$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa File: ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa (raw, json) Hash identifier: hOe2jY7ffYUkgtlSOeYisGozjoM6AsiwIzjpZyPAfCE= Subject key identifier: 1A:45:DD:B7:79:FD:0F:DF:79:96:CC:7D:AE:94:54:A8:26:51:2A:9F Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 21E3575B65FB5260155D1B6D0C43E5DDDE01179C Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa Signing time: Mon 26 Oct 2026 00:50:13 +0000 ROA not before: Mon 26 Oct 2026 00:50:13 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e3:57:5b:65:fb:52:60:15:5d:1b:6d:0c:43:e5:dd:de:01:17:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Oct 26 00:50:13 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=5c23a47469ecb2699b70684a0479e5c93394a8dea8db32c7ed138a37b2b89d3a, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:86:f1:48:3a:86:55:f5:b3:6e:54:33:36: a6:57:21:83:c2:20:b4:46:c3:07:29:06:64:4e:ef: 6b:61:07:bb:09:50:95:57:04:8d:e0:9c:8d:53:a3: 04:69:ac:48:dd:71:ce:b6:ad:99:a3:8b:80:0b:7e: b3:59:c2:86:44:80:af:8f:d8:1f:07:53:29:02:05: d9:57:66:b9:17:35:e8:74:72:34:d4:2e:99:0b:8a: 8a:6e:00:5d:09:d8:8f:e4:d1:2e:38:41:f4:16:45: a5:d0:65:e8:28:35:98:ab:1e:3b:55:cf:d8:9a:91: cb:3f:4c:51:d7:62:f6:83:1a:f2:9b:ee:17:b4:7a: e8:37:3c:5d:b6:4d:6a:b2:34:74:91:3b:aa:28:90: e2:b3:98:a2:8a:23:10:30:fa:85:6a:92:ae:f0:ef: 9f:ad:b5:dc:46:0b:a3:32:b7:8b:02:d8:a7:df:71: 38:44:80:f5:f0:e4:d1:75:8d:02:44:4e:1a:4e:36: a1:fa:93:1e:8b:8b:e8:b5:78:da:c0:ca:39:7d:91: 96:cf:cb:a9:f2:3f:b8:07:1b:58:87:dd:12:3e:dc: d4:0d:65:77:b2:75:84:4f:b5:59:60:1e:d3:5c:1d: a6:c1:40:23:27:dc:aa:9f:5a:92:3c:bd:bc:97:f8: 64:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:45:DD:B7:79:FD:0F:DF:79:96:CC:7D:AE:94:54:A8:26:51:2A:9F X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/24 Signature Algorithm: sha256WithRSAEncryption 05:03:c7:91:13:0e:b1:47:af:04:87:85:dd:a9:02:00:ba:42: c2:ba:8e:68:ad:bc:8b:18:1e:2a:f9:f9:92:37:1d:95:f1:27: 11:a3:fc:e4:fb:18:ec:17:02:e6:95:7b:ae:38:63:cc:38:0d: de:d8:1a:2b:7f:9d:d4:70:51:e2:86:55:0b:c9:99:1d:89:20: bb:f9:91:2c:2e:57:5f:a0:27:34:c4:a7:21:ba:ca:56:8c:5f: 55:95:e6:a3:a9:3d:ff:8c:46:3e:72:18:53:88:a0:27:e7:f8: da:f0:ca:1d:eb:10:5b:9f:9b:79:2c:69:60:1d:90:14:bf:82: b8:9f:96:61:5f:ef:9b:aa:90:23:e2:91:53:9f:5a:94:55:3b: 17:86:d3:a0:a1:de:c5:ed:45:4b:fd:45:b3:7c:31:88:6e:34: 7a:99:5b:4e:c8:e0:8f:b8:92:17:ff:87:3b:a4:33:f0:e9:13: ae:88:d0:32:a1:f9:e0:a0:73:55:ea:55:48:5d:b5:9c:10:14: f1:a6:92:10:2a:93:92:7e:d4:a5:49:68:88:41:1f:55:d8:e0: d8:98:61:b0:18:92:b8:b5:b1:2a:92:12:d2:9c:9e:b5:42:18: 7f:78:c9:29:04:63:44:92:85:e5:7e:a9:c2:88:15:4e:52:5a: a2:d5:b7:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIeNXW2X7UmAVXRttDEPl3d4BF5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYxMDI2MDA1MDEzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzIzYTQ3NDY5ZWNiMjY5OWI3MDY4NGEwNDc5ZTVjOTMz OTRhOGRlYThkYjMyYzdlZDEzOGEzN2IyYjg5ZDNhMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdwIbxSDqGVfWzblQzNqZXIYPCILRGwwcpBmRO72thB7sJ UJVXBI3gnI1TowRprEjdcc62rZmji4ALfrNZwoZEgK+P2B8HUykCBdlXZrkXNeh0 cjTULpkLiopuAF0J2I/k0S44QfQWRaXQZegoNZirHjtVz9iakcs/TFHXYvaDGvKb 7he0eug3PF22TWqyNHSRO6ookOKzmKKKIxAw+oVqkq7w75+ttdxGC6Myt4sC2Kff cThEgPXw5NF1jQJEThpONqH6kx6Li+i1eNrAyjl9kZbPy6nyP7gHG1iH3RI+3NQN ZXeydYRPtVlgHtNcHabBQCMn3KqfWpI8vbyX+GQHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGkXdt3n9D995lsx9rpRUqCZRKp8wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2VjMGUzYjcwLTY2YmUtNGNiNS1iYzE0LTk1M2Y0ZDJmNWZjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwAwDQYJKoZIhvcNAQELBQADggEBAAUDx5ETDrFHrwSHhd2pAgC6QsK6 jmitvIsYHir5+ZI3HZXxJxGj/OT7GOwXAuaVe644Y8w4Dd7YGit/ndRwUeKGVQvJ mR2JILv5kSwuV1+gJzTEpyG6ylaMX1WV5qOpPf+MRj5yGFOIoCfn+Nrwyh3rEFuf m3ksaWAdkBS/griflmFf75uqkCPikVOfWpRVOxeG06Ch3sXtRUv9RbN8MYhuNHqZ W07I4I+4khf/hzukM/DpE66I0DKh+eCgc1XqVUhdtZwQFPGmkhAqk5J+1KVJaIhB H1XY4NiYYbAYkri1sSqSEtKcnrVCGH94ySkEY0SSheV+qcKIFU5SWqLVt/c= -----END CERTIFICATE-----Generated at Thu Nov 5 11:27:48 2026 by rpki-client