$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3cf071-15a1-4b52-be8f-53bd4a79df40.roa File: 1d3cf071-15a1-4b52-be8f-53bd4a79df40.roa (raw, json) Hash identifier: wknJOvtanl70PyJGTYFBmukyYv7fdgx4f45aA+L+irQ= Subject key identifier: 63:09:C8:9D:74:93:7B:C9:50:7C:97:B0:78:86:4B:9D:01:77:E9:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2335BC7A37C7122F89AC3B41CC139CBF3992B6E5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3cf071-15a1-4b52-be8f-53bd4a79df40.roa Signing time: Fri 23 Oct 2026 02:10:10 +0000 ROA not before: Fri 23 Oct 2026 02:10:10 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 40.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:35:bc:7a:37:c7:12:2f:89:ac:3b:41:cc:13:9c:bf:39:92:b6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:10:10 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=e808dcaaa49f829f2d508742d89a9e6e17845e3b2128c28456edd04131beef41, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:02:e2:af:a8:8f:be:51:68:a6:a9:16:42:8c: ef:28:c2:16:b4:14:68:74:e0:b5:35:77:df:1b:53: 71:41:42:42:a0:6a:76:fa:8c:b4:40:cd:3e:63:26: 35:ed:ec:b6:cc:dc:04:41:68:e9:5f:92:c5:f4:23: 47:55:5a:dc:08:0b:cc:7b:80:95:ef:b9:75:7a:03: d2:11:b5:15:4f:cf:61:ca:ed:49:5d:52:b8:33:ab: da:4f:80:3d:a5:7f:1b:94:2c:52:3c:0c:a4:9d:da: b9:f8:32:cd:22:68:e1:10:5f:df:22:7e:ff:a7:af: 5d:cb:73:cf:b3:45:7f:e8:fe:aa:c8:9b:53:2a:48: 33:35:4b:2a:53:82:18:12:43:7c:e4:7e:51:73:b7: 39:7b:41:e2:92:15:fa:ec:5c:27:59:95:7c:75:93: 25:10:c9:23:e7:26:6f:07:d1:c5:74:e3:ee:2a:f5: fd:c5:2c:17:e0:60:8d:35:9b:98:d8:80:b8:d6:38: e9:30:c1:7c:7c:a9:d7:8a:df:8a:8f:01:fb:d8:86: f6:1c:8c:6d:b7:eb:92:a6:f8:d2:ff:48:49:7b:71: 2f:17:3f:84:4d:28:32:fc:ee:df:a4:2e:b9:b5:a9: 1f:a2:4d:2e:8a:c7:9d:78:05:0d:f6:6a:b7:8a:35: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:09:C8:9D:74:93:7B:C9:50:7C:97:B0:78:86:4B:9D:01:77:E9:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3cf071-15a1-4b52-be8f-53bd4a79df40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:fc:f1:80:e0:ab:cb:21:7d:ad:03:04:dc:d0:72:14:e5:3d: 26:77:1e:14:7c:e3:6c:e4:73:ef:40:7a:a9:65:3a:60:9f:21: 8b:ef:e9:29:a1:d6:4c:16:6a:d1:9a:e4:59:70:a3:41:b9:9e: 15:d5:1d:95:7f:2e:e0:d6:da:1a:b7:b0:a3:14:ac:e8:37:75: 39:85:2b:8c:76:3c:5a:b6:2e:a7:69:3f:34:c7:e6:02:55:5f: ad:58:f6:23:db:e9:4e:f7:af:90:05:da:9a:c8:23:fe:72:de: 98:58:de:05:d9:9b:5e:29:5f:2e:35:11:f1:b8:6d:a1:13:99: 2f:c8:d2:5d:f9:ae:10:3f:ca:3c:7c:54:4a:13:f7:9f:cc:fa: 08:7e:76:20:a3:46:cb:15:37:1c:31:e2:6f:b0:17:26:8b:23: ea:e5:5f:17:40:61:4c:36:98:34:92:86:d7:40:be:17:5c:5f: a4:97:cf:1f:c7:01:5a:b1:65:0a:bc:49:a6:12:8f:f9:c5:d9: b7:65:e5:8a:77:79:7a:e7:6f:81:1a:88:38:96:97:5a:79:b2: d6:5d:03:ed:59:7c:94:9c:5b:ba:a0:6d:48:60:79:01:05:33: 65:9c:91:2f:88:1e:de:38:aa:f3:3d:72:0f:1a:e2:aa:04:42: 4e:af:88:f9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIzW8ejfHEi+JrDtBzBOcvzmStuUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIxMDEwWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODA4ZGNhYWE0OWY4MjlmMmQ1MDg3NDJkODlhOWU2ZTE3 ODQ1ZTNiMjEyOGMyODQ1NmVkZDA0MTMxYmVlZjQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSAuKvqI++UWimqRZCjO8owha0FGh04LU1d98bU3FBQkKg anb6jLRAzT5jJjXt7LbM3ARBaOlfksX0I0dVWtwIC8x7gJXvuXV6A9IRtRVPz2HK 7UldUrgzq9pPgD2lfxuULFI8DKSd2rn4Ms0iaOEQX98ifv+nr13Lc8+zRX/o/qrI m1MqSDM1SypTghgSQ3zkflFztzl7QeKSFfrsXCdZlXx1kyUQySPnJm8H0cV04+4q 9f3FLBfgYI01m5jYgLjWOOkwwXx8qdeK34qPAfvYhvYcjG2365Km+NL/SEl7cS8X P4RNKDL87t+kLrm1qR+iTS6Kx514BQ32areKNZF7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYwnInXSTe8lQfJeweIZLnQF36fUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFkM2NmMDcxLTE1YTEtNGI1Mi1iZThmLTUzYmQ0YTc5ZGY0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAorDANBgkqhkiG9w0BAQsFAAOCAQEAI/zxgOCryyF9rQME3NByFOU9Jnce FHzjbORz70B6qWU6YJ8hi+/pKaHWTBZq0ZrkWXCjQbmeFdUdlX8u4NbaGrewoxSs 6Dd1OYUrjHY8WrYup2k/NMfmAlVfrVj2I9vpTvevkAXamsgj/nLemFjeBdmbXilf LjUR8bhtoROZL8jSXfmuED/KPHxUShP3n8z6CH52IKNGyxU3HDHib7AXJosj6uVf F0BhTDaYNJKG10C+F1xfpJfPH8cBWrFlCrxJphKP+cXZt2Xlind5eudvgRqIOJaX Wnmy1l0D7Vl8lJxbuqBtSGB5AQUzZZyRL4ge3jiq8z1yDxriqgRCTq+I+Q== -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:22 2026 by rpki-client