$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386f74be-c953-4ed6-808b-5f23e8a0a6de.roa File: 386f74be-c953-4ed6-808b-5f23e8a0a6de.roa (raw, json) Hash identifier: LV2wtkgKtSkeJvC3zfXJaTCRq0hMGJYJUujTHFoYvUo= Subject key identifier: B3:6E:9D:9B:80:D4:92:FE:AE:23:CA:FC:D9:CF:37:83:06:D5:26:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1FDF5A92F09FACF667D46C6F88C19E518B013C96 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386f74be-c953-4ed6-808b-5f23e8a0a6de.roa Signing time: Thu 08 Oct 2026 00:41:38 +0000 ROA not before: Thu 08 Oct 2026 00:41:38 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 172.103.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:df:5a:92:f0:9f:ac:f6:67:d4:6c:6f:88:c1:9e:51:8b:01:3c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:41:38 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=244653ab65405d6f2b36edfc3f5cc2ef3c3848adade73c2904d35cbc7ea6f919, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:bc:ed:93:fd:09:8e:f8:23:93:d9:ec:cd: 69:20:ea:c3:38:83:e2:bb:a5:e6:b1:20:0d:96:50: 8d:0b:0b:52:36:f6:e6:72:bd:b6:27:de:cd:e8:22: f6:fb:41:3c:fb:9b:33:0e:24:32:3f:82:ca:15:30: 26:7f:4c:a0:c0:c5:ec:39:fa:c1:99:5f:3d:9d:18: 9a:20:82:a0:b9:7f:0d:67:a9:39:1b:74:68:11:2a: 15:c4:52:0c:1b:d3:d3:9b:f6:81:cc:88:f3:45:fc: e8:63:bc:ac:fb:c1:65:c4:8a:8a:4f:2d:7a:dd:ea: 34:d8:9d:e2:7e:79:95:80:7c:a2:e7:c5:ed:50:20: 91:f0:b6:35:fd:31:7f:5a:07:95:f3:a3:cf:d0:d7: 93:a7:5e:02:05:ab:04:02:d9:a8:57:e3:e7:31:7a: 20:a1:21:8e:62:ed:0c:2e:8c:6b:b0:2d:60:80:c4: df:c7:5a:6a:0f:fc:49:f8:e4:8f:17:da:b5:08:c8: 9f:f6:70:83:65:44:77:89:86:af:87:e7:fc:e2:67: 10:15:2b:14:6f:ce:82:5f:c3:80:86:6a:31:0b:ce: 49:43:e1:ef:3b:0c:06:47:1f:e8:fe:d4:9b:d5:9b: 77:93:44:93:e0:30:33:68:e3:a1:7f:f0:f0:92:1f: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:9D:9B:80:D4:92:FE:AE:23:CA:FC:D9:CF:37:83:06:D5:26:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386f74be-c953-4ed6-808b-5f23e8a0a6de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.103.40.0/21 Signature Algorithm: sha256WithRSAEncryption 67:a6:7a:95:fc:21:a0:71:fe:53:93:6e:b4:6c:d0:59:2a:0c: e4:4c:64:0d:69:30:8d:44:a3:79:b7:d6:ff:3a:ca:1b:44:ab: a8:9b:a0:5e:26:e8:38:fc:e9:06:a0:22:91:58:d0:cf:f6:7f: c6:90:ac:b5:97:09:6b:ec:77:80:7b:15:50:39:15:2d:3b:57: 62:10:f4:f8:1f:5c:60:ba:84:99:1d:77:62:60:f0:46:9c:fc: 4e:40:5e:09:72:1f:89:67:c9:9a:a9:cd:1f:77:a5:37:b5:5e: 10:c0:cd:a8:67:ed:73:30:3a:31:e2:28:de:f7:02:cd:b6:50: 51:4c:ba:3b:f1:59:09:7e:a5:57:de:09:10:3e:86:65:fd:19: 0e:88:cf:88:6b:80:7a:23:24:5a:e1:e7:1b:7c:ce:b0:79:55: 05:17:d1:f8:32:3e:76:aa:7a:00:2a:29:38:83:a9:d9:01:22: 39:2a:b2:02:b8:51:1b:6f:54:ab:77:6d:1a:da:3a:1a:34:f7: 9f:ac:43:47:23:16:d6:ab:cf:a6:73:db:53:61:08:63:99:91: 1a:05:62:9d:08:32:16:1c:8e:d0:d4:80:cb:6a:14:eb:1a:64: c1:6b:63:26:82:e6:f5:3e:54:a3:34:d9:18:b5:68:06:c0:cf: 3f:c9:ad:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH99akvCfrPZn1GxviMGeUYsBPJYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDA0MTM4WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDQ2NTNhYjY1NDA1ZDZmMmIzNmVkZmMzZjVjYzJlZjNj Mzg0OGFkYWRlNzNjMjkwNGQzNWNiYzdlYTZmOTE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Brztk/0Jjvgjk9nszWkg6sM4g+K7peaxIA2WUI0LC1I2 9uZyvbYn3s3oIvb7QTz7mzMOJDI/gsoVMCZ/TKDAxew5+sGZXz2dGJoggqC5fw1n qTkbdGgRKhXEUgwb09Ob9oHMiPNF/OhjvKz7wWXEiopPLXrd6jTYneJ+eZWAfKLn xe1QIJHwtjX9MX9aB5Xzo8/Q15OnXgIFqwQC2ahX4+cxeiChIY5i7QwujGuwLWCA xN/HWmoP/En45I8X2rUIyJ/2cINlRHeJhq+H5/ziZxAVKxRvzoJfw4CGajELzklD 4e87DAZHH+j+1JvVm3eTRJPgMDNo46F/8PCSH+ovAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs26dm4DUkv6uI8r82c83gwbVJpUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4NmY3NGJlLWM5NTMtNGVkNi04MDhiLTVmMjNlOGEwYTZkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOsZygwDQYJKoZIhvcNAQELBQADggEBAGemepX8IaBx/lOTbrRs0FkqDORM ZA1pMI1Eo3m31v86yhtEq6iboF4m6Dj86QagIpFY0M/2f8aQrLWXCWvsd4B7FVA5 FS07V2IQ9PgfXGC6hJkdd2Jg8Eac/E5AXglyH4lnyZqpzR93pTe1XhDAzahn7XMw OjHiKN73As22UFFMujvxWQl+pVfeCRA+hmX9GQ6Iz4hrgHojJFrh5xt8zrB5VQUX 0fgyPnaqegAqKTiDqdkBIjkqsgK4URtvVKt3bRraOho095+sQ0cjFtarz6Zz21Nh CGOZkRoFYp0IMhYcjtDUgMtqFOsaZMFrYyaC5vU+VKM02Ri1aAbAzz/JraI= -----END CERTIFICATE-----Generated at Sat Oct 31 23:54:52 2026 by rpki-client