$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa File: 6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa (raw, json) Hash identifier: 8cvM9nEUTpTJPx5NfX95jdoxgDRGitCvaSCLcQc0ffE= Subject key identifier: 2E:11:B3:70:D5:E2:B8:E7:39:2B:E8:62:40:9F:3B:E2:D7:E3:0D:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64FFBFC9BDD6E094DDA81B51D58627DA3C3578E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa Signing time: Mon 19 Oct 2026 01:41:24 +0000 ROA not before: Mon 19 Oct 2026 01:41:24 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ff:bf:c9:bd:d6:e0:94:dd:a8:1b:51:d5:86:27:da:3c:35:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:41:24 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=7b5b8cc4db746cd84d63fe6992f3d20bb8abdf2198ddc7947708737013cc1844, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:40:ea:01:66:f9:d3:8f:e2:ad:75:5c:a1: 9f:f1:4b:39:5b:8f:1d:b8:1e:3d:da:1a:63:57:cc: 02:68:c1:da:d5:be:dd:c0:5e:2b:bd:1f:ec:77:5e: 5d:9a:a6:5c:8a:3a:06:f8:bc:58:7f:a2:7a:3d:33: 97:93:93:af:0a:58:5d:c3:b7:d5:67:f6:23:24:4b: 9e:0f:c2:dc:b3:90:e5:a3:19:78:e4:2c:30:cf:96: b7:c6:50:6d:f7:0b:52:36:79:58:d1:7b:56:db:a6: 31:2a:88:47:df:49:31:af:06:0c:8c:8a:6c:3e:72: 45:57:e7:80:cb:4f:e0:a0:6d:5c:00:b5:0a:78:53: 0e:48:f1:cd:03:88:a4:f6:95:db:00:fd:6d:a3:09: 7f:83:99:28:c1:94:13:50:49:5f:7b:b8:3d:07:69: cf:af:29:f8:c2:22:e1:5d:d9:9b:6f:47:71:2e:a4: c1:70:06:30:b5:58:88:25:f7:d6:7d:d7:9c:66:07: 5b:db:c9:23:b5:d7:a0:ab:c5:39:5b:a7:c4:3a:5b: 70:58:d4:c8:a8:c9:e0:d6:22:df:c9:04:0c:24:94: d5:07:ea:b2:9d:92:79:5e:a3:8d:9b:d7:71:f6:94: 06:3c:5c:17:3f:8e:c1:d8:ca:67:3a:7e:9d:07:31: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:11:B3:70:D5:E2:B8:E7:39:2B:E8:62:40:9F:3B:E2:D7:E3:0D:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.21.0/24 Signature Algorithm: sha256WithRSAEncryption d0:50:ca:f4:d4:9d:b7:46:a8:b9:f1:fa:12:03:68:5a:43:97: 4e:64:73:8e:8e:9d:b3:6c:07:9f:f5:74:97:32:a1:67:03:6c: 9b:c9:0a:7e:da:47:c9:cd:20:50:df:5e:ce:cc:62:b6:c6:46: 56:0e:4d:b6:85:91:9d:99:c4:19:7e:9b:19:64:cb:54:9f:af: 4a:8f:89:ff:f9:c4:2f:2f:15:a9:6e:8c:42:72:91:5e:eb:f3: 0c:bd:57:e3:4f:b5:1f:a7:14:c6:cd:12:ca:8b:fc:9f:30:e2: 19:9f:22:54:06:a6:bc:bc:47:7f:22:dd:bf:2a:42:c4:71:19: 10:63:3b:ba:eb:fc:5c:1f:78:83:7a:0f:6b:58:00:b5:05:4c: e7:91:39:29:6f:47:6c:f9:a3:52:cf:06:dc:66:dd:e4:c8:0f: d9:9b:34:3c:85:23:50:bd:bf:1c:72:f4:c9:7d:64:80:12:d5: b7:c7:14:4a:2f:45:23:c7:1e:56:e2:f7:dd:b0:c3:8d:92:86: 46:d5:f2:03:b0:47:68:77:77:ee:a8:77:4b:24:97:4b:f7:4d: 46:4a:a2:88:03:4b:be:2a:63:8e:81:17:71:9d:82:a9:c4:f3: 75:65:95:7b:54:92:df:72:32:85:87:e0:4b:58:ef:2c:12:06: 53:26:4f:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZP+/yb3W4JTdqBtR1YYn2jw1eOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDE0MTI0WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjViOGNjNGRiNzQ2Y2Q4NGQ2M2ZlNjk5MmYzZDIwYmI4 YWJkZjIxOThkZGM3OTQ3NzA4NzM3MDEzY2MxODQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ20DqAWb504/irXVcoZ/xSzlbjx24Hj3aGmNXzAJowdrV vt3AXiu9H+x3Xl2aplyKOgb4vFh/ono9M5eTk68KWF3Dt9Vn9iMkS54PwtyzkOWj GXjkLDDPlrfGUG33C1I2eVjRe1bbpjEqiEffSTGvBgyMimw+ckVX54DLT+CgbVwA tQp4Uw5I8c0DiKT2ldsA/W2jCX+DmSjBlBNQSV97uD0Hac+vKfjCIuFd2ZtvR3Eu pMFwBjC1WIgl99Z915xmB1vbySO116CrxTlbp8Q6W3BY1MioyeDWIt/JBAwklNUH 6rKdknleo42b13H2lAY8XBc/jsHYymc6fp0HMVXjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULhGzcNXiuOc5K+hiQJ874tfjDQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhOGQ1NGE3LTRiN2MtNDg0Ny04NTc3LTVjM2UxMWNkODQ1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmBUwDQYJKoZIhvcNAQELBQADggEBANBQyvTUnbdGqLnx+hIDaFpDl05k c46OnbNsB5/1dJcyoWcDbJvJCn7aR8nNIFDfXs7MYrbGRlYOTbaFkZ2ZxBl+mxlk y1Sfr0qPif/5xC8vFalujEJykV7r8wy9V+NPtR+nFMbNEsqL/J8w4hmfIlQGpry8 R38i3b8qQsRxGRBjO7rr/FwfeIN6D2tYALUFTOeROSlvR2z5o1LPBtxm3eTID9mb NDyFI1C9vxxy9Ml9ZIAS1bfHFEovRSPHHlbi992ww42ShkbV8gOwR2h3d+6od0sk l0v3TUZKoogDS74qY46BF3GdgqnE83VllXtUkt9yMoWH4EtY7ywSBlMmTws= -----END CERTIFICATE-----Generated at Mon Nov 2 16:48:05 2026 by rpki-client