$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/735126fd-6aa8-4a61-8ffd-be42c5341d37.roa File: 735126fd-6aa8-4a61-8ffd-be42c5341d37.roa (raw, json) Hash identifier: B3w2JbN8JqOzWURywdYUvvzidLiSFzuPJSqnAZDxoso= Subject key identifier: 2B:73:EC:CB:46:D9:E9:D6:36:CC:35:59:D6:2F:40:7E:70:6B:3E:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66E2377008547E3AA54D0EF6ADDF1F3FE8515628 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/735126fd-6aa8-4a61-8ffd-be42c5341d37.roa Signing time: Mon 19 Oct 2026 22:12:51 +0000 ROA not before: Mon 19 Oct 2026 22:12:51 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 64.66.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e2:37:70:08:54:7e:3a:a5:4d:0e:f6:ad:df:1f:3f:e8:51:56:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 22:12:51 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=ed64d7fcaf9c6281599529dd226eb7955aeef1e642ddc4fc9017d723b62d0b4c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:d2:56:f6:e8:ac:d2:f2:e2:4e:fb:e9:cc: 05:59:2f:91:8f:d2:d2:93:a3:0d:b1:77:33:c9:47: dc:e5:d0:3b:c3:29:41:b2:7b:b2:05:76:ee:ad:63: 28:6c:90:75:44:a3:33:48:e0:13:e2:72:c4:6c:bc: 8d:25:23:4f:bd:a1:12:b1:ac:30:47:be:7b:47:a6: 5b:f7:70:97:65:e1:1a:25:f1:30:c7:7a:b3:e3:2b: f0:d5:c1:3c:7f:8a:a7:c9:37:b6:05:52:fb:15:3e: 47:eb:b7:fd:78:50:99:7e:e7:57:27:c6:65:90:a8: d7:e5:6e:e6:6e:0f:4e:07:4a:38:9f:64:43:dc:ef: d3:fc:28:1e:f4:05:fa:0b:96:68:8f:05:9d:72:76: 41:4b:25:15:ae:e9:05:11:d0:05:d3:53:4e:ac:09: 22:9d:d0:47:d5:f9:84:87:38:9b:9f:9c:b0:58:01: 1d:30:9c:bd:8c:f9:93:24:d0:b4:96:02:b8:9e:a0: 83:0f:f9:f8:aa:6f:e6:55:65:76:df:7f:99:06:d4: d3:2c:12:02:18:15:33:12:31:89:18:48:bc:7a:91: fb:c7:b9:d2:8f:4a:19:8f:b0:35:a7:be:78:e9:d6: c4:45:b5:8f:a9:0d:ee:43:6d:6a:ed:2e:d7:1f:dc: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:73:EC:CB:46:D9:E9:D6:36:CC:35:59:D6:2F:40:7E:70:6B:3E:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/735126fd-6aa8-4a61-8ffd-be42c5341d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.66.144.0/24 Signature Algorithm: sha256WithRSAEncryption 51:2b:2f:2f:c6:84:4b:2d:66:3b:14:68:41:fd:61:45:20:13: df:11:23:a2:db:f8:62:b1:af:86:cd:cd:98:a2:98:8f:47:5a: 68:a8:f0:96:fd:92:fa:80:11:c4:e8:c3:f9:f1:36:e9:ce:dc: b6:cb:f3:5c:75:be:e2:a7:07:8c:d7:e1:a4:8e:a5:d2:f3:17: b9:28:16:87:8f:39:a1:66:37:86:48:55:08:8e:05:1f:5e:f4: ba:d9:77:01:60:24:e3:8d:f7:0f:ec:9c:99:cc:16:9d:4c:70: f4:fc:ec:0f:37:31:43:97:9f:e7:4d:db:47:5e:0b:14:94:53: 91:42:ef:6d:6e:d8:99:fa:0f:ec:3f:9e:8e:25:08:07:72:23: e0:d4:f7:0a:87:4a:79:a1:f5:fb:bd:95:78:1b:82:4d:b6:a0: 73:c9:26:35:73:96:cf:a6:1d:b1:e5:16:bc:64:bf:55:74:eb: fc:a5:41:73:5f:c8:36:a6:db:cc:b8:d8:f6:da:0b:cc:bb:9d: 54:f5:ee:94:52:81:b3:9a:21:18:fe:c9:9c:ad:d3:d1:a1:7f: c7:95:cc:71:a2:43:20:6a:85:6f:3e:19:22:36:fe:14:1d:ab: b8:09:50:3a:6b:15:75:cd:fd:5c:cc:e4:54:1e:66:ca:d3:5c: a1:d4:83:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZuI3cAhUfjqlTQ72rd8fP+hRVigwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MjIxMjUxWhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDY0ZDdmY2FmOWM2MjgxNTk5NTI5ZGQyMjZlYjc5NTVh ZWVmMWU2NDJkZGM0ZmM5MDE3ZDcyM2I2MmQwYjRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1M9JW9uis0vLiTvvpzAVZL5GP0tKTow2xdzPJR9zl0DvD KUGye7IFdu6tYyhskHVEozNI4BPicsRsvI0lI0+9oRKxrDBHvntHplv3cJdl4Rol 8TDHerPjK/DVwTx/iqfJN7YFUvsVPkfrt/14UJl+51cnxmWQqNflbuZuD04HSjif ZEPc79P8KB70BfoLlmiPBZ1ydkFLJRWu6QUR0AXTU06sCSKd0EfV+YSHOJufnLBY AR0wnL2M+ZMk0LSWArieoIMP+fiqb+ZVZXbff5kG1NMsEgIYFTMSMYkYSLx6kfvH udKPShmPsDWnvnjp1sRFtY+pDe5DbWrtLtcf3CjhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK3Psy0bZ6dY2zDVZ1i9AfnBrPhAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczNTEyNmZkLTZhYTgtNGE2MS04ZmZkLWJlNDJjNTM0MWQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABAQpAwDQYJKoZIhvcNAQELBQADggEBAFErLy/GhEstZjsUaEH9YUUgE98R I6Lb+GKxr4bNzZiimI9HWmio8Jb9kvqAEcTow/nxNunO3LbL81x1vuKnB4zX4aSO pdLzF7koFoePOaFmN4ZIVQiOBR9e9LrZdwFgJOON9w/snJnMFp1McPT87A83MUOX n+dN20deCxSUU5FC721u2Jn6D+w/no4lCAdyI+DU9wqHSnmh9fu9lXgbgk22oHPJ JjVzls+mHbHlFrxkv1V06/ylQXNfyDam28y42PbaC8y7nVT17pRSgbOaIRj+yZyt 09Ghf8eVzHGiQyBqhW8+GSI2/hQdq7gJUDprFXXN/VzM5FQeZsrTXKHUg+M= -----END CERTIFICATE-----Generated at Wed Nov 4 04:57:52 2026 by rpki-client