$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a5c7be3-be34-4f14-a87d-4edd67c1568c.roa File: 8a5c7be3-be34-4f14-a87d-4edd67c1568c.roa (raw, json) Hash identifier: rCHj9B2lZ2uBoCG1jNEZeLWPkDpnNJVXBU1wmyuci+M= Subject key identifier: 47:A0:D7:3E:5D:B2:17:B2:EB:83:75:FB:87:52:2A:49:05:20:2D:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6570B2E512DDADBE5A48DB56953BE37923A1A496 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a5c7be3-be34-4f14-a87d-4edd67c1568c.roa Signing time: Thu 01 Oct 2026 10:02:49 +0000 ROA not before: Thu 01 Oct 2026 10:02:49 +0000 ROA not after: Wed 30 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 83.160.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:70:b2:e5:12:dd:ad:be:5a:48:db:56:95:3b:e3:79:23:a1:a4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 1 10:02:49 2026 GMT Not After : Dec 30 23:59:59 2026 GMT Subject: serialNumber=63e820fc516e17ddc7669d5a6543dde59ea7c75438d3da1016c21f6886914a9a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:5f:29:87:8b:29:5b:8b:4e:f3:ea:c0:f8: 71:ce:1b:db:da:38:b4:39:a4:85:10:2e:bf:1a:57: bb:c1:03:c7:b2:4f:d8:02:63:5a:3c:75:01:92:7c: 9a:fb:54:06:04:43:5b:dc:d1:6b:dc:c7:57:b3:15: c4:b4:48:61:e5:8f:fb:d0:af:ac:5c:43:8c:e5:b1: 04:c3:21:51:98:8e:21:e9:54:eb:11:36:55:20:62: 24:1e:47:87:07:e4:36:d7:b5:68:d5:a8:d0:ff:e4: 9a:2c:28:f6:b2:fb:e6:85:ad:a6:3e:4e:a8:a9:60: d1:c2:78:d7:12:42:e0:47:b4:d1:45:f7:94:29:01: 19:4b:99:13:a2:a1:af:a6:05:1c:82:7d:c2:e1:e6: 86:6e:2b:4c:a9:71:7e:1a:b1:84:6a:06:a7:f9:ca: f8:43:3b:71:15:cf:cb:a8:3a:0b:83:b1:46:b9:ec: d8:68:3d:39:d1:d6:58:00:e4:a5:12:6f:67:32:a9: 2e:66:d4:41:4c:dd:13:90:8a:e0:16:d7:f6:50:54: fe:f5:f6:27:72:38:84:84:c6:e8:ec:ad:e5:69:ad: c8:e1:20:48:f3:93:50:b8:cf:e9:fd:51:56:ed:30: 48:94:07:8d:dd:d7:67:80:88:19:5b:4f:5f:41:61: 40:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:D7:3E:5D:B2:17:B2:EB:83:75:FB:87:52:2A:49:05:20:2D:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a5c7be3-be34-4f14-a87d-4edd67c1568c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.160.96.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:5f:63:26:18:70:f1:f1:ae:f7:fd:de:20:87:a2:af:61:b3: 26:18:0f:21:60:fb:c5:41:45:5e:5f:7f:eb:bd:70:28:b4:2a: 47:f7:66:9f:f3:21:67:d2:59:be:58:2b:91:4f:03:3b:43:30: 16:04:09:22:17:bc:7b:e3:f5:42:a1:e5:e1:5c:40:31:77:74: 69:ed:1e:0a:36:9f:01:53:c7:db:ad:64:18:be:7e:ec:ae:5a: bb:50:98:59:28:da:4d:74:31:7e:b9:73:da:08:58:dc:2c:2a: 4f:50:05:2c:23:5e:be:29:7a:14:05:c1:2c:b9:3d:6b:dd:a9: 2c:b0:08:37:af:59:e9:dc:ca:ac:b6:01:2f:0c:b6:ed:72:4b: 48:64:c1:71:6d:87:9c:11:fe:a5:a2:d2:5d:58:f3:76:2d:26: 80:53:43:6c:80:5d:2d:69:5a:50:75:7b:45:64:ca:02:2c:ec: a8:29:19:9c:74:a9:aa:7d:4f:77:95:de:b9:3f:67:60:90:b7: c1:d2:c9:db:6e:86:b6:a0:c1:70:c8:9b:f9:1f:7a:be:ad:bf: 42:9d:7c:48:42:19:6a:a4:e7:00:3c:56:75:60:83:dd:28:72: 7c:74:a9:e8:7f:db:fe:e8:05:b4:a1:4b:aa:3e:4c:79:49:43: 3d:76:17:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZXCy5RLdrb5aSNtWlTvjeSOhpJYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDAxMTAwMjQ5WhcNMjYxMjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2U4MjBmYzUxNmUxN2RkYzc2NjlkNWE2NTQzZGRlNTll YTdjNzU0MzhkM2RhMTAxNmMyMWY2ODg2OTE0YTlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYyV8ph4spW4tO8+rA+HHOG9vaOLQ5pIUQLr8aV7vBA8ey T9gCY1o8dQGSfJr7VAYEQ1vc0Wvcx1ezFcS0SGHlj/vQr6xcQ4zlsQTDIVGYjiHp VOsRNlUgYiQeR4cH5DbXtWjVqND/5JosKPay++aFraY+TqipYNHCeNcSQuBHtNFF 95QpARlLmROioa+mBRyCfcLh5oZuK0ypcX4asYRqBqf5yvhDO3EVz8uoOguDsUa5 7NhoPTnR1lgA5KUSb2cyqS5m1EFM3ROQiuAW1/ZQVP719idyOISExujsreVprcjh IEjzk1C4z+n9UVbtMEiUB43d12eAiBlbT19BYUCpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR6DXPl2yF7Lrg3X7h1IqSQUgLQUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhNWM3YmUzLWJlMzQtNGYxNC1hODdkLTRlZGQ2N2MxNTY4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABToGAwDQYJKoZIhvcNAQELBQADggEBAD5fYyYYcPHxrvf93iCHoq9hsyYY DyFg+8VBRV5ff+u9cCi0Kkf3Zp/zIWfSWb5YK5FPAztDMBYECSIXvHvj9UKh5eFc QDF3dGntHgo2nwFTx9utZBi+fuyuWrtQmFko2k10MX65c9oIWNwsKk9QBSwjXr4p ehQFwSy5PWvdqSywCDevWencyqy2AS8Mtu1yS0hkwXFth5wR/qWi0l1Y83YtJoBT Q2yAXS1pWlB1e0VkygIs7KgpGZx0qap9T3eV3rk/Z2CQt8HSydtuhragwXDIm/kf er6tv0KdfEhCGWqk5wA8VnVgg90ocnx0qeh/2/7oBbShS6o+THlJQz12F3o= -----END CERTIFICATE-----Generated at Wed Nov 4 17:04:27 2026 by rpki-client