$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa File: e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa (raw, json) Hash identifier: BS/nOkCxEi4UEnHhTJpT27j0B4v5roeMRJfGv7AisqQ= Subject key identifier: 02:F4:64:00:CD:89:A5:DB:8D:B0:0A:C4:2B:5C:7E:B8:22:D2:B8:C9 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 5A1E5AC6B9BBCEBBE54E9C7E3F6F82D271F84DE5 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa Signing time: Fri 23 Oct 2026 00:02:53 +0000 ROA not before: Fri 23 Oct 2026 00:02:53 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1e:5a:c6:b9:bb:ce:bb:e5:4e:9c:7e:3f:6f:82:d2:71:f8:4d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Oct 23 00:02:53 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=88aac125cb782f021e229094e2ee352800c89852510452151dd8144e36410d6c, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:f4:27:20:88:f6:ea:ea:1b:95:b3:dd:54: b5:02:77:b0:0a:cd:e4:a7:aa:6e:e3:ce:ca:66:b6: e7:19:8a:fd:9f:ff:d8:73:a8:bc:3d:52:4a:b5:33: a3:c4:24:78:20:82:c9:d5:bf:36:b1:95:e8:76:30: f1:e6:db:d0:2f:c1:01:d1:95:63:85:c4:91:9a:c4: b6:af:74:2a:86:3b:18:86:a7:8e:18:0e:b5:92:3a: a2:dd:04:06:e5:ea:09:aa:30:dc:26:7a:a6:50:f2: 7e:9b:f5:be:ee:62:4f:0d:34:20:ae:b7:4f:29:68: 40:63:4b:b5:3e:9f:85:97:64:b1:29:df:38:89:01: 68:93:78:95:e7:d4:44:13:9f:28:39:b6:50:e4:ad: 56:4d:0b:d7:f0:5f:e9:d6:b1:3d:fe:89:04:38:e6: b7:7b:8c:d0:0e:31:e0:6f:e3:25:b9:e5:b0:54:4b: 8b:c0:b8:2f:bc:c4:73:b7:7d:b8:ac:ef:07:69:42: a0:27:95:20:06:20:51:ee:1e:fe:8c:ee:fa:e1:c1: 96:69:9c:20:86:42:0e:57:9f:bd:f1:32:82:b0:dd: 69:83:f2:be:08:83:66:4c:e7:d2:65:3b:ca:b5:74: dd:ff:18:24:7b:dc:7c:43:12:ad:f3:fd:2b:6f:2d: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F4:64:00:CD:89:A5:DB:8D:B0:0A:C4:2B:5C:7E:B8:22:D2:B8:C9 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.176.0/21 Signature Algorithm: sha256WithRSAEncryption 15:e8:51:a8:7c:d2:e1:d2:db:ab:52:85:c2:fb:72:14:0b:bd: fb:c2:cd:ba:80:4f:f2:cd:6b:eb:b6:06:66:56:00:c8:72:0c: a9:dd:4c:e2:1d:d6:5d:37:3a:50:ff:c6:d6:3c:42:61:99:50: 27:31:c4:3a:1f:15:dc:8c:71:37:b9:2c:5d:3b:9d:39:c1:52: 6c:1b:d6:20:7e:fd:f3:82:c7:8c:0f:44:14:bd:d5:2f:13:39: 4f:69:8c:15:f8:62:5f:15:8a:66:99:03:52:d8:13:66:c6:c1: aa:f2:14:31:f5:8c:e2:ec:f9:65:9f:44:26:fb:b7:de:d8:43: a6:2d:b0:b0:54:ab:51:57:c8:93:77:bf:ea:7c:fb:50:cf:5d: ba:73:8d:49:67:2c:be:16:53:f1:58:31:2f:0e:6a:77:9a:c2: ae:dc:24:57:6b:65:34:02:7f:88:55:4e:14:da:d0:1e:cd:0f: 31:6b:40:b3:35:d2:6f:2a:58:98:cb:40:e8:11:51:25:c8:d1: 87:99:0d:2e:ed:87:cb:38:8e:f1:90:17:b1:82:7c:07:5b:c5: 64:d5:48:d6:5e:19:7d:a9:e2:c0:3b:3c:b0:a9:81:27:2f:47: 7e:36:bd:3a:74:13:7f:37:77:76:1e:e3:2f:79:b6:d2:a5:4f: e9:51:3b:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWh5axrm7zrvlTpx+P2+C0nH4TeUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjYxMDIzMDAwMjUzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGFhYzEyNWNiNzgyZjAyMWUyMjkwOTRlMmVlMzUyODAw Yzg5ODUyNTEwNDUyMTUxZGQ4MTQ0ZTM2NDEwZDZjMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC29fQnIIj26uoblbPdVLUCd7AKzeSnqm7jzspmtucZiv2f /9hzqLw9Ukq1M6PEJHgggsnVvzaxleh2MPHm29AvwQHRlWOFxJGaxLavdCqGOxiG p44YDrWSOqLdBAbl6gmqMNwmeqZQ8n6b9b7uYk8NNCCut08paEBjS7U+n4WXZLEp 3ziJAWiTeJXn1EQTnyg5tlDkrVZNC9fwX+nWsT3+iQQ45rd7jNAOMeBv4yW55bBU S4vAuC+8xHO3fbis7wdpQqAnlSAGIFHuHv6M7vrhwZZpnCCGQg5Xn73xMoKw3WmD 8r4Ig2ZM59JlO8q1dN3/GCR73HxDEq3z/StvLY5TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAvRkAM2JpduNsArEK1x+uCLSuMkwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2UzYzg0NmIxLWZiMDAtNGNiNy04MjNkLTNhNThiZWRkNjY1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4qbAwDQYJKoZIhvcNAQELBQADggEBABXoUah80uHS26tShcL7chQLvfvC zbqAT/LNa+u2BmZWAMhyDKndTOId1l03OlD/xtY8QmGZUCcxxDofFdyMcTe5LF07 nTnBUmwb1iB+/fOCx4wPRBS91S8TOU9pjBX4Yl8VimaZA1LYE2bGwaryFDH1jOLs +WWfRCb7t97YQ6YtsLBUq1FXyJN3v+p8+1DPXbpzjUlnLL4WU/FYMS8Oaneawq7c JFdrZTQCf4hVThTa0B7NDzFrQLM10m8qWJjLQOgRUSXI0YeZDS7th8s4jvGQF7GC fAdbxWTVSNZeGX2p4sA7PLCpgScvR342vTp0E383d3Ye4y95ttKlT+lRO9Y= -----END CERTIFICATE-----Generated at Thu Nov 12 17:28:58 2026 by rpki-client