$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/311720c1-10e8-4fac-9201-310eb27fafbd.roa File: 311720c1-10e8-4fac-9201-310eb27fafbd.roa (raw, json) Hash identifier: e2o1eXRVx5aMaru88yYTKeEH1MnSd+UEm5+ZHBwX7AU= Subject key identifier: 4F:AB:16:88:89:8C:66:9D:82:B9:D7:17:E6:E8:07:E5:18:AD:0F:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27C055D0B474D872A3102738664C2C340FF5107F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/311720c1-10e8-4fac-9201-310eb27fafbd.roa Signing time: Sun 11 Oct 2026 00:07:38 +0000 ROA not before: Sun 11 Oct 2026 00:07:38 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 44.216.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c0:55:d0:b4:74:d8:72:a3:10:27:38:66:4c:2c:34:0f:f5:10:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 00:07:38 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=1a2744ed9be2083d330443d3c65b7286bd5f5236e568c278b762a7f858ab5623, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:4f:3d:91:37:84:34:ab:9b:e2:b8:7a:b4: 5e:13:7c:1d:14:25:75:95:15:74:34:d8:6a:84:9e: 39:d3:a7:b1:80:45:10:d6:5a:db:ed:1c:ca:5d:04: 9b:4e:c8:f8:d1:67:68:d6:ae:e1:cc:4a:c4:77:71: 86:44:14:07:f8:65:79:74:d4:c4:45:68:77:d3:2e: 4c:13:22:7e:72:ab:72:2d:7e:9d:d7:88:66:6e:4c: a2:45:94:97:d4:44:58:72:6e:bd:12:c2:b8:ae:91: 69:1b:53:dc:51:aa:d2:b3:12:5b:92:a3:23:e4:06: bc:fe:c3:b7:c1:b4:a8:f7:6a:55:11:b7:c2:b6:59: ee:45:f4:a4:4a:6a:23:1a:05:85:7d:36:de:c3:88: 22:e4:64:b3:d2:19:58:d7:47:ff:95:51:24:29:55: a4:96:15:54:9b:72:ea:da:71:34:97:18:fa:05:63: 6c:92:40:d2:43:ca:89:3d:97:57:62:cd:72:43:90: e1:33:0a:3f:4e:9c:d3:cf:fd:27:f8:ae:a1:26:c6: 08:33:aa:12:33:53:8b:e2:7c:78:8f:95:ae:23:55: 2d:f8:41:08:bd:d3:3b:90:f3:93:6c:ef:ce:c0:b9: 2f:a9:5c:a2:11:03:c0:5c:fb:8d:1f:8d:e6:1e:e5: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AB:16:88:89:8C:66:9D:82:B9:D7:17:E6:E8:07:E5:18:AD:0F:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/311720c1-10e8-4fac-9201-310eb27fafbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.216.192.0/22 Signature Algorithm: sha256WithRSAEncryption bd:b5:79:6f:b7:1a:26:d8:d1:fe:8b:db:6e:db:b6:ca:4c:fc: 3c:49:1c:59:90:7f:e8:76:c1:2a:dc:37:be:72:b5:c0:55:06: 4c:57:9f:48:62:e0:58:58:56:5d:78:b6:60:b0:e2:51:b9:bc: ce:63:09:0c:46:fa:19:14:6a:2a:51:ff:5b:f4:e2:7f:2d:67: ca:12:d7:a9:be:8f:6a:a8:ac:c7:9b:4d:70:eb:ea:3f:7a:cd: 96:13:ce:fa:fc:ac:9c:84:cb:9f:69:8f:97:28:d0:8b:2e:f3: fb:39:3d:ff:e3:94:6c:38:23:93:a0:88:cf:e2:2f:08:ae:b6: ae:db:28:bc:f6:80:58:b6:6b:78:10:29:49:80:24:d3:76:06: e5:a4:37:e2:41:29:fd:37:6b:b0:a4:a4:0b:54:03:fb:c5:d6: 43:08:95:38:8f:0c:97:39:6b:52:22:d0:72:b9:0d:03:24:b3: a8:a9:69:94:a2:49:d1:31:13:18:95:ea:32:20:e6:a6:53:d1: 7d:08:5e:45:62:8d:cb:ad:3f:ac:a3:85:16:de:e1:6b:e6:79: 2c:3f:03:39:ea:2c:fd:5d:c3:e2:b8:f4:5c:9b:c3:72:31:36: f5:a4:59:98:03:24:6d:17:d7:1f:84:09:dd:24:6a:ab:80:23: 7f:ce:7b:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ8BV0LR02HKjECc4ZkwsNA/1EH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAwNzM4WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTI3NDRlZDliZTIwODNkMzMwNDQzZDNjNjViNzI4NmJk NWY1MjM2ZTU2OGMyNzhiNzYyYTdmODU4YWI1NjIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd7E89kTeENKub4rh6tF4TfB0UJXWVFXQ02GqEnjnTp7GA RRDWWtvtHMpdBJtOyPjRZ2jWruHMSsR3cYZEFAf4ZXl01MRFaHfTLkwTIn5yq3It fp3XiGZuTKJFlJfURFhybr0SwriukWkbU9xRqtKzEluSoyPkBrz+w7fBtKj3alUR t8K2We5F9KRKaiMaBYV9Nt7DiCLkZLPSGVjXR/+VUSQpVaSWFVSbcuracTSXGPoF Y2ySQNJDyok9l1dizXJDkOEzCj9OnNPP/Sf4rqEmxggzqhIzU4vifHiPla4jVS34 QQi90zuQ85Ns787AuS+pXKIRA8Bc+40fjeYe5V/jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT6sWiImMZp2CudcX5ugH5RitD2UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxMTcyMGMxLTEwZTgtNGZhYy05MjAxLTMxMGViMjdmYWZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs2MAwDQYJKoZIhvcNAQELBQADggEBAL21eW+3GibY0f6L227btspM/DxJ HFmQf+h2wSrcN75ytcBVBkxXn0hi4FhYVl14tmCw4lG5vM5jCQxG+hkUaipR/1v0 4n8tZ8oS16m+j2qorMebTXDr6j96zZYTzvr8rJyEy59pj5co0Isu8/s5Pf/jlGw4 I5OgiM/iLwiutq7bKLz2gFi2a3gQKUmAJNN2BuWkN+JBKf03a7CkpAtUA/vF1kMI lTiPDJc5a1Ii0HK5DQMks6ipaZSiSdExExiV6jIg5qZT0X0IXkVijcutP6yjhRbe 4WvmeSw/AznqLP1dw+K49Fybw3IxNvWkWZgDJG0X1x+ECd0kaquAI3/Oe3Q= -----END CERTIFICATE-----Generated at Sat Oct 31 03:26:14 2026 by rpki-client