$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1318ff33-018d-46da-8f9b-9f4f0ff50fc9.roa File: 1318ff33-018d-46da-8f9b-9f4f0ff50fc9.roa (raw, json) Hash identifier: orfd7nUp7A/A7wYYKK4LZTg0fcLlgw9cZoeZzhm0Zfo= Subject key identifier: D9:EE:03:4E:8D:62:50:63:4B:FD:A4:86:F1:EB:21:49:AE:25:CB:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01CED2064AD5B8D223EB4E15A399DE380E3B8F04 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1318ff33-018d-46da-8f9b-9f4f0ff50fc9.roa Signing time: Mon 19 Oct 2026 00:51:06 +0000 ROA not before: Mon 19 Oct 2026 00:51:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ce:d2:06:4a:d5:b8:d2:23:eb:4e:15:a3:99:de:38:0e:3b:8f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:51:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=a78b9982f50596f2b8c30034620918707dd37e1b055f43c0b3e0210677851b2d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:a3:09:af:27:10:1a:62:67:14:34:e2:3c: d2:1f:f7:91:21:20:c5:bc:fb:72:55:3c:cf:b4:8d: af:26:de:09:b5:9c:fd:2c:97:cf:09:db:1c:0d:f6: 21:80:8d:fe:c6:75:2e:0c:0d:3f:84:62:d2:89:38: 40:d5:63:07:9f:9c:dc:99:5f:8d:53:c8:f5:0d:89: 1a:a8:96:d6:c5:c5:08:2b:3f:4c:42:50:9c:7a:ea: 69:1c:96:84:a1:d7:f5:4a:2b:2d:c8:c7:ae:8a:95: 81:c0:d4:4a:84:30:71:1d:34:1d:a0:8c:41:aa:75: 4b:22:74:99:1e:50:d4:77:96:13:2d:74:97:00:20: 33:47:9c:8d:3f:6e:d7:82:7e:c7:b8:34:c2:4e:b8: 11:3f:2b:b3:cf:ba:b4:49:61:4f:20:46:ea:fa:32: cd:7c:34:82:56:58:c4:c5:cb:26:3d:50:b4:4f:76: c9:f4:f3:67:82:ee:03:83:6f:f1:38:fe:16:ad:a5: 67:82:26:63:b3:41:b9:e3:88:8c:ed:97:57:40:d0: fe:9a:7b:ca:e6:2e:66:0b:f6:e8:87:7c:c8:41:c4: 01:50:d1:4a:1e:88:e3:a1:d1:4e:5d:20:35:b2:ac: 81:12:7f:de:b0:e4:06:dc:6c:9e:e9:9b:ee:fb:7d: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:03:4E:8D:62:50:63:4B:FD:A4:86:F1:EB:21:49:AE:25:CB:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1318ff33-018d-46da-8f9b-9f4f0ff50fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.128.0/21 Signature Algorithm: sha256WithRSAEncryption a6:14:36:00:ab:c6:69:fb:be:95:64:54:a6:88:8e:49:69:b0: 53:e8:85:bf:af:be:5e:94:e0:ad:01:12:65:39:01:b8:fc:d7: 4c:54:70:81:28:56:13:ec:db:31:89:b0:4c:6a:6d:22:52:c8: 48:2e:16:21:00:3c:aa:4d:e2:d2:6b:9e:ee:98:5d:8f:5d:31: c9:01:7f:ef:0e:19:af:53:78:27:a5:98:95:f5:9a:36:82:42: f6:fd:3c:f4:24:ac:23:ba:a0:66:81:c1:55:8f:61:db:39:60: 80:59:26:b2:c7:21:a4:b1:b2:10:20:45:06:2c:9a:f0:0c:b8: 98:43:f9:e4:19:78:69:6d:ef:f2:a8:2e:a6:61:9c:a4:22:f2: 7e:01:fb:2d:a1:bb:48:e4:82:40:3d:d8:8e:0b:17:b0:61:80: ef:57:08:ef:e3:2d:9a:f2:00:ab:a1:62:db:a4:53:9c:74:f2: 72:35:76:d3:e3:d3:dd:0f:f9:35:41:97:1c:07:5a:90:27:a3: 56:34:c8:e8:31:08:c4:77:cf:4f:22:a5:ce:7d:fa:e2:95:d2: 97:8e:20:1e:b8:21:8a:72:dc:d8:60:0b:d4:cb:5e:fd:d7:3d: 68:59:4c:aa:ee:d5:e8:3b:7b:d6:86:c1:93:62:cf:59:5a:7e: 41:9c:48:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAc7SBkrVuNIj604Vo5neOA47jwQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MTA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzhiOTk4MmY1MDU5NmYyYjhjMzAwMzQ2MjA5MTg3MDdk ZDM3ZTFiMDU1ZjQzYzBiM2UwMjEwNjc3ODUxYjJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/wKMJrycQGmJnFDTiPNIf95EhIMW8+3JVPM+0ja8m3gm1 nP0sl88J2xwN9iGAjf7GdS4MDT+EYtKJOEDVYwefnNyZX41TyPUNiRqoltbFxQgr P0xCUJx66mkcloSh1/VKKy3Ix66KlYHA1EqEMHEdNB2gjEGqdUsidJkeUNR3lhMt dJcAIDNHnI0/bteCfse4NMJOuBE/K7PPurRJYU8gRur6Ms18NIJWWMTFyyY9ULRP dsn082eC7gODb/E4/hatpWeCJmOzQbnjiIztl1dA0P6ae8rmLmYL9uiHfMhBxAFQ 0UoeiOOh0U5dIDWyrIESf96w5AbcbJ7pm+77fRwjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2e4DTo1iUGNL/aSG8eshSa4lywcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzMThmZjMzLTAxOGQtNDZkYS04ZjliLTlmNGYwZmY1MGZjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOCsIAwDQYJKoZIhvcNAQELBQADggEBAKYUNgCrxmn7vpVkVKaIjklpsFPo hb+vvl6U4K0BEmU5Abj810xUcIEoVhPs2zGJsExqbSJSyEguFiEAPKpN4tJrnu6Y XY9dMckBf+8OGa9TeCelmJX1mjaCQvb9PPQkrCO6oGaBwVWPYds5YIBZJrLHIaSx shAgRQYsmvAMuJhD+eQZeGlt7/KoLqZhnKQi8n4B+y2hu0jkgkA92I4LF7BhgO9X CO/jLZryAKuhYtukU5x08nI1dtPj090P+TVBlxwHWpAno1Y0yOgxCMR3z08ipc59 +uKV0peOIB64IYpy3NhgC9TLXv3XPWhZTKru1eg7e9aGwZNiz1lafkGcSAI= -----END CERTIFICATE-----Generated at Mon Nov 2 16:46:31 2026 by rpki-client