$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa File: b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa (raw, json) Hash identifier: aROdJJaqGOaeSsxgwAxcUR9s/LhsVz2VH8ZCyb+PNo4= Subject key identifier: 91:77:7C:A0:66:4C:06:D8:B9:3E:28:48:8A:4E:DF:23:78:5C:17:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3008F4557E584DCA3447EC6049083D97395C373F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa Signing time: Mon 26 Oct 2026 00:41:01 +0000 ROA not before: Mon 26 Oct 2026 00:41:01 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 111.92.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:f4:55:7e:58:4d:ca:34:47:ec:60:49:08:3d:97:39:5c:37:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:41:01 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ca3ae063615f8741e88a275793872d962cd85bc9fd0b0568f5ca15184ceb5e58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:1c:d6:22:bf:09:5d:d6:63:1f:b8:cd:91: 4e:98:18:7f:ee:d0:51:8a:c3:6b:26:d8:24:07:7d: bc:21:35:ea:56:92:5a:8d:89:7a:5e:b1:00:3d:fe: dd:71:89:a6:3d:1e:f3:37:0f:9a:ea:2c:0c:63:85: 0f:b3:5d:8c:13:8f:4b:76:d8:91:1c:9e:0a:c2:99: a2:01:0a:1f:29:86:a7:60:95:4d:9f:d4:50:4b:a2: 74:73:98:9e:76:f2:20:75:8b:2f:b0:94:ae:66:ca: 3f:e5:d2:39:7e:ae:b8:59:7c:e6:f6:46:38:4d:44: c0:31:37:65:f1:21:84:0f:66:8b:1c:1a:77:05:f9: da:f7:78:39:c6:e5:b8:b7:97:7e:89:fd:57:92:0a: a2:5c:f2:e5:d1:ef:a3:62:9a:71:b1:a1:15:26:ae: 1a:a7:55:e7:8f:a3:62:56:04:e0:9f:6e:79:0f:59: c6:fc:14:61:68:36:4b:fa:9c:3a:aa:53:6d:6e:17: ae:d5:ec:1f:85:3e:e0:e3:b3:d2:7f:08:0d:76:49: c3:71:da:5e:e9:5f:b2:51:36:69:c4:9d:48:25:73: 68:5e:08:a6:90:87:3a:16:72:36:bb:e4:bd:51:45: 9a:b7:78:09:19:e5:d3:1b:8f:12:37:51:f0:d5:2a: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:77:7C:A0:66:4C:06:D8:B9:3E:28:48:8A:4E:DF:23:78:5C:17:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.92.176.0/24 Signature Algorithm: sha256WithRSAEncryption 19:08:a2:10:f5:bc:65:1f:ff:bc:3e:5c:e8:04:e4:5a:da:28: 7e:ef:d8:64:2c:66:ee:f9:bf:11:15:d1:9a:ea:2a:c5:e6:82: 8d:61:01:b0:cc:b9:07:30:a6:c0:cc:10:2d:d0:f7:c5:48:ce: fd:eb:f1:af:c8:b1:71:21:91:c7:fb:88:77:1b:66:a0:84:75: 26:f8:90:18:7f:9b:ef:34:1c:ef:3a:78:4e:1a:d4:1a:f6:30: 8a:bc:b0:3b:f7:84:f7:17:1a:0e:50:6c:af:19:1e:bd:4d:37: eb:2f:d8:4c:37:f4:c6:b1:29:76:9c:c3:25:6b:ae:74:cc:43: 30:4b:3b:b9:c3:5b:79:c8:65:1a:64:94:b7:63:6e:7c:cf:d9: 03:41:06:b7:dd:8d:ea:9e:e1:6a:13:c7:c6:3e:bb:ff:6a:ef: ea:6d:52:6f:fe:1b:61:6a:49:23:90:2c:18:cb:96:05:a9:82: dd:27:d9:83:c6:b3:0b:13:d5:15:e4:aa:14:30:af:88:06:d2: 92:79:ac:65:8c:45:fd:75:d4:48:ea:75:f4:0c:a6:46:19:41: c7:5f:06:3d:7d:dc:45:e5:42:db:57:09:8b:c7:42:f0:36:84: 7d:27:67:d3:a3:c5:cf:44:d5:58:a9:a3:1a:1d:6f:0d:9e:7e: 71:e0:1c:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMAj0VX5YTco0R+xgSQg9lzlcNz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDA0MTAxWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTNhZTA2MzYxNWY4NzQxZTg4YTI3NTc5Mzg3MmQ5NjJj ZDg1YmM5ZmQwYjA1NjhmNWNhMTUxODRjZWI1ZTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8FRzWIr8JXdZjH7jNkU6YGH/u0FGKw2sm2CQHfbwhNepW klqNiXpesQA9/t1xiaY9HvM3D5rqLAxjhQ+zXYwTj0t22JEcngrCmaIBCh8phqdg lU2f1FBLonRzmJ528iB1iy+wlK5myj/l0jl+rrhZfOb2RjhNRMAxN2XxIYQPZosc GncF+dr3eDnG5bi3l36J/VeSCqJc8uXR76NimnGxoRUmrhqnVeePo2JWBOCfbnkP Wcb8FGFoNkv6nDqqU21uF67V7B+FPuDjs9J/CA12ScNx2l7pX7JRNmnEnUglc2he CKaQhzoWcja75L1RRZq3eAkZ5dMbjxI3UfDVKvY1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkXd8oGZMBti5PihIik7fI3hcF2owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0NjZiOWY4LWZiM2ItNDRlYi04OTk3LThmNzQ4ODhkZjRhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABvXLAwDQYJKoZIhvcNAQELBQADggEBABkIohD1vGUf/7w+XOgE5FraKH7v 2GQsZu75vxEV0ZrqKsXmgo1hAbDMuQcwpsDMEC3Q98VIzv3r8a/IsXEhkcf7iHcb ZqCEdSb4kBh/m+80HO86eE4a1Br2MIq8sDv3hPcXGg5QbK8ZHr1NN+sv2Ew39Max KXacwyVrrnTMQzBLO7nDW3nIZRpklLdjbnzP2QNBBrfdjeqe4WoTx8Y+u/9q7+pt Um/+G2FqSSOQLBjLlgWpgt0n2YPGswsT1RXkqhQwr4gG0pJ5rGWMRf111EjqdfQM pkYZQcdfBj193EXlQttXCYvHQvA2hH0nZ9Ojxc9E1Vipoxodbw2efnHgHKg= -----END CERTIFICATE-----Generated at Mon Nov 2 15:00:54 2026 by rpki-client