$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa File: 703459b2-ae55-466c-a7c4-c1fb57f7704e.roa (raw, json) Hash identifier: hflXAkKiwXKAp9b9Wu6QjhPJa2Pm1Fk7ncLka+0IVd0= Subject key identifier: AF:63:C5:BA:DE:A6:82:88:B7:6B:8B:D7:1B:F3:31:EF:72:80:99:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65785BB533CA462DCEB2BD97711FBD34421896D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa Signing time: Sat 24 Oct 2026 00:31:03 +0000 ROA not before: Sat 24 Oct 2026 00:31:03 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.161.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:78:5b:b5:33:ca:46:2d:ce:b2:bd:97:71:1f:bd:34:42:18:96:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:31:03 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=7eb0b8df6ba242bd65db0ca0aae0bbea437bdbbbd2352292f9601c5e046b17ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:08:58:71:e6:b6:11:7e:da:81:b9:9e:21: 16:72:1f:2f:04:a2:c8:13:b4:b9:f7:cc:6c:e9:ba: 5d:74:e1:57:15:b1:57:f7:58:03:f4:45:71:9b:0e: db:30:37:58:12:02:ef:a4:0c:e3:87:46:4f:fe:1c: 10:91:4a:13:c8:8a:f4:89:8a:1d:e0:12:9f:53:1d: b1:f9:3e:ec:a2:55:ee:2f:f0:6c:88:4e:60:43:1d: 0b:1a:42:89:da:c2:20:4c:c6:5c:be:cc:75:68:8f: 1e:c8:de:1e:44:56:0e:df:f7:c6:d3:23:a6:d6:0b: 5a:20:01:e9:85:85:d5:41:8f:0c:75:34:25:cf:bd: 76:6e:5d:fa:f0:63:80:04:70:26:8c:46:ee:a4:2d: c0:41:c8:3d:88:09:50:59:0c:58:2a:74:f5:f3:50: fb:0b:10:e9:66:32:2c:89:4f:74:d4:24:a0:58:a1: 09:f3:8c:19:a8:7f:4c:15:46:44:1d:bd:01:25:4b: 0d:b6:bb:65:2c:84:25:d2:07:7b:fa:75:ec:1d:56: cc:a1:e1:12:46:d4:6d:c8:0b:47:c2:30:d8:d1:22: 69:ec:97:8c:4a:9f:47:9f:a6:07:13:aa:19:67:fe: 77:78:21:4e:95:a7:c4:48:6b:c9:4b:bc:84:49:bd: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:C5:BA:DE:A6:82:88:B7:6B:8B:D7:1B:F3:31:EF:72:80:99:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.161.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:9a:9c:6c:12:c3:b6:f1:cd:41:cd:d1:c1:18:59:c8:10:c0: 9d:72:d3:8d:72:bb:cf:62:11:bd:dc:76:a1:ec:0e:ed:50:a1: e0:4b:17:8d:aa:fb:be:14:ee:76:16:76:e4:0d:c5:0f:9d:9e: aa:c6:85:33:96:bf:20:ad:0e:85:99:f9:ee:08:16:c9:b7:b9: f8:1f:f5:6c:9b:03:be:8f:92:86:d5:0d:4f:4c:71:bb:d8:8a: 5b:78:85:5c:86:07:05:3c:c2:82:6c:73:c4:ee:1a:5a:c8:14: b8:54:40:74:52:e1:6a:84:5a:ac:03:f5:da:9e:f2:a0:2f:41: 26:ea:e2:76:23:0f:d1:75:ed:57:fb:e4:8b:cd:b4:0a:bf:ab: c8:1a:e0:a0:b5:df:eb:af:fe:51:64:36:5d:b5:4b:7b:ac:98: e0:aa:e3:c8:93:ed:df:da:e0:36:8f:c7:1c:1c:67:1d:bf:98: 20:df:33:37:5e:65:c9:4e:e0:34:7d:3c:09:7f:ce:da:f4:9e: 9f:c3:a8:37:e1:2c:ab:09:fd:5a:dc:8f:71:b6:7a:2a:41:8f: 1a:21:79:b3:a7:17:bd:c9:94:f1:dd:63:be:f3:6e:ef:6d:73: 6e:0d:c3:e4:64:43:7c:88:c5:ae:70:51:c1:de:9b:75:3e:ce: 65:6b:75:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZXhbtTPKRi3Osr2XcR+9NEIYltgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAzMTAzWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWIwYjhkZjZiYTI0MmJkNjVkYjBjYTBhYWUwYmJlYTQz N2JkYmJiZDIzNTIyOTJmOTYwMWM1ZTA0NmIxN2VkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrVQhYcea2EX7agbmeIRZyHy8EosgTtLn3zGzpul104VcV sVf3WAP0RXGbDtswN1gSAu+kDOOHRk/+HBCRShPIivSJih3gEp9THbH5PuyiVe4v 8GyITmBDHQsaQonawiBMxly+zHVojx7I3h5EVg7f98bTI6bWC1ogAemFhdVBjwx1 NCXPvXZuXfrwY4AEcCaMRu6kLcBByD2ICVBZDFgqdPXzUPsLEOlmMiyJT3TUJKBY oQnzjBmof0wVRkQdvQElSw22u2UshCXSB3v6dewdVsyh4RJG1G3IC0fCMNjRImns l4xKn0efpgcTqhln/nd4IU6Vp8RIa8lLvIRJvUvlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUr2PFut6mgoi3a4vXG/Mx73KAma4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwMzQ1OWIyLWFlNTUtNDY2Yy1hN2M0LWMxZmI1N2Y3NzA0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4oTANBgkqhkiG9w0BAQsFAAOCAQEAWJqcbBLDtvHNQc3RwRhZyBDAnXLT jXK7z2IRvdx2oewO7VCh4EsXjar7vhTudhZ25A3FD52eqsaFM5a/IK0OhZn57ggW ybe5+B/1bJsDvo+ShtUNT0xxu9iKW3iFXIYHBTzCgmxzxO4aWsgUuFRAdFLhaoRa rAP12p7yoC9BJuridiMP0XXtV/vki820Cr+ryBrgoLXf66/+UWQ2XbVLe6yY4Krj yJPt39rgNo/HHBxnHb+YIN8zN15lyU7gNH08CX/O2vSen8OoN+Esqwn9WtyPcbZ6 KkGPGiF5s6cXvcmU8d1jvvNu721zbg3D5GRDfIjFrnBRwd6bdT7OZWt1mw== -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:14 2026 by rpki-client