$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e76626-c10b-4ce2-9398-d624166f3171.roa File: 18e76626-c10b-4ce2-9398-d624166f3171.roa (raw, json) Hash identifier: q3DeyVvyGEeL8QXTFQtyvWrwXZzjuN8VzFsJiipk5GQ= Subject key identifier: 9A:2C:34:45:7D:FE:F6:3B:9D:53:97:B1:C1:50:9D:5C:CE:5D:13:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2142F07EB2A7FE2503EB7DD9201A2E378E257D25 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e76626-c10b-4ce2-9398-d624166f3171.roa Signing time: Sun 04 Oct 2026 00:00:13 +0000 ROA not before: Sun 04 Oct 2026 00:00:13 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 74.232.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:42:f0:7e:b2:a7:fe:25:03:eb:7d:d9:20:1a:2e:37:8e:25:7d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 4 00:00:13 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=0f6b97e5a9d65a371498e6d4b1edca87c6f4f8a11a2ea66d5eb754c6332e7f59, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:fb:a4:0c:8f:50:34:57:18:ca:cb:d9:e6: d3:aa:b8:08:c3:cc:af:eb:e3:53:d5:16:9d:37:a1: 80:d2:23:a9:9a:de:d6:ae:76:ae:9c:c7:b3:b5:a6: 09:0c:c4:c0:0a:ac:ef:9b:59:1e:1d:85:e1:24:ad: b0:81:23:87:4e:ce:37:36:f1:76:19:e7:26:a0:1e: ce:df:e9:6b:a6:c1:da:d1:11:81:30:5b:0e:1d:36: 83:c8:cb:d4:a9:d9:c8:83:8f:0c:7a:d4:9a:5a:0b: 2c:40:18:de:f5:18:e0:19:02:d1:f4:b7:91:53:14: f1:7f:a2:a7:a6:9f:6f:c3:23:59:5c:b8:72:39:3d: af:91:16:b7:b0:a9:39:65:ef:e3:ae:73:1e:de:9c: 5f:14:5d:7f:f6:5f:72:d4:f0:24:38:e0:88:55:23: 55:ee:93:1c:8f:ea:3d:58:db:1c:76:29:ed:41:d3: 06:a9:34:d3:46:27:8d:48:d5:5a:d1:12:d2:0e:27: ae:30:c2:f0:8f:33:ca:08:94:06:12:84:d0:85:ea: 1c:2b:b0:90:8f:bf:48:75:f0:0d:3a:4a:ee:bb:80: 7e:c4:25:fd:ee:3c:ee:da:cb:ac:fa:8f:21:af:e3: ac:4e:24:dc:3f:a9:47:d1:b1:44:5c:93:46:38:e7: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2C:34:45:7D:FE:F6:3B:9D:53:97:B1:C1:50:9D:5C:CE:5D:13:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e76626-c10b-4ce2-9398-d624166f3171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.232.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:80:c9:88:93:64:51:ba:67:14:a8:62:d9:c1:dd:e9:f5:fa: 2d:d2:8d:10:23:6a:3d:32:c9:9c:60:0e:5a:48:16:23:a7:6b: da:03:56:86:1d:b2:24:2c:03:03:7f:86:45:bd:96:ac:f2:ea: 07:31:37:bb:03:d0:2d:2e:5a:68:32:3a:64:cc:c7:b8:78:73: 19:6c:78:d7:ce:34:9d:1c:b9:27:43:1d:b3:d9:33:6c:e5:02: 84:87:ec:d2:24:f5:3e:38:8c:0d:be:e7:93:5a:b7:08:d0:44: bd:07:92:22:3e:26:a2:c3:31:73:d5:88:4e:31:47:48:00:0c: 41:e4:94:d7:0a:1f:a1:dd:14:d6:c7:d3:27:0f:d9:c7:ce:69: 92:33:2f:d7:64:22:18:7f:c6:a0:23:f9:18:cc:66:0f:f2:2d: 38:aa:59:11:15:c2:2f:e5:c2:29:e0:68:e1:30:08:0d:8a:70: 33:7f:3f:86:c2:fa:97:ac:55:52:6e:9f:39:d6:6e:0e:2b:3f: 3b:2b:45:f2:1b:7f:ac:8a:d4:36:90:8c:2a:98:ce:23:46:4f: 68:9c:c1:90:cb:d3:aa:01:29:92:bd:b5:3e:5d:41:a4:1c:4c: c1:40:05:c9:cd:cb:f1:66:ee:b7:e0:07:88:c4:ad:84:9c:cf: 26:8b:2b:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIULwfrKn/iUD633ZIBouN44lfSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA0MDAwMDEzWhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjZiOTdlNWE5ZDY1YTM3MTQ5OGU2ZDRiMWVkY2E4N2M2 ZjRmOGExMWEyZWE2NmQ1ZWI3NTRjNjMzMmU3ZjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChavukDI9QNFcYysvZ5tOquAjDzK/r41PVFp03oYDSI6ma 3taudq6cx7O1pgkMxMAKrO+bWR4dheEkrbCBI4dOzjc28XYZ5yagHs7f6WumwdrR EYEwWw4dNoPIy9Sp2ciDjwx61JpaCyxAGN71GOAZAtH0t5FTFPF/oqemn2/DI1lc uHI5Pa+RFrewqTll7+Oucx7enF8UXX/2X3LU8CQ44IhVI1XukxyP6j1Y2xx2Ke1B 0wapNNNGJ41I1VrREtIOJ64wwvCPM8oIlAYShNCF6hwrsJCPv0h18A06Su67gH7E Jf3uPO7ay6z6jyGv46xOJNw/qUfRsURck0Y45653AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmiw0RX3+9judU5exwVCdXM5dEyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4ZTc2NjI2LWMxMGItNGNlMi05Mzk4LWQ2MjQxNjZmMzE3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBK6DANBgkqhkiG9w0BAQsFAAOCAQEAeoDJiJNkUbpnFKhi2cHd6fX6LdKN ECNqPTLJnGAOWkgWI6dr2gNWhh2yJCwDA3+GRb2WrPLqBzE3uwPQLS5aaDI6ZMzH uHhzGWx41840nRy5J0Mds9kzbOUChIfs0iT1PjiMDb7nk1q3CNBEvQeSIj4mosMx c9WITjFHSAAMQeSU1wofod0U1sfTJw/Zx85pkjMv12QiGH/GoCP5GMxmD/ItOKpZ ERXCL+XCKeBo4TAIDYpwM38/hsL6l6xVUm6fOdZuDis/OytF8ht/rIrUNpCMKpjO I0ZPaJzBkMvTqgEpkr21Pl1BpBxMwUAFyc3L8Wbut+AHiMSthJzPJosrQA== -----END CERTIFICATE-----Generated at Tue Nov 3 22:39:27 2026 by rpki-client