$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/347888cb-61ca-4405-8189-2c03a4e05bc6.roa File: 347888cb-61ca-4405-8189-2c03a4e05bc6.roa (raw, json) Hash identifier: 1WFMB6QFuauJCTsRt8X9ApyoNkGAQLq6A7d8sFILJZo= Subject key identifier: CF:C1:DD:2F:AF:67:29:4E:49:B6:C4:AE:57:6B:03:F9:10:71:8E:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 485C128790496E04CB28963948D890B7FB2DF181 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/347888cb-61ca-4405-8189-2c03a4e05bc6.roa Signing time: Thu 08 Oct 2026 00:40:43 +0000 ROA not before: Thu 08 Oct 2026 00:40:43 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5c:12:87:90:49:6e:04:cb:28:96:39:48:d8:90:b7:fb:2d:f1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:40:43 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=26ae43726be3e787244b7d22aa4c0a7f984f7792777d730879c2dbcb600b7b1b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:ae:27:10:35:db:a7:99:a1:b7:56:62:95: 66:59:96:7b:a7:c9:5e:c6:bf:f2:95:88:29:a8:2e: c7:3f:48:49:41:f0:33:32:70:24:38:e8:ed:af:18: 9d:f2:9e:ea:ab:49:eb:7b:93:20:4c:06:fb:39:54: f3:7d:d9:28:f3:2f:82:82:c7:17:b0:7d:01:3c:c4: bc:c9:7b:c5:31:e7:ad:ac:c7:bd:f9:a4:e6:16:c0: e1:38:ea:5d:90:7d:a4:57:f3:71:d2:1d:0e:51:5f: 0b:87:94:69:03:40:d7:6a:9b:73:88:4e:f8:a2:87: d4:03:13:ed:82:96:76:da:58:a7:e1:91:f5:15:db: 98:bf:82:07:a5:74:f9:ee:94:50:76:7c:fa:54:82: 6d:58:b0:65:cc:07:75:9c:3c:f4:11:8d:f4:91:a4: 0c:4a:50:2d:65:29:e0:ec:6a:cd:bb:a1:1b:ce:f5: 46:82:3c:68:d0:bb:cb:a6:2a:b8:92:af:17:a1:3e: 2f:08:5f:a1:d9:a0:8d:a7:08:92:7a:eb:e1:58:88: d1:7d:c1:0b:b1:b7:fe:a7:91:02:cd:b7:f3:20:cb: 2d:f6:00:c3:8e:cc:1a:30:01:38:0b:cc:65:8c:92: 63:0a:1a:3f:bd:c7:56:f7:b7:a4:31:b9:66:2c:0e: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C1:DD:2F:AF:67:29:4E:49:B6:C4:AE:57:6B:03:F9:10:71:8E:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/347888cb-61ca-4405-8189-2c03a4e05bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.165.0/24 Signature Algorithm: sha256WithRSAEncryption c5:68:35:1d:dd:28:ae:04:ff:d1:c0:bb:2b:bc:c2:29:f0:0a: dd:60:aa:d0:3c:5a:49:57:14:cf:02:2e:03:a0:85:51:6d:6f: a5:c8:68:b3:b7:40:f1:24:60:95:43:1a:58:5d:92:b8:b5:75: 59:5c:ac:ca:cc:27:a5:df:70:5a:07:39:41:63:79:69:3c:59: 61:24:3c:bb:00:ea:c8:a6:8e:0e:38:b6:eb:31:db:31:3f:08: e7:83:cc:34:60:ca:50:80:b2:1b:a5:01:96:db:32:38:2a:71: 43:9f:a6:09:9a:bc:fb:49:39:4d:99:66:d8:a5:23:f3:43:76: 0f:fb:9d:e6:70:c0:4d:4f:55:30:5f:bf:5a:b7:70:5c:e5:95: b6:a2:d8:d9:74:b1:cf:0d:d5:f7:6d:aa:6d:3f:98:d3:d8:21: 00:10:79:79:03:08:5b:57:23:d3:99:36:fd:57:ad:ac:25:45: cc:b5:9a:ac:15:14:20:71:27:38:5d:25:34:63:88:cc:6c:d9: 16:af:5b:a0:08:40:19:2b:66:c2:bb:26:80:6e:66:68:d4:1a: 91:5a:a3:38:f6:39:85:d1:67:0f:5a:20:b2:5d:9c:fd:c7:d7: 4e:8f:0e:b0:24:e8:bc:92:4e:a5:25:c7:df:1c:f0:e3:4c:91: 6f:76:34:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSFwSh5BJbgTLKJY5SNiQt/st8YEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDA0MDQzWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmFlNDM3MjZiZTNlNzg3MjQ0YjdkMjJhYTRjMGE3Zjk4 NGY3NzkyNzc3ZDczMDg3OWMyZGJjYjYwMGI3YjFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtda4nEDXbp5mht1ZilWZZlnunyV7Gv/KViCmoLsc/SElB 8DMycCQ46O2vGJ3ynuqrSet7kyBMBvs5VPN92SjzL4KCxxewfQE8xLzJe8Ux562s x735pOYWwOE46l2QfaRX83HSHQ5RXwuHlGkDQNdqm3OITviih9QDE+2ClnbaWKfh kfUV25i/ggeldPnulFB2fPpUgm1YsGXMB3WcPPQRjfSRpAxKUC1lKeDsas27oRvO 9UaCPGjQu8umKriSrxehPi8IX6HZoI2nCJJ66+FYiNF9wQuxt/6nkQLNt/Mgyy32 AMOOzBowATgLzGWMkmMKGj+9x1b3t6QxuWYsDp63AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz8HdL69nKU5JtsSuV2sD+RBxjokwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0Nzg4OGNiLTYxY2EtNDQwNS04MTg5LTJjMDNhNGUwNWJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM36UwDQYJKoZIhvcNAQELBQADggEBAMVoNR3dKK4E/9HAuyu8winwCt1g qtA8WklXFM8CLgOghVFtb6XIaLO3QPEkYJVDGlhdkri1dVlcrMrMJ6XfcFoHOUFj eWk8WWEkPLsA6simjg44tusx2zE/COeDzDRgylCAshulAZbbMjgqcUOfpgmavPtJ OU2ZZtilI/NDdg/7neZwwE1PVTBfv1q3cFzllbai2Nl0sc8N1fdtqm0/mNPYIQAQ eXkDCFtXI9OZNv1XrawlRcy1mqwVFCBxJzhdJTRjiMxs2RavW6AIQBkrZsK7JoBu ZmjUGpFaozj2OYXRZw9aILJdnP3H106PDrAk6LySTqUlx98c8ONMkW92NJk= -----END CERTIFICATE-----Generated at Tue Nov 3 12:01:15 2026 by rpki-client