$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57b48a9-57b4-4667-a395-39fe095c030f.roa File: c57b48a9-57b4-4667-a395-39fe095c030f.roa (raw, json) Hash identifier: ehajPh1ShAa6UQHfGIDdDsUfyIAAV/0lt5X/P2S2A14= Subject key identifier: 08:DF:1B:4A:F0:5E:21:3B:1A:00:B1:41:9E:49:A0:51:EC:40:D8:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E50A7272D4160CB5E56E93A5F640CDB5223E963 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57b48a9-57b4-4667-a395-39fe095c030f.roa Signing time: Thu 22 Oct 2026 02:31:14 +0000 ROA not before: Thu 22 Oct 2026 02:31:14 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 136.18.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:50:a7:27:2d:41:60:cb:5e:56:e9:3a:5f:64:0c:db:52:23:e9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:31:14 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=323c8851c303b44ae869990fa2b92279a7e083c021637854e0645d457fae3ae9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:4f:4a:50:97:ef:e9:0b:4a:0b:e1:f9:ec: 16:92:39:e2:01:72:14:8a:12:10:65:13:85:5f:62: 49:98:b2:3d:b6:55:b0:4e:a1:6a:fa:51:11:03:fe: 42:49:cd:90:e3:24:b4:37:c1:17:c3:93:57:83:ae: 98:55:fd:dc:20:65:74:7e:80:a8:69:9f:83:0c:fc: 19:e7:2b:64:fd:e7:d1:bc:45:33:02:17:92:a3:96: 71:08:dc:26:65:a1:ac:30:6d:4e:5d:f2:e6:4b:41: ac:45:62:ba:41:fe:ab:e9:cf:c3:ec:bd:be:70:e1: df:4c:5b:c0:5b:f6:33:7a:9e:38:44:15:1c:8d:ea: e2:62:6d:e4:7c:68:fe:8b:af:9b:3d:00:99:cd:ea: bb:0e:bf:a4:3e:2b:08:37:4f:0f:25:f6:c9:e5:60: 08:45:49:5e:62:2a:64:cd:b1:20:de:e9:44:82:3e: 5c:64:a2:1a:1a:9d:8c:3e:a3:1b:fb:40:48:cb:36: 63:c5:c8:43:83:da:f2:b6:3b:66:94:03:e4:e2:66: bd:37:a5:78:5f:fa:bb:cf:87:ea:ba:b7:07:b9:5b: 78:11:3a:44:a9:87:92:a5:72:17:17:17:88:83:67: fe:1a:6b:63:d5:62:eb:df:7c:9f:d3:67:a7:41:37: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DF:1B:4A:F0:5E:21:3B:1A:00:B1:41:9E:49:A0:51:EC:40:D8:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57b48a9-57b4-4667-a395-39fe095c030f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.0.0/23 Signature Algorithm: sha256WithRSAEncryption 47:7d:d7:f3:e8:23:54:53:a2:cf:d9:ec:9a:59:b0:84:ab:4d: ac:2e:e9:53:87:53:d5:75:5a:71:22:64:b9:2d:0d:b4:a1:51: 6a:8e:66:fa:0a:5a:a6:af:04:f5:1b:57:46:86:79:b7:f5:56: db:f3:1e:aa:7f:b0:8e:c2:18:a0:29:92:df:b5:5c:2c:92:dc: 03:d6:db:c3:cb:74:81:da:cf:fe:17:1d:5d:3e:37:a1:40:fe: 1b:00:8f:23:51:37:6e:68:2f:36:db:2c:1e:ac:2c:6b:87:ac: de:91:bb:ab:f3:18:2b:e7:3b:6c:6a:9b:cb:69:b3:bc:4d:74: d4:38:fe:68:5a:dc:9c:91:41:af:f4:9c:63:46:fe:b3:ab:4c: fb:7d:44:a6:5a:76:df:0c:bb:92:f1:0b:62:31:d0:3a:cf:e5: c8:3d:a5:73:c6:1c:fb:f9:31:e9:10:62:2f:f1:02:72:bd:e7: b2:9e:37:3b:f3:b2:af:78:de:e3:53:7a:a1:46:9a:ba:46:78: c9:f3:46:7e:76:55:00:b4:8b:25:5b:7e:df:18:cc:9d:aa:dc: c6:e6:70:f5:3c:51:25:bb:34:0e:17:72:5a:af:f9:19:92:81: c3:ce:bb:68:1e:db:bb:e5:13:37:85:af:d0:12:74:8b:46:68: b4:34:03:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDlCnJy1BYMteVuk6X2QM21Ij6WMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIzMTE0WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjNjODg1MWMzMDNiNDRhZTg2OTk5MGZhMmI5MjI3OWE3 ZTA4M2MwMjE2Mzc4NTRlMDY0NWQ0NTdmYWUzYWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChPE9KUJfv6QtKC+H57BaSOeIBchSKEhBlE4VfYkmYsj22 VbBOoWr6URED/kJJzZDjJLQ3wRfDk1eDrphV/dwgZXR+gKhpn4MM/BnnK2T959G8 RTMCF5KjlnEI3CZloawwbU5d8uZLQaxFYrpB/qvpz8Psvb5w4d9MW8Bb9jN6njhE FRyN6uJibeR8aP6Lr5s9AJnN6rsOv6Q+Kwg3Tw8l9snlYAhFSV5iKmTNsSDe6USC PlxkohoanYw+oxv7QEjLNmPFyEOD2vK2O2aUA+TiZr03pXhf+rvPh+q6twe5W3gR OkSph5KlchcXF4iDZ/4aa2PVYuvffJ/TZ6dBN3ntAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCN8bSvBeITsaALFBnkmgUexA2HcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1N2I0OGE5LTU3YjQtNDY2Ny1hMzk1LTM5ZmUwOTVjMDMwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEgAwDQYJKoZIhvcNAQELBQADggEBAEd91/PoI1RTos/Z7JpZsISrTawu 6VOHU9V1WnEiZLktDbShUWqOZvoKWqavBPUbV0aGebf1VtvzHqp/sI7CGKApkt+1 XCyS3APW28PLdIHaz/4XHV0+N6FA/hsAjyNRN25oLzbbLB6sLGuHrN6Ru6vzGCvn O2xqm8tps7xNdNQ4/mha3JyRQa/0nGNG/rOrTPt9RKZadt8Mu5LxC2Ix0DrP5cg9 pXPGHPv5MekQYi/xAnK957KeNzvzsq943uNTeqFGmrpGeMnzRn52VQC0iyVbft8Y zJ2q3MbmcPU8USW7NA4Xclqv+RmSgcPOu2ge27vlEzeFr9ASdItGaLQ0A6E= -----END CERTIFICATE-----Generated at Thu Nov 5 15:45:08 2026 by rpki-client