$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e046548-588d-4437-b4a8-e45db59e9069.roa File: 3e046548-588d-4437-b4a8-e45db59e9069.roa (raw, json) Hash identifier: rwLXmIr/sbReqNuoLsQ7DjGRQEkI6oA84gnlo/LHNJc= Subject key identifier: 60:EA:C1:8D:FB:74:30:91:BB:CC:3C:CD:AB:BD:38:5F:1B:FF:19:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C1AB5A63AC3559A51E26219517078D37A8AA3CE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e046548-588d-4437-b4a8-e45db59e9069.roa Signing time: Mon 19 Oct 2026 00:50:06 +0000 ROA not before: Mon 19 Oct 2026 00:50:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1a:b5:a6:3a:c3:55:9a:51:e2:62:19:51:70:78:d3:7a:8a:a3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:50:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=37425cf1b0407b2d1a8c79050db9b3cbfc893d38411d230927d4062edc3b58f8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:9e:08:05:e3:bc:4d:44:f2:77:2d:cd:eb: 38:fe:cc:b1:dc:3a:a6:aa:c8:97:69:e0:45:a3:85: 7e:d2:1e:9b:04:aa:bb:f0:36:22:e2:4b:e6:dc:62: e4:a4:d1:89:90:78:c5:dc:8d:38:7b:cb:0f:8c:a2: de:aa:3b:4d:cd:59:a6:b2:d9:83:79:d6:d1:76:bc: 4b:f2:e2:41:5a:e6:57:7f:1e:9e:af:90:2b:97:d6: d1:e4:75:ff:22:81:de:a9:ea:12:d6:ac:77:85:91: ac:fb:e9:98:0d:fc:33:c2:b3:61:a1:1a:ea:6b:21: 75:58:9b:91:f2:6e:9a:16:e9:1a:65:a0:fa:c1:85: 20:41:4d:c2:55:9e:2e:cb:51:d6:a5:d0:f2:f0:8d: 02:d3:2d:35:97:f8:ae:0c:06:a9:eb:a4:4d:da:d9: 20:37:e8:a9:b7:5a:2b:61:55:1a:81:21:c8:56:37: 61:54:47:3d:9e:a8:90:98:06:e2:67:50:af:0a:7a: ba:ca:d7:0c:8f:ca:d7:29:33:dc:0f:11:57:c3:52: 7d:ab:bc:f2:38:de:61:51:bb:56:c3:3f:82:cf:4d: 78:6a:0c:40:58:65:77:28:48:9f:4b:92:c2:b0:31: 21:df:13:23:0e:b5:5d:ca:40:ee:c7:af:c8:45:32: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EA:C1:8D:FB:74:30:91:BB:CC:3C:CD:AB:BD:38:5F:1B:FF:19:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e046548-588d-4437-b4a8-e45db59e9069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.132.0/24 Signature Algorithm: sha256WithRSAEncryption 48:75:77:6e:c7:db:ef:f2:3f:5d:aa:d5:59:a4:12:28:68:a4: 3d:42:05:3e:0a:37:e0:33:4a:d0:54:ac:dd:4c:6d:b2:4d:ed: 97:c8:0e:de:ab:34:d6:29:dd:1a:88:0c:3a:12:d5:fd:55:bf: 44:0c:82:05:fb:68:a1:27:a6:bc:07:14:53:83:c1:6a:56:61: f7:52:5e:51:ef:68:f8:be:53:1c:d6:60:7f:47:12:94:1d:10: ac:b7:c8:a8:61:16:d0:2b:87:9c:97:5e:e8:cc:72:08:0c:a0: 77:bf:4c:a6:e4:55:38:9d:65:30:1a:93:6e:79:a5:32:b5:61: 0d:a0:dc:45:11:a6:54:0a:8c:0e:d8:b0:33:bb:da:ae:f0:e9: b4:9f:54:4f:05:46:f8:30:17:0c:7a:6a:5e:c2:1e:06:f4:e5: 0a:ba:b3:09:0f:4e:62:34:c2:ba:a6:af:fb:f9:da:d9:9d:af: 62:c1:55:b1:92:b3:16:b9:4b:f1:c9:e4:2e:9f:20:fa:48:5f: b1:20:29:ca:6c:b5:c5:a5:53:eb:79:da:da:92:4c:2d:b4:4a: fc:c6:1d:9a:cf:de:b6:16:d7:27:53:83:11:c9:90:38:5d:78: ea:b0:68:bb:ae:fb:d3:d9:05:d2:c8:64:76:3b:01:76:8f:d4: 9f:6c:ed:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbBq1pjrDVZpR4mIZUXB403qKo84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MDA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzQyNWNmMWIwNDA3YjJkMWE4Yzc5MDUwZGI5YjNjYmZj ODkzZDM4NDExZDIzMDkyN2Q0MDYyZWRjM2I1OGY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWXp4IBeO8TUTydy3N6zj+zLHcOqaqyJdp4EWjhX7SHpsE qrvwNiLiS+bcYuSk0YmQeMXcjTh7yw+Mot6qO03NWaay2YN51tF2vEvy4kFa5ld/ Hp6vkCuX1tHkdf8igd6p6hLWrHeFkaz76ZgN/DPCs2GhGuprIXVYm5HybpoW6Rpl oPrBhSBBTcJVni7LUdal0PLwjQLTLTWX+K4MBqnrpE3a2SA36Km3WithVRqBIchW N2FURz2eqJCYBuJnUK8KerrK1wyPytcpM9wPEVfDUn2rvPI43mFRu1bDP4LPTXhq DEBYZXcoSJ9LksKwMSHfEyMOtV3KQO7Hr8hFMm0xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYOrBjft0MJG7zDzNq704Xxv/GQowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMDQ2NTQ4LTU4OGQtNDQzNy1iNGE4LWU0NWRiNTllOTA2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsIQwDQYJKoZIhvcNAQELBQADggEBAEh1d27H2+/yP12q1VmkEihopD1C BT4KN+AzStBUrN1MbbJN7ZfIDt6rNNYp3RqIDDoS1f1Vv0QMggX7aKEnprwHFFOD wWpWYfdSXlHvaPi+UxzWYH9HEpQdEKy3yKhhFtArh5yXXujMcggMoHe/TKbkVTid ZTAak255pTK1YQ2g3EURplQKjA7YsDO72q7w6bSfVE8FRvgwFwx6al7CHgb05Qq6 swkPTmI0wrqmr/v52tmdr2LBVbGSsxa5S/HJ5C6fIPpIX7EgKcpstcWlU+t52tqS TC20SvzGHZrP3rYW1ydTgxHJkDhdeOqwaLuu+9PZBdLIZHY7AXaP1J9s7fw= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:26 2026 by rpki-client