$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dea059a-2086-40f3-a89a-e208e1b9945b.roa File: 2dea059a-2086-40f3-a89a-e208e1b9945b.roa (raw, json) Hash identifier: mP4E4DuW3gY1O2bLru7s18KgtmLqZc2Yu5/1tri88p0= Subject key identifier: EB:57:BA:A1:12:F0:40:5D:E2:06:37:3C:E8:4D:96:22:D4:21:D3:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 221091066F08D3032B795B9790F3235B85ABDF85 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dea059a-2086-40f3-a89a-e208e1b9945b.roa Signing time: Mon 19 Oct 2026 01:11:08 +0000 ROA not before: Mon 19 Oct 2026 01:11:08 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:10:91:06:6f:08:d3:03:2b:79:5b:97:90:f3:23:5b:85:ab:df:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:11:08 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=0bf6140424daa188a1b4590863288038fc4cac6e1b8d9160f9fbae90a62823fa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6c:93:40:9e:49:23:fa:0f:dc:24:06:11:bd: 6e:b7:d2:57:45:ca:67:00:42:18:e0:83:9d:c8:89: 71:70:e1:e5:2f:56:a6:89:7e:54:1c:19:ec:2f:bd: a9:96:67:5e:4a:c2:b3:0d:90:d2:c5:7d:e4:7b:b8: 4d:87:a1:3a:60:a1:5b:47:01:19:04:75:98:76:4a: cf:f1:6b:59:0c:8e:1b:de:44:94:ae:5e:05:40:79: 1a:ed:0e:a3:7a:d6:01:2a:49:e9:fd:24:49:5e:b5: 34:15:31:f9:aa:2a:59:2a:25:ad:b4:72:49:d5:d9: 05:cf:10:82:de:63:f6:01:e4:33:62:94:0d:9b:57: 92:e3:55:6b:61:ee:b3:66:52:9b:f6:fb:2b:48:2d: 07:48:d5:45:da:d1:78:35:41:df:3d:ae:b2:b0:39: d2:21:c1:8f:b6:03:9b:ff:9b:3a:e7:ee:fb:9f:dd: 22:f6:32:98:db:c4:a2:ae:2c:94:d0:ac:4b:71:c2: ce:cc:bd:93:07:00:d5:9f:a7:d1:29:0d:35:8f:52: d6:2e:3e:5c:54:3a:6c:eb:0a:e9:ce:c1:51:dc:67: 1a:14:e7:b4:a3:ef:cd:df:dd:79:de:54:e5:74:93: d4:aa:9c:d5:a2:aa:d2:25:7d:40:84:dc:bf:a3:ed: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:57:BA:A1:12:F0:40:5D:E2:06:37:3C:E8:4D:96:22:D4:21:D3:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dea059a-2086-40f3-a89a-e208e1b9945b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.158.0/24 Signature Algorithm: sha256WithRSAEncryption 53:77:e9:ab:81:1d:d5:76:20:ea:0e:73:01:5e:3d:33:58:77: c4:13:43:2f:b7:b1:62:03:9c:6c:fe:74:93:fa:63:f7:b3:86: 4c:ef:e7:5e:36:d5:be:4f:86:c5:38:2c:28:a7:01:58:96:8c: 41:9c:c6:3b:4b:bd:79:b4:ce:af:ce:e7:08:f0:0f:2c:a9:dc: bc:c3:17:9c:76:6c:38:82:e6:19:76:74:2d:e7:26:81:fd:89: 64:68:75:af:92:ad:cd:5b:16:70:f2:34:e8:c8:81:54:43:10: 03:b0:13:e8:38:75:fb:64:77:03:89:d9:bb:70:51:0f:66:b6: 21:6d:ad:1c:b5:a5:50:8b:ae:1f:cd:a5:5b:79:6e:c6:cc:19: 97:db:01:17:25:b2:3d:2f:fd:ef:a6:8a:43:6e:1c:78:24:1a: 0d:99:ac:a9:b5:d4:e2:6b:f6:95:89:bf:66:6d:b2:5b:d8:a1: 51:4b:ab:53:bf:61:1c:b1:80:24:c6:a8:37:74:5a:ab:e7:9f: c5:42:81:ad:5b:be:72:81:06:9c:f8:87:a5:7d:6d:94:ec:9f: 2d:2d:0e:96:0b:78:30:b7:8b:a2:d4:ab:99:06:cc:74:1d:9b: a6:97:79:35:5f:d4:1a:76:2d:4a:6e:0c:20:0a:b3:e7:d7:4a: 34:df:1a:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIhCRBm8I0wMreVuXkPMjW4Wr34UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDExMTA4WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmY2MTQwNDI0ZGFhMTg4YTFiNDU5MDg2MzI4ODAzOGZj NGNhYzZlMWI4ZDkxNjBmOWZiYWU5MGE2MjgyM2ZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1bJNAnkkj+g/cJAYRvW630ldFymcAQhjgg53IiXFw4eUv VqaJflQcGewvvamWZ15KwrMNkNLFfeR7uE2HoTpgoVtHARkEdZh2Ss/xa1kMjhve RJSuXgVAeRrtDqN61gEqSen9JEletTQVMfmqKlkqJa20cknV2QXPEILeY/YB5DNi lA2bV5LjVWth7rNmUpv2+ytILQdI1UXa0Xg1Qd89rrKwOdIhwY+2A5v/mzrn7vuf 3SL2MpjbxKKuLJTQrEtxws7MvZMHANWfp9EpDTWPUtYuPlxUOmzrCunOwVHcZxoU 57Sj783f3XneVOV0k9SqnNWiqtIlfUCE3L+j7eIRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU61e6oRLwQF3iBjc86E2WItQh08swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkZWEwNTlhLTIwODYtNDBmMy1hODlhLWUyMDhlMWI5OTQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsJ4wDQYJKoZIhvcNAQELBQADggEBAFN36auBHdV2IOoOcwFePTNYd8QT Qy+3sWIDnGz+dJP6Y/ezhkzv51421b5PhsU4LCinAViWjEGcxjtLvXm0zq/O5wjw Dyyp3LzDF5x2bDiC5hl2dC3nJoH9iWRoda+Src1bFnDyNOjIgVRDEAOwE+g4dftk dwOJ2btwUQ9mtiFtrRy1pVCLrh/NpVt5bsbMGZfbARclsj0v/e+mikNuHHgkGg2Z rKm11OJr9pWJv2ZtslvYoVFLq1O/YRyxgCTGqDd0Wqvnn8VCga1bvnKBBpz4h6V9 bZTsny0tDpYLeDC3i6LUq5kGzHQdm6aXeTVf1Bp2LUpuDCAKs+fXSjTfGik= -----END CERTIFICATE-----Generated at Wed Nov 4 22:34:25 2026 by rpki-client