$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6da9618c-e798-462f-afd9-32b58ba88cba.roa File: 6da9618c-e798-462f-afd9-32b58ba88cba.roa (raw, json) Hash identifier: GjRhewSIsbECQ3Ywd6PqQbe4g1NXlD9X6X98CT6JC8k= Subject key identifier: 8A:35:4C:71:EF:47:46:C9:F3:CF:87:60:2C:F4:72:45:43:D4:D7:CF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 12FC718819C3D5BE61F28C2B818C86713E522405 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6da9618c-e798-462f-afd9-32b58ba88cba.roa Signing time: Thu 22 Oct 2026 00:10:12 +0000 ROA not before: Thu 22 Oct 2026 00:10:12 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fc:71:88:19:c3:d5:be:61:f2:8c:2b:81:8c:86:71:3e:52:24:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:12 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=8b50f18d9e28ad98c6cb413d612c0441d1afb3767556c7ed2a68381872097278, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:88:93:1a:fd:38:c7:c2:30:75:e1:ce:ac: 73:83:d0:01:bb:d8:61:75:82:75:a4:96:84:9d:78: 6a:34:41:5f:a3:a8:05:3d:3c:b9:e9:31:c3:51:59: bf:72:29:42:56:f3:05:d9:bd:3e:51:be:05:84:af: f9:80:a8:92:b2:14:d1:c9:f0:46:e4:9f:b4:59:4f: bd:10:8d:64:69:86:2e:f1:56:68:3a:a3:3f:d3:ef: 21:85:ca:d3:a8:c3:6e:27:70:7b:af:dc:f0:74:05: ef:25:06:1f:43:80:70:65:d7:fa:62:9e:a5:de:02: e9:8b:fc:cc:4c:54:92:3a:d7:24:86:6b:cb:8e:e0: 4c:5c:18:7d:90:d0:71:fb:81:cc:5a:62:fd:c6:4a: 7a:95:fc:14:49:5f:de:3a:f6:4c:91:a3:1e:8b:97: aa:d0:ee:8d:bd:a2:9f:5f:e6:56:11:eb:31:f2:81: 5e:a8:aa:1a:3d:de:1a:d5:3e:4a:ee:bf:0d:75:18: 16:47:b9:0b:bf:56:ae:ef:d5:f6:e9:1a:64:1a:f9: 22:33:b8:55:7d:38:0b:6d:c8:6e:fc:54:93:f5:3e: 4a:04:9e:97:fb:4b:4b:f4:2c:65:54:b4:0f:0a:4b: 60:0e:cf:de:f4:74:0f:a8:fa:66:52:c6:09:0a:39: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:35:4C:71:EF:47:46:C9:F3:CF:87:60:2C:F4:72:45:43:D4:D7:CF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6da9618c-e798-462f-afd9-32b58ba88cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.224.0/20 Signature Algorithm: sha256WithRSAEncryption 23:87:01:bc:85:31:94:da:6a:45:04:12:30:58:1d:70:52:84: f4:15:df:82:88:9c:23:e9:91:08:eb:a1:6b:82:ad:58:82:c7: 37:c2:fb:f8:da:bc:a1:40:d5:e3:d4:14:ec:79:01:b3:01:19: ca:34:98:a0:a2:85:1c:58:79:28:c3:a8:9f:61:21:1a:fa:2d: ec:52:43:09:53:21:f8:8d:63:8d:ad:8f:ec:a2:fc:2c:54:56: 3a:42:64:8f:fb:c1:7a:61:c3:66:ab:0f:13:9d:fb:ea:20:7e: 33:c3:93:7e:ca:83:ef:2c:85:8f:10:90:38:8f:77:1c:81:2b: 5e:3b:09:18:d7:c7:b5:d0:7e:a0:41:cd:56:d5:e4:d7:ce:00: d5:fc:cd:e4:31:38:a0:89:a8:ee:6e:b9:5c:66:23:5c:23:5d: d7:ab:5a:87:a0:60:ef:8a:42:6d:fd:10:8b:7f:f3:02:3d:d8: 77:1e:95:36:9b:94:73:72:cc:93:ef:e5:19:c0:2a:f0:83:54: d3:e1:eb:20:06:cb:ac:55:88:18:f3:76:ca:76:41:cb:b5:3d: e3:2a:c9:b2:05:a7:6d:04:85:27:7d:03:b1:e3:71:dd:3d:24: d7:2b:c8:c9:4e:f1:ec:84:ad:b6:be:ba:9d:e6:95:f3:91:3b: 81:7c:8e:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEvxxiBnD1b5h8owrgYyGcT5SJAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDEyWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjUwZjE4ZDllMjhhZDk4YzZjYjQxM2Q2MTJjMDQ0MWQx YWZiMzc2NzU1NmM3ZWQyYTY4MzgxODcyMDk3Mjc4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1YYiTGv04x8IwdeHOrHOD0AG72GF1gnWkloSdeGo0QV+j qAU9PLnpMcNRWb9yKUJW8wXZvT5RvgWEr/mAqJKyFNHJ8Ebkn7RZT70QjWRphi7x Vmg6oz/T7yGFytOow24ncHuv3PB0Be8lBh9DgHBl1/pinqXeAumL/MxMVJI61ySG a8uO4ExcGH2Q0HH7gcxaYv3GSnqV/BRJX9469kyRox6Ll6rQ7o29op9f5lYR6zHy gV6oqho93hrVPkruvw11GBZHuQu/Vq7v1fbpGmQa+SIzuFV9OAttyG78VJP1PkoE npf7S0v0LGVUtA8KS2AOz970dA+o+mZSxgkKOTOlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUijVMce9HRsnzz4dgLPRyRUPU188wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzZkYTk2MThjLWU3OTgtNDYyZi1hZmQ5LTMyYjU4YmE4OGNiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFqeAwDQYJKoZIhvcNAQELBQADggEBACOHAbyFMZTaakUEEjBYHXBShPQV 34KInCPpkQjroWuCrViCxzfC+/javKFA1ePUFOx5AbMBGco0mKCihRxYeSjDqJ9h IRr6LexSQwlTIfiNY42tj+yi/CxUVjpCZI/7wXphw2arDxOd++ogfjPDk37Kg+8s hY8QkDiPdxyBK147CRjXx7XQfqBBzVbV5NfOANX8zeQxOKCJqO5uuVxmI1wjXder WoegYO+KQm39EIt/8wI92HcelTablHNyzJPv5RnAKvCDVNPh6yAGy6xViBjzdsp2 Qcu1PeMqybIFp20EhSd9A7Hjcd09JNcryMlO8eyErba+up3mlfORO4F8jpc= -----END CERTIFICATE-----Generated at Sun Nov 8 14:57:39 2026 by rpki-client