$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f9362-416a-4738-b87e-2238ade2ae31.roa File: c57f9362-416a-4738-b87e-2238ade2ae31.roa (raw, json) Hash identifier: GIWa6vwqAmFzQKieLdhXLhpFtcR8+wOH7dCEtRyVNGg= Subject key identifier: B5:EC:B4:8C:40:06:8F:48:15:06:0B:27:19:81:76:E5:53:BF:FF:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BA37BDDE6FC4D95576092A4F02948FA6D1113EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f9362-416a-4738-b87e-2238ade2ae31.roa Signing time: Sun 11 Oct 2026 00:50:11 +0000 ROA not before: Sun 11 Oct 2026 00:50:11 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 166.117.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a3:7b:dd:e6:fc:4d:95:57:60:92:a4:f0:29:48:fa:6d:11:13:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 00:50:11 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=d28c48f6177c49836334afa80b31424640b109fc316a459db11d11de19773f5f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:c0:b9:81:cc:86:fd:3f:5d:6b:67:6a:f2: d8:11:1b:77:71:9f:2a:ed:42:30:4c:e4:6c:bc:2f: 22:80:79:9d:4b:cc:54:de:1c:52:cc:ad:0f:4c:34: 22:f0:5c:55:5e:30:76:3e:b6:ab:3a:ba:db:d2:af: dd:24:08:4f:86:28:e2:49:2c:64:c3:f9:c5:47:51: 59:6f:19:41:9b:cc:36:c6:f5:f5:36:a2:d8:af:06: ec:00:bd:4e:fe:05:01:94:bb:33:a6:8e:cb:2a:13: b5:25:7f:10:a9:c4:b8:ec:27:ff:51:42:46:82:43: 34:43:bd:92:5d:e2:9f:7a:38:cb:cd:0d:72:80:12: 40:eb:de:91:9b:07:d6:48:63:e6:b4:7b:43:9d:b2: e6:23:d4:9e:04:08:31:2c:06:15:33:00:90:df:38: f2:d6:7c:f6:cb:37:49:05:0b:a4:77:ec:75:3b:95: 3e:28:0e:0a:2c:7c:16:42:bf:e7:62:e3:6a:a6:51: a7:91:87:e1:6e:9f:f0:e9:2b:78:fc:fa:fa:5f:52: 18:2a:52:bd:d3:cb:14:b9:41:1a:0d:b7:2c:f8:f8: 57:b9:50:6b:c4:7b:aa:07:be:54:c4:ae:46:d8:d6: d4:52:b3:f0:5f:73:63:80:ce:f1:c9:ae:ca:63:8d: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EC:B4:8C:40:06:8F:48:15:06:0B:27:19:81:76:E5:53:BF:FF:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f9362-416a-4738-b87e-2238ade2ae31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.117.208.0/20 Signature Algorithm: sha256WithRSAEncryption 30:ba:9a:22:4f:9f:5a:cd:e6:25:54:bd:0f:29:aa:3e:59:d5: 71:a1:76:4a:3c:a0:6c:2e:c7:46:8d:32:96:d8:36:55:c7:78: 4e:fb:f0:05:78:b8:c8:b6:04:73:12:3c:e1:ec:d7:5f:cf:5d: 8b:6e:c5:04:12:d3:5b:52:98:65:63:da:14:3d:9e:fa:a8:52: a2:a7:be:50:3b:16:4d:00:d1:fc:5a:65:68:2f:94:8e:da:02: e2:96:03:59:57:72:4b:a4:0f:d4:71:30:eb:21:3b:a3:b9:fd: d8:0f:0d:a4:50:19:4b:d9:59:e7:86:68:39:30:59:dc:51:d2: b7:bb:50:dc:e4:0a:3c:5f:c2:ff:ff:89:55:b1:c8:03:36:0f: 7f:69:04:ec:73:21:ce:10:48:be:e0:65:52:69:67:3a:9c:2c: e9:25:2e:25:33:a1:bd:35:80:aa:db:b3:70:c0:c6:81:e6:55: 6a:0b:63:31:c1:21:ec:dd:d8:13:d4:b9:14:bc:dc:59:31:a8: 06:e3:2f:08:12:06:fe:4c:e6:c4:be:3a:32:6c:bd:e1:6c:6d: 6a:1b:a8:f7:e1:c7:fb:e0:c4:03:f4:e8:8a:d1:67:38:6d:3d: f7:84:24:95:c7:d8:c6:0c:8d:38:3b:46:72:60:eb:f2:13:d5: 89:ba:99:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe6N73eb8TZVXYJKk8ClI+m0RE+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDA1MDExWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjhjNDhmNjE3N2M0OTgzNjMzNGFmYTgwYjMxNDI0NjQw YjEwOWZjMzE2YTQ1OWRiMTFkMTFkZTE5NzczZjVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPmsC5gcyG/T9da2dq8tgRG3dxnyrtQjBM5Gy8LyKAeZ1L zFTeHFLMrQ9MNCLwXFVeMHY+tqs6utvSr90kCE+GKOJJLGTD+cVHUVlvGUGbzDbG 9fU2otivBuwAvU7+BQGUuzOmjssqE7UlfxCpxLjsJ/9RQkaCQzRDvZJd4p96OMvN DXKAEkDr3pGbB9ZIY+a0e0OdsuYj1J4ECDEsBhUzAJDfOPLWfPbLN0kFC6R37HU7 lT4oDgosfBZCv+di42qmUaeRh+Fun/DpK3j8+vpfUhgqUr3TyxS5QRoNtyz4+Fe5 UGvEe6oHvlTErkbY1tRSs/Bfc2OAzvHJrspjjQClAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtey0jEAGj0gVBgsnGYF25VO//1QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1N2Y5MzYyLTQxNmEtNDczOC1iODdlLTIyMzhhZGUyYWUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASmddAwDQYJKoZIhvcNAQELBQADggEBADC6miJPn1rN5iVUvQ8pqj5Z1XGh dko8oGwux0aNMpbYNlXHeE778AV4uMi2BHMSPOHs11/PXYtuxQQS01tSmGVj2hQ9 nvqoUqKnvlA7Fk0A0fxaZWgvlI7aAuKWA1lXckukD9RxMOshO6O5/dgPDaRQGUvZ WeeGaDkwWdxR0re7UNzkCjxfwv//iVWxyAM2D39pBOxzIc4QSL7gZVJpZzqcLOkl LiUzob01gKrbs3DAxoHmVWoLYzHBIezd2BPUuRS83FkxqAbjLwgSBv5M5sS+OjJs veFsbWobqPfhx/vgxAP06IrRZzhtPfeEJJXH2MYMjTg7RnJg6/IT1Ym6mbk= -----END CERTIFICATE-----Generated at Sat Oct 31 22:49:22 2026 by rpki-client