$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45857694-e31f-402e-8257-3676e1f390ba.roa File: 45857694-e31f-402e-8257-3676e1f390ba.roa (raw, json) Hash identifier: uU3NKD4ZR2C/YvkJXwEz3knyx7qNVzTj6Eymi9YGrv0= Subject key identifier: 80:00:7F:36:A5:25:F5:7D:B4:5A:69:C0:1F:DF:74:78:63:DC:2D:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D2671D286EBDE69EF3E2D236F2D9142DC455701 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45857694-e31f-402e-8257-3676e1f390ba.roa Signing time: Mon 05 Oct 2026 00:20:12 +0000 ROA not before: Mon 05 Oct 2026 00:20:12 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 147.106.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:26:71:d2:86:eb:de:69:ef:3e:2d:23:6f:2d:91:42:dc:45:57:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:20:12 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=b61e19eb426113805e99f99a851b6e3f1f0b73dbe84625d10014e6494f68aab7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:c1:97:a7:05:cb:10:62:23:f1:c0:54:3d: 14:10:2a:60:d3:b3:46:1a:81:98:33:d8:89:13:7b: bc:27:f0:2b:4c:e0:5a:94:f9:8c:92:41:7c:0d:37: c7:47:6b:e9:c6:7c:83:a2:5c:c7:96:74:ba:7c:04: 0b:49:ee:da:8f:15:f5:5e:9a:20:04:53:d9:78:73: b0:37:60:ef:b9:b2:a6:f9:68:bd:b1:db:63:ac:d4: 04:8e:2a:78:14:b9:97:6a:4c:6f:8c:f5:09:32:35: f5:93:f5:f2:2e:83:b4:84:8c:b2:88:31:66:5b:40: c5:bc:4d:99:4d:05:c6:04:6d:66:22:55:48:1f:aa: b3:94:ad:ff:45:47:71:d3:36:ca:6d:d4:dd:70:d4: aa:7f:6d:d9:ef:3d:7c:4c:a6:e8:10:01:49:79:64: 27:d6:6e:10:d9:9f:df:39:c6:cf:21:86:a8:f8:7f: 17:62:ec:dd:0c:d6:b8:a8:71:82:60:72:9b:e5:a5: c8:76:69:72:39:cd:dc:7d:49:f9:6e:42:d8:6f:63: f2:20:16:77:0f:43:05:51:57:7f:a6:ca:a7:e4:d4: 8b:85:42:27:0a:b8:1c:79:54:e6:45:97:28:bb:f3: 1d:d0:a5:db:4d:04:c6:01:56:b5:3d:ca:39:20:35: 64:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:00:7F:36:A5:25:F5:7D:B4:5A:69:C0:1F:DF:74:78:63:DC:2D:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45857694-e31f-402e-8257-3676e1f390ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.106.0.0/18 Signature Algorithm: sha256WithRSAEncryption a2:01:4b:a2:c9:31:fe:ba:37:c5:da:52:fb:a4:a3:9a:08:18: fe:c7:e2:cc:47:5f:e4:eb:4d:63:1e:29:a4:d1:57:a8:e5:c6: 89:bd:bf:e7:d3:bf:48:9b:8b:05:6a:a1:37:1c:4e:a0:c8:93: 3b:11:d4:1f:fb:59:e6:d8:99:91:f5:d2:be:55:74:b0:58:3d: cf:43:88:40:87:9b:02:05:ca:f9:6b:25:56:13:ec:fc:b9:05: 4f:1b:24:fa:49:00:f2:aa:48:f4:ab:4a:2b:c6:33:e8:89:c3: d5:53:07:eb:18:ea:26:ed:b8:ad:44:30:b9:5b:16:21:4d:ca: a1:86:3a:48:01:5f:21:d2:6a:30:8c:2e:8a:3a:af:9c:c9:d1: 9c:25:41:36:69:40:be:43:87:6e:26:ad:5f:65:ea:17:02:63: d6:62:e6:53:94:62:f0:fb:1d:c1:55:55:c8:e7:04:58:25:7a: b6:44:44:b9:a6:11:e0:88:b9:0b:29:3c:16:83:be:ba:33:ad: e5:3e:45:23:12:5a:2f:d6:b3:c5:c2:ee:e3:bc:6f:af:37:cd: 79:41:8b:ff:3d:e1:4e:56:ed:6a:7b:48:8c:f5:28:c7:87:16: a9:55:7e:a3:34:ba:77:14:c9:5c:86:f0:fb:00:94:fd:5f:1a: 20:30:bb:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTSZx0obr3mnvPi0jby2RQtxFVwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAyMDEyWhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjFlMTllYjQyNjExMzgwNWU5OWY5OWE4NTFiNmUzZjFm MGI3M2RiZTg0NjI1ZDEwMDE0ZTY0OTRmNjhhYWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0r8GXpwXLEGIj8cBUPRQQKmDTs0YagZgz2IkTe7wn8CtM 4FqU+YySQXwNN8dHa+nGfIOiXMeWdLp8BAtJ7tqPFfVemiAEU9l4c7A3YO+5sqb5 aL2x22Os1ASOKngUuZdqTG+M9QkyNfWT9fIug7SEjLKIMWZbQMW8TZlNBcYEbWYi VUgfqrOUrf9FR3HTNspt1N1w1Kp/bdnvPXxMpugQAUl5ZCfWbhDZn985xs8hhqj4 fxdi7N0M1riocYJgcpvlpch2aXI5zdx9SfluQthvY/IgFncPQwVRV3+myqfk1IuF QicKuBx5VOZFlyi78x3QpdtNBMYBVrU9yjkgNWTfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgAB/NqUl9X20WmnAH990eGPcLUEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1ODU3Njk0LWUzMWYtNDAyZS04MjU3LTM2NzZlMWYzOTBiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaTagAwDQYJKoZIhvcNAQELBQADggEBAKIBS6LJMf66N8XaUvuko5oIGP7H 4sxHX+TrTWMeKaTRV6jlxom9v+fTv0ibiwVqoTccTqDIkzsR1B/7WebYmZH10r5V dLBYPc9DiECHmwIFyvlrJVYT7Py5BU8bJPpJAPKqSPSrSivGM+iJw9VTB+sY6ibt uK1EMLlbFiFNyqGGOkgBXyHSajCMLoo6r5zJ0ZwlQTZpQL5Dh24mrV9l6hcCY9Zi 5lOUYvD7HcFVVcjnBFglerZERLmmEeCIuQspPBaDvrozreU+RSMSWi/Ws8XC7uO8 b683zXlBi/894U5W7Wp7SIz1KMeHFqlVfqM0uncUyVyG8PsAlP1fGiAwu4Y= -----END CERTIFICATE-----Generated at Thu Nov 5 01:43:54 2026 by rpki-client