$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f242a843-e5ef-4329-a630-1bbe90e85499.roa File: f242a843-e5ef-4329-a630-1bbe90e85499.roa (raw, json) Hash identifier: +sXvS8x0ZeAAyudmBPMWYDzgY7bYtJ7dhhBz53j8qZo= Subject key identifier: 56:52:40:4F:2E:18:B3:1A:7B:18:0B:5D:7D:50:AA:E4:37:05:2D:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A58FE418565AA94CFB0E96E084D8B0A9C9DB270 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f242a843-e5ef-4329-a630-1bbe90e85499.roa Signing time: Fri 23 Oct 2026 02:20:10 +0000 ROA not before: Fri 23 Oct 2026 02:20:10 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 161.178.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:58:fe:41:85:65:aa:94:cf:b0:e9:6e:08:4d:8b:0a:9c:9d:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:20:10 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=f3c60d6ee0abd101dea33aaae168d73054b24550a952c0c86e39f5787c4aa0eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:d8:91:3d:bc:46:15:bf:92:35:25:41:a8: fc:a2:5b:29:90:40:d3:32:1d:86:1b:75:4a:80:0a: bb:8e:3a:92:09:66:60:bf:c6:e0:09:4d:9e:2d:c9: 08:75:b8:f0:81:0d:6e:bd:e7:42:f7:77:0c:4d:ed: 66:4d:4a:15:91:c0:75:57:31:a0:84:28:70:9f:0b: 59:56:07:e6:c6:59:0c:7e:98:1d:de:0d:df:2e:f8: c8:83:a6:e3:c1:c7:e1:45:29:a2:05:8e:c9:43:76: 20:75:7c:b3:82:ec:36:90:94:63:c0:a1:14:ae:b9: fd:50:43:1c:ff:c4:59:87:65:b4:4a:0d:3d:fa:80: 06:c9:77:58:09:19:45:64:d1:92:e1:81:de:e4:3c: 43:91:e9:e1:b7:21:44:22:6f:30:78:6d:5c:f5:6f: 9f:aa:3c:ea:3d:6f:da:16:bd:12:6a:08:ae:d3:e6: 99:7c:e8:01:ac:fa:34:f3:b2:d2:1e:f5:04:db:7f: 4f:9d:c9:a8:f1:d2:0c:81:e0:a7:a4:1f:8e:25:6a: e6:65:e2:e8:d2:78:17:0f:23:a1:52:3b:29:5a:be: 57:ba:80:e1:fe:48:95:6c:4f:9d:4c:45:42:af:e8: 98:c7:20:b2:cf:d8:8d:33:66:5a:1c:8d:f1:ba:99: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:52:40:4F:2E:18:B3:1A:7B:18:0B:5D:7D:50:AA:E4:37:05:2D:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f242a843-e5ef-4329-a630-1bbe90e85499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.32.0/19 Signature Algorithm: sha256WithRSAEncryption d1:76:58:38:18:79:1b:f2:63:1a:59:1a:dc:bf:af:c1:ef:8d: 14:05:0e:ba:c2:e2:cf:86:0a:90:a0:d2:fc:e5:b0:b2:96:6c: 99:95:df:a1:73:37:6b:d7:7e:92:32:2d:01:9a:1f:96:26:b2: e9:6d:0f:8f:f4:99:08:30:8e:57:da:9e:24:44:fd:d4:ab:d0: 7d:df:49:95:f3:16:a2:9c:3f:ef:fa:e8:61:53:00:4d:62:98: 8d:ab:32:8b:25:49:a7:3c:af:2a:52:1f:3a:9a:34:ab:8a:f0: 30:12:13:51:fe:79:f9:cd:d1:c9:01:c8:50:31:56:20:e9:8b: 72:83:b3:be:d4:e5:5d:62:39:f3:fc:e5:6b:b7:96:66:52:22: 6d:97:6e:76:b4:3c:b0:2a:11:bc:59:10:4e:48:2d:bf:d2:86: 34:99:3e:c8:53:b5:ea:1d:bb:01:eb:35:9f:6c:e0:4a:f1:8f: df:4e:b7:b2:80:d0:a0:5f:99:76:f9:ed:b0:0b:3f:2d:06:a8: 97:db:21:f9:68:e9:bf:a0:a6:55:05:f5:3c:1f:a8:52:56:9a: e4:bb:1a:76:25:83:a7:8e:84:1b:a7:88:bb:ab:df:4d:64:a7: 2e:39:b0:cb:e3:32:16:89:ac:4f:bf:b3:b4:f7:8a:0f:5a:4b: 6f:4b:a1:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOlj+QYVlqpTPsOluCE2LCpydsnAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIyMDEwWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2M2MGQ2ZWUwYWJkMTAxZGVhMzNhYWFlMTY4ZDczMDU0 YjI0NTUwYTk1MmMwYzg2ZTM5ZjU3ODdjNGFhMGViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRvNiRPbxGFb+SNSVBqPyiWymQQNMyHYYbdUqACruOOpIJ ZmC/xuAJTZ4tyQh1uPCBDW6950L3dwxN7WZNShWRwHVXMaCEKHCfC1lWB+bGWQx+ mB3eDd8u+MiDpuPBx+FFKaIFjslDdiB1fLOC7DaQlGPAoRSuuf1QQxz/xFmHZbRK DT36gAbJd1gJGUVk0ZLhgd7kPEOR6eG3IUQibzB4bVz1b5+qPOo9b9oWvRJqCK7T 5pl86AGs+jTzstIe9QTbf0+dyajx0gyB4KekH44lauZl4ujSeBcPI6FSOylavle6 gOH+SJVsT51MRUKv6JjHILLP2I0zZlocjfG6mQo/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVlJATy4Ysxp7GAtdfVCq5DcFLZUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyNDJhODQzLWU1ZWYtNDMyOS1hNjMwLTFiYmU5MGU4NTQ5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWhsiAwDQYJKoZIhvcNAQELBQADggEBANF2WDgYeRvyYxpZGty/r8HvjRQF DrrC4s+GCpCg0vzlsLKWbJmV36FzN2vXfpIyLQGaH5YmsultD4/0mQgwjlfaniRE /dSr0H3fSZXzFqKcP+/66GFTAE1imI2rMoslSac8rypSHzqaNKuK8DASE1H+efnN 0ckByFAxViDpi3KDs77U5V1iOfP85Wu3lmZSIm2Xbna0PLAqEbxZEE5ILb/ShjSZ PshTteoduwHrNZ9s4Erxj99Ot7KA0KBfmXb57bALPy0GqJfbIflo6b+gplUF9Twf qFJWmuS7GnYlg6eOhBuniLur301kpy45sMvjMhaJrE+/s7T3ig9aS29LoSs= -----END CERTIFICATE-----Generated at Thu Nov 5 07:08:59 2026 by rpki-client