$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba564eb9-4a70-4caf-8aa2-324910604d6b.roa File: ba564eb9-4a70-4caf-8aa2-324910604d6b.roa (raw, json) Hash identifier: P0BVig+cXbkTfMUjM+qNf12r9Pjr5HgFHUZwtJmZsJM= Subject key identifier: 1C:A1:FC:65:EC:2D:B0:D0:42:9C:61:7D:3C:FD:96:C0:F2:4F:42:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 549ADE0C2FC1AAC43898C7902EC9A7C116125930 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba564eb9-4a70-4caf-8aa2-324910604d6b.roa Signing time: Tue 06 Oct 2026 00:10:43 +0000 ROA not before: Tue 06 Oct 2026 00:10:43 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 56.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9a:de:0c:2f:c1:aa:c4:38:98:c7:90:2e:c9:a7:c1:16:12:59:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:10:43 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=6dd296347525c2e14972a59eb00bc6c82250b291b84540b19d8d788bd597143b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:96:b9:5b:db:cf:f7:41:3b:72:98:35:d5: 68:2f:03:85:1b:b9:ef:37:30:95:90:e3:8a:ca:e9: 2f:00:ee:88:20:51:2a:f4:b0:19:3f:09:79:0c:8c: be:6e:d6:81:8e:13:91:f1:5d:76:72:7c:bc:b3:69: f0:0a:1e:22:99:ac:26:1e:8a:49:22:82:a6:79:2e: f4:75:b7:1b:ff:23:1a:99:2e:0d:c1:c3:06:22:70: 70:e4:f1:6f:d3:22:d2:a1:c7:e2:b4:f2:ee:a5:ce: 00:20:ed:1f:b3:36:9c:d4:7d:ed:1c:0e:69:96:58: 07:2b:0b:5f:83:d9:36:80:0a:e8:cc:7e:3f:aa:c5: fc:b3:31:bd:0e:87:5a:1e:23:81:45:25:8d:ec:98: 0d:4e:fa:5d:4f:d8:c5:df:3f:0f:69:6c:ec:46:13: 49:a7:17:09:50:77:b0:29:3c:4b:f7:6d:8c:26:10: 94:2d:12:eb:a4:bc:1a:b5:1c:b3:83:bb:f1:41:31: 79:e2:68:71:1c:3f:ef:a8:da:35:04:78:9d:c6:a0: 31:51:bf:0e:71:02:27:3c:19:96:5d:67:d1:25:46: 9e:3f:39:8b:84:bc:84:49:61:38:56:8a:21:92:3e: f1:95:f4:47:33:ad:fb:35:1e:23:ce:48:06:6f:8b: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A1:FC:65:EC:2D:B0:D0:42:9C:61:7D:3C:FD:96:C0:F2:4F:42:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba564eb9-4a70-4caf-8aa2-324910604d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:83:d3:f1:bb:4f:e8:c9:a4:56:a2:e2:35:02:98:d0:3d:bd: 3d:53:12:3d:06:fe:f1:39:c6:94:73:87:d9:f4:e2:04:79:c3: 51:7a:cc:9f:ad:76:e4:8b:46:dc:ab:d3:90:5f:5f:c9:6f:78: 2f:5d:87:1f:d0:c3:54:73:b7:a8:d0:17:00:3f:b2:d0:dc:51: f2:87:cf:ea:99:93:0b:24:62:4b:66:6a:9f:f1:0e:d8:4f:e1: 6c:8f:60:eb:a1:02:0f:dc:ed:a1:3c:01:7e:98:25:a4:57:47: 69:8c:3e:7a:50:da:ce:6b:b2:ed:75:a1:2b:1c:fa:47:38:db: 35:54:22:17:c0:a7:24:9a:da:d6:aa:f3:02:93:76:29:87:d2: c0:32:4d:5e:40:9c:cc:a5:10:fa:4b:cb:23:86:19:ba:62:cb: d4:4f:73:91:b8:f7:12:e0:3f:d1:c2:de:a7:b6:7c:36:7b:0e: 09:72:e1:3a:e7:6b:3e:86:e0:1f:06:4f:db:b8:db:12:9a:25: a1:17:43:93:2f:8a:8d:63:da:84:56:5a:34:3f:96:2d:34:d2: d5:ae:d2:c5:f5:48:63:0f:dd:26:3f:cb:f3:d4:df:3b:3a:3c: de:ac:92:72:d4:dc:cb:2e:70:13:c8:d9:c4:6b:4d:5f:36:64: 32:b6:7f:e9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVJreDC/BqsQ4mMeQLsmnwRYSWTAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAxMDQzWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGQyOTYzNDc1MjVjMmUxNDk3MmE1OWViMDBiYzZjODIy NTBiMjkxYjg0NTQwYjE5ZDhkNzg4YmQ1OTcxNDNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaNpa5W9vP90E7cpg11WgvA4Ubue83MJWQ44rK6S8A7ogg USr0sBk/CXkMjL5u1oGOE5HxXXZyfLyzafAKHiKZrCYeikkigqZ5LvR1txv/IxqZ Lg3BwwYicHDk8W/TItKhx+K08u6lzgAg7R+zNpzUfe0cDmmWWAcrC1+D2TaACujM fj+qxfyzMb0Oh1oeI4FFJY3smA1O+l1P2MXfPw9pbOxGE0mnFwlQd7ApPEv3bYwm EJQtEuukvBq1HLODu/FBMXniaHEcP++o2jUEeJ3GoDFRvw5xAic8GZZdZ9ElRp4/ OYuEvIRJYThWiiGSPvGV9Eczrfs1HiPOSAZviwuHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHKH8ZewtsNBCnGF9PP2WwPJPQsQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhNTY0ZWI5LTRhNzAtNGNhZi04YWEyLTMyNDkxMDYwNGQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MDANBgkqhkiG9w0BAQsFAAOCAQEAFYPT8btP6MmkVqLiNQKY0D29PVMS PQb+8TnGlHOH2fTiBHnDUXrMn6125ItG3KvTkF9fyW94L12HH9DDVHO3qNAXAD+y 0NxR8ofP6pmTCyRiS2Zqn/EO2E/hbI9g66ECD9ztoTwBfpglpFdHaYw+elDazmuy 7XWhKxz6RzjbNVQiF8CnJJra1qrzApN2KYfSwDJNXkCczKUQ+kvLI4YZumLL1E9z kbj3EuA/0cLep7Z8NnsOCXLhOudrPobgHwZP27jbEpoloRdDky+KjWPahFZaND+W LTTS1a7SxfVIYw/dJj/L89TfOzo83qySctTcyy5wE8jZxGtNXzZkMrZ/6Q== -----END CERTIFICATE-----Generated at Tue Nov 3 01:26:39 2026 by rpki-client