$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/942b7589-0ee2-4f4b-b8b4-f938452b1983.roa File: 942b7589-0ee2-4f4b-b8b4-f938452b1983.roa (raw, json) Hash identifier: w4veWI3y7LgHmp/fhWGsd8LwH7HHwvwssvM46Ru2/YA= Subject key identifier: 2A:D8:40:F6:DC:00:89:5E:82:2E:8E:63:25:A8:3F:C0:5E:9B:CC:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 164BE6A1EA35B2E73631DFE895D2C3AB3C2C09B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/942b7589-0ee2-4f4b-b8b4-f938452b1983.roa Signing time: Thu 22 Oct 2026 02:21:05 +0000 ROA not before: Thu 22 Oct 2026 02:21:05 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 108.136.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4b:e6:a1:ea:35:b2:e7:36:31:df:e8:95:d2:c3:ab:3c:2c:09:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:21:05 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=a1ab89b7f01b4684c0ad4926a7e709f99d076acea16d5e5072a859919c0d74ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:19:59:d0:f6:98:62:92:07:7a:35:bb:5b: 9d:a9:2f:aa:68:db:e1:4a:1f:e2:6e:95:e9:2c:d2: 45:dd:3f:0f:bb:ae:20:ba:39:97:b8:55:8f:82:3c: 2d:a5:c9:b8:ab:39:1b:f8:35:08:6b:b6:4b:f6:a9: 58:cf:6d:97:43:19:a2:4a:e1:ae:cf:2e:4b:cb:d2: be:7f:29:f3:61:2c:d0:90:9b:6f:26:9e:0c:f4:fa: 8a:bc:a5:e5:ff:cb:8a:d8:4d:f4:91:b8:fd:3f:0b: 40:f3:8e:ff:f6:44:36:0b:69:54:ca:5d:4c:a2:77: 46:f6:f8:9f:98:1b:36:61:a4:d8:57:26:79:bd:28: 55:64:78:8d:c3:03:e6:d0:27:c6:67:c5:ac:8c:bd: 72:9a:49:67:f7:37:d8:09:7e:c0:63:b5:65:f6:3b: 08:f8:70:37:2a:d4:d5:2b:b7:fb:37:e0:b7:11:6b: be:fc:a3:2b:3c:18:49:56:4f:36:f9:a7:14:b1:84: 15:dd:d1:9e:b8:57:ac:1a:c6:9c:7b:f8:27:87:94: bc:e5:c4:a7:e1:b0:59:7d:95:2d:b4:79:b1:6d:59: 04:35:20:f8:03:9b:f8:98:2e:de:02:db:53:0d:80: b7:83:61:1b:9e:9f:cc:e1:fd:ea:16:bc:bf:51:f4: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D8:40:F6:DC:00:89:5E:82:2E:8E:63:25:A8:3F:C0:5E:9B:CC:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/942b7589-0ee2-4f4b-b8b4-f938452b1983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.136.128.0/17 Signature Algorithm: sha256WithRSAEncryption 49:d9:b8:c0:e2:90:e4:7a:05:e0:a8:c7:94:a5:c6:b3:19:ca: 2a:22:e4:8c:a2:9b:7c:a3:2d:b3:3a:73:d2:10:c5:06:a7:ed: 54:7b:06:03:57:7f:fa:aa:2d:8e:6c:0e:0c:ff:e6:f2:37:77: 6f:02:5f:73:d7:c4:b0:9a:7f:25:11:ca:51:12:44:6c:a9:50: dd:69:f2:d0:be:73:62:52:86:b7:72:4e:4d:60:42:13:1e:da: a4:8e:04:13:cb:bb:98:87:30:ca:e0:04:de:4f:20:2a:bb:24: df:74:77:b4:be:70:d2:13:b4:98:36:92:f5:c7:79:bb:c9:67: ab:ba:0b:9f:e3:dd:0d:58:8b:8c:93:7e:7a:15:b1:61:6e:d7: 61:5b:66:b3:eb:b6:51:16:33:82:d7:c9:1b:ba:c5:03:ba:7d: fb:c2:5d:d8:9c:e0:9c:fc:e3:24:32:94:8f:21:c4:fd:9a:a5: 57:03:b8:8f:83:a4:c5:c0:8f:19:8a:ad:2b:7d:55:b5:dd:16: 7e:62:e4:89:72:4c:44:5e:fe:fa:92:85:20:1b:e1:38:c1:9a: 91:08:a3:15:40:03:28:ee:3c:2e:72:e6:62:f7:a7:61:90:e8: 30:7b:87:91:d5:46:b1:88:e0:a3:9d:50:86:31:d0:44:a3:5b: 38:70:cf:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFkvmoeo1suc2Md/oldLDqzwsCbQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIyMTA1WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWFiODliN2YwMWI0Njg0YzBhZDQ5MjZhN2U3MDlmOTlk MDc2YWNlYTE2ZDVlNTA3MmE4NTk5MTljMGQ3NGVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxPRlZ0PaYYpIHejW7W52pL6po2+FKH+Juleks0kXdPw+7 riC6OZe4VY+CPC2lybirORv4NQhrtkv2qVjPbZdDGaJK4a7PLkvL0r5/KfNhLNCQ m28mngz0+oq8peX/y4rYTfSRuP0/C0Dzjv/2RDYLaVTKXUyid0b2+J+YGzZhpNhX Jnm9KFVkeI3DA+bQJ8ZnxayMvXKaSWf3N9gJfsBjtWX2Owj4cDcq1NUrt/s34LcR a778oys8GElWTzb5pxSxhBXd0Z64V6waxpx7+CeHlLzlxKfhsFl9lS20ebFtWQQ1 IPgDm/iYLt4C21MNgLeDYRuen8zh/eoWvL9R9EA9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKthA9twAiV6CLo5jJag/wF6bzEYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0MmI3NTg5LTBlZTItNGY0Yi1iOGI0LWY5Mzg0NTJiMTk4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdsiIAwDQYJKoZIhvcNAQELBQADggEBAEnZuMDikOR6BeCox5SlxrMZyioi 5Iyim3yjLbM6c9IQxQan7VR7BgNXf/qqLY5sDgz/5vI3d28CX3PXxLCafyURylES RGypUN1p8tC+c2JShrdyTk1gQhMe2qSOBBPLu5iHMMrgBN5PICq7JN90d7S+cNIT tJg2kvXHebvJZ6u6C5/j3Q1Yi4yTfnoVsWFu12FbZrPrtlEWM4LXyRu6xQO6ffvC Xdic4Jz84yQylI8hxP2apVcDuI+DpMXAjxmKrSt9VbXdFn5i5IlyTERe/vqShSAb 4TjBmpEIoxVAAyjuPC5y5mL3p2GQ6DB7h5HVRrGI4KOdUIYx0ESjWzhwz3Q= -----END CERTIFICATE-----Generated at Wed Nov 4 05:55:20 2026 by rpki-client