$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b33937a9-2482-483c-ae0b-7f75fc542de0.roa File: b33937a9-2482-483c-ae0b-7f75fc542de0.roa (raw, json) Hash identifier: e4+heg0N9Wa7uhfZ944d6/RRul55LW3w1Ddn4Cdk5nA= Subject key identifier: E0:10:BF:B0:04:56:B5:5F:D5:4D:B2:A0:4E:F6:A5:0F:78:70:7D:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EEB265F1811E47A127BB68E6FEA2E9F078923DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b33937a9-2482-483c-ae0b-7f75fc542de0.roa Signing time: Thu 22 Oct 2026 02:21:01 +0000 ROA not before: Thu 22 Oct 2026 02:21:01 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 107.22.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:eb:26:5f:18:11:e4:7a:12:7b:b6:8e:6f:ea:2e:9f:07:89:23:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:21:01 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=8a61578c5a292cbbb0fcf517cf8bc4f2f2cebfb5815eeb30c482f232e6836801, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:c7:73:d0:a7:ab:61:58:1a:ae:5d:5d:49: 8b:4c:bf:4d:70:bd:18:71:45:67:99:90:48:69:73: c3:2d:08:ca:98:74:80:86:06:54:52:0e:34:f8:3f: e6:1e:dc:bf:58:98:43:e0:82:98:e0:93:a2:92:5f: 38:48:df:58:31:7a:12:cb:05:80:c5:be:1b:96:76: 5a:f3:4a:d2:b9:2e:c8:f5:89:57:e1:6d:ea:75:36: ba:2a:cd:cc:a7:94:35:ec:8d:31:c7:c3:df:22:8b: bd:85:94:46:ff:e5:ed:a4:28:a1:0a:37:71:b6:e4: ca:45:67:d0:6c:23:f5:4f:99:2e:45:95:a3:6c:97: 86:e8:f4:26:22:2b:6f:99:a6:a9:f5:57:96:a8:a6: 1b:40:28:a2:e9:c3:83:04:12:2e:01:08:89:e1:ba: 83:1e:2b:68:c4:06:06:a6:80:8e:e4:8b:01:b5:c4: 7e:d1:52:9f:0a:1f:ab:d8:1b:e3:aa:db:b3:8f:5f: cc:97:f3:a0:f5:d3:5e:82:0f:f6:b1:de:f0:4e:40: 8c:89:21:23:4f:57:77:47:af:34:2e:66:08:98:0e: 74:08:04:cd:87:f9:ce:26:ae:10:1a:26:bd:aa:59: 3f:29:c4:b6:45:89:2a:45:f4:05:44:38:b0:38:1b: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:10:BF:B0:04:56:B5:5F:D5:4D:B2:A0:4E:F6:A5:0F:78:70:7D:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b33937a9-2482-483c-ae0b-7f75fc542de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.0.0/17 Signature Algorithm: sha256WithRSAEncryption c8:51:9f:19:be:6b:10:49:80:29:0b:73:d1:80:5d:03:81:55: e5:fc:c7:7f:9e:c3:2e:b6:ca:84:4c:2c:d2:45:96:0b:a3:47: c0:eb:aa:48:63:42:d8:28:aa:47:94:95:f9:ec:0d:9c:1d:1f: 44:96:65:8f:a4:bc:54:0b:ef:c2:b0:7f:2b:46:ce:ee:a6:fc: d7:e1:e4:1f:32:1b:f0:8b:76:1a:22:6d:c7:49:9c:fb:1e:82: a5:c8:3a:66:a6:69:fd:bb:7a:56:27:9c:c1:22:2f:d1:cd:a7: a3:a8:3f:57:36:39:71:53:db:bc:06:af:9d:2a:36:37:53:07: 8d:7c:f1:2c:ed:ab:bc:6e:92:a2:1a:31:c0:63:da:21:74:24: 78:f4:b6:1c:ba:f8:b6:ee:34:ad:a6:7b:43:77:07:d2:20:89: d6:a4:10:82:6d:ab:9c:da:2f:33:19:54:bd:cd:bc:17:95:08: d0:1e:ae:6a:2b:fb:d7:cb:57:09:ab:d0:64:ff:8d:5a:dc:3a: 70:6a:56:18:f9:73:70:c4:57:09:f0:53:28:c9:04:b5:2b:a5: 73:c9:b2:bd:10:ab:0b:32:14:8d:01:a0:d7:6a:0d:92:35:e5: be:cc:92:76:54:a8:08:61:22:1b:b8:8c:93:82:2f:be:f4:82: cc:ef:dd:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXusmXxgR5HoSe7aOb+ounweJI90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIyMTAxWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTYxNTc4YzVhMjkyY2JiYjBmY2Y1MTdjZjhiYzRmMmYy Y2ViZmI1ODE1ZWViMzBjNDgyZjIzMmU2ODM2ODAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHhcdz0KerYVgarl1dSYtMv01wvRhxRWeZkEhpc8MtCMqY dICGBlRSDjT4P+Ye3L9YmEPggpjgk6KSXzhI31gxehLLBYDFvhuWdlrzStK5Lsj1 iVfhbep1NroqzcynlDXsjTHHw98ii72FlEb/5e2kKKEKN3G25MpFZ9BsI/VPmS5F laNsl4bo9CYiK2+Zpqn1V5aophtAKKLpw4MEEi4BCInhuoMeK2jEBgamgI7kiwG1 xH7RUp8KH6vYG+Oq27OPX8yX86D1016CD/ax3vBOQIyJISNPV3dHrzQuZgiYDnQI BM2H+c4mrhAaJr2qWT8pxLZFiSpF9AVEOLA4Gz9tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4BC/sARWtV/VTbKgTvalD3hwfVUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzMzkzN2E5LTI0ODItNDgzYy1hZTBiLTdmNzVmYzU0MmRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFgAwDQYJKoZIhvcNAQELBQADggEBAMhRnxm+axBJgCkLc9GAXQOBVeX8 x3+ewy62yoRMLNJFlgujR8DrqkhjQtgoqkeUlfnsDZwdH0SWZY+kvFQL78KwfytG zu6m/Nfh5B8yG/CLdhoibcdJnPsegqXIOmamaf27elYnnMEiL9HNp6OoP1c2OXFT 27wGr50qNjdTB4188Sztq7xukqIaMcBj2iF0JHj0thy6+LbuNK2me0N3B9Igidak EIJtq5zaLzMZVL3NvBeVCNAermor+9fLVwmr0GT/jVrcOnBqVhj5c3DEVwnwUyjJ BLUrpXPJsr0QqwsyFI0BoNdqDZI15b7MknZUqAhhIhu4jJOCL770gszv3bM= -----END CERTIFICATE-----Generated at Sat Oct 31 08:16:00 2026 by rpki-client