$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa File: 65c740c7-8676-4c12-9db9-da6bf2962464.roa (raw, json) Hash identifier: M9L7VX8xDv+2RhHaAt26Bgv9HTT0Kc+xLqHTUyrunIY= Subject key identifier: CA:3F:BE:C6:15:6B:D5:88:90:9F:58:F9:CF:24:58:48:DB:66:E2:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 255920E0648A1A5286A67979E16FFF94041014DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa Signing time: Mon 12 Oct 2026 00:20:09 +0000 ROA not before: Mon 12 Oct 2026 00:20:09 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.177.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:59:20:e0:64:8a:1a:52:86:a6:79:79:e1:6f:ff:94:04:10:14:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:20:09 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=ac974b4dc83ea76db096b5ea3c47f5e865a34f0b8a371143f661c231e4735430, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:ae:6a:23:8d:64:e7:76:07:38:1a:84:f0: 89:54:d9:25:5c:9d:7a:73:28:0c:1f:d1:12:dc:97: 10:3b:85:5d:32:60:af:fd:b2:cc:a6:21:37:b3:7d: 02:86:63:51:b6:a7:04:ba:3c:95:97:ef:7f:14:49: 34:b5:1b:15:14:6c:9b:6e:99:dd:c6:7f:57:30:24: 1f:f3:f4:15:02:ca:26:b8:0b:6c:80:61:69:30:4a: 51:84:3c:3b:e2:55:3b:d2:5e:41:e9:d3:69:16:46: da:70:2a:e7:47:03:d2:5f:3c:04:fc:b5:a6:a3:47: 75:0d:c5:4b:4e:ed:43:b2:01:4b:6d:33:d5:9f:24: 16:e6:ac:e1:90:c2:c9:f9:f0:e1:37:ec:3a:41:2c: 6a:42:11:a3:29:c4:b4:d0:88:8a:04:c9:0c:10:0f: 0c:66:48:86:50:4c:62:65:3e:59:a8:82:47:53:71: f8:08:74:44:a2:dd:dd:92:4c:69:05:1b:81:38:05: 3d:9a:64:a5:10:64:36:e7:bf:a8:a1:7f:47:9f:8c: e3:99:57:ff:f4:20:cf:39:90:2c:08:a9:33:ab:5b: e8:21:2b:e3:ad:ea:c1:a4:8f:f1:ae:c6:0c:fa:62: 26:01:27:f8:ca:71:8e:aa:18:95:ad:70:e9:9d:32: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:BE:C6:15:6B:D5:88:90:9F:58:F9:CF:24:58:48:DB:66:E2:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.177.0.0/20 Signature Algorithm: sha256WithRSAEncryption 8b:52:08:e1:6a:78:15:04:b8:d5:c2:a5:e5:0d:39:69:51:0a: 2b:02:fe:50:66:f9:a8:69:5d:06:53:d4:83:ef:59:fe:e7:44: 4a:89:16:23:18:78:f3:4b:95:5a:2e:c8:01:76:c2:bf:dd:cf: dc:ee:8b:75:59:39:2d:55:e9:a9:90:b5:94:72:a5:be:cf:0b: 77:16:1a:69:51:9b:33:a4:b9:d6:29:82:3c:37:e1:6c:53:81: 4a:6f:52:7e:af:39:57:ee:9e:9a:f2:58:59:98:2a:89:ef:c3: ab:c1:2d:3e:3f:15:45:54:14:1b:66:aa:f2:2c:82:ee:f7:11: eb:87:0c:c3:6f:35:8d:84:ed:4b:b9:85:82:b5:a9:2d:52:1d: 23:68:c1:32:e4:cd:7f:29:92:0e:d5:82:1a:9c:4e:c7:12:bc: 0b:4a:7b:aa:1f:da:9e:f2:6f:21:62:5c:c0:57:d2:fa:06:84: 6a:b3:4d:6b:71:dd:4e:9b:81:0b:1f:3f:23:03:be:aa:d5:18: 30:a8:9c:ec:7e:19:15:67:5e:30:58:32:9a:be:9d:23:af:5e: 12:e0:7b:ad:57:75:33:ae:e3:96:35:be:f1:73:47:9f:76:11: 44:dd:d2:f9:30:fc:63:ab:06:e1:f5:49:a4:70:a8:87:b7:c2: 27:4f:20:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJVkg4GSKGlKGpnl54W//lAQQFNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAyMDA5WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzk3NGI0ZGM4M2VhNzZkYjA5NmI1ZWEzYzQ3ZjVlODY1 YTM0ZjBiOGEzNzExNDNmNjYxYzIzMWU0NzM1NDMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYBa5qI41k53YHOBqE8IlU2SVcnXpzKAwf0RLclxA7hV0y YK/9ssymITezfQKGY1G2pwS6PJWX738USTS1GxUUbJtumd3Gf1cwJB/z9BUCyia4 C2yAYWkwSlGEPDviVTvSXkHp02kWRtpwKudHA9JfPAT8taajR3UNxUtO7UOyAUtt M9WfJBbmrOGQwsn58OE37DpBLGpCEaMpxLTQiIoEyQwQDwxmSIZQTGJlPlmogkdT cfgIdESi3d2STGkFG4E4BT2aZKUQZDbnv6ihf0efjOOZV//0IM85kCwIqTOrW+gh K+Ot6sGkj/Guxgz6YiYBJ/jKcY6qGJWtcOmdMuOvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyj++xhVr1YiQn1j5zyRYSNtm4kMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1Yzc0MGM3LTg2NzYtNGMxMi05ZGI5LWRhNmJmMjk2MjQ2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATRsQAwDQYJKoZIhvcNAQELBQADggEBAItSCOFqeBUEuNXCpeUNOWlRCisC /lBm+ahpXQZT1IPvWf7nREqJFiMYePNLlVouyAF2wr/dz9zui3VZOS1V6amQtZRy pb7PC3cWGmlRmzOkudYpgjw34WxTgUpvUn6vOVfunpryWFmYKonvw6vBLT4/FUVU FBtmqvIsgu73EeuHDMNvNY2E7Uu5hYK1qS1SHSNowTLkzX8pkg7VghqcTscSvAtK e6of2p7ybyFiXMBX0voGhGqzTWtx3U6bgQsfPyMDvqrVGDConOx+GRVnXjBYMpq+ nSOvXhLge61XdTOu45Y1vvFzR592EUTd0vkw/GOrBuH1SaRwqIe3widPIC4= -----END CERTIFICATE-----Generated at Wed Nov 4 10:22:27 2026 by rpki-client