$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e2ea47c-7af2-420d-8695-f2f769b2008c.roa File: 8e2ea47c-7af2-420d-8695-f2f769b2008c.roa (raw, json) Hash identifier: Mpx+WcMf0RYQ9NRyBjJxxcqC+YHfWATjWDuKsY+Adxo= Subject key identifier: B4:58:AD:A2:ED:4C:B0:E0:88:4F:7E:3F:6B:B2:19:BE:7E:F1:9B:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17943B5D00336000E87FEA8BAB4B508B4AF20652 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e2ea47c-7af2-420d-8695-f2f769b2008c.roa Signing time: Sat 24 Oct 2026 00:30:38 +0000 ROA not before: Sat 24 Oct 2026 00:30:38 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:94:3b:5d:00:33:60:00:e8:7f:ea:8b:ab:4b:50:8b:4a:f2:06:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:30:38 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=573e69c274298b84bd7675cbdc5e867e4384dee53944dbe31d07f2e057d90551, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:6f:6a:49:d5:cf:08:6a:b8:f5:b1:27:61: b7:78:66:0d:b3:39:12:6e:92:7c:4b:6a:65:75:ce: 34:54:8f:d3:f3:ed:ed:13:35:75:e3:da:87:a5:f1: a4:58:63:01:fb:d1:18:72:40:31:6e:53:6e:50:ff: 11:1a:47:d4:20:67:13:b9:04:1d:ae:37:76:c6:92: 27:1f:e4:17:3d:1a:15:1d:b0:a9:8c:10:a6:b2:cf: 59:4f:d8:1c:c6:c6:35:7c:99:db:b4:21:92:f1:c9: 2b:1b:ff:c9:4c:da:91:ef:05:c0:63:f8:74:3c:e3: f4:d1:ac:18:df:3b:5d:3b:6b:bf:b4:b5:a2:75:f3: 16:fe:b8:76:95:d6:01:9c:43:c5:1a:40:17:9f:ff: a9:ce:2f:09:3b:30:b9:9c:cf:2a:bb:fb:47:ad:5a: 23:53:d5:9f:9d:8a:80:0a:ec:c7:e8:1c:c5:66:e4: 48:d8:31:68:80:24:6e:c6:c0:d2:dc:74:ed:a7:cc: 86:87:fd:10:ef:1b:46:b8:52:a9:7a:08:65:64:5c: c8:fa:a0:27:e6:c3:58:8a:7f:52:a3:01:f6:8c:f3: 5c:7f:88:92:59:49:a5:f8:7f:f6:66:ee:a8:b4:45: f0:c5:52:ef:1a:b7:69:78:63:44:30:57:bc:e7:db: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:58:AD:A2:ED:4C:B0:E0:88:4F:7E:3F:6B:B2:19:BE:7E:F1:9B:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e2ea47c-7af2-420d-8695-f2f769b2008c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.245.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:b3:0c:04:fa:3f:eb:10:e7:a8:92:17:74:66:57:71:af:09: ac:5c:17:ee:99:3e:e0:c6:d0:78:ae:f3:40:b5:d6:a0:74:db: 47:9c:9e:6b:ec:18:c9:15:d9:3a:07:29:d8:b5:79:c3:d1:d5: 12:47:d8:94:93:fd:c7:8f:e7:e6:71:e2:22:8c:89:93:f5:fe: ae:02:31:72:79:02:2c:a3:90:85:fe:6b:ae:21:9b:c3:a3:6c: 7d:2a:78:4d:1d:67:3f:73:eb:10:c6:1f:d8:11:be:60:d6:a5: c2:d3:4b:63:5c:53:3c:dd:c0:fa:5e:9f:c1:ab:fe:e1:e8:3e: 98:27:da:a8:04:f5:f5:5d:22:65:a1:f6:76:0e:52:1a:b2:11: 1b:11:74:b3:7d:de:51:3c:da:50:25:67:f2:28:34:dc:01:b2: 71:bb:f9:3c:df:7d:f0:bc:b4:ed:7a:fc:0b:78:c7:a1:71:ed: e1:93:b0:e1:d0:77:f4:43:f1:97:53:86:96:61:32:78:ba:8c: c7:8b:0c:96:4d:27:b0:d6:c5:72:e0:0c:a9:58:3f:3a:da:08: 3a:ac:8c:dd:af:c7:69:f1:83:09:e7:80:4c:73:1d:4b:0f:73: 2b:03:b3:e8:14:d8:d3:2a:53:79:55:7a:b8:57:11:c2:67:c7: 22:84:6d:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF5Q7XQAzYADof+qLq0tQi0ryBlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAzMDM4WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzNlNjljMjc0Mjk4Yjg0YmQ3Njc1Y2JkYzVlODY3ZTQz ODRkZWU1Mzk0NGRiZTMxZDA3ZjJlMDU3ZDkwNTUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFVW9qSdXPCGq49bEnYbd4Zg2zORJuknxLamV1zjRUj9Pz 7e0TNXXj2oel8aRYYwH70RhyQDFuU25Q/xEaR9QgZxO5BB2uN3bGkicf5Bc9GhUd sKmMEKayz1lP2BzGxjV8mdu0IZLxySsb/8lM2pHvBcBj+HQ84/TRrBjfO107a7+0 taJ18xb+uHaV1gGcQ8UaQBef/6nOLwk7MLmczyq7+0etWiNT1Z+dioAK7MfoHMVm 5EjYMWiAJG7GwNLcdO2nzIaH/RDvG0a4Uql6CGVkXMj6oCfmw1iKf1KjAfaM81x/ iJJZSaX4f/Zm7qi0RfDFUu8at2l4Y0QwV7zn2+2vAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtFitou1MsOCIT34/a7IZvn7xmxYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlMmVhNDdjLTdhZjItNDIwZC04Njk1LWYyZjc2OWIyMDA4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA49TANBgkqhkiG9w0BAQsFAAOCAQEAhrMMBPo/6xDnqJIXdGZXca8JrFwX 7pk+4MbQeK7zQLXWoHTbR5yea+wYyRXZOgcp2LV5w9HVEkfYlJP9x4/n5nHiIoyJ k/X+rgIxcnkCLKOQhf5rriGbw6NsfSp4TR1nP3PrEMYf2BG+YNalwtNLY1xTPN3A +l6fwav+4eg+mCfaqAT19V0iZaH2dg5SGrIRGxF0s33eUTzaUCVn8ig03AGycbv5 PN998Ly07Xr8C3jHoXHt4ZOw4dB39EPxl1OGlmEyeLqMx4sMlk0nsNbFcuAMqVg/ OtoIOqyM3a/HafGDCeeATHMdSw9zKwOz6BTY0ypTeVV6uFcRwmfHIoRtAg== -----END CERTIFICATE-----Generated at Wed Nov 4 07:48:40 2026 by rpki-client