$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa File: 6282f4a8-f1f7-49a0-852f-808c201c5429.roa (raw, json) Hash identifier: N1XNfK9AaAmkT/hmQ5umom4sN+G04FMC2KQSafGNWug= Subject key identifier: 4C:26:A1:1C:EA:9A:A6:EB:A3:6F:AB:35:B7:E4:AE:06:6A:61:ED:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E25F9C03A37D4D527BFD73258E383261C0ED36D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa Signing time: Sun 11 Oct 2026 00:40:03 +0000 ROA not before: Sun 11 Oct 2026 00:40:03 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 37.203.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:25:f9:c0:3a:37:d4:d5:27:bf:d7:32:58:e3:83:26:1c:0e:d3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 00:40:03 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=4432d130ad5d9dfe5ec8daae2e02516edd467d6c899173e88676b1ae28236f7a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:c3:98:11:49:53:41:cd:9f:75:74:b0:bd: a6:bd:b1:6e:2a:c4:91:6c:0f:a7:36:1f:57:f8:45: cf:47:a7:5e:43:64:54:36:7d:e1:3a:50:d8:83:f9: 13:d5:85:bd:24:3b:02:bb:22:e2:24:39:b3:7f:93: 23:01:ee:b9:58:49:4e:f3:16:4d:93:ba:eb:13:3f: 0f:a7:55:b1:30:30:14:96:64:07:aa:b2:c2:b5:eb: ec:a3:e7:f4:13:8d:a8:b9:1d:fb:8a:c0:5b:c1:0f: c9:ba:c1:3a:08:26:46:03:79:b6:cb:3f:c7:b7:52: 76:8c:d0:1e:20:44:78:56:ce:b2:ac:7f:a3:9a:71: 4b:fe:c5:3e:30:7f:6f:6b:3b:06:69:d8:1e:da:ff: 3e:49:c8:35:dd:7c:1d:49:40:a9:12:3a:eb:8f:9e: 11:68:38:40:45:e0:0e:4b:20:68:80:f5:18:87:66: af:2f:42:c3:ea:8f:f5:3d:68:76:f2:d0:e7:f6:8f: 0b:1c:f8:3f:be:37:ab:af:9c:f0:b6:1b:6f:a3:05: d9:a7:b7:3b:f9:35:ee:e2:d5:7e:d0:db:7f:4a:c7: 68:0d:f0:a2:84:38:65:f6:ae:3a:71:90:a0:ca:03: 93:cd:74:14:00:46:db:e3:ab:3a:eb:e6:28:00:33: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:26:A1:1C:EA:9A:A6:EB:A3:6F:AB:35:B7:E4:AE:06:6A:61:ED:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.177.0/24 Signature Algorithm: sha256WithRSAEncryption 03:f9:0c:69:19:b8:5a:b5:66:b8:3b:f9:db:05:bf:f8:e0:59: c7:48:ec:a8:7c:d4:80:5e:02:14:f9:30:8f:58:1f:44:c5:2d: 80:a9:03:2c:7e:33:34:a4:53:8d:69:5b:dc:a1:ab:1f:26:51: 48:52:cc:41:46:53:9b:01:b1:ac:01:5a:f0:3e:73:29:cb:e5: fa:ce:ba:d9:f4:a2:83:34:fa:68:55:d2:ad:09:e5:36:39:aa: 78:f0:a7:ea:a3:4b:2f:ea:5b:df:e1:d2:0a:fa:2f:99:16:1f: 22:dc:f2:12:89:5e:0d:9c:4d:1b:c6:a0:91:bd:18:82:1e:60: f4:4a:0e:2e:e6:05:c5:fe:a6:4b:72:57:80:da:31:a8:20:81: 43:b9:04:99:d0:af:25:3c:21:61:60:65:dd:52:6c:4f:d2:24: 0a:e5:0b:47:1d:d1:7e:f4:f8:a9:92:37:dd:45:f8:ca:ab:fe: 1b:0a:1a:ff:48:14:03:a3:dd:2b:98:95:18:17:3e:93:d5:18: a9:a2:2e:5d:20:64:9c:11:cb:72:cd:f0:d0:c5:c4:49:d5:aa: d7:d7:d0:ad:dd:35:61:aa:a4:6d:5b:6e:38:62:5e:27:69:85: 18:7e:06:94:cd:cb:25:c1:f7:24:31:49:f2:88:21:e7:96:6b: fc:23:fb:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfiX5wDo31NUnv9cyWOODJhwO020wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDA0MDAzWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDMyZDEzMGFkNWQ5ZGZlNWVjOGRhYWUyZTAyNTE2ZWRk NDY3ZDZjODk5MTczZTg4Njc2YjFhZTI4MjM2ZjdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/9MOYEUlTQc2fdXSwvaa9sW4qxJFsD6c2H1f4Rc9Hp15D ZFQ2feE6UNiD+RPVhb0kOwK7IuIkObN/kyMB7rlYSU7zFk2TuusTPw+nVbEwMBSW ZAeqssK16+yj5/QTjai5HfuKwFvBD8m6wToIJkYDebbLP8e3UnaM0B4gRHhWzrKs f6OacUv+xT4wf29rOwZp2B7a/z5JyDXdfB1JQKkSOuuPnhFoOEBF4A5LIGiA9RiH Zq8vQsPqj/U9aHby0Of2jwsc+D++N6uvnPC2G2+jBdmntzv5Ne7i1X7Q239Kx2gN 8KKEOGX2rjpxkKDKA5PNdBQARtvjqzrr5igAM8D/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTCahHOqapuujb6s1t+SuBmph7TAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyODJmNGE4LWYxZjctNDlhMC04NTJmLTgwOGMyMDFjNTQyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAly7EwDQYJKoZIhvcNAQELBQADggEBAAP5DGkZuFq1Zrg7+dsFv/jgWcdI 7Kh81IBeAhT5MI9YH0TFLYCpAyx+MzSkU41pW9yhqx8mUUhSzEFGU5sBsawBWvA+ cynL5frOutn0ooM0+mhV0q0J5TY5qnjwp+qjSy/qW9/h0gr6L5kWHyLc8hKJXg2c TRvGoJG9GIIeYPRKDi7mBcX+pktyV4DaMagggUO5BJnQryU8IWFgZd1SbE/SJArl C0cd0X70+KmSN91F+Mqr/hsKGv9IFAOj3SuYlRgXPpPVGKmiLl0gZJwRy3LN8NDF xEnVqtfX0K3dNWGqpG1bbjhiXidphRh+BpTNyyXB9yQxSfKIIeeWa/wj+80= -----END CERTIFICATE-----Generated at Tue Nov 3 16:22:55 2026 by rpki-client