$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1f399e-043b-4ce9-b054-a37f869d1190.roa File: 2e1f399e-043b-4ce9-b054-a37f869d1190.roa (raw, json) Hash identifier: DhBsvzXV6CioZXmy2X7b4aDOrs8nKPE8YkvA+YF7ejc= Subject key identifier: 1B:3C:FE:E0:19:9A:92:92:F2:B6:C2:15:54:10:66:03:98:B8:9F:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 570F2711D8C15CC65695405A632FF5166B400D8E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1f399e-043b-4ce9-b054-a37f869d1190.roa Signing time: Mon 19 Oct 2026 01:10:07 +0000 ROA not before: Mon 19 Oct 2026 01:10:07 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0f:27:11:d8:c1:5c:c6:56:95:40:5a:63:2f:f5:16:6b:40:0d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:10:07 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=a3de30a6f6ec55d8a607183190917640582687065c3f61cc82f31405443f9da1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:5f:84:38:95:c9:1f:3e:7c:91:f2:4b:83: 4e:f7:92:1e:6f:82:02:10:19:76:b8:ac:39:2c:21: bb:88:81:96:2d:f1:b8:4b:fb:1d:d0:72:c6:5f:7e: e3:df:5f:27:65:83:ea:7d:f0:dc:37:44:78:b4:3f: c1:5c:a2:71:b7:38:7f:c0:2d:69:ca:d3:06:da:4c: 5c:49:64:4a:ad:ef:ea:40:85:56:3e:b9:2a:e3:64: 0f:94:5f:d3:ef:69:f1:e0:da:94:b6:6d:4c:90:55: 55:8e:3e:bb:39:16:6a:96:28:23:03:bd:e4:84:da: a7:11:7b:39:58:a6:b8:6e:d0:87:c6:10:bd:2d:64: ef:91:17:6a:4c:fe:49:3e:68:21:e4:2c:e6:0b:52: 5c:e8:d6:bd:ff:b1:6e:d0:4e:2a:6d:47:85:6d:e3: da:38:3c:f0:66:5b:48:00:75:df:a0:f6:30:f1:f2: 04:3b:2b:79:d7:21:54:a6:96:f1:14:bf:49:cc:95: c3:8e:47:c7:67:86:57:c2:70:5e:3b:52:33:ee:c7: aa:29:1b:9b:08:90:f8:de:b6:c5:a2:e2:0b:ba:e3: ed:27:e1:b9:6e:a3:96:af:e0:a0:a4:73:c2:27:0d: dd:4f:6b:46:03:4d:9b:52:e4:ed:ea:fd:86:05:cf: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3C:FE:E0:19:9A:92:92:F2:B6:C2:15:54:10:66:03:98:B8:9F:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1f399e-043b-4ce9-b054-a37f869d1190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.82.0/24 Signature Algorithm: sha256WithRSAEncryption 57:eb:be:de:65:4a:b9:7f:ae:c8:b3:24:3c:9c:b5:24:80:f4: f4:84:04:c7:87:d9:8a:60:e8:c9:0a:07:22:e2:13:89:9f:05: 7b:e4:1a:80:77:6a:09:c3:bb:25:6b:77:61:3f:d8:82:75:25: c2:3f:a9:4f:4c:69:ad:14:de:f6:ff:9f:70:60:86:57:18:da: 66:7a:70:45:c6:3e:86:26:aa:a7:f4:cc:9e:71:48:39:59:0f: 2b:42:bc:2a:9c:c4:22:72:65:b6:ac:be:c3:45:f8:27:37:b2: 7a:1f:5d:9a:0f:67:81:0f:58:a4:6f:43:d5:4c:f9:a1:d8:09: 09:38:10:38:5d:76:3a:ad:1f:9c:5d:6f:c2:18:90:25:70:ca: 05:6b:61:4e:49:64:d4:e4:23:cd:16:b4:c5:e0:3b:1f:5c:28: 34:46:11:95:8b:5a:1e:dc:0a:14:e0:f2:7f:ec:aa:a6:be:85: 38:ff:bc:55:69:91:78:8a:68:be:66:8b:42:7c:10:64:d2:73: 56:3c:d5:bf:40:de:7e:aa:48:94:b9:14:b0:5f:1f:2b:0a:f2: f4:10:37:2a:b8:18:37:f5:d7:0e:4e:f7:29:34:c1:e4:36:f9: 1f:be:c8:2c:79:a2:65:99:b8:93:2a:ef:6d:50:05:83:1c:f4: 69:af:e7:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVw8nEdjBXMZWlUBaYy/1FmtADY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDExMDA3WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2RlMzBhNmY2ZWM1NWQ4YTYwNzE4MzE5MDkxNzY0MDU4 MjY4NzA2NWMzZjYxY2M4MmYzMTQwNTQ0M2Y5ZGExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Wl+EOJXJHz58kfJLg073kh5vggIQGXa4rDksIbuIgZYt 8bhL+x3QcsZffuPfXydlg+p98Nw3RHi0P8FconG3OH/ALWnK0wbaTFxJZEqt7+pA hVY+uSrjZA+UX9PvafHg2pS2bUyQVVWOPrs5FmqWKCMDveSE2qcRezlYprhu0IfG EL0tZO+RF2pM/kk+aCHkLOYLUlzo1r3/sW7QTiptR4Vt49o4PPBmW0gAdd+g9jDx 8gQ7K3nXIVSmlvEUv0nMlcOOR8dnhlfCcF47UjPux6opG5sIkPjetsWi4gu64+0n 4bluo5av4KCkc8InDd1Pa0YDTZtS5O3q/YYFz+FVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGzz+4BmakpLytsIVVBBmA5i4n7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlMWYzOTllLTA0M2ItNGNlOS1iMDU0LWEzN2Y4NjlkMTE5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmFIwDQYJKoZIhvcNAQELBQADggEBAFfrvt5lSrl/rsizJDyctSSA9PSE BMeH2Ypg6MkKByLiE4mfBXvkGoB3agnDuyVrd2E/2IJ1JcI/qU9Maa0U3vb/n3Bg hlcY2mZ6cEXGPoYmqqf0zJ5xSDlZDytCvCqcxCJyZbasvsNF+Cc3snofXZoPZ4EP WKRvQ9VM+aHYCQk4EDhddjqtH5xdb8IYkCVwygVrYU5JZNTkI80WtMXgOx9cKDRG EZWLWh7cChTg8n/sqqa+hTj/vFVpkXiKaL5mi0J8EGTSc1Y81b9A3n6qSJS5FLBf HysK8vQQNyq4GDf11w5O9yk0weQ2+R++yCx5omWZuJMq721QBYMc9Gmv57I= -----END CERTIFICATE-----Generated at Tue Nov 3 19:19:58 2026 by rpki-client