$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa File: ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa (raw, json) Hash identifier: ppHVR2WpdOfgwwSZWPsbEAQKryq5OwCKuOlp/1JA3Y0= Subject key identifier: 70:82:DE:EC:FA:C4:02:1A:F1:7B:46:BC:FA:19:90:40:FA:2B:38:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E53A623782B769DCD81FD46CB553BDCB0860C9B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa Signing time: Fri 16 Oct 2026 00:11:05 +0000 ROA not before: Fri 16 Oct 2026 00:11:05 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.52.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:53:a6:23:78:2b:76:9d:cd:81:fd:46:cb:55:3b:dc:b0:86:0c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:11:05 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=a010a3afa4b02ccc70d15ccf7784d02bb4b7e9fc2dcbfeda857caa5ed023ca04, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:87:17:16:8b:53:bb:8a:7f:b6:a7:c4:f1: 0e:41:f8:26:1a:54:71:ca:cf:22:dd:d9:68:ef:d2: ed:ab:1e:7c:13:8b:77:39:af:6f:59:8f:b6:cc:55: 41:b3:93:c0:bb:35:6f:73:cc:5d:1f:4d:5f:9f:49: ff:d7:4c:03:fd:73:0b:5e:e2:16:3c:0f:d3:86:89: 30:d5:e1:3f:49:d4:ed:09:87:81:2b:9b:41:dc:ae: 66:62:ce:a6:b1:a4:a2:0d:72:75:a5:ac:33:8d:25: 39:36:8e:c3:b6:fc:d4:78:69:44:58:a4:e7:73:5c: 54:cd:54:9b:cd:ba:9b:33:18:20:de:da:58:e0:04: 34:c2:1b:92:84:83:a9:5b:dd:53:88:90:48:d1:44: 66:2e:d3:62:60:24:20:99:13:2c:0c:d1:14:37:36: ed:a9:42:0a:9c:04:f4:a9:38:c5:d1:01:f1:2c:11: 62:cb:66:10:97:7d:41:82:76:99:40:ed:99:66:9c: 2e:13:ec:e0:ce:fc:09:ca:af:03:a6:14:22:64:a4: a0:86:5a:98:ad:3b:33:fd:07:aa:04:77:58:3b:f2: 17:f2:9d:c3:01:bb:55:81:ed:ba:c7:f3:b2:90:2d: 83:50:0f:81:aa:7a:9a:24:ce:85:0d:e5:08:37:9a: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:DE:EC:FA:C4:02:1A:F1:7B:46:BC:FA:19:90:40:FA:2B:38:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.52.168.0/21 Signature Algorithm: sha256WithRSAEncryption 63:d5:4c:36:80:ea:b2:18:3b:f7:69:06:78:4a:0c:8f:c3:c8: e1:86:f3:16:58:97:0d:44:ce:e6:d0:56:08:91:cc:23:0d:66: 65:eb:7c:de:f1:a2:9a:40:f7:89:0e:aa:13:a7:3c:60:0d:01: fe:7f:f5:db:1b:85:a6:2f:f3:09:d3:e6:23:f3:84:03:81:66: e1:e9:7d:73:9f:63:10:aa:c6:1c:c9:c5:c6:3c:6c:0f:1b:26: 7e:f2:94:27:c8:b5:f4:1c:24:08:e2:e3:fa:47:bc:1e:59:80: 58:ce:e5:1b:96:a8:63:ab:48:33:ee:3b:e5:9f:ae:03:ae:cd: 1f:81:25:96:38:0d:d7:56:d2:8b:a8:7d:72:d9:3d:11:ad:28: 77:b1:03:7b:c7:65:30:b4:d4:a0:83:4b:31:64:5f:7d:0c:8c: e9:b1:27:e6:b4:86:9e:92:31:a8:04:69:d1:28:e5:d7:e9:19: 7a:28:ee:65:01:45:53:28:00:a8:d1:cb:8b:4b:cd:3a:b5:f0: 0a:7c:01:7c:8b:4e:a6:79:a8:cd:1e:cc:7c:2a:85:2b:b8:81: 42:db:f0:a4:36:93:62:9f:2a:a1:d5:03:e1:03:bf:0a:1f:ab: e6:b2:d6:1b:be:22:03:93:74:ab:19:f5:a5:b1:bc:88:46:1d: b8:fa:8e:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHlOmI3grdp3Ngf1Gy1U73LCGDJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAxMTA1WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDEwYTNhZmE0YjAyY2NjNzBkMTVjY2Y3Nzg0ZDAyYmI0 YjdlOWZjMmRjYmZlZGE4NTdjYWE1ZWQwMjNjYTA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNQYcXFotTu4p/tqfE8Q5B+CYaVHHKzyLd2Wjv0u2rHnwT i3c5r29Zj7bMVUGzk8C7NW9zzF0fTV+fSf/XTAP9cwte4hY8D9OGiTDV4T9J1O0J h4Erm0HcrmZizqaxpKINcnWlrDONJTk2jsO2/NR4aURYpOdzXFTNVJvNupszGCDe 2ljgBDTCG5KEg6lb3VOIkEjRRGYu02JgJCCZEywM0RQ3Nu2pQgqcBPSpOMXRAfEs EWLLZhCXfUGCdplA7ZlmnC4T7ODO/AnKrwOmFCJkpKCGWpitOzP9B6oEd1g78hfy ncMBu1WB7brH87KQLYNQD4GqepokzoUN5Qg3mttpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcILe7PrEAhrxe0a8+hmQQPorOPAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjNWFjNzg2LTJlMjEtNGRhZS04ZWVkLWE5YjJmZjI5OWEzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANANKgwDQYJKoZIhvcNAQELBQADggEBAGPVTDaA6rIYO/dpBnhKDI/DyOGG 8xZYlw1EzubQVgiRzCMNZmXrfN7xoppA94kOqhOnPGANAf5/9dsbhaYv8wnT5iPz hAOBZuHpfXOfYxCqxhzJxcY8bA8bJn7ylCfItfQcJAji4/pHvB5ZgFjO5RuWqGOr SDPuO+WfrgOuzR+BJZY4DddW0ouofXLZPRGtKHexA3vHZTC01KCDSzFkX30MjOmx J+a0hp6SMagEadEo5dfpGXoo7mUBRVMoAKjRy4tLzTq18Ap8AXyLTqZ5qM0ezHwq hSu4gULb8KQ2k2KfKqHVA+EDvwofq+ay1hu+IgOTdKsZ9aWxvIhGHbj6js8= -----END CERTIFICATE-----Generated at Sat Oct 31 12:28:25 2026 by rpki-client