$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa File: e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa (raw, json) Hash identifier: Hh6Uyv3WwFTyOCMfpWYHfczwB9AEitoy+T6tH97DkBs= Subject key identifier: A6:EA:E4:B5:15:25:08:0E:8C:17:4F:D1:AC:1F:DE:22:54:4D:C7:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1DD56FAA16365705ACC79200252419189F7CADDC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa Signing time: Sat 24 Oct 2026 00:21:11 +0000 ROA not before: Sat 24 Oct 2026 00:21:11 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 56.240.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d5:6f:aa:16:36:57:05:ac:c7:92:00:25:24:19:18:9f:7c:ad:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:21:11 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=bf9f28b6922b33a34b6b13f798c8ac51ccf6fec7cbb13bd4598f1a780024f331, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:4a:ab:f7:cf:bf:d3:87:82:a3:43:c6:e6: 2a:a6:a8:23:cf:32:66:d3:5c:f7:6c:ef:e9:3d:06: 52:4b:19:f0:5c:ce:53:4e:b6:46:54:eb:24:2a:7e: b4:fe:e3:1c:2c:0c:b3:0e:e6:32:38:2d:52:ae:13: a3:05:ab:05:3a:4d:4a:32:7a:ee:00:1f:8d:79:d8: f1:5c:fd:30:2e:c5:da:c1:6d:5f:c6:f3:6f:bd:91: 89:e8:8f:4f:f3:66:f2:3a:0d:74:31:58:e1:84:30: 01:22:fb:6b:8a:fe:f8:a7:62:0c:7c:90:18:c1:0e: 1d:d4:1e:96:51:40:b9:fe:d1:fd:00:20:86:dc:04: ed:91:78:5f:e5:88:81:ad:a9:a3:4a:7a:ab:8a:ba: 94:64:9c:3f:78:ef:1a:10:e4:2a:07:54:2e:e2:e4: 98:82:87:fe:ef:e3:f4:3d:ad:27:71:29:15:6e:69: e7:14:34:b1:52:9c:20:e6:4a:ad:fe:df:89:7e:2b: 4b:17:eb:65:cd:f4:3f:f9:4e:74:2d:23:77:e2:63: b7:45:fd:19:a4:dc:08:de:00:67:1b:77:1f:00:14: 7a:4f:de:bd:6b:1f:12:36:38:de:e8:4e:6e:88:08: 1d:df:28:32:c0:9d:b5:31:b1:4a:85:ad:33:72:bb: 91:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EA:E4:B5:15:25:08:0E:8C:17:4F:D1:AC:1F:DE:22:54:4D:C7:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:e9:32:ff:d3:bb:26:5c:80:7a:b1:4d:38:93:25:49:34:8d: 3d:80:0a:97:32:cf:23:33:8f:a5:a9:df:cc:c8:4c:06:e3:2b: 5d:e7:65:39:60:11:22:1a:b5:43:ee:53:90:a5:42:54:3f:43: f0:14:7a:af:13:2b:02:70:6d:50:03:e3:f8:00:59:22:7d:d6: 54:67:5f:75:5f:66:4c:62:93:6e:bd:b1:cd:f0:ad:6c:32:2a: b5:d9:d4:84:e3:c1:db:2e:b4:5f:94:2b:46:8f:49:6a:2c:2b: d7:20:f1:68:ee:62:23:8e:6a:1c:e2:6c:1c:5f:d3:ee:38:6b: 5b:31:ff:f3:0f:17:59:1d:2d:04:1a:97:bc:c7:55:87:18:99: 75:fb:89:51:0a:8b:99:68:ea:a9:29:e3:c8:0d:d7:b1:3a:df: c4:6b:5f:56:a0:1c:3c:de:c1:66:3b:0e:50:e9:f3:6c:45:ae: 2c:c2:1d:5f:35:5d:33:c4:82:a1:03:1d:58:20:7a:f2:97:ca: eb:c4:1c:ed:c8:30:f9:76:2d:4e:cb:49:5c:0d:30:b5:5e:55: d5:1a:fc:5d:77:84:04:7a:e1:f6:a4:46:b0:e2:6e:81:30:20: cc:fe:7d:0a:b5:e7:02:f8:2d:e0:dc:f3:52:a1:93:ac:f1:2f: 0a:41:1b:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHdVvqhY2VwWsx5IAJSQZGJ98rdwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAyMTExWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjlmMjhiNjkyMmIzM2EzNGI2YjEzZjc5OGM4YWM1MWNj ZjZmZWM3Y2JiMTNiZDQ1OThmMWE3ODAwMjRmMzMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdS0qr98+/04eCo0PG5iqmqCPPMmbTXPds7+k9BlJLGfBc zlNOtkZU6yQqfrT+4xwsDLMO5jI4LVKuE6MFqwU6TUoyeu4AH4152PFc/TAuxdrB bV/G82+9kYnoj0/zZvI6DXQxWOGEMAEi+2uK/vinYgx8kBjBDh3UHpZRQLn+0f0A IIbcBO2ReF/liIGtqaNKequKupRknD947xoQ5CoHVC7i5JiCh/7v4/Q9rSdxKRVu aecUNLFSnCDmSq3+34l+K0sX62XN9D/5TnQtI3fiY7dF/Rmk3AjeAGcbdx8AFHpP 3r1rHxI2ON7oTm6ICB3fKDLAnbUxsUqFrTNyu5HVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpurktRUlCA6MF0/RrB/eIlRNxzkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxMDEyZmUzLTJiMzAtNDI0My1iOWQ1LWMyZWRjMDM3ZDc1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA48DANBgkqhkiG9w0BAQsFAAOCAQEAiuky/9O7JlyAerFNOJMlSTSNPYAK lzLPIzOPpanfzMhMBuMrXedlOWARIhq1Q+5TkKVCVD9D8BR6rxMrAnBtUAPj+ABZ In3WVGdfdV9mTGKTbr2xzfCtbDIqtdnUhOPB2y60X5QrRo9Jaiwr1yDxaO5iI45q HOJsHF/T7jhrWzH/8w8XWR0tBBqXvMdVhxiZdfuJUQqLmWjqqSnjyA3XsTrfxGtf VqAcPN7BZjsOUOnzbEWuLMIdXzVdM8SCoQMdWCB68pfK68Qc7cgw+XYtTstJXA0w tV5V1Rr8XXeEBHrh9qRGsOJugTAgzP59CrXnAvgt4NzzUqGTrPEvCkEbeQ== -----END CERTIFICATE-----Generated at Tue Nov 10 14:45:57 2026 by rpki-client