$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa File: 9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa (raw, json) Hash identifier: yupc+yeNFsrUIYRJp0Rc6gPFedClbaol708GYOFc+Nw= Subject key identifier: 0D:AE:84:00:23:23:AD:A3:7E:26:39:C4:A4:EB:52:A1:DD:60:82:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EC2EFAEDBA1BB282F4AAD4382A4CE0E8D9176CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa Signing time: Mon 26 Oct 2026 00:41:33 +0000 ROA not before: Mon 26 Oct 2026 00:41:33 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.147.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c2:ef:ae:db:a1:bb:28:2f:4a:ad:43:82:a4:ce:0e:8d:91:76:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:41:33 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=2bf395fb49cead65d703fd669b823ce12479e63b2c298e4ea4f563b454892739, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:ef:8c:e9:1a:c2:3e:b5:5d:59:96:e4:11: b1:d5:c2:c7:66:fa:4c:f4:8d:ec:d8:06:6c:4a:0b: 4d:9c:c8:51:a8:55:92:91:75:b9:91:06:90:c3:20: 2c:a0:bf:85:a1:16:2a:55:55:6a:ae:dd:98:18:ea: 33:5e:d7:98:5b:e6:7a:4f:1b:6a:5e:63:e1:33:6c: 65:a9:66:d0:10:46:bf:f2:15:34:b5:93:70:0b:67: 17:04:c8:21:f4:7b:51:77:01:07:a4:9a:d5:60:f6: e0:41:4e:1d:0c:67:fe:20:0c:89:d6:c8:c8:5c:89: cb:fe:9a:27:1f:73:a0:0d:d4:7a:9b:56:f2:7a:8c: dc:d7:b9:fc:6b:27:0e:da:ac:23:3d:ce:d1:4c:1f: 0e:53:27:df:d2:e9:62:cb:08:36:fc:d2:7c:21:63: 55:38:a5:84:73:97:49:d5:6f:1f:bb:56:62:0f:b5: 41:a2:53:35:62:f8:b5:23:f7:12:80:a8:19:41:8e: 08:6a:85:95:fc:3d:b8:59:ba:ec:0f:e9:fa:8a:b2: 18:7e:dd:da:a3:e8:bc:45:4e:65:74:31:6d:87:a2: d3:05:15:56:45:0b:e5:04:d3:0c:8d:c3:15:98:49: 6b:1d:03:83:15:4a:40:25:98:73:23:4f:d4:8d:28: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:84:00:23:23:AD:A3:7E:26:39:C4:A4:EB:52:A1:DD:60:82:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption b1:ed:fd:75:d2:56:c1:b6:9b:c0:74:3d:7f:4c:23:0d:36:e1: 27:11:50:4d:67:69:41:78:c1:01:04:9c:3c:10:43:d0:e5:3b: 20:c2:df:32:6c:7d:fe:59:c9:71:26:02:ef:cc:e3:75:48:ba: d8:64:7b:56:45:dc:00:5f:1a:de:c2:d9:d3:70:b8:cb:dd:21: b0:60:d9:fc:66:d5:ce:8c:82:61:25:90:dd:aa:26:72:3a:4a: b4:52:b9:76:0c:e7:ce:38:c7:a4:cb:8d:46:31:c8:1e:fd:1a: 0d:bd:f9:8f:f1:89:3f:28:4f:16:71:0c:ca:51:bb:c3:1a:8b: da:42:c3:97:a9:69:c5:af:16:44:e5:eb:bc:ab:ff:dc:9f:f4: 80:01:1c:ad:1f:e9:00:f5:20:02:1f:5a:74:f0:22:12:7c:fc: b6:a5:8b:37:68:7f:7a:42:4e:9d:68:06:15:ec:2d:81:1d:39: e6:51:7f:cd:34:22:05:b1:1c:26:06:3a:ae:42:49:31:0d:fc: 39:cf:f0:b4:8b:7b:13:39:5e:38:39:06:77:70:a9:5b:55:1d: 47:90:52:18:9b:0c:cc:fb:6f:3d:4e:11:ea:22:b0:76:c9:d2: a8:4d:c4:c0:8e:c6:7f:85:b2:69:55:27:44:46:0f:37:53:a0: 1b:2e:90:73 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDsLvrtuhuygvSq1DgqTODo2RdsswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDA0MTMzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmYzOTVmYjQ5Y2VhZDY1ZDcwM2ZkNjY5YjgyM2NlMTI0 NzllNjNiMmMyOThlNGVhNGY1NjNiNDU0ODkyNzM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUhu+M6RrCPrVdWZbkEbHVwsdm+kz0jezYBmxKC02cyFGo VZKRdbmRBpDDICygv4WhFipVVWqu3ZgY6jNe15hb5npPG2peY+EzbGWpZtAQRr/y FTS1k3ALZxcEyCH0e1F3AQekmtVg9uBBTh0MZ/4gDInWyMhcicv+micfc6AN1Hqb VvJ6jNzXufxrJw7arCM9ztFMHw5TJ9/S6WLLCDb80nwhY1U4pYRzl0nVbx+7VmIP tUGiUzVi+LUj9xKAqBlBjghqhZX8PbhZuuwP6fqKshh+3dqj6LxFTmV0MW2HotMF FVZFC+UE0wyNwxWYSWsdA4MVSkAlmHMjT9SNKO75AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDa6EACMjraN+JjnEpOtSod1gggAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliOTYyNGY2LWY0YzQtNDZkNS05N2M5LTA5NTBiNWFlMTI0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4kzANBgkqhkiG9w0BAQsFAAOCAQEAse39ddJWwbabwHQ9f0wjDTbhJxFQ TWdpQXjBAQScPBBD0OU7IMLfMmx9/lnJcSYC78zjdUi62GR7VkXcAF8a3sLZ03C4 y90hsGDZ/GbVzoyCYSWQ3aomcjpKtFK5dgznzjjHpMuNRjHIHv0aDb35j/GJPyhP FnEMylG7wxqL2kLDl6lpxa8WROXrvKv/3J/0gAEcrR/pAPUgAh9adPAiEnz8tqWL N2h/ekJOnWgGFewtgR055lF/zTQiBbEcJgY6rkJJMQ38Oc/wtIt7EzleODkGd3Cp W1UdR5BSGJsMzPtvPU4R6iKwdsnSqE3EwI7Gf4WyaVUnREYPN1OgGy6Qcw== -----END CERTIFICATE-----Generated at Sat Oct 31 07:40:54 2026 by rpki-client