$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c9a730-4525-4f9f-9737-1126e2e464db.roa File: 22c9a730-4525-4f9f-9737-1126e2e464db.roa (raw, json) Hash identifier: 4YEAjftrml4ZuDBk9Qg1szUA3PJ2IWh5oX2prCzfdCE= Subject key identifier: 26:D9:49:ED:6A:E0:5C:56:B8:AB:02:84:DD:0A:27:BA:B6:15:5B:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 062140179DAC5CAFBCC375021E33FFC34F47F823 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c9a730-4525-4f9f-9737-1126e2e464db.roa Signing time: Mon 12 Oct 2026 00:50:11 +0000 ROA not before: Mon 12 Oct 2026 00:50:11 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:21:40:17:9d:ac:5c:af:bc:c3:75:02:1e:33:ff:c3:4f:47:f8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:50:11 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=9812b946b3964d9b1b46c01904860e32fe4284c8d7179de80e8871b1cdf9e994, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:88:24:10:4f:67:65:5a:36:0c:18:74:d0: 6f:eb:4d:61:ae:d6:46:12:dd:34:01:7b:44:bc:8b: 36:c7:8a:92:09:6b:cc:8d:81:09:e5:b6:18:b9:69: 56:b7:67:76:42:3e:0e:31:55:b6:26:ef:85:90:97: 41:33:27:1c:8c:19:a4:df:af:3b:68:40:90:0f:16: 2a:79:ad:55:11:80:89:37:cd:2f:f7:64:7d:15:49: 46:a9:4c:48:41:8d:81:ab:3a:70:0e:2a:f4:cf:9b: 7d:79:64:4b:aa:b7:b8:b8:66:3a:99:c9:09:61:7f: c2:60:f2:9f:80:e2:0b:33:60:5c:1f:1e:05:8b:93: a4:50:16:59:68:98:fa:a7:0c:24:cb:7e:68:30:cb: 36:c2:0a:2c:a8:d2:de:87:0e:14:b0:be:cf:3d:be: 7a:89:07:a0:7a:f0:39:e0:e4:cd:21:57:e0:56:7f: 58:d9:ad:cc:1b:de:1f:ee:91:19:4e:b4:55:04:c9: 8c:88:8f:af:81:bf:8b:5d:83:fe:56:b2:b9:e1:fc: 99:20:76:b2:bf:8f:f1:a1:bf:e6:57:e0:8f:d1:9f: 03:43:96:15:64:65:b9:6f:d8:d2:9f:b4:49:c1:32: f1:3a:30:7e:e2:4e:a1:67:6f:03:5c:c3:a6:69:98: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:49:ED:6A:E0:5C:56:B8:AB:02:84:DD:0A:27:BA:B6:15:5B:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c9a730-4525-4f9f-9737-1126e2e464db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.151.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:4c:99:a7:48:67:83:05:08:22:59:87:69:2f:d1:7f:47:1e: 64:ea:a9:c2:be:8c:c2:3d:79:c2:53:55:92:a2:ca:19:b5:d9: 12:a8:f1:72:4a:fb:e5:e3:57:90:8e:92:2b:b5:cd:a9:28:e5: 58:02:8a:55:f2:ae:24:4f:63:75:a2:e9:d0:fe:cc:46:2c:86: ab:64:1f:59:6d:bc:2d:84:f5:2d:cf:21:7e:3a:b0:90:cb:dd: ab:52:86:d3:9a:55:64:dd:14:51:09:24:e9:1a:01:9a:f0:fa: 74:1a:b6:0a:82:f8:c9:dc:64:27:86:54:13:f7:07:17:31:a5: 3c:42:a9:a0:d0:b9:f7:6e:c4:65:94:c8:07:ac:d8:a0:3e:0d: e8:28:00:2a:69:0d:c9:ee:4d:ce:76:a5:4d:4a:01:8e:34:2f: 11:4e:d2:35:88:a6:37:2c:ca:2c:9c:94:b7:49:89:70:68:ad: 3b:32:54:50:88:1e:ce:da:71:9e:6b:b7:46:3f:a7:84:18:c9: 2e:3b:b3:ea:52:fa:37:8c:22:12:8f:2a:33:7d:2a:ad:59:c5: ec:8c:1b:40:13:7c:a8:35:9a:13:a6:3b:ef:6d:fe:aa:00:fa: 87:ea:a3:08:22:ba:73:42:60:bd:b6:44:61:0d:d3:c6:df:43: ca:21:be:ab -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBiFAF52sXK+8w3UCHjP/w09H+CMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MDExWhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODEyYjk0NmIzOTY0ZDliMWI0NmMwMTkwNDg2MGUzMmZl NDI4NGM4ZDcxNzlkZTgwZTg4NzFiMWNkZjllOTk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeWogkEE9nZVo2DBh00G/rTWGu1kYS3TQBe0S8izbHipIJ a8yNgQnlthi5aVa3Z3ZCPg4xVbYm74WQl0EzJxyMGaTfrztoQJAPFip5rVURgIk3 zS/3ZH0VSUapTEhBjYGrOnAOKvTPm315ZEuqt7i4ZjqZyQlhf8Jg8p+A4gszYFwf HgWLk6RQFllomPqnDCTLfmgwyzbCCiyo0t6HDhSwvs89vnqJB6B68Dng5M0hV+BW f1jZrcwb3h/ukRlOtFUEyYyIj6+Bv4tdg/5Wsrnh/JkgdrK/j/Ghv+ZX4I/RnwND lhVkZblv2NKftEnBMvE6MH7iTqFnbwNcw6ZpmAxRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJtlJ7WrgXFa4qwKE3QonurYVW7QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYzlhNzMwLTQ1MjUtNGY5Zi05NzM3LTExMjZlMmU0NjRkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4lzANBgkqhkiG9w0BAQsFAAOCAQEAVUyZp0hngwUIIlmHaS/Rf0ceZOqp wr6Mwj15wlNVkqLKGbXZEqjxckr75eNXkI6SK7XNqSjlWAKKVfKuJE9jdaLp0P7M RiyGq2QfWW28LYT1Lc8hfjqwkMvdq1KG05pVZN0UUQkk6RoBmvD6dBq2CoL4ydxk J4ZUE/cHFzGlPEKpoNC5927EZZTIB6zYoD4N6CgAKmkNye5NznalTUoBjjQvEU7S NYimNyzKLJyUt0mJcGitOzJUUIgeztpxnmu3Rj+nhBjJLjuz6lL6N4wiEo8qM30q rVnF7IwbQBN8qDWaE6Y7723+qgD6h+qjCCK6c0JgvbZEYQ3Txt9DyiG+qw== -----END CERTIFICATE-----Generated at Mon Nov 2 16:54:33 2026 by rpki-client