$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ca0e01a-25b3-4906-aea7-fabc4e6f6197.roa File: 0ca0e01a-25b3-4906-aea7-fabc4e6f6197.roa (raw, json) Hash identifier: TRBt38wbD4kbZPFYxhv9aEgUkDtgtJbFOTXsixjHAjM= Subject key identifier: D7:D0:1E:BB:1F:AD:DF:F5:C9:A6:6C:78:C8:11:17:05:40:FF:5A:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6EBD836F3E024E42A09C012F7788D11B1493BF82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ca0e01a-25b3-4906-aea7-fabc4e6f6197.roa Signing time: Mon 19 Oct 2026 00:31:29 +0000 ROA not before: Mon 19 Oct 2026 00:31:29 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bd:83:6f:3e:02:4e:42:a0:9c:01:2f:77:88:d1:1b:14:93:bf:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:31:29 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=bf96392901fe5ded77b434b4594db4fb6473ef69dad018118f49c873a8462e00, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:5f:98:8c:80:27:8b:04:4e:94:82:f4:8c: 3e:f0:18:a2:69:0c:b6:af:9d:11:a7:9f:ec:63:3b: c3:90:a5:3e:1e:e2:de:72:65:d1:4a:ba:77:83:21: 90:fa:97:0f:9e:0f:2b:29:db:f2:55:bf:99:9a:ab: b8:f4:62:08:04:b4:b4:15:a6:e6:53:ba:66:17:b3: b7:d6:dc:6d:a0:b8:0d:15:be:67:1d:dc:e0:58:7e: 4b:bf:a4:17:b2:fe:5b:92:a7:98:0c:19:5a:c6:d3: 3c:98:60:7c:3e:23:c7:52:fe:ab:bf:46:ae:d0:d6: d3:46:a0:3e:c0:ee:cc:de:4c:60:69:ab:15:78:10: 9d:40:38:a2:f3:9d:58:70:5e:dd:93:98:60:e8:08: 68:89:f7:ff:81:d5:89:26:9e:e7:6a:7a:4a:cc:fe: 64:f1:ee:ce:fe:bb:9f:92:ca:98:95:6c:18:74:57: e7:a1:5b:8d:a7:c6:65:2c:9b:66:ca:07:7d:e6:30: 17:4d:fe:1d:e2:97:ef:44:9c:8b:27:12:c0:46:f0: af:3b:5c:11:58:e6:21:b2:71:35:56:49:81:0f:91: 78:1e:d3:e1:9c:21:f3:45:f9:44:22:ee:94:09:88: 49:c9:64:bb:48:85:76:0a:38:c9:80:48:44:7b:5f: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D0:1E:BB:1F:AD:DF:F5:C9:A6:6C:78:C8:11:17:05:40:FF:5A:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ca0e01a-25b3-4906-aea7-fabc4e6f6197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.35.0/24 Signature Algorithm: sha256WithRSAEncryption d3:85:15:ce:19:17:fe:5c:49:e8:3a:bf:97:55:1b:1d:66:3a: 03:f8:d2:6b:86:cf:d7:c0:a0:e5:0c:c5:16:65:b8:fa:34:bd: 11:24:c8:92:6a:de:43:30:78:1e:bc:20:de:ed:ac:5c:53:92: 80:cf:c5:19:7a:af:8b:a5:cb:66:d2:87:b8:03:ac:a6:3c:c8: d5:56:bc:73:99:0b:8d:ff:01:b0:eb:68:79:73:dd:eb:f0:68: ea:74:7c:21:68:79:5a:9e:ba:b7:6d:33:2d:5c:aa:a4:05:68: 1d:f1:60:1b:2d:fd:f2:c2:3d:3f:d6:b4:86:b7:67:80:2e:c1: be:a9:99:f8:62:22:67:5e:57:fb:16:bc:fa:f9:1b:13:29:f6: 21:ec:50:ed:c2:32:a3:67:b6:62:0f:f0:95:6b:60:0f:dc:51: f6:f8:9d:b1:09:4e:70:7f:e2:11:31:75:91:63:35:61:84:dd: 43:2b:61:ab:ac:f1:56:13:d3:96:e3:ae:9d:d4:f8:dc:0e:27: f2:56:f8:be:05:f3:97:d1:d4:6e:90:26:46:1a:ad:e9:f3:5c: b2:1d:1b:aa:c9:d7:d2:60:59:35:a4:b7:b0:c5:ee:4f:9d:67: d0:0e:7d:f4:bf:6d:3e:d4:63:cd:dd:15:35:e8:4d:d6:c4:86: d5:14:c4:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbr2Dbz4CTkKgnAEvd4jRGxSTv4IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDAzMTI5WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjk2MzkyOTAxZmU1ZGVkNzdiNDM0YjQ1OTRkYjRmYjY0 NzNlZjY5ZGFkMDE4MTE4ZjQ5Yzg3M2E4NDYyZTAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSel+YjIAniwROlIL0jD7wGKJpDLavnRGnn+xjO8OQpT4e 4t5yZdFKuneDIZD6lw+eDysp2/JVv5maq7j0YggEtLQVpuZTumYXs7fW3G2guA0V vmcd3OBYfku/pBey/luSp5gMGVrG0zyYYHw+I8dS/qu/Rq7Q1tNGoD7A7szeTGBp qxV4EJ1AOKLznVhwXt2TmGDoCGiJ9/+B1YkmnudqekrM/mTx7s7+u5+SypiVbBh0 V+ehW42nxmUsm2bKB33mMBdN/h3il+9EnIsnEsBG8K87XBFY5iGycTVWSYEPkXge 0+GcIfNF+UQi7pQJiEnJZLtIhXYKOMmASER7XxIXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU19Aeux+t3/XJpmx4yBEXBUD/WvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjYTBlMDFhLTI1YjMtNDkwNi1hZWE3LWZhYmM0ZTZmNjE5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmCMwDQYJKoZIhvcNAQELBQADggEBANOFFc4ZF/5cSeg6v5dVGx1mOgP4 0muGz9fAoOUMxRZluPo0vREkyJJq3kMweB68IN7trFxTkoDPxRl6r4uly2bSh7gD rKY8yNVWvHOZC43/AbDraHlz3evwaOp0fCFoeVqeurdtMy1cqqQFaB3xYBst/fLC PT/WtIa3Z4Auwb6pmfhiImdeV/sWvPr5GxMp9iHsUO3CMqNntmIP8JVrYA/cUfb4 nbEJTnB/4hExdZFjNWGE3UMrYaus8VYT05bjrp3U+NwOJ/JW+L4F85fR1G6QJkYa renzXLIdG6rJ19JgWTWkt7DF7k+dZ9AOffS/bT7UY83dFTXoTdbEhtUUxCY= -----END CERTIFICATE-----Generated at Tue Nov 3 20:12:58 2026 by rpki-client