$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa File: a575592a-4f8e-4da1-aed9-48fad479afb1.roa (raw, json) Hash identifier: z81L5i5PUZc6h894prx39xKjSL0d6W73arZWpD4jizM= Subject key identifier: 4C:44:B1:80:77:C8:4C:CD:5C:16:07:A2:8F:A9:A4:51:2F:86:83:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1823F15A43EDC30A9FA67AE137994ECFBD65E267 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa Signing time: Thu 08 Oct 2026 00:21:47 +0000 ROA not before: Thu 08 Oct 2026 00:21:47 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:23:f1:5a:43:ed:c3:0a:9f:a6:7a:e1:37:99:4e:cf:bd:65:e2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:21:47 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=a4758dd38d841475ca606149633598d24807b9663d30263b9dc81e6dfdd111df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:48:3b:1a:33:6d:e8:2e:1a:bd:18:c3:44: 5e:82:d4:d2:eb:8b:d2:a1:43:91:c6:32:0a:80:aa: 4e:35:eb:3e:dc:f9:e9:2b:b2:d2:89:3a:e9:90:a5: 41:a8:dc:1e:88:0a:99:d5:f0:f7:82:bb:9e:ad:7a: 70:8a:20:0b:0d:74:86:58:6b:f4:61:3c:15:3b:87: b8:45:1f:c9:ad:08:dc:1b:25:73:bb:6c:36:aa:8f: 70:da:ed:9e:a0:ae:7c:68:a8:dd:8e:a2:6b:da:47: ef:92:a6:1b:62:2e:71:88:ae:98:a3:fc:44:f6:be: 35:02:09:f1:23:d2:2b:39:c0:43:33:c4:16:dd:43: fa:cf:81:c2:18:17:1c:c4:d3:a6:f7:7e:da:51:a5: 1d:2c:c3:cd:bc:f4:9d:5d:58:52:ce:41:a4:1b:b3: aa:b5:e4:15:21:c4:cf:ac:39:8d:dc:30:c1:9d:c3: 15:f9:48:b4:ad:c6:4c:fb:9a:ce:97:cc:4b:db:6e: 1a:a8:d1:d5:03:15:35:11:ad:a7:d8:63:6a:53:9d: 7e:b5:41:1d:31:a5:ff:5f:ca:45:17:7f:1a:e9:b8: f0:07:df:14:6c:2f:ae:78:f9:3d:e2:f7:23:9e:90: 9c:18:4b:8c:4c:e4:ed:bd:50:76:87:56:1b:46:c1: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:44:B1:80:77:C8:4C:CD:5C:16:07:A2:8F:A9:A4:51:2F:86:83:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.162.0/24 Signature Algorithm: sha256WithRSAEncryption ad:56:68:3a:4d:d9:f1:13:55:0a:11:75:a6:26:39:0d:d0:d1: e8:f6:11:25:97:79:29:42:94:f8:44:84:a4:d3:48:c9:41:65: 77:21:83:77:48:0d:93:be:bd:ba:9a:4b:46:a6:16:9b:b6:08: da:7a:36:47:f7:92:13:e6:54:c9:27:fe:90:50:6d:88:8b:9b: 83:a1:00:2e:5f:f3:d8:41:4c:81:12:8d:1d:75:6c:71:5c:bf: 66:bc:5d:4e:63:b2:ac:79:d3:83:70:90:9d:d9:7a:4a:09:8f: 3d:eb:8b:8b:70:6c:93:c6:81:0e:8c:00:bc:22:5b:1e:13:12: 63:b5:af:98:a5:92:b2:cb:91:ff:6c:59:27:28:bc:64:9d:4d: 33:48:2d:24:38:cf:0c:eb:87:2f:12:b3:e4:e5:8b:ec:10:15: 8a:9a:28:e0:e7:cf:fc:03:bd:d9:91:b4:9c:e7:de:8a:50:42: 65:2b:a4:de:9b:73:21:9d:c2:ec:24:59:7f:57:b4:6e:aa:65: f6:de:83:87:bd:32:ef:17:71:c3:07:3f:1e:a6:00:e2:8a:01: 2a:70:88:0d:5b:e7:b3:67:51:20:fb:6c:f8:ef:11:24:70:08: 1d:19:7b:f2:98:9e:b0:e1:de:e2:fe:44:34:ad:4e:73:9a:60: 02:67:65:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGCPxWkPtwwqfpnrhN5lOz71l4mcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAyMTQ3WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDc1OGRkMzhkODQxNDc1Y2E2MDYxNDk2MzM1OThkMjQ4 MDdiOTY2M2QzMDI2M2I5ZGM4MWU2ZGZkZDExMWRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuW0g7GjNt6C4avRjDRF6C1NLri9KhQ5HGMgqAqk416z7c +ekrstKJOumQpUGo3B6ICpnV8PeCu56tenCKIAsNdIZYa/RhPBU7h7hFH8mtCNwb JXO7bDaqj3Da7Z6grnxoqN2OomvaR++SphtiLnGIrpij/ET2vjUCCfEj0is5wEMz xBbdQ/rPgcIYFxzE06b3ftpRpR0sw8289J1dWFLOQaQbs6q15BUhxM+sOY3cMMGd wxX5SLStxkz7ms6XzEvbbhqo0dUDFTURrafYY2pTnX61QR0xpf9fykUXfxrpuPAH 3xRsL654+T3i9yOekJwYS4xM5O29UHaHVhtGwZEVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTESxgHfITM1cFgeij6mkUS+Gg3gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1NzU1OTJhLTRmOGUtNGRhMS1hZWQ5LTQ4ZmFkNDc5YWZiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTaIwDQYJKoZIhvcNAQELBQADggEBAK1WaDpN2fETVQoRdaYmOQ3Q0ej2 ESWXeSlClPhEhKTTSMlBZXchg3dIDZO+vbqaS0amFpu2CNp6Nkf3khPmVMkn/pBQ bYiLm4OhAC5f89hBTIESjR11bHFcv2a8XU5jsqx504NwkJ3ZekoJjz3ri4twbJPG gQ6MALwiWx4TEmO1r5ilkrLLkf9sWScovGSdTTNILSQ4zwzrhy8Ss+Tli+wQFYqa KODnz/wDvdmRtJzn3opQQmUrpN6bcyGdwuwkWX9XtG6qZfbeg4e9Mu8XccMHPx6m AOKKASpwiA1b57NnUSD7bPjvESRwCB0Ze/KYnrDh3uL+RDStTnOaYAJnZW4= -----END CERTIFICATE-----Generated at Sat Oct 31 05:21:19 2026 by rpki-client