$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466309f8-ad84-4ccd-a3ab-f603c201bc26.roa File: 466309f8-ad84-4ccd-a3ab-f603c201bc26.roa (raw, json) Hash identifier: vIo8+hPEuB8skmfiiz5z1U73e4AZdrNJ9AHcAG4tt8w= Subject key identifier: 27:48:C0:46:8D:BD:C1:84:37:CB:48:D2:11:62:90:3B:1F:AE:AD:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55066B34025C17CB08C0D24D89B99371B1F5CF21 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466309f8-ad84-4ccd-a3ab-f603c201bc26.roa Signing time: Fri 16 Oct 2026 00:30:14 +0000 ROA not before: Fri 16 Oct 2026 00:30:14 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 124.25.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:06:6b:34:02:5c:17:cb:08:c0:d2:4d:89:b9:93:71:b1:f5:cf:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:30:14 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=19b3458c25fae6288d436dc7631e287a27695ede419b5df294b882f52f7de8bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:02:0b:03:36:31:d8:9a:89:64:9c:89:df: b3:21:cb:1f:b9:88:6a:c0:d3:d0:85:17:ad:68:0d: 3d:b5:fc:15:46:6b:ab:18:0a:ae:de:65:cb:88:35: 8f:14:06:84:cc:3c:ee:6e:81:b1:ce:16:a3:45:26: 19:70:c2:7f:26:a9:06:fb:39:4d:c9:68:c8:fd:a2: 36:39:58:db:f6:8a:cd:a6:20:1c:1f:6c:fe:75:7c: a6:56:ba:ea:ae:cb:62:06:ae:5a:1f:5f:7e:4c:a0: a0:76:62:9e:b7:a7:ef:46:4c:be:fe:37:0a:a0:fe: 97:6a:0a:02:12:24:a4:0f:44:d6:a7:bd:9f:f3:5b: 5f:be:d6:79:90:49:6e:03:14:76:b9:d1:46:15:cf: 22:4f:dd:3a:5e:a0:66:49:be:af:56:ca:2e:5e:d4: ab:6f:07:97:2e:fd:d1:eb:bf:b8:7b:c6:20:06:1a: 70:8a:bd:16:3d:f2:9a:fc:fb:21:da:cc:f9:da:0f: 1a:4e:fa:35:d6:40:e2:24:de:1f:50:2d:a6:17:12: ec:70:32:0f:4a:f3:30:e5:1b:62:c2:53:25:3b:c8: 11:f2:7d:de:73:38:ce:b1:d5:aa:75:4e:27:fc:56: 95:bf:2c:49:24:01:db:03:5f:8b:64:c3:d1:3c:de: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:C0:46:8D:BD:C1:84:37:CB:48:D2:11:62:90:3B:1F:AE:AD:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466309f8-ad84-4ccd-a3ab-f603c201bc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.25.0.0/18 Signature Algorithm: sha256WithRSAEncryption 9c:c4:70:99:9b:9d:f6:80:9d:c5:e8:ed:cf:ee:d9:81:8b:05: 55:8c:e3:5a:4e:a4:4c:8a:ac:a1:d4:3d:32:0c:b8:be:e9:bd: 7d:b1:70:fc:9f:52:3f:6a:a3:fd:77:3f:d7:34:43:11:ba:83: fb:de:08:a4:ee:b4:52:b9:b6:ef:78:0f:22:8f:d5:5a:8c:73: da:b9:5d:ba:d1:85:9a:39:a0:5a:e7:e4:8e:ca:23:81:23:04: 26:ff:77:8d:13:78:00:b9:0e:2d:ae:e4:e9:30:c2:0c:cf:7d: 2c:a5:b1:0b:87:ac:2c:68:70:0d:97:10:37:61:63:8d:da:21: 35:f6:f0:23:48:4d:93:9f:87:f8:a0:ef:1a:62:56:d8:ca:99: da:14:64:ba:bf:b2:67:d7:e1:79:5f:fb:9b:2e:78:58:d5:ea: 05:b9:d1:5b:ce:d1:4b:fe:52:69:45:fb:cc:2c:90:e0:c9:9f: 1f:28:59:9a:b7:0a:5e:75:c6:98:cb:79:3d:32:8e:0f:12:22: c7:f2:87:6f:26:67:97:4e:b8:ab:14:bb:92:98:a3:3e:e7:24: 45:2a:67:b6:dd:ac:e7:f8:27:4f:df:04:51:ad:16:9f:fe:e4: 44:b1:ab:f3:98:99:c1:cd:24:13:d6:14:06:4f:38:e8:b2:f4: d5:8c:2a:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVQZrNAJcF8sIwNJNibmTcbH1zyEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAzMDE0WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWIzNDU4YzI1ZmFlNjI4OGQ0MzZkYzc2MzFlMjg3YTI3 Njk1ZWRlNDE5YjVkZjI5NGI4ODJmNTJmN2RlOGJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSiQILAzYx2JqJZJyJ37Mhyx+5iGrA09CFF61oDT21/BVG a6sYCq7eZcuINY8UBoTMPO5ugbHOFqNFJhlwwn8mqQb7OU3JaMj9ojY5WNv2is2m IBwfbP51fKZWuuquy2IGrlofX35MoKB2Yp63p+9GTL7+Nwqg/pdqCgISJKQPRNan vZ/zW1++1nmQSW4DFHa50UYVzyJP3TpeoGZJvq9Wyi5e1KtvB5cu/dHrv7h7xiAG GnCKvRY98pr8+yHazPnaDxpO+jXWQOIk3h9QLaYXEuxwMg9K8zDlG2LCUyU7yBHy fd5zOM6x1ap1Tif8VpW/LEkkAdsDX4tkw9E83tCNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ0jARo29wYQ3y0jSEWKQOx+urZMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NjMwOWY4LWFkODQtNGNjZC1hM2FiLWY2MDNjMjAxYmMyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ8GQAwDQYJKoZIhvcNAQELBQADggEBAJzEcJmbnfaAncXo7c/u2YGLBVWM 41pOpEyKrKHUPTIMuL7pvX2xcPyfUj9qo/13P9c0QxG6g/veCKTutFK5tu94DyKP 1VqMc9q5XbrRhZo5oFrn5I7KI4EjBCb/d40TeAC5Di2u5OkwwgzPfSylsQuHrCxo cA2XEDdhY43aITX28CNITZOfh/ig7xpiVtjKmdoUZLq/smfX4Xlf+5sueFjV6gW5 0VvO0Uv+UmlF+8wskODJnx8oWZq3Cl51xpjLeT0yjg8SIsfyh28mZ5dOuKsUu5KY oz7nJEUqZ7bdrOf4J0/fBFGtFp/+5ESxq/OYmcHNJBPWFAZPOOiy9NWMKuk= -----END CERTIFICATE-----Generated at Mon Nov 2 18:52:00 2026 by rpki-client