$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3ccc978-80fb-4808-bf55-a2d534ddc69a.roa File: a3ccc978-80fb-4808-bf55-a2d534ddc69a.roa (raw, json) Hash identifier: elqU1Dmz8vUbEXWcSwCbXmwAVi5BuY/9+VWMvimVlzI= Subject key identifier: 67:67:20:B0:26:24:13:6E:E8:C1:3D:9F:28:BC:62:2B:AF:3D:F6:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EAF56740BBBBB611DA7FA6E8B8C669E6E666ED6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3ccc978-80fb-4808-bf55-a2d534ddc69a.roa Signing time: Thu 22 Oct 2026 01:30:09 +0000 ROA not before: Thu 22 Oct 2026 01:30:09 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 13.192.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:af:56:74:0b:bb:bb:61:1d:a7:fa:6e:8b:8c:66:9e:6e:66:6e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:30:09 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=dcff8371c2891aa344eff3919a785a779c234bb3337f6ef6f1adb20a8140d639, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:b2:18:37:ac:e2:ca:de:e0:d9:18:1d:48: ad:b2:b7:2a:b5:a3:03:05:8d:d3:34:1d:03:32:32: e3:4f:47:8c:b4:2a:21:59:63:4c:04:12:4f:92:61: 14:d2:ca:66:0d:6e:f5:34:f1:72:02:f9:30:e3:b8: b2:2d:60:ce:ac:13:76:5b:f1:0d:98:ab:c0:19:e0: 0e:f3:b0:40:8f:37:f2:3b:db:b5:30:f1:3b:31:fb: f0:b6:49:22:01:72:5d:24:3f:9f:1e:4e:8d:3e:e7: 9e:0e:bd:92:bf:01:d3:14:c4:17:8d:35:40:a5:c0: e2:fc:03:3f:30:3c:af:56:29:a0:e9:3d:8d:77:dd: 82:de:77:c9:17:8e:a6:d7:6d:c3:4c:7f:db:fb:a7: 68:8a:c3:33:a5:18:18:a0:c4:10:70:6b:40:02:4d: 95:c8:f5:d7:6a:b4:9c:7a:8a:f5:4c:a8:6f:8e:4d: 16:c1:33:40:ad:54:0e:83:19:4b:b8:4a:98:70:2a: af:b3:20:d4:63:91:f8:0b:88:65:11:09:3d:36:8a: 40:59:d2:9f:6a:30:98:3c:ef:7e:f9:0c:03:ec:cc: 6b:c3:fc:76:08:48:7e:46:61:14:7f:be:0f:27:68: 79:c4:3c:24:f9:6b:53:d6:55:f7:94:e7:3b:be:63: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:20:B0:26:24:13:6E:E8:C1:3D:9F:28:BC:62:2B:AF:3D:F6:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3ccc978-80fb-4808-bf55-a2d534ddc69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.192.0.0/13 Signature Algorithm: sha256WithRSAEncryption 14:81:95:0a:4b:f9:6c:28:30:ef:51:1a:8c:12:b4:ec:db:cd: f9:b7:2a:80:1b:2f:0c:c6:ab:ff:8e:09:b4:ee:bc:a7:d1:91: 21:95:4d:94:3e:39:4e:5e:78:c0:81:c3:6c:1d:fb:51:d5:31: 89:a4:d0:00:f9:9c:76:b6:17:fb:69:f9:c2:0c:a4:92:ab:be: a6:f2:2a:98:63:ee:eb:81:6d:35:fd:1b:84:b7:68:2e:ce:66: cb:67:a8:63:82:d1:f6:ad:67:d7:35:73:c2:34:3c:59:cb:c6: df:5d:a1:27:17:03:ed:82:89:1b:32:04:e8:66:1f:16:6a:47: 61:e5:91:c4:87:06:7b:c1:76:bc:19:4c:aa:31:80:d5:36:4e: 68:33:0e:9d:ff:37:57:95:6b:c6:84:9a:b8:38:27:57:96:5b: db:08:47:7d:3a:8b:c4:c9:4f:4c:89:2c:f5:68:88:d1:c6:71: e2:00:3e:c5:25:91:d0:c8:99:dd:45:2f:99:ed:9c:ea:d0:31: d0:01:08:62:b6:af:62:b5:37:23:13:4e:76:21:7a:5c:32:41: 90:df:a0:c4:0d:20:40:be:95:3e:5a:9b:32:e1:58:30:1d:d0: 53:c8:31:3d:e5:93:b6:64:21:aa:d7:18:30:19:a0:b0:7b:0c: 38:7c:bc:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXq9WdAu7u2Edp/pui4xmnm5mbtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEzMDA5WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2ZmODM3MWMyODkxYWEzNDRlZmYzOTE5YTc4NWE3Nzlj MjM0YmIzMzM3ZjZlZjZmMWFkYjIwYTgxNDBkNjM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrFbIYN6ziyt7g2RgdSK2ytyq1owMFjdM0HQMyMuNPR4y0 KiFZY0wEEk+SYRTSymYNbvU08XIC+TDjuLItYM6sE3Zb8Q2Yq8AZ4A7zsECPN/I7 27Uw8Tsx+/C2SSIBcl0kP58eTo0+554OvZK/AdMUxBeNNUClwOL8Az8wPK9WKaDp PY133YLed8kXjqbXbcNMf9v7p2iKwzOlGBigxBBwa0ACTZXI9ddqtJx6ivVMqG+O TRbBM0CtVA6DGUu4SphwKq+zINRjkfgLiGURCT02ikBZ0p9qMJg87375DAPszGvD /HYISH5GYRR/vg8naHnEPCT5a1PWVfeU5zu+Y8M9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZ2cgsCYkE27owT2fKLxiK6899rgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzY2NjOTc4LTgwZmItNDgwOC1iZjU1LWEyZDUzNGRkYzY5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMNwDANBgkqhkiG9w0BAQsFAAOCAQEAFIGVCkv5bCgw71EajBK07NvN+bcq gBsvDMar/44JtO68p9GRIZVNlD45Tl54wIHDbB37UdUxiaTQAPmcdrYX+2n5wgyk kqu+pvIqmGPu64FtNf0bhLdoLs5my2eoY4LR9q1n1zVzwjQ8WcvG312hJxcD7YKJ GzIE6GYfFmpHYeWRxIcGe8F2vBlMqjGA1TZOaDMOnf83V5VrxoSauDgnV5Zb2whH fTqLxMlPTIks9WiI0cZx4gA+xSWR0MiZ3UUvme2c6tAx0AEIYravYrU3IxNOdiF6 XDJBkN+gxA0gQL6VPlqbMuFYMB3QU8gxPeWTtmQhqtcYMBmgsHsMOHy8GQ== -----END CERTIFICATE-----Generated at Wed Nov 4 22:33:48 2026 by rpki-client