$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed8810f-655f-4dea-8c42-0199abb2eec1.roa File: 0ed8810f-655f-4dea-8c42-0199abb2eec1.roa (raw, json) Hash identifier: xXI7kjgZAd+Df86vK75RkBy6+MD3KfbJ6jFYpWBfsx4= Subject key identifier: B3:A0:CC:09:6C:60:4A:B4:CF:2D:0B:43:26:9D:AD:E9:A3:73:0C:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4127D031083F069C6422875321BA547D99DA1C89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed8810f-655f-4dea-8c42-0199abb2eec1.roa Signing time: Tue 04 Aug 2026 00:41:12 +0000 ROA not before: Tue 04 Aug 2026 00:41:12 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:27:d0:31:08:3f:06:9c:64:22:87:53:21:ba:54:7d:99:da:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:41:12 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=9856b4cce09bb83514442cc24e651e6086300eaf81dd2c0e06c8218cea19d506, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:65:54:99:8d:18:ca:b3:75:7f:3e:4e:15: 58:b2:82:0d:06:0d:35:ca:1c:10:df:94:04:25:d9: d3:b5:b6:ec:ff:0c:db:07:bb:d0:24:15:a1:62:34: e2:8b:32:39:9f:9e:31:6e:09:27:1d:b2:52:61:6e: 2d:7d:ed:c7:8d:48:82:e6:a9:92:19:f4:f3:8f:ee: 3b:6c:d8:be:c9:25:23:65:d7:70:a6:5b:19:f5:6a: e9:00:a4:29:f9:bc:0c:8c:d5:41:66:5a:af:59:76: 35:14:50:27:80:33:09:65:70:1b:65:ce:12:68:1b: 78:d4:1e:b2:ae:5a:e4:1b:fe:0e:3c:10:6f:34:0b: 07:01:cb:5c:c5:08:4c:62:09:bf:fc:b2:dc:ff:d9: f7:1f:1e:38:da:b1:c6:ea:57:51:12:a2:dc:23:7b: a8:52:90:cd:7d:ca:ef:27:84:97:97:fd:d2:b3:60: 64:ed:2d:f2:1c:a3:00:50:09:e8:c1:45:30:e9:20: d7:04:e3:57:0b:ca:4e:81:2f:53:a4:17:da:5a:f6: 9a:a5:1a:b2:d4:61:72:58:6c:f4:d8:f2:06:2b:aa: 39:88:dc:9f:7c:ae:1a:dc:28:ef:40:96:79:77:e2: cd:f4:7a:53:73:bf:15:26:e7:4d:14:02:b6:e9:bf: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A0:CC:09:6C:60:4A:B4:CF:2D:0B:43:26:9D:AD:E9:A3:73:0C:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed8810f-655f-4dea-8c42-0199abb2eec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.184.0/21 Signature Algorithm: sha256WithRSAEncryption 26:7e:b5:3e:11:db:bb:60:8e:db:74:b7:a2:e9:48:c9:be:74: e9:4f:59:b4:04:18:1a:89:4d:39:25:c5:8e:10:c5:42:ea:de: b7:ca:f1:e6:41:fc:12:d0:5e:ba:ef:78:fc:bb:57:3a:db:ce: 22:aa:35:50:57:c9:3f:e4:3e:e4:4a:ec:0f:79:46:bc:77:57: f2:e7:d9:37:6e:80:87:ba:e0:2a:8b:f7:ed:85:73:b1:e9:23: b6:78:fd:f5:4c:c0:33:e1:5d:2b:f0:63:d6:66:06:70:02:c2: 86:7b:de:41:b0:e4:44:68:0d:77:ec:16:c6:88:d4:0c:c5:d0: b5:96:34:6d:89:82:63:98:e5:49:da:97:47:18:96:72:d7:35: d0:ea:4d:f0:13:a7:bf:63:b3:2e:52:e7:eb:68:e5:81:0b:f3: 34:04:b7:4d:51:11:c4:64:fe:0b:61:28:0c:12:4f:52:45:56: 22:23:88:56:34:e8:01:5a:26:9e:07:44:dd:9d:98:e2:f0:e8: 16:22:db:ba:64:c1:56:6d:ce:6d:b3:a8:c8:5c:ba:6c:46:a8: d8:d1:86:f7:01:6b:f8:df:26:54:0d:81:de:14:85:4f:0e:e8: 75:fc:40:a0:71:5c:29:90:f3:06:2d:68:7d:dd:75:36:e1:b1: 41:33:c4:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQSfQMQg/BpxkIodTIbpUfZnaHIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDA0MTEyWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODU2YjRjY2UwOWJiODM1MTQ0NDJjYzI0ZTY1MWU2MDg2 MzAwZWFmODFkZDJjMGUwNmM4MjE4Y2VhMTlkNTA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWGGVUmY0YyrN1fz5OFViygg0GDTXKHBDflAQl2dO1tuz/ DNsHu9AkFaFiNOKLMjmfnjFuCScdslJhbi197ceNSILmqZIZ9POP7jts2L7JJSNl 13CmWxn1aukApCn5vAyM1UFmWq9ZdjUUUCeAMwllcBtlzhJoG3jUHrKuWuQb/g48 EG80CwcBy1zFCExiCb/8stz/2fcfHjjascbqV1ESotwje6hSkM19yu8nhJeX/dKz YGTtLfIcowBQCejBRTDpINcE41cLyk6BL1OkF9pa9pqlGrLUYXJYbPTY8gYrqjmI 3J98rhrcKO9Alnl34s30elNzvxUm500UArbpvzHlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs6DMCWxgSrTPLQtDJp2t6aNzDL8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlZDg4MTBmLTY1NWYtNGRlYS04YzQyLTAxOTlhYmIyZWVjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBsrgwDQYJKoZIhvcNAQELBQADggEBACZ+tT4R27tgjtt0t6LpSMm+dOlP WbQEGBqJTTklxY4QxULq3rfK8eZB/BLQXrrvePy7VzrbziKqNVBXyT/kPuRK7A95 Rrx3V/Ln2TdugIe64CqL9+2Fc7HpI7Z4/fVMwDPhXSvwY9ZmBnACwoZ73kGw5ERo DXfsFsaI1AzF0LWWNG2JgmOY5Unal0cYlnLXNdDqTfATp79jsy5S5+to5YEL8zQE t01REcRk/gthKAwST1JFViIjiFY06AFaJp4HRN2dmOLw6BYi27pkwVZtzm2zqMhc umxGqNjRhvcBa/jfJlQNgd4UhU8O6HX8QKBxXCmQ8wYtaH3ddTbhsUEzxDM= -----END CERTIFICATE-----Generated at Thu Sep 17 17:55:31 2026 by rpki-client