$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/981dad03-98d3-4681-9aa4-229c210a713d.roa File: 981dad03-98d3-4681-9aa4-229c210a713d.roa (raw, json) Hash identifier: dcheU/+BBwsLEiuFi5TPFYGcFSQl7L4LlV4N4E4Edu0= Subject key identifier: 02:21:C3:A1:29:19:93:99:3E:4F:8C:A7:07:1A:82:97:D1:89:5C:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 580D2738D60A33F5762073524C9E16DE41D1BBAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/981dad03-98d3-4681-9aa4-229c210a713d.roa Signing time: Mon 19 Oct 2026 00:51:05 +0000 ROA not before: Mon 19 Oct 2026 00:51:05 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0d:27:38:d6:0a:33:f5:76:20:73:52:4c:9e:16:de:41:d1:bb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:51:05 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=e1dd34ebdd908b62dd2a30975ec92553308c59ca7d6e780b0d43bc14295f1091, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:8e:2b:a1:20:92:84:ca:04:a1:1e:a4:0f: fc:9c:fc:fa:52:ef:15:2f:21:91:c7:22:db:3b:49: 82:4d:95:62:28:a8:3a:1b:d7:88:47:57:8e:e4:27: 54:a4:ea:59:97:60:ec:ce:c8:82:35:d0:3b:eb:4d: d6:65:4e:d7:3b:4a:7f:ee:b3:db:50:83:11:d0:e4: 32:a6:5f:89:e3:ec:44:da:ee:cd:0a:f5:d0:1f:16: 86:e3:c1:a3:e0:b0:8a:22:48:eb:4e:13:0f:5a:b3: 11:12:ae:91:62:02:f3:8f:41:e9:24:c8:b9:49:a5: b4:df:d4:4e:23:9e:85:24:35:8e:d5:80:22:2a:34: f8:d0:91:db:6b:e5:73:da:f7:40:82:8f:1e:90:cd: cb:0e:4c:ea:d9:b4:32:c9:39:87:dc:4e:3f:79:84: b0:ac:b2:f7:b9:2f:10:af:98:df:c0:00:e1:52:af: 9b:38:cf:c6:06:3f:9d:43:7e:ea:54:31:f1:64:e6: 9f:7e:b2:eb:39:9f:da:e4:4a:56:33:92:c1:08:4e: ee:03:e9:c6:35:4f:24:d3:f8:96:2a:ed:63:c5:ba: e0:1c:ac:89:0a:ba:e5:ae:a7:59:76:9c:dd:1e:56: 44:a0:9a:d0:1e:71:98:2c:54:aa:8e:03:89:f5:82: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:C3:A1:29:19:93:99:3E:4F:8C:A7:07:1A:82:97:D1:89:5C:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/981dad03-98d3-4681-9aa4-229c210a713d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.54.0/24 Signature Algorithm: sha256WithRSAEncryption 32:42:b9:37:fb:c7:2b:ae:32:6e:f2:ba:d3:83:d8:27:b6:91: 01:0d:54:0d:6c:a4:3f:62:e0:87:de:37:3f:c0:40:94:6e:ba: fe:d0:cc:27:25:97:c6:82:53:c5:46:e0:c2:0e:12:fb:e8:f6: 0a:bc:72:92:e3:c5:54:ef:11:c2:eb:c8:59:88:eb:d0:66:b4: f7:de:aa:b7:2e:a4:6c:7b:61:f1:22:97:5a:83:0d:87:8f:f1: 12:71:7e:5b:69:d0:98:f2:86:8f:f8:ec:65:8d:22:f1:1d:52: 59:82:d7:1c:e9:70:89:af:b0:f5:07:e3:d4:fe:5e:dd:ff:1c: 38:7b:bd:29:7a:0c:3b:5a:cc:39:dd:84:bb:e5:56:bf:fd:94: b5:43:0c:fc:92:92:83:3b:7a:b5:88:7c:92:24:69:b4:97:04: db:77:67:6c:69:be:ef:b4:84:fc:1d:cf:3f:bf:70:27:eb:25: 3b:55:8b:76:f9:3d:2c:b4:62:3a:f5:cf:04:0c:92:1f:37:29: c3:6b:0a:c8:1e:80:21:35:c0:60:6f:a5:42:d7:93:0c:4d:b0: bb:98:0d:9f:1c:f8:16:12:f0:e4:6c:1c:27:8b:0b:7e:d0:57: 34:23:6e:1d:66:89:58:4a:4c:7b:00:22:68:2d:9f:02:6d:ef: ae:a9:08:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWA0nONYKM/V2IHNSTJ4W3kHRu6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MTA1WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWRkMzRlYmRkOTA4YjYyZGQyYTMwOTc1ZWM5MjU1MzMw OGM1OWNhN2Q2ZTc4MGIwZDQzYmMxNDI5NWYxMDkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyXo4roSCShMoEoR6kD/yc/PpS7xUvIZHHIts7SYJNlWIo qDob14hHV47kJ1Sk6lmXYOzOyII10DvrTdZlTtc7Sn/us9tQgxHQ5DKmX4nj7ETa 7s0K9dAfFobjwaPgsIoiSOtOEw9asxESrpFiAvOPQekkyLlJpbTf1E4jnoUkNY7V gCIqNPjQkdtr5XPa90CCjx6QzcsOTOrZtDLJOYfcTj95hLCssve5LxCvmN/AAOFS r5s4z8YGP51DfupUMfFk5p9+sus5n9rkSlYzksEITu4D6cY1TyTT+JYq7WPFuuAc rIkKuuWup1l2nN0eVkSgmtAecZgsVKqOA4n1guStAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAiHDoSkZk5k+T4ynBxqCl9GJXPswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4MWRhZDAzLTk4ZDMtNDY4MS05YWE0LTIyOWMyMTBhNzEzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmDYwDQYJKoZIhvcNAQELBQADggEBADJCuTf7xyuuMm7yutOD2Ce2kQEN VA1spD9i4IfeNz/AQJRuuv7QzCcll8aCU8VG4MIOEvvo9gq8cpLjxVTvEcLryFmI 69BmtPfeqrcupGx7YfEil1qDDYeP8RJxfltp0Jjyho/47GWNIvEdUlmC1xzpcImv sPUH49T+Xt3/HDh7vSl6DDtazDndhLvlVr/9lLVDDPySkoM7erWIfJIkabSXBNt3 Z2xpvu+0hPwdzz+/cCfrJTtVi3b5PSy0Yjr1zwQMkh83KcNrCsgegCE1wGBvpULX kwxNsLuYDZ8c+BYS8ORsHCeLC37QVzQjbh1miVhKTHsAImgtnwJt766pCLU= -----END CERTIFICATE-----Generated at Sat Oct 31 20:42:44 2026 by rpki-client