$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbc6787-d399-4def-9a56-fbcef999e554.roa File: 3cbc6787-d399-4def-9a56-fbcef999e554.roa (raw, json) Hash identifier: LLOVF+tKfa+yHYTW6jWow1BqG1levK8VnQlimnPjhws= Subject key identifier: 43:A9:6A:1A:E5:DF:0B:BB:7E:0F:CA:E1:63:7D:07:0A:90:3A:89:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F1AA4C04F50A43DF2C9FDEBCD5D3010631F9D87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbc6787-d399-4def-9a56-fbcef999e554.roa Signing time: Thu 08 Oct 2026 00:10:42 +0000 ROA not before: Thu 08 Oct 2026 00:10:42 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 72.242.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1a:a4:c0:4f:50:a4:3d:f2:c9:fd:eb:cd:5d:30:10:63:1f:9d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:10:42 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=ce858ce8a2366e3cc4cf7421add5f2e031716173c1cd9aa3984c0f86fc10b8e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5e:bc:0b:90:3f:76:c0:71:a6:39:5b:b7:07: 55:d7:dd:d4:92:18:ae:a2:37:fb:32:66:24:c9:0b: ce:65:87:85:0e:52:5c:6f:d8:89:d0:2c:24:64:76: cf:0c:3e:6e:55:80:9e:bc:3a:e7:6e:65:a9:5c:63: 9c:c0:34:9b:fc:c8:47:04:db:1b:71:2f:8a:69:4c: 6d:ba:97:8b:47:ed:e5:2d:48:c8:10:ec:88:a8:a5: 9f:19:74:fd:5e:ef:53:4c:23:e4:c5:40:96:23:36: d7:ed:c7:c4:7d:90:f6:7f:79:85:d4:6e:b5:ff:70: 25:09:45:6b:18:62:e8:f3:42:d7:3b:4a:3b:07:6f: f3:b6:79:cb:53:83:24:df:d9:bf:a2:f4:2a:e1:ff: 44:ec:55:91:b6:00:10:fb:a6:47:ea:f2:eb:d2:27: 6b:d3:86:66:eb:ba:1e:30:a2:00:2c:cd:ed:2e:14: 4b:9f:d5:56:a5:25:52:15:35:9b:99:e1:82:be:83: 05:8c:d5:4a:9d:c2:0e:80:f8:b4:c4:5c:44:d2:75: 44:52:e0:84:53:24:77:b0:ef:d7:ce:c7:95:83:2b: 99:89:09:9b:75:42:cf:78:0b:ab:f1:54:4c:d6:27: 91:d7:58:c8:11:54:69:d5:50:8f:c8:db:90:db:9e: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A9:6A:1A:E5:DF:0B:BB:7E:0F:CA:E1:63:7D:07:0A:90:3A:89:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbc6787-d399-4def-9a56-fbcef999e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.242.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3a:21:17:00:db:c9:b4:c7:80:8b:5d:76:fc:a2:71:cc:5b:74: fa:ac:b8:a0:9d:2d:94:9a:84:15:52:a7:e1:3f:6a:5c:81:36: 08:fa:5a:f9:83:af:62:8c:9a:39:14:fb:13:0d:f8:88:87:b4: ce:08:c2:65:34:ef:b2:77:67:3b:83:39:dd:ed:1e:13:cb:be: 80:4f:59:85:28:2e:6a:3d:69:30:70:28:df:fb:e4:42:ef:5b: 14:4d:7d:f5:16:51:12:bc:5e:52:82:99:0b:93:9e:59:39:3d: e5:86:64:c8:58:b5:2a:d6:21:fe:16:4b:3f:a3:85:d8:8a:da: 5b:d1:01:34:de:e6:70:c6:0e:8c:ce:0d:55:e4:f5:24:62:98: 27:52:23:89:c6:c0:9a:4b:d5:53:90:33:d8:7b:eb:aa:15:1c: a7:ae:93:5f:01:79:4c:70:e4:1e:c5:30:e4:f3:fc:82:65:a4: e1:9b:7c:6f:39:22:dc:6c:96:43:93:f5:3b:6a:25:2c:3d:e3: 22:8e:1b:47:38:08:87:9f:e0:78:37:aa:b2:19:7e:10:b0:13: d2:f2:ae:7d:05:80:0a:70:e1:08:ca:66:ab:52:46:21:0f:06: 31:57:c6:a3:bc:3d:a0:fa:81:f8:9e:59:50:9a:ad:f3:d7:7c: 13:9e:1c:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULxqkwE9QpD3yyf3rzV0wEGMfnYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAxMDQyWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTg1OGNlOGEyMzY2ZTNjYzRjZjc0MjFhZGQ1ZjJlMDMx NzE2MTczYzFjZDlhYTM5ODRjMGY4NmZjMTBiOGUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHXrwLkD92wHGmOVu3B1XX3dSSGK6iN/syZiTJC85lh4UO Ulxv2InQLCRkds8MPm5VgJ68OuduZalcY5zANJv8yEcE2xtxL4ppTG26l4tH7eUt SMgQ7IiopZ8ZdP1e71NMI+TFQJYjNtftx8R9kPZ/eYXUbrX/cCUJRWsYYujzQtc7 SjsHb/O2ectTgyTf2b+i9Crh/0TsVZG2ABD7pkfq8uvSJ2vThmbruh4wogAsze0u FEuf1ValJVIVNZuZ4YK+gwWM1Uqdwg6A+LTEXETSdURS4IRTJHew79fOx5WDK5mJ CZt1Qs94C6vxVEzWJ5HXWMgRVGnVUI/I25DbnumPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQ6lqGuXfC7t+D8rhY30HCpA6iVEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjYmM2Nzg3LWQzOTktNGRlZi05YTU2LWZiY2VmOTk5ZTU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFI8jANBgkqhkiG9w0BAQsFAAOCAQEAOiEXANvJtMeAi112/KJxzFt0+qy4 oJ0tlJqEFVKn4T9qXIE2CPpa+YOvYoyaORT7Ew34iIe0zgjCZTTvsndnO4M53e0e E8u+gE9ZhSguaj1pMHAo3/vkQu9bFE199RZRErxeUoKZC5OeWTk95YZkyFi1KtYh /hZLP6OF2IraW9EBNN7mcMYOjM4NVeT1JGKYJ1IjicbAmkvVU5Az2HvrqhUcp66T XwF5THDkHsUw5PP8gmWk4Zt8bzki3GyWQ5P1O2olLD3jIo4bRzgIh5/geDeqshl+ ELAT0vKufQWACnDhCMpmq1JGIQ8GMVfGo7w9oPqB+J5ZUJqt89d8E54cFA== -----END CERTIFICATE-----Generated at Tue Nov 3 12:00:52 2026 by rpki-client