$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa File: 24fc63bc-3295-48be-b7b8-25e6b313cd42.roa (raw, json) Hash identifier: V25+IbBj7KIsAYbHs/JrtknVbC8bMIG7bZdndB7jTIQ= Subject key identifier: 5F:6B:73:AA:10:90:F9:CB:C0:99:D9:67:A9:72:E8:34:3A:FD:11:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3123BE0C7B297B777A39E04D5322386F4AD97D34 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa Signing time: Mon 12 Oct 2026 00:30:13 +0000 ROA not before: Mon 12 Oct 2026 00:30:13 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.227.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:23:be:0c:7b:29:7b:77:7a:39:e0:4d:53:22:38:6f:4a:d9:7d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:30:13 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=3c0b87e0b86c4d32b4a660e48ccf2b0f869376e09ec086cd16c88d1f00634c98, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:62:fe:56:74:da:2e:44:13:98:7b:1a:2a:db: 65:f4:63:b3:d1:54:ca:55:ae:3a:7f:e4:b5:19:74: 43:14:e7:c3:9a:84:c9:d8:c8:4f:9b:bc:41:41:e8: 92:cb:c9:d6:da:13:b5:c4:cc:ff:5e:f3:d8:f2:d2: c4:51:88:c4:34:54:98:6c:bd:98:4d:04:a6:13:87: ff:95:d4:82:00:ed:df:69:14:26:a0:e7:1b:30:db: d9:17:d6:57:22:0a:d8:13:f8:85:cf:f1:61:6f:72: 79:e4:ec:69:ea:e7:4d:e8:52:db:a0:f2:81:5c:7b: 21:ba:ba:a4:91:fb:0a:2d:60:14:19:4f:a1:6b:31: c8:cd:89:7b:eb:ad:ba:54:57:9e:f6:73:1e:5b:13: a9:66:b8:e4:37:a5:6a:19:ae:b3:9f:a2:b0:a9:8e: 0d:91:2e:ea:45:fd:bf:c8:49:77:65:70:1c:67:36: c1:25:2a:36:88:c2:d8:c8:fd:a9:7d:44:4e:e0:f9: ff:41:3f:9e:df:44:fc:a9:89:c5:8c:f9:57:59:86: cf:06:b8:04:41:7e:99:9b:f2:0e:2a:cb:99:93:58: 1b:21:98:44:90:ed:13:6a:00:f9:48:c5:3f:8d:b0: 68:81:50:dc:27:72:46:ad:2e:fa:d9:56:1b:c1:af: 30:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6B:73:AA:10:90:F9:CB:C0:99:D9:67:A9:72:E8:34:3A:FD:11:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:f8:0f:be:f4:70:3c:fe:94:f8:ad:c9:cd:51:76:94:e3:79: 8c:25:84:0c:29:81:92:17:38:1b:02:79:ba:69:0f:bb:ff:08: 7f:28:3f:44:99:2d:37:89:15:c0:55:07:b4:ef:ba:37:31:03: fa:dc:1e:ef:4f:ee:0e:f4:07:06:db:30:b9:4b:2e:7c:ae:9b: 7d:c6:b4:3c:de:0c:7b:67:b4:b5:aa:6c:a0:fc:fc:0b:aa:f2: fe:d9:c1:ca:71:00:7a:8d:ac:a4:1f:cf:b1:91:41:53:36:d0: 48:df:72:04:60:ee:e6:fd:35:4e:cd:57:ee:12:8f:ad:bf:15: bc:54:4a:99:55:35:e9:d6:b3:c4:6e:cf:41:ba:d2:82:21:51: c9:a5:a3:74:93:5b:15:e0:1d:9d:6f:db:9d:a0:87:f8:45:13: c2:df:65:76:46:31:9b:0e:f9:51:60:cb:36:98:ae:37:9b:9a: a3:f8:e1:d7:de:f7:09:50:49:3a:bc:60:03:68:61:64:c1:e2: 9a:b2:29:dd:ae:1b:8c:07:94:6c:b3:c9:b9:84:44:fb:1a:72: d1:af:43:4c:6b:02:c9:9b:84:a2:ac:50:19:c6:86:49:32:11: db:32:f5:46:6c:25:67:34:85:23:47:0b:2f:f6:7c:fe:56:d3: fd:26:76:65 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMSO+DHspe3d6OeBNUyI4b0rZfTQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAzMDEzWhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzBiODdlMGI4NmM0ZDMyYjRhNjYwZTQ4Y2NmMmIwZjg2 OTM3NmUwOWVjMDg2Y2QxNmM4OGQxZjAwNjM0Yzk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOYv5WdNouRBOYexoq22X0Y7PRVMpVrjp/5LUZdEMU58Oa hMnYyE+bvEFB6JLLydbaE7XEzP9e89jy0sRRiMQ0VJhsvZhNBKYTh/+V1IIA7d9p FCag5xsw29kX1lciCtgT+IXP8WFvcnnk7Gnq503oUtug8oFceyG6uqSR+wotYBQZ T6FrMcjNiXvrrbpUV572cx5bE6lmuOQ3pWoZrrOforCpjg2RLupF/b/ISXdlcBxn NsElKjaIwtjI/al9RE7g+f9BP57fRPypicWM+VdZhs8GuARBfpmb8g4qy5mTWBsh mESQ7RNqAPlIxT+NsGiBUNwnckatLvrZVhvBrzBhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUX2tzqhCQ+cvAmdlnqXLoNDr9EfowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0ZmM2M2JjLTMyOTUtNDhiZS1iN2I4LTI1ZTZiMzEzY2Q0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA44zANBgkqhkiG9w0BAQsFAAOCAQEATPgPvvRwPP6U+K3JzVF2lON5jCWE DCmBkhc4GwJ5umkPu/8Ifyg/RJktN4kVwFUHtO+6NzED+twe70/uDvQHBtswuUsu fK6bfca0PN4Me2e0tapsoPz8C6ry/tnBynEAeo2spB/PsZFBUzbQSN9yBGDu5v01 Ts1X7hKPrb8VvFRKmVU16dazxG7PQbrSgiFRyaWjdJNbFeAdnW/bnaCH+EUTwt9l dkYxmw75UWDLNpiuN5uao/jh1973CVBJOrxgA2hhZMHimrIp3a4bjAeUbLPJuYRE +xpy0a9DTGsCyZuEoqxQGcaGSTIR2zL1RmwlZzSFI0cLL/Z8/lbT/SZ2ZQ== -----END CERTIFICATE-----Generated at Mon Nov 2 18:51:46 2026 by rpki-client