$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa File: 85ecd0ef-6924-4522-bd48-1e263001901c.roa (raw, json) Hash identifier: kSMJHSEEDf52OO7FVryY91jB9OZ4yl7S5I24DCI8Z74= Subject key identifier: EC:6E:97:C8:38:46:A5:A6:CA:CB:8D:C6:B6:70:77:A9:BC:D0:BB:9B Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 71B4F6BEDCB36D14FFE46678DC668946453FABC5 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa Signing time: Mon 26 Oct 2026 00:50:19 +0000 ROA not before: Mon 26 Oct 2026 00:50:19 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b4:f6:be:dc:b3:6d:14:ff:e4:66:78:dc:66:89:46:45:3f:ab:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Oct 26 00:50:19 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=572e0ad4240df40280b5b56b75cdbfafc9e813287463d2a6c28117ff57c7c380, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:59:fe:a4:e7:90:4d:22:02:d6:ca:a9:e3: 55:d8:f4:16:f5:23:33:5d:6a:dc:a0:c5:93:e9:f5: eb:8f:48:fe:4b:e2:85:e3:67:b9:08:69:4e:5e:f4: fc:eb:fe:9e:ac:d2:1d:40:d7:27:18:38:ba:aa:86: 03:a0:c4:24:e5:bb:16:7a:ee:d2:27:b2:a3:34:03: 62:d1:17:00:0c:bc:2c:70:7c:03:54:c1:ee:fe:57: f6:39:93:5b:1f:1c:dc:b8:a6:32:04:55:57:cc:e6: 08:b9:86:79:5f:d3:1a:4a:4d:76:15:96:5d:d1:ac: c6:33:80:3e:53:04:a6:de:95:ad:23:ff:33:51:82: cd:0e:13:b9:c9:6d:c4:97:44:3c:f3:06:d1:52:76: 79:dd:d3:af:d7:42:f7:f2:e6:da:b8:47:62:aa:7c: 43:22:06:26:65:9a:7b:31:c2:8a:38:8e:a8:8d:3f: 43:8a:53:31:f9:47:a9:13:eb:ba:f6:64:91:0a:24: ba:01:74:0c:8f:75:5f:c9:a8:34:b6:5d:ef:af:9b: 7e:70:58:69:5f:77:87:d4:5d:6b:ca:4e:3d:94:2a: 16:a3:4e:c4:f3:73:8a:95:03:22:6d:ec:fd:4c:5b: 70:9f:89:f1:3f:cd:39:c0:d7:ea:37:3d:75:75:df: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:97:C8:38:46:A5:A6:CA:CB:8D:C6:B6:70:77:A9:BC:D0:BB:9B X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.1.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:9f:a6:3c:d0:54:41:c2:00:b4:7f:c7:ec:e2:b8:e5:26:05: cc:2f:5f:96:32:15:60:7b:c3:22:66:c4:07:40:36:b8:d6:7f: 86:df:cb:8f:d5:72:ed:39:54:68:66:7e:72:bf:94:49:01:6b: 14:17:40:04:20:82:6c:12:44:be:51:61:4a:97:32:5a:06:65: 0c:90:b8:a1:1c:f6:ba:b3:8f:c6:43:4d:45:3e:aa:5f:d1:db: 34:30:07:b3:cf:71:cd:01:cc:5d:c6:dd:cd:96:54:44:5b:a6: 80:d1:2d:5d:d9:6d:ec:52:79:10:78:71:ec:e8:f8:4e:da:7a: 23:e3:a8:04:7e:38:0b:d9:8a:b5:eb:63:63:d9:c9:10:37:bf: 6d:e1:9a:07:d4:c9:f2:d0:16:db:ef:be:4c:2f:bc:10:40:75: b0:6b:ec:40:3c:12:0c:19:c5:75:9f:db:0f:43:5d:27:2e:58: 1a:51:32:33:09:6c:18:a2:d6:68:89:aa:8b:3a:a3:5b:b2:f5: 5e:35:59:7e:cc:e2:6e:bb:21:a1:8b:53:cd:f0:c0:66:bc:56: 15:12:e8:b7:bb:46:4b:81:78:bd:91:af:5d:ae:27:ff:f2:31: 87:2b:4a:7a:13:c1:ef:b9:34:89:f8:81:d0:d9:d2:08:b0:a4: b9:66:02:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcbT2vtyzbRT/5GZ43GaJRkU/q8UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYxMDI2MDA1MDE5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzJlMGFkNDI0MGRmNDAyODBiNWI1NmI3NWNkYmZhZmM5 ZTgxMzI4NzQ2M2QyYTZjMjgxMTdmZjU3YzdjMzgwMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz/1n+pOeQTSIC1sqp41XY9Bb1IzNdatygxZPp9euPSP5L 4oXjZ7kIaU5e9Pzr/p6s0h1A1ycYOLqqhgOgxCTluxZ67tInsqM0A2LRFwAMvCxw fANUwe7+V/Y5k1sfHNy4pjIEVVfM5gi5hnlf0xpKTXYVll3RrMYzgD5TBKbela0j /zNRgs0OE7nJbcSXRDzzBtFSdnnd06/XQvfy5tq4R2KqfEMiBiZlmnsxwoo4jqiN P0OKUzH5R6kT67r2ZJEKJLoBdAyPdV/JqDS2Xe+vm35wWGlfd4fUXWvKTj2UKhaj TsTzc4qVAyJt7P1MW3CfifE/zTnA1+o3PXV138yrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7G6XyDhGpabKy43GtnB3qbzQu5swHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1Lzg1ZWNkMGVmLTY5MjQtNDUyMi1iZDQ4LTFlMjYzMDAxOTAxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwEwDQYJKoZIhvcNAQELBQADggEBAH2fpjzQVEHCALR/x+ziuOUmBcwv X5YyFWB7wyJmxAdANrjWf4bfy4/Vcu05VGhmfnK/lEkBaxQXQAQggmwSRL5RYUqX MloGZQyQuKEc9rqzj8ZDTUU+ql/R2zQwB7PPcc0BzF3G3c2WVERbpoDRLV3ZbexS eRB4cezo+E7aeiPjqAR+OAvZirXrY2PZyRA3v23hmgfUyfLQFtvvvkwvvBBAdbBr 7EA8EgwZxXWf2w9DXScuWBpRMjMJbBii1miJqos6o1uy9V41WX7M4m67IaGLU83w wGa8VhUS6Le7RkuBeL2Rr12uJ//yMYcrSnoTwe+5NIn4gdDZ0giwpLlmAuY= -----END CERTIFICATE-----Generated at Tue Nov 10 04:08:59 2026 by rpki-client