$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/128b3aeb-a5c3-4a15-adef-aeb8859ccfa0.roa File: 128b3aeb-a5c3-4a15-adef-aeb8859ccfa0.roa (raw, json) Hash identifier: mDjEtHrr5Br19NjIEv62S9iSZJ3F2rPRz9nLG+EA59E= Subject key identifier: F3:9B:15:90:C6:56:74:13:EB:33:00:BC:C8:D6:FB:3B:F1:6B:F7:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 776F447C0E079C78D499F23C5EA6400D76E934F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/128b3aeb-a5c3-4a15-adef-aeb8859ccfa0.roa Signing time: Thu 29 Oct 2026 00:41:35 +0000 ROA not before: Thu 29 Oct 2026 00:41:35 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 65.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6f:44:7c:0e:07:9c:78:d4:99:f2:3c:5e:a6:40:0d:76:e9:34:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:41:35 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=b6958cda4c860810137ad650384510930f2ef403a9956cdaaa9d2d86aa068054, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:b7:db:92:a1:5e:0c:75:ef:7f:dd:7c:70: 37:0a:d6:99:58:13:95:49:c3:2b:98:14:48:65:0c: 3a:99:d0:30:4e:9e:9a:81:70:91:32:e7:e4:4b:61: 15:f6:06:0e:5b:2c:1b:b6:ae:58:2c:7f:a2:1d:d7: 20:b7:2e:d0:96:10:96:44:7f:17:ab:14:ef:af:66: 8f:b0:19:ee:c9:08:58:a7:43:1e:7f:31:03:35:29: 57:27:63:bd:d9:02:02:c8:f9:36:2c:5f:a6:33:c4: f8:9c:1a:15:a6:23:42:83:f6:73:5d:f3:50:be:19: 23:60:d7:09:bb:d2:2e:a3:2d:1b:e6:19:ed:79:36: 84:97:2c:5a:bd:a9:eb:16:5d:fa:2c:d6:89:ed:9e: e0:65:dd:30:12:61:5e:3d:13:e3:8f:a3:55:c3:71: c8:5f:1d:12:9f:d8:3f:99:d3:d5:17:cf:51:ef:9f: 02:e2:50:9a:ac:a8:63:5f:bd:43:94:0d:1a:4c:2c: 04:e0:36:7d:b1:c2:e6:7d:05:44:c2:76:ac:38:d4: d4:81:48:ad:c3:b0:7e:c8:b2:f0:56:0d:bf:e8:09: 47:ec:13:65:9e:72:40:01:f4:58:0c:53:90:f1:5a: 7f:5b:c0:4f:88:20:3c:12:01:21:d1:c3:b2:d3:1a: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9B:15:90:C6:56:74:13:EB:33:00:BC:C8:D6:FB:3B:F1:6B:F7:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/128b3aeb-a5c3-4a15-adef-aeb8859ccfa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 8c:c4:04:8e:82:9b:4d:57:8d:e3:bd:f0:62:05:ff:41:b0:b9: 9d:38:51:53:f9:94:82:72:84:d3:c5:63:82:5c:5b:ce:aa:54: 13:5f:59:c8:82:da:15:ab:20:4f:a0:cd:9d:6a:a0:b5:a0:41: 95:e0:3f:79:df:f7:a1:b2:64:b0:81:3b:3f:43:4e:cb:a7:91: 53:18:2a:dc:d5:a5:17:67:93:c2:e2:61:1e:d3:ef:c5:a4:10: 42:45:d8:a3:df:2b:26:ff:25:a1:8e:73:e2:42:eb:02:79:51: fc:32:0d:b8:c0:87:cb:80:52:4f:9c:2d:e1:44:81:e7:6a:e5: b5:19:ac:0c:c3:7a:43:a4:27:eb:6d:e7:60:96:d9:3b:88:fb: 01:be:7c:32:79:49:2d:f2:65:23:cb:11:e6:d7:d3:20:3b:11: bd:e5:9b:91:68:fa:fb:72:7a:95:1a:d9:33:16:d3:71:51:a4: 97:bc:61:d5:e3:bb:6d:f6:c0:14:67:05:01:3d:9f:a9:7c:72: 9b:dc:e8:6c:95:23:af:4f:28:07:5b:a1:5d:51:cd:e4:f3:26: fc:6d:29:88:71:a7:96:9f:81:6f:ba:49:21:9d:7e:5d:cb:f3: 31:6c:cd:d2:76:c8:45:fa:41:71:96:62:3e:86:ce:49:2f:aa: e5:43:08:fb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUd29EfA4HnHjUmfI8XqZADXbpNPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA0MTM1WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjk1OGNkYTRjODYwODEwMTM3YWQ2NTAzODQ1MTA5MzBm MmVmNDAzYTk5NTZjZGFhYTlkMmQ4NmFhMDY4MDU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcrLfbkqFeDHXvf918cDcK1plYE5VJwyuYFEhlDDqZ0DBO npqBcJEy5+RLYRX2Bg5bLBu2rlgsf6Id1yC3LtCWEJZEfxerFO+vZo+wGe7JCFin Qx5/MQM1KVcnY73ZAgLI+TYsX6YzxPicGhWmI0KD9nNd81C+GSNg1wm70i6jLRvm Ge15NoSXLFq9qesWXfos1ontnuBl3TASYV49E+OPo1XDcchfHRKf2D+Z09UXz1Hv nwLiUJqsqGNfvUOUDRpMLATgNn2xwuZ9BUTCdqw41NSBSK3DsH7IsvBWDb/oCUfs E2WeckAB9FgMU5DxWn9bwE+IIDwSASHRw7LTGskXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU85sVkMZWdBPrMwC8yNb7O/Fr9y4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyOGIzYWViLWE1YzMtNGExNS1hZGVmLWFlYjg4NTljY2ZhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFBsDANBgkqhkiG9w0BAQsFAAOCAQEAjMQEjoKbTVeN473wYgX/QbC5nThR U/mUgnKE08VjglxbzqpUE19ZyILaFasgT6DNnWqgtaBBleA/ed/3obJksIE7P0NO y6eRUxgq3NWlF2eTwuJhHtPvxaQQQkXYo98rJv8loY5z4kLrAnlR/DINuMCHy4BS T5wt4USB52rltRmsDMN6Q6Qn623nYJbZO4j7Ab58MnlJLfJlI8sR5tfTIDsRveWb kWj6+3J6lRrZMxbTcVGkl7xh1eO7bfbAFGcFAT2fqXxym9zobJUjr08oB1uhXVHN 5PMm/G0piHGnlp+Bb7pJIZ1+XcvzMWzN0nbIRfpBcZZiPobOSS+q5UMI+w== -----END CERTIFICATE-----Generated at Tue Nov 3 00:13:01 2026 by rpki-client