$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b686aa2-54bd-4401-b362-571c7282451f.roa File: 4b686aa2-54bd-4401-b362-571c7282451f.roa (raw, json) Hash identifier: u4753yiwCRPmoj7MzzqHT3tka9XebUG2udin6LhS7N0= Subject key identifier: E4:03:B6:D4:69:53:5A:64:90:D7:2C:E3:CE:60:E7:02:A8:EC:4E:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F99A0A892C54F8562DBC215987BF0417A578A43 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b686aa2-54bd-4401-b362-571c7282451f.roa Signing time: Thu 08 Oct 2026 00:05:37 +0000 ROA not before: Thu 08 Oct 2026 00:05:37 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 99.78.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:99:a0:a8:92:c5:4f:85:62:db:c2:15:98:7b:f0:41:7a:57:8a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:05:37 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=1716e0479888afc51d6034e3c81496ffa9c3673d774e0f37504f98b437b4accf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:47:3a:8c:4b:cd:1c:74:5f:31:75:7b:63: 3d:d8:0b:6d:2d:47:12:ac:ae:59:3d:10:6d:76:6b: 22:00:af:d4:59:a9:cc:c7:10:3b:91:0e:0a:de:1b: 89:ba:78:ef:8d:c7:10:af:7c:b5:7b:d5:f4:53:0f: 20:25:ef:9b:a2:f0:42:fa:0c:d4:23:23:fe:d6:f9: 86:e0:ac:f8:b7:8b:3c:af:a9:2a:c3:44:f6:64:8a: 09:ee:94:35:46:1a:9d:38:14:77:72:63:57:59:45: 1e:28:30:a2:f1:49:df:e0:9a:db:89:57:b5:a0:3b: f2:be:7f:86:a4:bd:45:10:7e:66:20:77:b6:4f:4c: dd:73:05:22:48:25:d5:19:9f:53:6d:f8:c4:27:25: e9:80:4d:14:75:b9:70:c6:60:26:8d:a7:61:58:38: b5:f3:de:ef:eb:6a:11:5a:b4:be:04:cf:c4:03:8a: 05:de:b0:af:62:a6:28:8a:28:e0:a3:6a:1e:53:b1: 41:c7:cb:cb:4f:5a:57:c6:4c:bc:42:00:4e:f0:9b: 56:17:08:52:bd:7a:0f:97:ff:73:f4:75:c4:e3:7c: ad:0b:d0:73:7d:69:e0:3b:5d:22:e6:40:36:b6:48: 8e:27:ca:03:23:b7:b9:cb:57:17:75:69:cb:1f:af: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:03:B6:D4:69:53:5A:64:90:D7:2C:E3:CE:60:E7:02:A8:EC:4E:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b686aa2-54bd-4401-b362-571c7282451f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.78.192.0/22 Signature Algorithm: sha256WithRSAEncryption 05:07:4f:d2:3b:2b:95:73:62:0e:e6:b1:4c:20:07:18:16:f6: f1:91:ef:3c:80:99:ce:30:52:ac:f0:c5:08:3a:75:55:12:38: 65:79:54:02:c6:ea:4e:55:c3:6e:42:a8:30:58:7a:43:45:f9: 4a:5a:c6:2d:32:86:48:9d:69:1a:74:b5:c1:17:10:a1:59:05: 17:9a:a4:58:07:2c:5a:05:eb:ec:99:b9:fd:b4:af:c2:fe:33: 2d:f5:42:60:3c:b7:5f:af:76:fc:a5:a2:eb:d4:81:07:cb:b7: 34:d5:94:d9:6e:a6:d8:df:f9:bb:5d:0e:ba:24:32:be:35:9b: 04:3d:1f:e6:65:0c:c0:5d:cb:0a:7c:56:61:5a:23:24:3a:b5: 76:e5:aa:89:57:44:ca:81:19:b3:b5:b9:2f:df:1c:e6:bc:bf: 9f:1f:5f:7f:8e:78:28:87:8a:f2:ed:4e:52:3f:3c:67:1a:f5: d0:e3:25:8d:ad:17:4a:ae:55:8b:37:0e:25:60:d4:40:6b:64: a8:b5:bb:7f:58:89:23:c7:84:85:9d:70:f1:ab:16:27:7c:a6: 2a:81:f3:e3:ac:65:bf:56:6f:8c:10:b1:e1:be:a5:18:7e:a7: 5b:ac:fa:19:32:5d:b3:55:f0:e2:87:9f:e5:65:20:f2:61:18: f7:9b:bd:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD5mgqJLFT4Vi28IVmHvwQXpXikMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAwNTM3WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzE2ZTA0Nzk4ODhhZmM1MWQ2MDM0ZTNjODE0OTZmZmE5 YzM2NzNkNzc0ZTBmMzc1MDRmOThiNDM3YjRhY2NmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcT0c6jEvNHHRfMXV7Yz3YC20tRxKsrlk9EG12ayIAr9RZ qczHEDuRDgreG4m6eO+NxxCvfLV71fRTDyAl75ui8EL6DNQjI/7W+YbgrPi3izyv qSrDRPZkignulDVGGp04FHdyY1dZRR4oMKLxSd/gmtuJV7WgO/K+f4akvUUQfmYg d7ZPTN1zBSJIJdUZn1Nt+MQnJemATRR1uXDGYCaNp2FYOLXz3u/rahFatL4Ez8QD igXesK9ipiiKKOCjah5TsUHHy8tPWlfGTLxCAE7wm1YXCFK9eg+X/3P0dcTjfK0L 0HN9aeA7XSLmQDa2SI4nygMjt7nLVxd1acsfr0IRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5AO21GlTWmSQ1yzjzmDnAqjsThwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiNjg2YWEyLTU0YmQtNDQwMS1iMzYyLTU3MWM3MjgyNDUxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjTsAwDQYJKoZIhvcNAQELBQADggEBAAUHT9I7K5VzYg7msUwgBxgW9vGR 7zyAmc4wUqzwxQg6dVUSOGV5VALG6k5Vw25CqDBYekNF+Upaxi0yhkidaRp0tcEX EKFZBReapFgHLFoF6+yZuf20r8L+My31QmA8t1+vdvylouvUgQfLtzTVlNluptjf +btdDrokMr41mwQ9H+ZlDMBdywp8VmFaIyQ6tXblqolXRMqBGbO1uS/fHOa8v58f X3+OeCiHivLtTlI/PGca9dDjJY2tF0quVYs3DiVg1EBrZKi1u39YiSPHhIWdcPGr Fid8piqB8+OsZb9Wb4wQseG+pRh+p1us+hkyXbNV8OKHn+VlIPJhGPebvSQ= -----END CERTIFICATE-----Generated at Tue Nov 3 16:21:22 2026 by rpki-client