84:c2:01:ec:92:99:da:cf:da: 77:79:43:f9:d3:35:f4:44:ad:6b:9b:05:a9:a3:3b:23:b8:dd: 6f:2c:7c:b6:49:a7:e3:c9:33:d5:ba:2c:7a:d9:81:52:97:4d: c4:5d:79:1b:89:c3:e9:0e:6b:f1:40:da:e1:94:d5:f1:81:45: 88:d7:d3:15:7a:9c:55:13:57:3e:44:ae:b1:fc:f5:de:d5:79: b9:48:ad:f9:45:97:75:45:dd:0b:e8:13:27:93:ae:2e:2e:8d: 1f:1a:e4:a0:cb:c9:f1:68:68:f6:c8:69:cc:2d:91:2d:fe:ec: 1a:00:21:ab -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCRPpzQkZL6NDU9i/Xk01TLCZ1QEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEzMTEzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDI2N2JmYjg5OWVhMThjN2YyY2I3MDk0NmE5NGZlMmQ5 MWI5NTI1NDU1NWU2OGRlNjQ4NmMwNTQyZTRjOGNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQGg/+/15JNqqyAt4hRti5Can3d1D0qxNJ2RgHyz+EcAku 4R7Gdfm1quWMtkViSAmW2FZhlcsP0P/nt+XnMZ6CO8lKX601y/iWi0L7W7KU7Oth Z+nz2e0AYSZNdLXUhZ8toVyIlE/JRdNx1HjPcriWGjm0uzzzdzHO+vU5G06vBCEZ wr5XOSM9+rmMhcZg8QVdaFBM/V3tS/EFsy9KNhD2vNiPYkxQDMgahvubTAp5rD+j 3g9OG7b1+yxqOWTFODvTyly+Lprr4NhA4bfDls0oeqEqq5PVopbkYypV7cMNaX1Q /y6VqHg4juddTixWwi+C8b2Lu1FZYEZfP02Mx0NpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZOpz5Kd0CDwF/ZZ3MZGdF4fDyQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlZjFhY2JiLTQ1ODgtNGRhYS1iMmEwLTUyMjI5YzE0M2ZmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEorjANBgkqhkiG9w0BAQsFAAOCAQEAB3ErAmCTw5L5i4jxQjstyYZadCKC BGZ3XovXgklBtYXhzCzvy9xTpNiw0d4dpFdyq/HlywjmRV+888uwElatU/r/3tm+ 39RJI3xEXSNLKvpeLAXa0l9TMZg7YkGpdplL9QX6VXPmEOmxiEMmSStX7WrFLtNM 3FWrWcNG71NzxzBMIb0qsqoShMIB7JKZ2s/ad3lD+dM19ESta5sFqaM7I7jdbyx8 tkmn48kz1bosetmBUpdNxF15G4nD6Q5r8UDa4ZTV8YFFiNfTFXqcVRNXPkSusfz1 3tV5uUit+UWXdUXdC+gTJ5OuLi6NHxrkoMvJ8Who9shpzC2RLf7sGgAhqw== -----END CERTIFICATE-----Generated at Mon Nov 2 16:46:18 2026 by rpki-client