$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1273090e-8ecd-4172-8741-62c4d103ff27.roa File: 1273090e-8ecd-4172-8741-62c4d103ff27.roa (raw, json) Hash identifier: CRHEGsi8NJ4ry0M6+zb2uN/CGGsVABGPlLGHmPkEtl8= Subject key identifier: 81:81:D9:E6:C4:8E:F1:6D:EA:19:E7:33:2A:DB:DC:69:28:6C:20:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39C5C6D086BC460E8D62FB96FB304AAB352517 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1273090e-8ecd-4172-8741-62c4d103ff27.roa Signing time: Wed 30 Sep 2026 00:00:05 +0000 ROA not before: Wed 30 Sep 2026 00:00:05 +0000 ROA not after: Tue 29 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.234.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c5:c6:d0:86:bc:46:0e:8d:62:fb:96:fb:30:4a:ab:35:25:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 30 00:00:05 2026 GMT Not After : Dec 29 23:59:59 2026 GMT Subject: serialNumber=e6975029a7263d3b1152850f8c81c2bf405d500c69df1fcb72ebba607ce14e9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:72:20:6e:ac:22:90:5c:e9:51:c4:bb:82: d1:fc:22:e1:a8:20:f7:76:a8:f1:45:ba:dc:12:4f: 36:5f:c3:fb:e7:7d:07:e2:65:af:16:ba:63:e5:44: 2e:43:dc:84:d5:b1:7d:46:b7:ba:41:41:7b:21:0c: 9d:c3:68:7b:88:4b:2a:de:4f:f2:22:9a:3c:78:f9: 5b:39:4c:b4:16:33:db:90:ad:d7:02:21:de:35:6d: 7c:ff:2d:76:89:d3:ec:28:17:15:90:a6:1a:f9:3e: bb:95:71:b6:5b:71:76:3c:0c:9f:d3:fa:51:42:7f: b2:39:31:92:94:45:80:7d:4c:5c:ea:e4:09:f6:71: 20:39:13:88:ba:5f:8a:4e:a7:0b:2c:de:bb:26:85: 90:ea:55:d3:c0:ad:77:10:8e:7a:40:35:0a:d0:18: 8f:1d:66:8f:20:28:22:67:67:e4:c5:f3:e2:45:c2: 7c:67:83:02:bf:db:92:b4:d2:1f:c0:5e:e0:da:44: c8:3f:a9:c0:64:ce:af:7b:a2:cc:bf:d6:14:32:df: 6f:d0:b5:48:25:cd:6f:22:62:6b:16:6c:34:69:28: 9e:a4:42:b7:1d:a3:8a:59:8e:6f:8d:20:a8:94:f1: 64:8a:d6:b7:f8:78:48:27:a9:92:d4:e9:4a:64:53: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:D9:E6:C4:8E:F1:6D:EA:19:E7:33:2A:DB:DC:69:28:6C:20:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1273090e-8ecd-4172-8741-62c4d103ff27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.234.192.0/18 Signature Algorithm: sha256WithRSAEncryption b2:3d:5e:fc:c9:5e:99:44:38:31:26:ac:2c:54:cb:b7:22:5a: 5c:a3:86:1e:7f:99:4d:3e:c7:ef:8c:44:11:02:82:3e:54:b3: a9:6a:ae:b3:77:3e:b9:7f:e3:0a:49:17:b6:a7:23:7a:4e:7a: 79:99:28:68:30:93:15:15:21:04:4b:f3:46:b9:30:0a:e1:53: f3:9c:88:f3:d5:7e:c8:bb:7e:7e:84:00:5a:b7:57:72:52:db: fb:23:08:ea:55:5f:0d:3f:03:69:16:9d:f1:95:04:22:cc:bf: e6:96:8c:b5:82:81:05:66:33:de:4d:74:6b:df:4e:7a:44:20: 88:c7:a2:c3:8c:a9:4b:4f:46:c2:af:29:c3:ce:9f:34:88:44: 3c:7d:f5:68:57:e4:d4:bf:2c:d3:98:47:69:96:d4:ce:2e:b2: e3:97:50:47:a2:93:6f:9a:9b:fa:0c:0f:27:f3:5f:3d:a5:b1: a0:ec:13:8c:87:fc:87:a7:12:4f:91:09:88:85:e3:68:5f:f0: b7:ef:8d:cc:2b:32:c4:63:94:9f:e6:cb:a7:b0:9c:29:23:d5: be:e0:40:c7:a9:bf:69:8e:e5:9f:ff:82:91:84:fe:fc:2e:a6: a2:14:4a:cf:98:39:fd:77:2e:04:76:6f:7c:9f:e9:85:30:2e: cc:f9:4f:ef -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOcXG0Ia8Rg6NYvuW+zBKqzUlFzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA5MzAwMDAwMDVaFw0yNjEyMjkyMzU5NTla MHoxSTBHBgNVBAUTQGU2OTc1MDI5YTcyNjNkM2IxMTUyODUwZjhjODFjMmJmNDA1 ZDUwMGM2OWRmMWZjYjcyZWJiYTYwN2NlMTRlOWMxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALKtciBurCKQXOlRxLuC0fwi4agg93ao8UW63BJPNl/D++d9 B+Jlrxa6Y+VELkPchNWxfUa3ukFBeyEMncNoe4hLKt5P8iKaPHj5WzlMtBYz25Ct 1wIh3jVtfP8tdonT7CgXFZCmGvk+u5VxtltxdjwMn9P6UUJ/sjkxkpRFgH1MXOrk CfZxIDkTiLpfik6nCyzeuyaFkOpV08CtdxCOekA1CtAYjx1mjyAoImdn5MXz4kXC fGeDAr/bkrTSH8Be4NpEyD+pwGTOr3uizL/WFDLfb9C1SCXNbyJiaxZsNGkonqRC tx2jilmOb40gqJTxZIrWt/h4SCepktTpSmRTgxMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSBgdnmxI7xbeoZ5zMq29xpKGwgrTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMTI3MzA5MGUtOGVjZC00MTcyLTg3NDEtNjJjNGQxMDNmZjI3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBhfqwDANBgkqhkiG9w0BAQsFAAOCAQEAsj1e/MlemUQ4MSasLFTLtyJaXKOG Hn+ZTT7H74xEEQKCPlSzqWqus3c+uX/jCkkXtqcjek56eZkoaDCTFRUhBEvzRrkw CuFT85yI89V+yLt+foQAWrdXclLb+yMI6lVfDT8DaRad8ZUEIsy/5paMtYKBBWYz 3k10a99OekQgiMeiw4ypS09Gwq8pw86fNIhEPH31aFfk1L8s05hHaZbUzi6y45dQ R6KTb5qb+gwPJ/NfPaWxoOwTjIf8h6cST5EJiIXjaF/wt++NzCsyxGOUn+bLp7Cc KSPVvuBAx6m/aY7ln/+CkYT+/C6mohRKz5g5/XcuBHZvfJ/phTAuzPlP7w== -----END CERTIFICATE-----Generated at Mon Nov 2 18:50:28 2026 by rpki-client