$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa File: 04405b6a-e9b7-4619-9fbc-a70457bae68e.roa (raw, json) Hash identifier: EE5QB+kLmvo+zdtgcsCaoq6bQE1HKfoj/MCKgBbhZtY= Subject key identifier: E7:27:12:F1:23:88:1E:30:8F:C2:77:92:07:D1:4B:E5:3B:93:4F:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7406B01E010604960C975BDB79C684B7CB024E60 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa Signing time: Sat 24 Oct 2026 00:11:24 +0000 ROA not before: Sat 24 Oct 2026 00:11:24 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.155.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:06:b0:1e:01:06:04:96:0c:97:5b:db:79:c6:84:b7:cb:02:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:11:24 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=6dc1190ef0eb8a2573c1d8047f8557f354e088b39a357df85d036732bbf6f9de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:18:12:3e:1c:5a:f7:b5:f0:91:3e:94:6b: 31:0e:ba:a4:61:b3:63:a5:a2:65:d4:20:7b:88:42: 94:7d:15:ae:20:dc:62:c9:e8:62:32:05:7c:0c:ae: 1e:9d:b4:47:0e:93:e5:61:56:70:bf:6a:85:40:61: 85:29:15:f2:10:15:6f:e1:e5:db:76:f3:a5:c5:48: 30:d9:76:61:60:3d:b6:82:88:1c:97:cd:a9:e4:b4: 00:f8:60:65:61:bf:80:53:61:ae:12:86:41:b6:a8: aa:df:a9:f8:6b:71:6c:61:ed:3a:35:37:67:2c:61: 6b:63:d5:46:2b:77:e5:17:4c:ec:ba:4d:93:87:49: f3:91:7e:0f:48:5c:0f:c4:a4:5d:3e:a6:b9:2c:d8: 63:74:94:bc:fc:f8:75:08:28:86:74:38:1b:ba:ff: e4:9e:05:88:9d:84:a3:a9:31:65:e6:6d:4f:af:cf: 47:a0:a9:5d:52:fa:28:15:2d:75:c6:a9:b7:98:b9: e9:4a:26:d2:fa:02:12:6b:37:0b:e2:04:66:fd:49: d2:e2:b4:8b:82:84:e6:b7:5b:a7:42:14:17:4e:25: 8c:08:52:bc:6c:1d:ed:e2:6a:62:97:71:b9:a6:23: 12:a8:fc:b7:cf:a6:10:21:a0:ac:be:cd:80:04:12: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:12:F1:23:88:1E:30:8F:C2:77:92:07:D1:4B:E5:3B:93:4F:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.155.128.0/17 Signature Algorithm: sha256WithRSAEncryption 01:e2:5d:26:bc:28:e0:db:66:d9:d0:65:48:da:12:45:82:91: 05:7e:a5:fe:7d:aa:c9:60:ae:95:6d:6d:8d:60:77:c8:a4:19: 19:45:0a:d7:a6:0f:f3:ac:81:9d:b4:3a:7d:de:3a:58:7c:84: 2c:28:59:b4:16:79:19:04:9c:b1:93:2e:99:c6:a5:62:35:54: bc:3d:4c:fb:1f:1b:39:4f:0d:6f:32:a0:48:9a:6a:f6:82:ba: e9:8f:72:48:cd:ad:4a:0b:3a:34:0c:c0:0a:a9:6a:06:ed:9e: 1f:4d:93:af:9b:0f:af:01:99:eb:52:5f:80:6d:84:d3:9f:bc: d9:38:b8:b3:c5:da:56:e1:ae:bb:78:61:6e:15:f7:a9:c8:92: fc:c1:27:0a:80:f4:be:cf:9b:27:ef:87:8e:f7:17:68:d3:bf: 51:22:1d:88:84:75:82:fa:67:a8:90:c5:b3:00:b5:11:23:3c: 7b:c1:73:6e:89:c7:87:7f:25:07:33:7b:15:cd:59:7b:02:42: 19:2b:e1:64:6b:ce:69:96:0a:30:1b:c5:51:2f:a7:d0:36:6c: 93:9d:08:7e:fe:c7:f2:db:2e:c4:61:ce:12:be:62:59:32:1c: f0:38:c7:c2:2d:d6:95:4d:6d:2a:c1:17:c9:01:fd:20:00:99: 61:8b:06:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdAawHgEGBJYMl1vbecaEt8sCTmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAxMTI0WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGMxMTkwZWYwZWI4YTI1NzNjMWQ4MDQ3Zjg1NTdmMzU0 ZTA4OGIzOWEzNTdkZjg1ZDAzNjczMmJiZjZmOWRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTVxgSPhxa97XwkT6UazEOuqRhs2OlomXUIHuIQpR9Fa4g 3GLJ6GIyBXwMrh6dtEcOk+VhVnC/aoVAYYUpFfIQFW/h5dt286XFSDDZdmFgPbaC iByXzanktAD4YGVhv4BTYa4ShkG2qKrfqfhrcWxh7To1N2csYWtj1UYrd+UXTOy6 TZOHSfORfg9IXA/EpF0+prks2GN0lLz8+HUIKIZ0OBu6/+SeBYidhKOpMWXmbU+v z0egqV1S+igVLXXGqbeYuelKJtL6AhJrNwviBGb9SdLitIuChOa3W6dCFBdOJYwI UrxsHe3iamKXcbmmIxKo/LfPphAhoKy+zYAEEsUBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5ycS8SOIHjCPwneSB9FL5TuTT+swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NDA1YjZhLWU5YjctNDYxOS05ZmJjLWE3MDQ1N2JhZTY4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc4m4AwDQYJKoZIhvcNAQELBQADggEBAAHiXSa8KODbZtnQZUjaEkWCkQV+ pf59qslgrpVtbY1gd8ikGRlFCtemD/OsgZ20On3eOlh8hCwoWbQWeRkEnLGTLpnG pWI1VLw9TPsfGzlPDW8yoEiaavaCuumPckjNrUoLOjQMwAqpagbtnh9Nk6+bD68B metSX4BthNOfvNk4uLPF2lbhrrt4YW4V96nIkvzBJwqA9L7Pmyfvh473F2jTv1Ei HYiEdYL6Z6iQxbMAtREjPHvBc26Jx4d/JQczexXNWXsCQhkr4WRrzmmWCjAbxVEv p9A2bJOdCH7+x/LbLsRhzhK+YlkyHPA4x8It1pVNbSrBF8kB/SAAmWGLBoI= -----END CERTIFICATE-----Generated at Tue Nov 3 22:35:51 2026 by rpki-client