$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ef999-1380-4105-b9d4-1133b6115804.roa File: c52ef999-1380-4105-b9d4-1133b6115804.roa (raw, json) Hash identifier: TmQ2RvNN0XwmKRLZxFarBa/W7rJsrMG/UYaPf8FOtdQ= Subject key identifier: 87:DF:2B:D8:6A:88:E9:B8:65:F2:A5:F0:18:1A:44:C7:D9:2F:BC:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64897A4A52B6FCD83F528BCFD1DD6CF174D7A96D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ef999-1380-4105-b9d4-1133b6115804.roa Signing time: Mon 26 Oct 2026 00:10:05 +0000 ROA not before: Mon 26 Oct 2026 00:10:05 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.143.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:89:7a:4a:52:b6:fc:d8:3f:52:8b:cf:d1:dd:6c:f1:74:d7:a9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:10:05 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=8754ec3fc17be507a73194ce97a2e71410b96af9890ed429afe9395234fe71e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:e8:f2:1e:27:2b:84:82:51:31:cb:cb:53: 57:47:18:be:2f:8c:55:37:be:d7:2f:30:31:cb:59: 03:63:99:f1:6c:2a:0a:6f:42:24:4a:49:8a:dc:3b: 1d:4c:00:02:8f:0f:11:55:8c:65:da:5f:f7:f4:5c: 94:35:2a:dd:bb:32:e5:f5:9d:49:07:e4:07:eb:f7: 35:d3:fb:34:70:7f:9f:37:9b:28:5d:0f:c9:3f:63: 33:ed:c0:c1:6b:d0:31:7c:11:ad:36:e1:79:7c:88: 51:3e:e4:65:04:41:d8:b2:92:27:70:50:e3:b4:cd: 9f:fc:a1:00:66:d4:df:b4:52:d6:a0:57:4c:37:e1: 26:51:ad:a2:5b:be:96:60:62:91:ce:14:cc:e2:19: 7a:38:7d:e3:c0:be:9e:14:09:2b:a9:1a:58:2c:1d: 38:c5:be:c2:ff:80:b8:69:3b:f4:18:89:51:48:b3: c1:47:de:65:e1:e6:b9:a3:f9:a9:9d:59:34:ca:fe: cf:26:fc:68:7b:c1:dd:9d:42:b0:ae:6a:e5:3e:b6: 96:9e:3d:08:60:63:a9:e2:5e:97:92:7b:5a:da:b6: 4a:29:42:6b:de:78:66:b8:14:f1:88:0a:85:5a:e1: d6:66:a7:0f:30:fa:92:25:e8:b1:08:c0:e1:4b:6a: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:2B:D8:6A:88:E9:B8:65:F2:A5:F0:18:1A:44:C7:D9:2F:BC:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ef999-1380-4105-b9d4-1133b6115804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.143.0.0/18 Signature Algorithm: sha256WithRSAEncryption c1:06:cd:22:70:8b:83:8c:36:6e:bb:e8:dc:7b:40:12:87:b8: e1:a7:c1:d3:9a:38:4f:98:0b:c3:4e:89:b8:d3:5a:cf:2a:e2: 81:0c:92:dd:f3:ee:a1:78:c0:31:ac:9b:2f:58:fb:f3:53:1d: c0:3b:e8:8a:ed:0c:56:47:41:ca:c0:43:40:01:ca:4e:88:4c: 95:3e:05:38:f4:0c:1e:35:96:01:79:69:7b:5e:12:f5:7b:e9: af:04:2f:5c:ea:e7:c5:f1:a0:3a:18:98:2b:81:fc:8f:6b:ef: f6:11:42:2f:72:f0:00:5d:46:05:fd:a8:6a:f7:4e:a3:65:e9: 6e:7a:31:93:3a:65:ee:14:a7:aa:de:1b:13:cb:4b:d0:2a:86: 1c:49:bd:9c:39:34:80:23:f7:d0:4e:d1:38:1a:ff:28:2c:de: 78:fa:16:0e:91:29:f3:7e:c5:60:4b:27:67:c5:b1:7a:5e:2c: d4:66:db:1f:19:c2:24:a2:fe:06:b5:81:9b:f3:90:db:0b:98: b2:81:d3:bc:99:1b:1e:62:d0:82:55:3b:16:53:b9:79:58:f6: c4:81:24:6d:a9:cb:bf:93:a7:83:b4:f0:90:67:fe:96:7e:ad: 93:04:fe:7a:07:64:90:9c:01:d5:c0:9a:8b:26:aa:b0:aa:ff: b1:b2:62:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZIl6SlK2/Ng/UovP0d1s8XTXqW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAxMDA1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzU0ZWMzZmMxN2JlNTA3YTczMTk0Y2U5N2EyZTcxNDEw Yjk2YWY5ODkwZWQ0MjlhZmU5Mzk1MjM0ZmU3MWU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKbOjyHicrhIJRMcvLU1dHGL4vjFU3vtcvMDHLWQNjmfFs KgpvQiRKSYrcOx1MAAKPDxFVjGXaX/f0XJQ1Kt27MuX1nUkH5Afr9zXT+zRwf583 myhdD8k/YzPtwMFr0DF8Ea024Xl8iFE+5GUEQdiykidwUOO0zZ/8oQBm1N+0Utag V0w34SZRraJbvpZgYpHOFMziGXo4fePAvp4UCSupGlgsHTjFvsL/gLhpO/QYiVFI s8FH3mXh5rmj+amdWTTK/s8m/Gh7wd2dQrCuauU+tpaePQhgY6niXpeSe1ratkop QmveeGa4FPGICoVa4dZmpw8w+pIl6LEIwOFLapZHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh98r2GqI6bhl8qXwGBpEx9kvvJkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1MmVmOTk5LTEzODAtNDEwNS1iOWQ0LTExMzNiNjExNTgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZHjwAwDQYJKoZIhvcNAQELBQADggEBAMEGzSJwi4OMNm676Nx7QBKHuOGn wdOaOE+YC8NOibjTWs8q4oEMkt3z7qF4wDGsmy9Y+/NTHcA76IrtDFZHQcrAQ0AB yk6ITJU+BTj0DB41lgF5aXteEvV76a8EL1zq58XxoDoYmCuB/I9r7/YRQi9y8ABd RgX9qGr3TqNl6W56MZM6Ze4Up6reGxPLS9AqhhxJvZw5NIAj99BO0Tga/ygs3nj6 Fg6RKfN+xWBLJ2fFsXpeLNRm2x8ZwiSi/ga1gZvzkNsLmLKB07yZGx5i0IJVOxZT uXlY9sSBJG2py7+Tp4O08JBn/pZ+rZME/noHZJCcAdXAmosmqrCq/7GyYhk= -----END CERTIFICATE-----Generated at Sat Oct 31 08:47:09 2026 by rpki-client