$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa File: 3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa (raw, json) Hash identifier: 6/b2EzFFyKkCzK5TBAuaUIOIsUksU3TldyE/VUTZFRY= Subject key identifier: 1B:C8:D9:6B:73:2B:53:33:FB:76:99:A8:CF:25:5B:5F:63:84:08:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 195582502F3C5F10A1E56425C4F217222A8B5450 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa Signing time: Mon 26 Oct 2026 00:40:26 +0000 ROA not before: Mon 26 Oct 2026 00:40:26 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 204.52.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:55:82:50:2f:3c:5f:10:a1:e5:64:25:c4:f2:17:22:2a:8b:54:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:40:26 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=a5186fc068c97aa2275f4f2e121920eec895b538fb78ed7a9181aa42507849fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:a1:c1:dd:c9:6c:2e:70:25:7b:18:a5:e6: 72:ba:cf:62:1f:9a:53:88:2b:7b:6a:5a:4c:eb:0f: a4:5d:4f:94:1c:85:30:34:d6:44:9a:26:4e:85:ad: 6b:a4:a2:37:c8:80:fe:d6:f6:30:57:40:84:16:59: 2d:b3:4a:21:8c:d9:83:b7:0f:29:97:70:fb:93:d5: 4c:d1:47:bb:00:71:6a:68:bd:df:8d:da:83:ff:e9: d1:41:5c:23:09:bc:7b:b7:6b:a9:58:9f:7e:7d:ec: 58:b6:46:f3:ff:f1:06:83:0b:ec:e0:e5:53:07:27: 54:50:c2:6e:3d:32:5e:a4:e8:6a:98:51:1a:f7:5b: 7a:96:65:b9:40:0f:d4:83:ab:15:e9:49:e4:16:49: 0e:f9:a7:8e:0d:51:8d:1d:58:42:ac:c2:5c:e3:12: b4:66:de:31:12:f6:60:24:7b:5b:4b:20:1d:d4:58: ec:43:a0:43:07:d6:95:38:78:48:d5:a5:cf:39:f4: 7e:b0:91:1c:f8:e7:2e:48:38:ff:75:4f:b2:77:0c: 81:96:2e:90:58:37:94:e0:c7:7a:33:5a:c8:b4:eb: 6f:57:e8:4e:2e:c8:97:b7:59:76:23:29:c4:a8:0c: 70:06:9a:b1:44:02:96:2a:ed:e4:3d:9d:71:9c:81: fd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C8:D9:6B:73:2B:53:33:FB:76:99:A8:CF:25:5B:5F:63:84:08:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.52.32.0/19 Signature Algorithm: sha256WithRSAEncryption be:d0:f2:b4:9a:28:69:de:f7:70:f6:96:54:98:70:52:58:1a: e1:a4:87:4c:34:ac:b0:ef:d1:97:71:5b:6f:dc:a3:6f:3a:98: af:15:0a:c2:93:29:0e:24:1a:ee:34:2f:4c:ed:d3:ed:a5:f2: 75:b0:0a:14:f1:5b:c5:0a:d2:e2:93:bb:7a:b7:eb:93:9f:7b: 03:04:a2:81:25:6c:2d:9d:04:97:a0:c9:b1:f4:4e:29:b4:61: 2e:e5:a4:38:b3:12:52:81:73:28:be:59:83:45:cc:40:15:3f: 47:f9:47:96:1d:ab:d8:91:5e:80:cb:dc:c1:92:92:5f:fa:1b: be:92:ba:a4:89:79:7d:3a:42:d4:ea:b8:f7:fa:f6:67:93:5d: ab:3a:20:c4:4c:57:17:46:8b:63:a0:30:68:ff:91:54:fb:4a: df:fd:6f:e1:1c:be:ea:5c:da:35:36:3f:e2:b0:47:ee:90:6b: 47:98:cf:2b:7a:06:94:bf:f4:b0:67:9c:1a:5a:b7:b0:d6:76: 23:d9:93:65:5e:2b:72:00:f9:79:ce:61:17:ce:b4:cf:d8:78: e5:0f:06:c7:07:c8:40:5e:9a:f1:54:14:2a:16:68:e7:45:b3: 7f:f5:66:9e:e5:22:85:de:92:f0:e0:b9:41:e9:2c:fa:fa:15: da:c0:eb:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGVWCUC88XxCh5WQlxPIXIiqLVFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDA0MDI2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTE4NmZjMDY4Yzk3YWEyMjc1ZjRmMmUxMjE5MjBlZWM4 OTViNTM4ZmI3OGVkN2E5MTgxYWE0MjUwNzg0OWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaU6HB3clsLnAlexil5nK6z2IfmlOIK3tqWkzrD6RdT5Qc hTA01kSaJk6FrWukojfIgP7W9jBXQIQWWS2zSiGM2YO3DymXcPuT1UzRR7sAcWpo vd+N2oP/6dFBXCMJvHu3a6lYn3597Fi2RvP/8QaDC+zg5VMHJ1RQwm49Ml6k6GqY URr3W3qWZblAD9SDqxXpSeQWSQ75p44NUY0dWEKswlzjErRm3jES9mAke1tLIB3U WOxDoEMH1pU4eEjVpc859H6wkRz45y5IOP91T7J3DIGWLpBYN5Tgx3ozWsi0629X 6E4uyJe3WXYjKcSoDHAGmrFEApYq7eQ9nXGcgf1LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG8jZa3MrUzP7dpmozyVbX2OECOEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MjZlOGY5LTNmNDEtNGEwNi04ZTZkLTQ1NmFiZTFmZmE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMNCAwDQYJKoZIhvcNAQELBQADggEBAL7Q8rSaKGne93D2llSYcFJYGuGk h0w0rLDv0ZdxW2/co286mK8VCsKTKQ4kGu40L0zt0+2l8nWwChTxW8UK0uKTu3q3 65OfewMEooElbC2dBJegybH0Tim0YS7lpDizElKBcyi+WYNFzEAVP0f5R5Ydq9iR XoDL3MGSkl/6G76SuqSJeX06QtTquPf69meTXas6IMRMVxdGi2OgMGj/kVT7St/9 b+Ecvupc2jU2P+KwR+6Qa0eYzyt6BpS/9LBnnBpat7DWdiPZk2VeK3IA+XnOYRfO tM/YeOUPBscHyEBemvFUFCoWaOdFs3/1Zp7lIoXekvDguUHpLPr6FdrA6w8= -----END CERTIFICATE-----Generated at Tue Nov 3 19:20:45 2026 by rpki-client