$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa File: 584aba4e-d29c-4d06-8b73-b6262d5b3870.roa (raw, json) Hash identifier: rszGHwTDF8x/WoXzXmBLSb6ANZdzaIaEwwWkxu/FzJg= Subject key identifier: 11:DE:EE:1D:3B:4C:59:38:7C:DD:44:E0:FD:36:6E:09:38:A5:FF:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E4614D4AB1E5AC14B9807A7B9AE12D60D414969 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa Signing time: Tue 06 Oct 2026 01:00:51 +0000 ROA not before: Tue 06 Oct 2026 01:00:51 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 208.70.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:46:14:d4:ab:1e:5a:c1:4b:98:07:a7:b9:ae:12:d6:0d:41:49:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 01:00:51 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=837bb95ac114bafe4d2a6cc0b3ab75b73cadc5482ad5c6da37066b7b1a2e0f9f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:f6:aa:61:33:46:bf:05:c7:9c:9f:f5:f9: 2f:44:a6:52:a6:42:93:ba:4f:4a:63:5e:10:3d:e6: 1c:52:1a:bc:6b:46:95:e9:61:9f:e4:67:4d:65:18: ae:5e:e8:ae:af:63:ff:6b:a5:d0:36:04:48:ca:ca: fd:d9:e1:72:63:eb:e2:a6:27:10:33:d8:91:9e:b0: 9c:43:ce:90:d7:bc:1d:7c:26:33:18:bb:e3:1c:d8: 47:ae:26:e7:ea:90:6f:16:74:cd:48:03:c1:7f:91: 07:2a:ed:97:a8:dc:0f:fe:6c:04:09:9d:15:39:57: 65:5a:6c:fd:85:f9:f6:4b:18:57:0f:58:6a:20:d1: c7:e6:d1:22:1c:ed:39:73:f0:de:85:0a:56:a2:aa: 9b:48:fa:ba:49:3a:7d:58:cc:9d:6c:8d:a9:ca:b6: 92:d6:38:b5:cc:f4:ac:97:05:5c:72:2f:14:24:dc: 07:c6:ab:d4:4c:4c:6d:41:3a:ba:92:d2:0c:6b:c7: e6:8e:f0:c4:02:cc:5a:8d:3b:bd:4f:d2:9b:03:c7: 6f:9d:22:9b:d8:9b:1c:97:a1:0a:ea:6a:1b:21:ea: 72:76:5f:a9:9a:e9:f5:8d:e2:c3:6b:4b:5e:c5:72: e4:53:5c:9e:72:61:f2:1c:e5:0a:a0:bd:8e:4d:3e: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DE:EE:1D:3B:4C:59:38:7C:DD:44:E0:FD:36:6E:09:38:A5:FF:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.70.72.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:48:95:3b:09:c3:8c:fb:b7:c8:2b:93:b2:35:ee:48:90:66: a8:67:4c:83:de:0f:8a:c5:77:8e:4d:6d:88:3b:65:49:6b:fb: d9:98:9b:ed:78:68:73:46:27:90:0f:bc:18:92:db:cd:02:59: bc:b0:01:1d:97:b3:45:ae:7b:d6:ab:83:eb:5b:fe:b3:1f:3f: 1e:a9:31:ab:31:71:4f:9f:b8:f7:60:89:4d:e6:3b:a0:d9:16: c4:40:a5:83:0b:69:98:b4:0d:f3:c7:e2:2e:61:3b:67:68:d3: b2:21:03:ac:4c:75:91:81:be:8d:63:66:f1:76:cc:71:85:40: 54:29:27:75:ce:32:44:f8:84:10:ea:f9:f3:94:4d:f6:97:e7: 13:f3:45:c3:90:b6:54:dd:3d:7e:bd:6c:e3:c7:6a:d4:d1:d2: a2:b7:f0:43:67:b9:bd:3e:5b:6e:dd:e9:63:22:85:a3:88:4d: 8d:ae:3b:08:31:df:57:84:12:73:3c:57:1d:6e:1b:b4:0f:66: b2:fb:1c:d2:da:78:b6:b8:a7:c1:a8:fc:71:80:c6:31:a5:96: 9e:bd:de:8f:4a:b6:68:87:70:3c:ea:14:9f:96:c2:6e:5c:fd: 3a:04:63:b5:48:d1:8b:25:81:49:d2:7d:84:5d:ec:fe:a3:c3: e1:4d:b2:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDkYU1KseWsFLmAenua4S1g1BSWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDEwMDUxWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzdiYjk1YWMxMTRiYWZlNGQyYTZjYzBiM2FiNzViNzNj YWRjNTQ4MmFkNWM2ZGEzNzA2NmI3YjFhMmUwZjlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfu/aqYTNGvwXHnJ/1+S9EplKmQpO6T0pjXhA95hxSGrxr RpXpYZ/kZ01lGK5e6K6vY/9rpdA2BEjKyv3Z4XJj6+KmJxAz2JGesJxDzpDXvB18 JjMYu+Mc2EeuJufqkG8WdM1IA8F/kQcq7Zeo3A/+bAQJnRU5V2VabP2F+fZLGFcP WGog0cfm0SIc7Tlz8N6FClaiqptI+rpJOn1YzJ1sjanKtpLWOLXM9KyXBVxyLxQk 3AfGq9RMTG1BOrqS0gxrx+aO8MQCzFqNO71P0psDx2+dIpvYmxyXoQrqahsh6nJ2 X6ma6fWN4sNrS17FcuRTXJ5yYfIc5QqgvY5NPoMRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEd7uHTtMWTh83UTg/TZuCTil//AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4NGFiYTRlLWQyOWMtNGQwNi04YjczLWI2MjYyZDViMzg3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPQRkgwDQYJKoZIhvcNAQELBQADggEBAC5IlTsJw4z7t8grk7I17kiQZqhn TIPeD4rFd45NbYg7ZUlr+9mYm+14aHNGJ5APvBiS280CWbywAR2Xs0Wue9arg+tb /rMfPx6pMasxcU+fuPdgiU3mO6DZFsRApYMLaZi0DfPH4i5hO2do07IhA6xMdZGB vo1jZvF2zHGFQFQpJ3XOMkT4hBDq+fOUTfaX5xPzRcOQtlTdPX69bOPHatTR0qK3 8ENnub0+W27d6WMihaOITY2uOwgx31eEEnM8Vx1uG7QPZrL7HNLaeLa4p8Go/HGA xjGllp693o9KtmiHcDzqFJ+Wwm5c/ToEY7VI0YslgUnSfYRd7P6jw+FNsu8= -----END CERTIFICATE-----Generated at Wed Nov 4 02:45:17 2026 by rpki-client