$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5059-e094-4b13-a141-d9c2a38313e5.roa File: b78a5059-e094-4b13-a141-d9c2a38313e5.roa (raw, json) Hash identifier: 7MSCnGjDeLGgsmdsnPngLc5GHLYvyWKL1n0aF0pcMxg= Subject key identifier: 4C:29:CF:7B:08:70:20:BA:B8:26:5D:05:B3:C5:FD:74:32:4E:79:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F751ECBD46FB46FF753B07861D46AE9B9B3A1FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5059-e094-4b13-a141-d9c2a38313e5.roa Signing time: Wed 21 Oct 2026 00:09:45 +0000 ROA not before: Wed 21 Oct 2026 00:09:45 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 45.33.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:75:1e:cb:d4:6f:b4:6f:f7:53:b0:78:61:d4:6a:e9:b9:b3:a1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 21 00:09:45 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=d48f87e8e7246682d8b2a92d28e6d9f44a3f3a81fe8ed722570379e6a70e8227, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:87:fb:7d:0c:7b:3b:d4:e8:23:08:36:75: 82:22:b3:ed:3d:8f:de:da:66:04:6b:06:c3:c6:3d: 09:28:3b:eb:86:0f:0c:18:71:e9:ce:6c:83:ff:8f: 11:a2:32:0a:15:5d:2f:1a:c3:9e:3a:ee:9c:79:3c: 14:9d:ef:11:a9:6f:92:d9:21:c6:88:ed:d1:0b:0f: 59:ec:b4:7f:37:bf:f3:a7:05:ed:84:a6:8f:67:a6: 81:dc:0a:db:78:72:fd:43:37:63:09:66:87:1b:aa: e0:1e:b6:a2:7d:6d:41:b2:4c:f5:a3:3f:01:16:88: 6b:a1:05:3b:e9:0f:cd:e9:57:91:5a:8f:57:04:85: 36:a2:d9:4c:88:1d:29:b3:0e:97:cb:1f:04:e1:b3: 80:66:6a:0e:b0:11:55:35:2f:60:c6:d5:e7:63:f7: 6b:b6:f9:69:07:fe:8e:d1:b1:66:60:4f:8f:8d:5e: ad:08:bd:12:8d:e8:35:d8:08:57:09:05:c3:1a:54: 44:5e:d6:69:34:32:3c:99:49:a7:ce:87:c2:c1:fe: 8e:f5:ce:02:d8:86:ec:4f:ae:68:f6:78:8b:f1:ac: 97:42:b6:c2:c1:ec:a2:eb:50:2b:7f:28:3f:a8:80: 44:1b:2c:dd:ef:0a:f4:fb:21:3d:c6:90:70:8c:a6: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:CF:7B:08:70:20:BA:B8:26:5D:05:B3:C5:FD:74:32:4E:79:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5059-e094-4b13-a141-d9c2a38313e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.33.166.0/24 Signature Algorithm: sha256WithRSAEncryption 58:7b:22:eb:84:b3:ed:01:67:84:a9:93:75:be:0b:27:10:fe: cc:7b:76:74:23:0b:1a:fa:62:c0:31:dc:65:bc:6c:59:c7:6b: e3:7a:67:bb:2d:54:bf:b3:90:90:86:b9:b6:60:ca:d5:6e:91: 17:97:1d:c6:71:80:aa:c3:d4:17:b6:e4:cc:c1:6b:21:07:2f: bb:97:0c:1d:b9:82:57:77:16:37:9d:3c:7d:b8:2f:77:58:54: e5:8d:40:06:30:ec:76:4f:0a:a1:ce:c8:aa:18:5b:0d:d5:fe: 17:ea:78:ad:66:76:c3:6d:fd:91:52:06:03:30:e4:ef:7d:97: ed:3e:d7:63:9b:0b:f3:e3:28:9c:be:01:b5:90:fd:70:19:25: 30:97:27:a8:85:89:b8:d0:f8:4e:f3:c0:b1:dc:60:02:fa:1a: a1:e7:1a:71:2f:af:dd:4b:00:11:39:33:92:e2:77:e0:f2:39: 40:60:fc:83:b0:ab:66:62:d7:e4:65:ed:95:50:0a:f9:3f:87: 88:8e:ff:74:a5:b1:2a:6b:56:f0:cb:e7:02:b1:3f:2b:84:3e: c8:55:c4:bb:d6:b7:36:42:0a:be:16:e9:fe:2f:2a:8b:33:03: bc:d2:fa:01:09:bf:00:3c:ec:41:07:2d:a1:e7:8d:d3:12:d2: 0f:30:52:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX3Uey9RvtG/3U7B4YdRq6bmzof4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIxMDAwOTQ1WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDhmODdlOGU3MjQ2NjgyZDhiMmE5MmQyOGU2ZDlmNDRh M2YzYTgxZmU4ZWQ3MjI1NzAzNzllNmE3MGU4MjI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAL4f7fQx7O9ToIwg2dYIis+09j97aZgRrBsPGPQkoO+uG DwwYcenObIP/jxGiMgoVXS8aw5467px5PBSd7xGpb5LZIcaI7dELD1nstH83v/On Be2Epo9npoHcCtt4cv1DN2MJZocbquAetqJ9bUGyTPWjPwEWiGuhBTvpD83pV5Fa j1cEhTai2UyIHSmzDpfLHwThs4Bmag6wEVU1L2DG1edj92u2+WkH/o7RsWZgT4+N Xq0IvRKN6DXYCFcJBcMaVERe1mk0MjyZSafOh8LB/o71zgLYhuxPrmj2eIvxrJdC tsLB7KLrUCt/KD+ogEQbLN3vCvT7IT3GkHCMpiPrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTCnPewhwILq4Jl0Fs8X9dDJOeYgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3OGE1MDU5LWUwOTQtNGIxMy1hMTQxLWQ5YzJhMzgzMTNlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtIaYwDQYJKoZIhvcNAQELBQADggEBAFh7IuuEs+0BZ4Spk3W+CycQ/sx7 dnQjCxr6YsAx3GW8bFnHa+N6Z7stVL+zkJCGubZgytVukReXHcZxgKrD1Be25MzB ayEHL7uXDB25gld3FjedPH24L3dYVOWNQAYw7HZPCqHOyKoYWw3V/hfqeK1mdsNt /ZFSBgMw5O99l+0+12ObC/PjKJy+AbWQ/XAZJTCXJ6iFibjQ+E7zwLHcYAL6GqHn GnEvr91LABE5M5Lid+DyOUBg/IOwq2Zi1+Rl7ZVQCvk/h4iO/3SlsSprVvDL5wKx PyuEPshVxLvWtzZCCr4W6f4vKoszA7zS+gEJvwA87EEHLaHnjdMS0g8wUuY= -----END CERTIFICATE-----Generated at Tue Nov 3 12:37:07 2026 by rpki-client