$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa File: 85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa (raw, json) Hash identifier: VIf7vDCemQpH7N1q+zkLzHyO8EIRQDuevOmdoDXCSP0= Subject key identifier: FD:FA:CA:24:30:4F:91:EA:FD:60:ED:6F:3B:CC:90:24:A4:BB:3B:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E9CBF3631976B417911DBE9928DDEA89E4BE2A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa Signing time: Tue 27 Oct 2026 00:21:17 +0000 ROA not before: Tue 27 Oct 2026 00:21:17 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9c:bf:36:31:97:6b:41:79:11:db:e9:92:8d:de:a8:9e:4b:e2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:21:17 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=addbd56b491a7d776fb58f1f09f557e1efd2e317129264a2731a6b39d9d0a480, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:92:9c:d8:26:9e:35:65:b3:48:03:37:19: 7c:6a:5f:0a:e4:a5:95:23:07:61:ed:78:c2:5b:81: 23:5f:42:81:97:fd:c0:87:3d:4b:59:14:92:69:12: 88:f1:35:3b:b8:24:17:84:0d:2c:7d:3c:90:ab:e4: fd:45:f7:83:29:86:87:11:ac:20:f3:fc:ec:c6:21: 89:1f:f8:52:f0:a0:af:6c:8e:69:b7:03:fe:49:51: 81:cb:4d:34:41:98:ab:e4:6e:3d:6c:f5:5b:d4:a8: a3:89:0b:e3:6e:51:05:f1:64:10:86:1f:6d:0b:4e: d2:ce:ba:99:ef:43:4e:ee:98:db:f4:85:68:95:34: 46:94:42:82:5a:2d:06:0b:b2:39:4e:c2:39:7f:4c: ce:c6:38:b8:87:0e:b3:1f:95:df:26:99:c3:6c:cc: 6e:4e:45:f5:0a:4e:07:16:90:98:01:6f:94:d7:9a: 14:b8:8a:93:37:91:38:d1:43:3b:84:47:09:ac:31: 53:b1:ea:78:ae:3d:b8:7a:7d:87:7b:e4:e3:74:b7: 50:cf:d0:91:dc:97:24:e7:32:61:19:15:d2:fc:b8: 7e:38:5c:c0:2b:83:cb:7e:e4:bb:8e:cc:9f:a9:1b: 93:de:ad:76:60:03:90:be:00:dd:2a:ca:62:18:21: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FA:CA:24:30:4F:91:EA:FD:60:ED:6F:3B:CC:90:24:A4:BB:3B:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.152.0/23 Signature Algorithm: sha256WithRSAEncryption b3:11:e1:99:39:43:65:ad:03:f2:9a:49:f7:8b:3a:12:66:c8: e5:71:4a:a6:d4:89:53:4f:72:7b:fe:a1:81:f9:40:9b:8c:8a: 28:7a:04:40:be:0c:3c:7f:24:0f:b9:86:74:75:ee:84:dd:69: 26:0b:a5:6f:32:aa:a2:fc:e4:8d:6f:fd:6d:c5:6b:47:0b:24: ae:06:2d:2c:9d:84:e9:42:2e:7a:f1:d2:6e:49:4a:59:58:9e: a1:06:3a:82:c6:eb:40:e3:63:4d:8e:7a:e8:54:9f:7c:be:f8: c2:2e:98:e0:fe:9b:31:60:48:7e:55:02:3c:77:b9:72:d6:3e: 25:22:09:8d:34:eb:e9:b0:86:24:b4:2a:e9:5c:e3:46:9e:b5: ec:b3:61:fa:aa:6e:84:d1:5d:10:42:de:45:03:d8:f5:3d:a0: a0:5c:1d:4e:ed:cd:0b:ec:26:dc:af:0f:7d:d2:ed:82:b4:22: 10:2f:51:60:ac:9a:06:12:99:90:62:fa:e6:fc:d5:19:a9:96: 6d:39:82:3a:89:37:9e:fc:e9:20:ae:fc:90:80:e9:4b:ee:27: 55:f8:d8:66:e1:4a:60:a3:3a:40:f9:7d:b1:4b:ca:d3:75:a4: 52:a0:30:28:c1:e7:e2:f4:e9:d3:34:14:71:20:3b:a8:af:17: af:33:b5:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTpy/NjGXa0F5Edvpko3eqJ5L4qQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAyMTE3WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGRiZDU2YjQ5MWE3ZDc3NmZiNThmMWYwOWY1NTdlMWVm ZDJlMzE3MTI5MjY0YTI3MzFhNmIzOWQ5ZDBhNDgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3PZKc2CaeNWWzSAM3GXxqXwrkpZUjB2HteMJbgSNfQoGX /cCHPUtZFJJpEojxNTu4JBeEDSx9PJCr5P1F94MphocRrCDz/OzGIYkf+FLwoK9s jmm3A/5JUYHLTTRBmKvkbj1s9VvUqKOJC+NuUQXxZBCGH20LTtLOupnvQ07umNv0 hWiVNEaUQoJaLQYLsjlOwjl/TM7GOLiHDrMfld8mmcNszG5ORfUKTgcWkJgBb5TX mhS4ipM3kTjRQzuERwmsMVOx6niuPbh6fYd75ON0t1DP0JHclyTnMmEZFdL8uH44 XMArg8t+5LuOzJ+pG5PerXZgA5C+AN0qymIYIQerAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/frKJDBPker9YO1vO8yQJKS7O1QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1ZjZkYjMzLTYxY2UtNGExNC04Y2Y0LWZmZjg3YTgyNDFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHKrpgwDQYJKoZIhvcNAQELBQADggEBALMR4Zk5Q2WtA/KaSfeLOhJmyOVx SqbUiVNPcnv+oYH5QJuMiih6BEC+DDx/JA+5hnR17oTdaSYLpW8yqqL85I1v/W3F a0cLJK4GLSydhOlCLnrx0m5JSllYnqEGOoLG60DjY02OeuhUn3y++MIumOD+mzFg SH5VAjx3uXLWPiUiCY006+mwhiS0Kulc40aeteyzYfqqboTRXRBC3kUD2PU9oKBc HU7tzQvsJtyvD33S7YK0IhAvUWCsmgYSmZBi+ub81Rmplm05gjqJN5786SCu/JCA 6UvuJ1X42GbhSmCjOkD5fbFLytN1pFKgMCjB5+L06dM0FHEgO6ivF68ztc8= -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:41 2026 by rpki-client