$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa File: adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa (raw, json) Hash identifier: jgtHy6YLAooD8MjECWqSSB2vFBqUGg05auc4p2eA5QE= Subject key identifier: B6:19:2C:BE:B3:B5:6C:F6:3F:0B:1B:44:6A:C0:7B:B9:34:41:46:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D343E038FB79757C4C2370B489148D2C07F7D48 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa Signing time: Fri 23 Oct 2026 01:11:31 +0000 ROA not before: Fri 23 Oct 2026 01:11:31 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 5.60.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:34:3e:03:8f:b7:97:57:c4:c2:37:0b:48:91:48:d2:c0:7f:7d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:11:31 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=26ebc64463a582eb6c5f1c28789e3c87acc3160e27c4a1eec1131bfe1f03ef28, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:ba:aa:77:77:0c:d9:1c:ca:1c:39:b1:da: 0d:33:51:4e:be:82:53:f7:0a:f3:49:84:6d:5e:90: b2:f4:1a:32:50:5a:12:69:77:d1:a3:da:89:29:fc: 74:3c:e7:9d:02:74:7e:88:df:3a:5e:19:9c:aa:ee: f4:d4:ce:f6:02:80:54:f7:34:e2:ef:70:90:16:b8: bc:29:ac:6e:bf:d9:79:37:b3:05:3d:cb:cd:1b:dc: 53:ad:18:48:eb:eb:db:bc:7d:3e:c3:1f:46:d0:a0: d3:83:b8:6b:f1:f1:10:7f:dc:0a:5a:f2:6b:01:57: 27:37:d2:d4:28:fa:9c:f9:61:1a:1c:43:d0:58:a5: 34:81:81:19:63:ec:31:f1:49:ee:ab:a6:83:50:89: 04:36:37:7a:b5:fd:fc:9c:47:0f:d4:20:25:09:3c: 6e:b0:97:e5:d5:dc:bd:0e:ac:fb:9f:0c:73:84:00: 8d:3a:5a:0c:5b:2a:c9:d8:f3:74:12:0b:a9:50:f6: 76:1a:e0:10:22:61:e6:78:b8:69:40:ea:28:29:4d: 9a:7d:58:e3:58:56:ad:16:cc:b0:2d:f3:17:c4:d6: d9:a9:aa:d4:7f:fa:f5:d6:94:b8:05:bd:53:35:29: be:4a:31:75:2c:98:1d:4d:14:4f:63:ce:49:2b:c1: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:19:2C:BE:B3:B5:6C:F6:3F:0B:1B:44:6A:C0:7B:B9:34:41:46:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:a0:e4:fe:6f:ae:27:63:04:e7:05:62:84:54:4e:36:3b:8c: e9:3c:79:65:a7:03:4e:be:ed:ea:77:59:a4:eb:f2:eb:5d:f4: c2:38:01:05:bd:b3:b4:b5:b5:9a:9d:9d:f6:86:38:fc:8d:ad: 33:cc:3a:02:11:3d:3a:81:ec:b4:81:83:e3:a4:53:7d:cc:7a: 3f:bd:26:26:ce:13:b3:b4:ae:d1:72:a3:d6:27:35:54:14:92: 39:34:7b:9c:65:69:6e:4f:ca:6b:53:55:2f:47:a9:01:b0:a4: 32:3e:16:7d:a2:f6:2e:11:3f:5c:fd:84:36:4e:a1:47:97:ad: 1a:a3:1a:c7:39:cb:5a:96:d0:8d:95:57:69:c6:05:54:dd:df: ee:0c:dd:e8:e2:09:78:67:4d:2d:13:7e:9c:1b:cd:70:e6:6e: dc:63:5a:ed:b1:cb:18:27:cc:fd:7f:75:4d:09:13:5c:90:b0: 0b:a0:f9:0d:04:e2:03:1c:68:9d:ed:be:eb:08:24:3e:cc:3f: 9c:6e:95:b2:a7:e4:33:1e:0f:a1:e4:4e:a9:fa:bf:3e:75:d6: 29:35:c4:d5:e5:77:f7:bc:98:3f:f1:b4:ce:32:2f:40:86:27: 0d:7e:ea:f9:b4:28:67:87:d2:8c:3f:cb:a6:e7:47:51:bf:88: 38:37:26:f9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHTQ+A4+3l1fEwjcLSJFI0sB/fUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMTMxWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmViYzY0NDYzYTU4MmViNmM1ZjFjMjg3ODllM2M4N2Fj YzMxNjBlMjdjNGExZWVjMTEzMWJmZTFmMDNlZjI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTGrqqd3cM2RzKHDmx2g0zUU6+glP3CvNJhG1ekLL0GjJQ WhJpd9Gj2okp/HQ8550CdH6I3zpeGZyq7vTUzvYCgFT3NOLvcJAWuLwprG6/2Xk3 swU9y80b3FOtGEjr69u8fT7DH0bQoNODuGvx8RB/3Apa8msBVyc30tQo+pz5YRoc Q9BYpTSBgRlj7DHxSe6rpoNQiQQ2N3q1/fycRw/UICUJPG6wl+XV3L0OrPufDHOE AI06WgxbKsnY83QSC6lQ9nYa4BAiYeZ4uGlA6igpTZp9WONYVq0WzLAt8xfE1tmp qtR/+vXWlLgFvVM1Kb5KMXUsmB1NFE9jzkkrwfTfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUthksvrO1bPY/CxtEasB7uTRBRtUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkZjgxZGZhLTMyMWQtNDJhNC1hMWU3LWVlZmVjN2QwYTM4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAFPDANBgkqhkiG9w0BAQsFAAOCAQEAeaDk/m+uJ2ME5wVihFRONjuM6Tx5 ZacDTr7t6ndZpOvy6130wjgBBb2ztLW1mp2d9oY4/I2tM8w6AhE9OoHstIGD46RT fcx6P70mJs4Ts7Su0XKj1ic1VBSSOTR7nGVpbk/Ka1NVL0epAbCkMj4WfaL2LhE/ XP2ENk6hR5etGqMaxznLWpbQjZVXacYFVN3f7gzd6OIJeGdNLRN+nBvNcOZu3GNa 7bHLGCfM/X91TQkTXJCwC6D5DQTiAxxone2+6wgkPsw/nG6VsqfkMx4PoeROqfq/ PnXWKTXE1eV397yYP/G0zjIvQIYnDX7q+bQoZ4fSjD/LpudHUb+IODcm+Q== -----END CERTIFICATE-----Generated at Sat Oct 31 22:48:25 2026 by rpki-client