$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3522c9be-f71a-4e49-9a01-0096bdc8b2c6.roa File: 3522c9be-f71a-4e49-9a01-0096bdc8b2c6.roa (raw, json) Hash identifier: 6M3a/rJkmIO8tM8ehvuyAz2XOH7BNhEu8Y0vQ7QCyBM= Subject key identifier: C5:6A:24:DC:DE:95:30:AC:14:C0:BE:4D:13:75:14:5C:C0:9B:8F:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02826E12459CF2BE40F80D8ECFADF040C7A8DE28 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3522c9be-f71a-4e49-9a01-0096bdc8b2c6.roa Signing time: Wed 05 Aug 2026 00:00:11 +0000 ROA not before: Wed 05 Aug 2026 00:00:11 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:82:6e:12:45:9c:f2:be:40:f8:0d:8e:cf:ad:f0:40:c7:a8:de:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:00:11 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=5f74af5f70e95477f70ff64e36e2f176c6644808f7b2efbab784d3c4f783e701, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:91:64:70:2e:7a:da:e7:73:1a:87:ba:b5: 0d:ea:22:fd:40:76:e8:ae:88:88:31:f2:48:63:57: c3:1b:21:80:5d:79:89:8f:25:90:64:7c:30:9e:a2: a1:63:ce:26:d4:f0:bb:b2:bc:6a:36:5e:de:b2:41: 43:31:54:09:6c:73:6e:28:53:14:31:2b:a9:c4:91: 4f:6c:f6:a5:48:78:39:41:49:05:b1:64:cf:4f:d3: ae:0b:6f:de:56:90:8c:4b:d2:85:71:cc:ca:8e:33: dc:08:3b:da:8a:32:e6:e3:79:e1:35:18:be:c4:47: c0:60:17:2a:86:fd:0e:6d:54:46:c1:a2:ba:96:44: cf:a0:4a:ce:8a:70:e5:2e:d8:4e:c3:58:63:e4:48: 57:47:42:91:70:03:17:64:68:54:f3:80:00:80:11: 45:44:f5:0c:8e:97:30:e3:f8:8b:c4:fd:81:d6:73: f8:b6:97:43:f4:c1:bf:6c:8d:60:e4:46:13:51:ab: 25:ec:0c:19:7e:8f:33:fe:ec:0e:79:89:b9:3c:dd: 1b:1c:b1:92:15:46:aa:52:f4:1d:3a:69:82:fe:98: 4f:62:59:31:99:fb:26:aa:9c:95:69:3a:1d:6e:23: 71:69:93:3f:49:ef:70:e9:c8:e8:da:df:23:53:e0: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6A:24:DC:DE:95:30:AC:14:C0:BE:4D:13:75:14:5C:C0:9B:8F:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3522c9be-f71a-4e49-9a01-0096bdc8b2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.255.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:0c:f9:6c:62:e0:41:32:0c:e8:97:9f:c1:5b:5e:99:5d:c3: cd:06:c3:e7:66:96:09:b7:51:e4:46:19:3e:a6:77:6f:80:4f: 37:e0:bc:4e:a0:ad:5c:13:24:e8:54:09:50:60:b8:5b:54:99: e6:9c:86:b2:b6:f2:94:22:96:48:43:5d:be:f8:a4:8c:7b:d3: d9:47:d6:97:fe:21:39:a0:b4:4e:45:fc:fa:da:5a:5e:f8:55: d6:9c:4a:47:e8:c7:b3:55:2f:2a:58:91:8b:5e:ba:9e:fa:66: ff:f6:7b:2c:87:a8:46:21:99:1d:13:c1:42:58:73:c6:73:4f: 41:f6:74:d4:36:cd:81:03:6f:63:78:1b:04:81:8d:6d:70:f2: 1e:6c:2f:c7:aa:c9:01:e6:e8:d5:42:c1:a2:4f:e5:95:0c:d8: e4:cb:8a:92:e1:c1:c6:0b:10:c1:a8:ae:13:fa:c5:cd:ed:e1: 9f:eb:3b:9b:09:ec:1f:2e:4b:51:fa:fc:47:56:98:ff:41:52: 4b:b0:4a:ac:06:b2:1b:89:f9:86:5e:70:32:e4:c2:1b:e2:d2: d0:68:22:d5:69:22:9c:a1:ce:1a:6b:28:09:7c:6a:f5:18:f4: df:19:3f:d8:3e:71:b7:7a:7d:21:e3:47:4d:b5:ea:c8:cc:71: a7:c5:70:65 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAoJuEkWc8r5A+A2Oz63wQMeo3igwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAwMDExWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Zjc0YWY1ZjcwZTk1NDc3ZjcwZmY2NGUzNmUyZjE3NmM2 NjQ0ODA4ZjdiMmVmYmFiNzg0ZDNjNGY3ODNlNzAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5KJFkcC562udzGoe6tQ3qIv1AduiuiIgx8khjV8MbIYBd eYmPJZBkfDCeoqFjzibU8LuyvGo2Xt6yQUMxVAlsc24oUxQxK6nEkU9s9qVIeDlB SQWxZM9P064Lb95WkIxL0oVxzMqOM9wIO9qKMubjeeE1GL7ER8BgFyqG/Q5tVEbB orqWRM+gSs6KcOUu2E7DWGPkSFdHQpFwAxdkaFTzgACAEUVE9QyOlzDj+IvE/YHW c/i2l0P0wb9sjWDkRhNRqyXsDBl+jzP+7A55ibk83RscsZIVRqpS9B06aYL+mE9i WTGZ+yaqnJVpOh1uI3Fpkz9J73DpyOja3yNT4MH3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxWok3N6VMKwUwL5NE3UUXMCbjx4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1MjJjOWJlLWY3MWEtNGU0OS05YTAxLTAwOTZiZGM4YjJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4/zANBgkqhkiG9w0BAQsFAAOCAQEAlgz5bGLgQTIM6JefwVtemV3DzQbD 52aWCbdR5EYZPqZ3b4BPN+C8TqCtXBMk6FQJUGC4W1SZ5pyGsrbylCKWSENdvvik jHvT2UfWl/4hOaC0TkX8+tpaXvhV1pxKR+jHs1UvKliRi166nvpm//Z7LIeoRiGZ HRPBQlhzxnNPQfZ01DbNgQNvY3gbBIGNbXDyHmwvx6rJAebo1ULBok/llQzY5MuK kuHBxgsQwaiuE/rFze3hn+s7mwnsHy5LUfr8R1aY/0FSS7BKrAayG4n5hl5wMuTC G+LS0Ggi1WkinKHOGmsoCXxq9Rj03xk/2D5xt3p9IeNHTbXqyMxxp8VwZQ== -----END CERTIFICATE-----Generated at Tue Sep 15 12:45:01 2026 by rpki-client