$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2017c636-3c80-4aff-817c-ddf18477cc2b.roa File: 2017c636-3c80-4aff-817c-ddf18477cc2b.roa (raw, json) Hash identifier: c8fexYyb+sNc7swhp2FFJ0FjfZoFoPU+eoVnJvw65+4= Subject key identifier: 71:A4:9F:58:EF:CB:3C:84:E6:D0:5E:EC:15:2D:D6:8F:C9:FC:88:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AEB25D4A1516CC2DF185A9C8CB3C7AB803EC9A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2017c636-3c80-4aff-817c-ddf18477cc2b.roa Signing time: Mon 19 Oct 2026 00:41:11 +0000 ROA not before: Mon 19 Oct 2026 00:41:11 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:eb:25:d4:a1:51:6c:c2:df:18:5a:9c:8c:b3:c7:ab:80:3e:c9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:41:11 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=9c35bc8325a3d6120da0ea5e138ce212f6e1ced8b1b4ab4008426c752204d99f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:ae:0b:24:8d:a0:56:ef:1a:00:86:8a:28: 53:d8:70:36:e2:40:1e:66:81:24:74:44:02:8d:e8: 31:96:64:1a:2d:70:69:1f:f5:68:96:2e:c6:f6:95: 57:e4:b3:d6:a4:2d:25:79:96:ff:10:14:74:e0:bb: ce:dc:24:e8:8f:4c:5e:ac:2f:62:0b:d6:22:8e:b4: ac:3d:a0:49:8c:d7:34:94:6a:1b:7d:f8:6a:3a:fd: 31:6d:57:97:43:48:6a:99:d1:62:65:b1:ad:56:6d: 32:fa:ae:91:7c:cd:ce:3d:04:68:9d:d0:1d:78:77: 97:e7:26:31:7e:aa:af:73:d3:05:6f:16:96:7f:86: 63:ab:33:b0:2a:3e:f3:83:96:3f:ac:06:4a:c3:81: e5:3a:bc:b3:40:83:4f:d1:bf:22:86:db:a1:43:23: 75:3d:b4:b9:7c:13:9b:14:a0:b9:0a:f6:fa:3b:6e: bc:09:70:22:94:83:b0:ac:b7:5c:99:b0:f5:ee:3c: 30:37:c6:e0:07:76:88:61:f4:3a:6e:d7:a9:53:16: e9:08:1d:77:5b:17:2b:8f:4e:66:0a:21:d0:26:0c: 25:d9:12:fc:7b:68:03:82:b1:96:ee:94:5a:be:da: f1:76:eb:13:05:3a:5a:b1:fd:fd:12:a6:64:f0:51: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:9F:58:EF:CB:3C:84:E6:D0:5E:EC:15:2D:D6:8F:C9:FC:88:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2017c636-3c80-4aff-817c-ddf18477cc2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.239.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:83:1a:91:b5:19:c6:42:09:c8:bd:c2:76:5f:fb:f0:cc:11: 80:66:8e:af:a4:ea:4e:f8:58:1b:cc:b6:b9:f5:c5:68:f9:bb: 72:05:a7:d1:45:89:ab:b3:63:20:b5:27:e4:4d:94:60:5e:dd: ec:27:a5:b5:59:52:a3:ed:6f:62:de:20:5a:7b:cb:aa:2c:24: 5c:8a:fa:de:99:96:e6:ce:f0:ff:10:6a:51:7d:44:a7:e9:8c: 17:51:aa:02:94:a7:e4:ee:c8:80:ef:49:b3:b4:6a:b2:8b:ae: a9:51:96:b1:9e:5a:ca:26:ce:8e:69:54:d2:3a:16:a8:00:40: b9:c2:5f:b1:fb:14:98:3b:59:30:77:be:75:33:96:c8:d3:73: fb:b7:ce:58:b4:93:2c:71:5b:7e:ca:21:cc:cb:7b:0a:5c:33: 86:68:1f:5c:39:dc:84:c9:27:10:ce:e5:60:95:75:6e:24:53: 3f:1f:94:ed:ac:59:14:49:fc:f3:fc:43:80:09:93:ad:be:fb: 39:cc:05:22:c6:a2:d5:1d:23:ec:ba:06:3b:ce:7d:5a:f2:e1: 60:b1:b7:d3:03:85:ee:0d:7e:0a:4a:95:aa:cc:d0:93:37:96: 73:15:3d:34:2c:16:43:ef:eb:6f:25:e3:42:45:1a:00:a4:35: a3:02:c7:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOusl1KFRbMLfGFqcjLPHq4A+yaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA0MTExWhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzM1YmM4MzI1YTNkNjEyMGRhMGVhNWUxMzhjZTIxMmY2 ZTFjZWQ4YjFiNGFiNDAwODQyNmM3NTIyMDRkOTlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7QK4LJI2gVu8aAIaKKFPYcDbiQB5mgSR0RAKN6DGWZBot cGkf9WiWLsb2lVfks9akLSV5lv8QFHTgu87cJOiPTF6sL2IL1iKOtKw9oEmM1zSU aht9+Go6/TFtV5dDSGqZ0WJlsa1WbTL6rpF8zc49BGid0B14d5fnJjF+qq9z0wVv FpZ/hmOrM7AqPvODlj+sBkrDgeU6vLNAg0/RvyKG26FDI3U9tLl8E5sUoLkK9vo7 brwJcCKUg7Cst1yZsPXuPDA3xuAHdohh9Dpu16lTFukIHXdbFyuPTmYKIdAmDCXZ Evx7aAOCsZbulFq+2vF26xMFOlqx/f0SpmTwUXcnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcaSfWO/LPITm0F7sFS3Wj8n8iPIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwMTdjNjM2LTNjODAtNGFmZi04MTdjLWRkZjE4NDc3Y2MyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsO8wDQYJKoZIhvcNAQELBQADggEBAIqDGpG1GcZCCci9wnZf+/DMEYBm jq+k6k74WBvMtrn1xWj5u3IFp9FFiauzYyC1J+RNlGBe3ewnpbVZUqPtb2LeIFp7 y6osJFyK+t6ZlubO8P8QalF9RKfpjBdRqgKUp+TuyIDvSbO0arKLrqlRlrGeWsom zo5pVNI6FqgAQLnCX7H7FJg7WTB3vnUzlsjTc/u3zli0kyxxW37KIczLewpcM4Zo H1w53ITJJxDO5WCVdW4kUz8flO2sWRRJ/PP8Q4AJk62++znMBSLGotUdI+y6BjvO fVry4WCxt9MDhe4NfgpKlarM0JM3lnMVPTQsFkPv628l40JFGgCkNaMCx1o= -----END CERTIFICATE-----Generated at Tue Nov 3 06:20:38 2026 by rpki-client