$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa File: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (raw, json) Hash identifier: gaTa/lu88TdPBbbQIcJCsIvbp927fqteQCWWbphnZdA= Subject key identifier: 05:59:4E:07:4E:A5:A3:C8:84:DE:47:92:7D:1B:A2:9F:C1:C2:73:84 Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 5B9CBAFA6FB05299CDB97130B44EB33F50801361 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa Signing time: Thu 15 Oct 2026 00:07:07 +0000 ROA not before: Thu 15 Oct 2026 00:07:07 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 62785 IP address blocks: 172.96.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9c:ba:fa:6f:b0:52:99:cd:b9:71:30:b4:4e:b3:3f:50:80:13:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Oct 15 00:07:07 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=d9abc012749f660c24d5f997b931716ae61bb598e9728c202aa14ecbc5ea9971, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:12:24:91:14:1b:c2:46:57:04:46:6f:08:9a: 2a:40:5b:78:08:b2:2a:d9:b4:89:cb:7c:32:a9:49: f0:6e:e0:98:89:e8:ea:45:b4:27:6f:17:0c:64:72: f3:d0:20:38:b6:38:51:06:60:cc:5f:21:22:bf:76: 3c:14:36:da:98:fe:2f:3f:e5:57:6d:26:ff:2f:52: 0a:09:f4:48:56:c9:95:b9:0e:ff:f7:b1:80:34:d4: 52:f8:bb:97:67:96:12:e1:73:6b:57:b8:8b:59:97: 84:da:f0:2a:c2:46:3d:b2:e1:b3:ce:04:9f:55:0f: 17:95:d2:95:f7:4c:15:04:b8:56:e2:8e:d6:25:19: 10:aa:0d:9d:a3:ba:2b:42:43:bb:1a:de:5d:1f:6b: dd:f6:ee:f7:c0:93:b5:85:cc:f1:9c:a2:28:17:0d: 56:48:68:b6:3e:4c:47:c0:3a:9a:ff:e4:d4:31:8a: d0:4d:d3:91:2e:a2:07:8e:84:65:3b:12:7f:06:c7: 45:88:d5:53:30:12:24:8b:a5:1c:a7:f4:34:de:1f: 5b:80:e6:e7:d9:7c:67:a0:0c:c6:4c:f6:2e:d1:ad: 72:5c:fc:3e:3a:15:fc:14:e3:c8:bd:a3:8d:d7:1a: 1d:92:2d:a7:8b:f6:50:d9:08:c3:f1:e8:1b:df:93: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:59:4E:07:4E:A5:A3:C8:84:DE:47:92:7D:1B:A2:9F:C1:C2:73:84 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.104.0/21 Signature Algorithm: sha256WithRSAEncryption 74:8a:46:42:7b:f1:fc:f3:35:ae:27:91:4b:df:9b:a4:4b:b4: dc:32:25:6c:68:65:23:e7:1b:32:7d:98:a0:fd:19:a1:29:6d: be:da:f1:e8:da:5d:dd:43:26:7e:c8:a0:cb:3b:52:d6:6b:60: d4:df:2e:08:d1:52:a7:0f:38:2c:b2:d0:bc:45:7b:6e:b9:e1: 59:3f:0f:b2:fe:8c:b7:e8:12:77:1c:14:39:d8:64:47:e6:c8: 2a:c2:a4:d7:b0:12:37:79:e9:e4:56:e2:0e:8b:7b:d0:68:db: b4:9b:36:47:d9:87:d0:5a:ba:e5:f2:ac:b6:d7:6a:84:92:ae: e7:d3:97:4a:2b:04:82:bf:23:76:7c:87:a9:54:f2:a2:bb:e7: 99:39:6e:64:ce:58:0d:27:56:bd:78:a1:82:38:5d:13:60:d7: d2:35:5c:80:56:0f:96:f2:6e:e3:a5:25:44:1e:aa:b0:31:4d: 50:5e:b1:04:8b:8d:e4:1e:21:35:6e:7b:0c:6e:e5:82:e2:43: 09:2d:9a:3c:57:15:b6:68:12:20:ae:42:a4:7e:80:ee:ca:e7: 0f:81:a7:41:ee:f3:c1:de:da:cc:99:28:6a:c4:5a:68:cf:5f: dd:b0:58:b1:6b:fb:d8:17:75:81:f1:06:3e:25:70:ba:8b:79: 03:74:ac:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW5y6+m+wUpnNuXEwtE6zP1CAE2EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYxMDE1MDAwNzA3WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWFiYzAxMjc0OWY2NjBjMjRkNWY5OTdiOTMxNzE2YWU2 MWJiNTk4ZTk3MjhjMjAyYWExNGVjYmM1ZWE5OTcxMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6EiSRFBvCRlcERm8ImipAW3gIsirZtInLfDKpSfBu4JiJ 6OpFtCdvFwxkcvPQIDi2OFEGYMxfISK/djwUNtqY/i8/5VdtJv8vUgoJ9EhWyZW5 Dv/3sYA01FL4u5dnlhLhc2tXuItZl4Ta8CrCRj2y4bPOBJ9VDxeV0pX3TBUEuFbi jtYlGRCqDZ2juitCQ7sa3l0fa9327vfAk7WFzPGcoigXDVZIaLY+TEfAOpr/5NQx itBN05EuogeOhGU7En8Gx0WI1VMwEiSLpRyn9DTeH1uA5ufZfGegDMZM9i7RrXJc /D46FfwU48i9o43XGh2SLaeL9lDZCMPx6Bvfk1WJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBVlOB06lo8iE3keSfRuin8HCc4QwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzhiYWUwNDVmLTM2NWItNDNjZi05OWZjLTEyY2JjYmNlNWY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOsYGgwDQYJKoZIhvcNAQELBQADggEBAHSKRkJ78fzzNa4nkUvfm6RLtNwy JWxoZSPnGzJ9mKD9GaEpbb7a8ejaXd1DJn7IoMs7UtZrYNTfLgjRUqcPOCyy0LxF e2654Vk/D7L+jLfoEnccFDnYZEfmyCrCpNewEjd56eRW4g6Le9Bo27SbNkfZh9Ba uuXyrLbXaoSSrufTl0orBIK/I3Z8h6lU8qK755k5bmTOWA0nVr14oYI4XRNg19I1 XIBWD5bybuOlJUQeqrAxTVBesQSLjeQeITVuewxu5YLiQwktmjxXFbZoEiCuQqR+ gO7K5w+Bp0Hu88He2syZKGrEWmjPX92wWLFr+9gXdYHxBj4lcLqLeQN0rJc= -----END CERTIFICATE-----Generated at Thu Nov 5 11:13:50 2026 by rpki-client