$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8547554f-aa18-48c0-9f58-768583199748.roa File: 8547554f-aa18-48c0-9f58-768583199748.roa (raw, json) Hash identifier: cuDPX0ob1oyCPyigr2XOMpvX8G4LThiiMNirthre6u0= Subject key identifier: 0F:9D:1E:D2:B7:2D:33:86:DA:B4:88:2C:58:33:C9:0F:47:EE:A7:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68F5C0C0DD9804786D6C6209BB1BB9FE138A1330 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8547554f-aa18-48c0-9f58-768583199748.roa Signing time: Fri 23 Oct 2026 02:21:15 +0000 ROA not before: Fri 23 Oct 2026 02:21:15 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 119.12.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f5:c0:c0:dd:98:04:78:6d:6c:62:09:bb:1b:b9:fe:13:8a:13:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:21:15 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=df1a812cca5c2c41a23247f324cc1aede2fe048394e0ce84f88feaec88b2c38e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:bc:0d:57:04:f2:3f:8b:63:84:8a:0d:82: 11:b1:98:e3:cb:ac:ed:f3:ed:d2:6a:ab:ab:06:84: db:b1:c0:0a:bb:06:b3:23:a7:54:3d:0e:d2:48:49: d7:c9:b5:ce:5c:d6:90:09:ea:70:54:8b:3c:55:bd: ab:57:81:cb:e8:2e:df:e9:5e:37:9a:e7:a5:68:a8: 32:f1:48:c0:6d:85:98:27:5d:d1:f3:c3:ac:b6:c3: 32:45:4c:9c:8d:b4:77:5b:2e:a1:08:a2:17:1f:28: 3f:df:6f:a6:5d:ff:bf:a0:40:fc:48:94:a3:6d:df: 34:99:c6:d5:0c:ac:2f:91:93:0c:65:74:3d:52:13: a8:a0:9a:c3:83:8a:1e:84:4b:ab:e3:bc:26:b2:f4: 8f:3b:b7:c8:4b:cf:50:09:91:34:07:1f:f3:18:6b: 07:8f:10:08:97:2e:b1:41:eb:3e:c0:ea:9a:a4:ef: c0:88:ea:41:c2:16:70:9c:fc:45:63:ac:0f:08:50: 9e:3d:74:30:7c:08:5e:2e:a5:a1:58:34:c1:84:59: c6:b7:a7:ea:db:66:54:54:8f:a1:91:6e:ea:7e:7a: 0a:bd:f1:8c:a7:5f:8a:a5:ab:7a:3c:e0:05:5a:82: c7:73:42:45:bb:49:28:30:a7:88:d6:0a:00:f6:f6: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9D:1E:D2:B7:2D:33:86:DA:B4:88:2C:58:33:C9:0F:47:EE:A7:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8547554f-aa18-48c0-9f58-768583199748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.12.88.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:ab:f1:0c:a1:21:73:33:12:c7:83:5a:48:4b:6e:98:6a:ed: e6:a6:73:77:00:46:91:32:20:54:eb:16:7f:ed:bc:96:e0:d9: 61:3b:4f:b7:63:11:d6:02:45:32:fc:7e:7f:ee:28:5d:b9:32: 73:17:8b:94:06:a1:d0:c1:bd:16:95:9c:69:d7:20:23:c1:9f: f6:75:10:72:f0:91:31:e5:1f:09:da:a7:13:2c:5c:92:3c:d6: 7f:dd:e5:ff:d6:6c:a7:c2:ba:6b:62:2e:a2:50:2b:38:21:4f: 3c:a9:ba:c8:f2:95:3c:13:63:91:9d:59:23:28:5c:62:00:23: 5c:e5:60:98:c3:64:86:17:58:32:e0:22:02:d8:35:73:26:90: a5:e4:2d:98:2d:1a:6a:97:01:c3:7f:46:c7:65:46:12:00:8f: f0:70:f7:c1:f9:46:19:3c:87:35:41:db:27:fe:e8:34:6f:62: 9f:56:48:fc:4e:f7:4b:71:44:ea:d3:17:6b:d2:8d:ab:dc:0c: aa:52:c1:bf:b3:d5:62:19:18:cf:94:42:bd:0e:f9:c4:df:c1: 32:50:33:f7:ce:e0:b5:2f:6d:ea:a9:bc:45:d5:87:ac:37:cf: 0e:9d:8c:b6:e1:78:6d:63:78:4f:79:bb:10:1d:c7:b6:e5:ff: 45:15:5e:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaPXAwN2YBHhtbGIJuxu5/hOKEzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIyMTE1WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjFhODEyY2NhNWMyYzQxYTIzMjQ3ZjMyNGNjMWFlZGUy ZmUwNDgzOTRlMGNlODRmODhmZWFlYzg4YjJjMzhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6OLwNVwTyP4tjhIoNghGxmOPLrO3z7dJqq6sGhNuxwAq7 BrMjp1Q9DtJISdfJtc5c1pAJ6nBUizxVvatXgcvoLt/pXjea56VoqDLxSMBthZgn XdHzw6y2wzJFTJyNtHdbLqEIohcfKD/fb6Zd/7+gQPxIlKNt3zSZxtUMrC+Rkwxl dD1SE6igmsODih6ES6vjvCay9I87t8hLz1AJkTQHH/MYawePEAiXLrFB6z7A6pqk 78CI6kHCFnCc/EVjrA8IUJ49dDB8CF4upaFYNMGEWca3p+rbZlRUj6GRbup+egq9 8YynX4qlq3o84AVagsdzQkW7SSgwp4jWCgD29tlZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD50e0rctM4batIgsWDPJD0fup3cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1NDc1NTRmLWFhMTgtNDhjMC05ZjU4LTc2ODU4MzE5OTc0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3DFgwDQYJKoZIhvcNAQELBQADggEBAD6r8QyhIXMzEseDWkhLbphq7eam c3cARpEyIFTrFn/tvJbg2WE7T7djEdYCRTL8fn/uKF25MnMXi5QGodDBvRaVnGnX ICPBn/Z1EHLwkTHlHwnapxMsXJI81n/d5f/WbKfCumtiLqJQKzghTzypusjylTwT Y5GdWSMoXGIAI1zlYJjDZIYXWDLgIgLYNXMmkKXkLZgtGmqXAcN/RsdlRhIAj/Bw 98H5Rhk8hzVB2yf+6DRvYp9WSPxO90txROrTF2vSjavcDKpSwb+z1WIZGM+UQr0O +cTfwTJQM/fO4LUvbeqpvEXVh6w3zw6djLbheG1jeE95uxAdx7bl/0UVXnc= -----END CERTIFICATE-----Generated at Mon Nov 2 18:54:06 2026 by rpki-client