$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a13fe53-511f-41c9-bc47-5327578f90ed.roa File: 0a13fe53-511f-41c9-bc47-5327578f90ed.roa (raw, json) Hash identifier: xpaob3NgIGvCJYjaESn+ZqJO6VecVG/eUpg7CYWSR8w= Subject key identifier: A9:4C:04:88:36:12:2B:17:AC:DB:FE:A4:CC:4F:9B:CC:D4:D8:99:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 185A3A42F2CF3D058998D9134B8591E4431B633B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a13fe53-511f-41c9-bc47-5327578f90ed.roa Signing time: Tue 25 Aug 2026 23:33:38 +0000 ROA not before: Tue 25 Aug 2026 23:33:38 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.46.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5a:3a:42:f2:cf:3d:05:89:98:d9:13:4b:85:91:e4:43:1b:63:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 23:33:38 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=816f21a003c06135ac21ddb99138074ac1dbd9897a073dfcd693cee22960e5cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:c1:23:42:82:33:d5:44:dd:41:60:1c:23: 51:b6:e8:98:9d:41:c4:82:d7:8f:f5:7a:03:c2:5e: 07:0a:c5:4b:10:c3:cc:93:94:01:c0:f6:9c:fc:72: 8b:20:60:ae:0b:f8:3f:f7:88:19:17:59:df:cd:92: 21:4f:e3:03:dc:44:1f:29:1e:81:67:b8:45:1a:da: 6c:6c:f3:1e:90:85:a1:20:4c:ef:cb:e3:3b:db:5f: de:13:34:e5:35:aa:38:c7:aa:3a:2f:08:c4:54:64: ac:c3:f5:49:c1:2e:c9:6d:f2:85:a0:4a:43:d4:a0: c1:24:20:5c:32:be:6d:45:65:bd:63:c8:a2:60:75: 86:38:bb:be:e5:31:69:b5:3b:29:5f:42:0a:6f:eb: ca:f3:88:08:97:49:13:26:e8:2e:4f:06:32:9c:e2: 06:1c:98:e6:61:03:e9:06:3e:8b:39:42:a3:ee:15: 25:95:30:15:2d:ac:ec:64:6a:13:a9:bf:d2:07:33: db:1d:80:56:18:84:a0:d1:28:c4:ca:97:a3:41:50: 41:6f:2b:64:b9:43:75:d2:e9:a1:60:e9:1e:41:88: 33:6b:36:5e:95:0c:11:05:d5:34:1a:a7:71:c5:50: b6:04:b5:48:f2:1b:16:09:5e:50:7a:ce:db:f1:4c: 4d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4C:04:88:36:12:2B:17:AC:DB:FE:A4:CC:4F:9B:CC:D4:D8:99:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a13fe53-511f-41c9-bc47-5327578f90ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.46.80.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:78:bc:ae:e2:aa:0a:6f:74:d1:0c:a2:d9:b1:fe:d3:62:b8: 7b:c2:37:e5:f9:74:e1:e2:16:03:5d:30:27:db:ef:8b:e0:9d: e9:3e:a8:30:ba:2d:45:8d:c2:13:e4:24:45:6b:68:11:5b:a8: 13:04:c8:2b:a9:58:e9:ca:c2:11:d2:05:29:14:72:d5:bd:21: f8:de:c7:48:72:76:ef:2b:1c:4c:1a:ad:44:2e:8a:16:43:0e: fd:01:37:a1:bc:b8:72:57:57:ef:ec:ea:76:ed:a2:91:0f:8e: bf:34:12:e2:fb:e6:de:99:ac:27:34:eb:93:c8:73:3d:69:1e: b8:cb:93:8c:44:4d:ef:06:6d:59:31:ea:b7:b5:48:80:ba:87: da:8d:e0:9c:77:3d:76:bf:0d:6e:e4:f3:be:2c:ce:e1:c0:33: f1:99:2f:df:88:f3:c7:40:9b:54:91:37:fc:03:b9:8c:f0:3f: d3:64:63:99:88:40:b1:8c:97:6f:0a:76:55:87:58:d0:e0:7c: 46:d5:05:79:ed:0c:7f:98:b4:8c:7f:6c:3a:04:c1:f9:e8:44: ed:51:8e:1a:68:49:9e:15:09:25:03:22:52:a2:45:70:9b:bb: dc:1a:e4:9f:13:81:a1:bc:54:f6:19:cc:06:50:15:e1:af:74: 02:73:58:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGFo6QvLPPQWJmNkTS4WR5EMbYzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MjMzMzM4WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTZmMjFhMDAzYzA2MTM1YWMyMWRkYjk5MTM4MDc0YWMx ZGJkOTg5N2EwNzNkZmNkNjkzY2VlMjI5NjBlNWNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiAMEjQoIz1UTdQWAcI1G26JidQcSC14/1egPCXgcKxUsQ w8yTlAHA9pz8cosgYK4L+D/3iBkXWd/NkiFP4wPcRB8pHoFnuEUa2mxs8x6QhaEg TO/L4zvbX94TNOU1qjjHqjovCMRUZKzD9UnBLslt8oWgSkPUoMEkIFwyvm1FZb1j yKJgdYY4u77lMWm1OylfQgpv68rziAiXSRMm6C5PBjKc4gYcmOZhA+kGPos5QqPu FSWVMBUtrOxkahOpv9IHM9sdgFYYhKDRKMTKl6NBUEFvK2S5Q3XS6aFg6R5BiDNr Nl6VDBEF1TQap3HFULYEtUjyGxYJXlB6ztvxTE0DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqUwEiDYSKxes2/6kzE+bzNTYmTcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhMTNmZTUzLTUxMWYtNDFjOS1iYzQ3LTUzMjc1NzhmOTBlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATRLlAwDQYJKoZIhvcNAQELBQADggEBAGt4vK7iqgpvdNEMotmx/tNiuHvC N+X5dOHiFgNdMCfb74vgnek+qDC6LUWNwhPkJEVraBFbqBMEyCupWOnKwhHSBSkU ctW9Ifjex0hydu8rHEwarUQuihZDDv0BN6G8uHJXV+/s6nbtopEPjr80EuL75t6Z rCc065PIcz1pHrjLk4xETe8GbVkx6re1SIC6h9qN4Jx3PXa/DW7k874szuHAM/GZ L9+I88dAm1SRN/wDuYzwP9NkY5mIQLGMl28KdlWHWNDgfEbVBXntDH+YtIx/bDoE wfnoRO1RjhpoSZ4VCSUDIlKiRXCbu9wa5J8TgaG8VPYZzAZQFeGvdAJzWJE= -----END CERTIFICATE-----Generated at Tue Sep 15 11:37:07 2026 by rpki-client