$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786e66a2-d07c-4116-8b53-c19a87c4b1e1.roa File: 786e66a2-d07c-4116-8b53-c19a87c4b1e1.roa (raw, json) Hash identifier: lHdp1gGmbjG37cnf6rimft6tZ3aiCYVJHRMoAHVzpDo= Subject key identifier: 6D:52:AA:9E:42:33:F1:3A:63:5A:45:1B:39:D8:EC:90:E4:43:82:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38A9C53C5620CF907A69BCD7A7E783912E098526 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786e66a2-d07c-4116-8b53-c19a87c4b1e1.roa Signing time: Thu 15 Oct 2026 00:20:43 +0000 ROA not before: Thu 15 Oct 2026 00:20:43 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 24.238.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a9:c5:3c:56:20:cf:90:7a:69:bc:d7:a7:e7:83:91:2e:09:85:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:20:43 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=622ea88771496a94b44deb4349f0a8570add05aa1fc28c82f69df7c6027f564f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:60:df:41:f7:2a:69:3e:1d:4d:fb:b4:3f: 3b:e9:3a:2f:08:db:0c:15:10:96:9b:ea:31:b4:5f: 21:b8:04:50:17:f0:db:f0:aa:c6:43:41:b1:e0:b8: 27:60:73:0b:a3:df:16:73:c2:7e:75:f6:bc:4d:1b: de:e9:88:0b:9e:10:25:56:4f:ec:ec:31:b5:0b:ce: 1d:88:41:49:12:44:4f:8a:95:ce:5c:2a:a0:85:65: 55:cb:88:0f:39:37:a4:b2:df:bb:04:3c:27:fa:d8: 7b:0a:ba:0b:b9:6c:e3:67:92:9f:43:db:02:83:66: fb:fe:1e:be:f8:9c:29:4b:52:9e:b4:f9:a4:a3:8b: 6e:75:df:c6:77:55:05:c5:7c:1f:f6:69:71:3b:80: 1f:be:46:f3:dc:1d:e9:06:39:51:e1:70:81:17:e7: df:4f:15:fb:f2:f8:6a:a5:dd:e2:20:f7:3d:ed:59: 1a:ab:68:e3:e6:67:e8:b2:d5:2c:41:04:8e:ab:d2: ba:6d:cf:bb:b4:26:77:ea:2c:b6:5a:78:d5:63:71: bb:f0:e9:ca:b8:7d:46:e7:bf:c8:e8:44:e7:e3:9f: 1f:c2:02:13:42:d9:8d:d8:08:70:82:e2:44:ff:40: dd:10:83:f3:a5:e0:0c:74:be:64:3e:3d:e1:55:ef: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:AA:9E:42:33:F1:3A:63:5A:45:1B:39:D8:EC:90:E4:43:82:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786e66a2-d07c-4116-8b53-c19a87c4b1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.238.128.0/17 Signature Algorithm: sha256WithRSAEncryption 73:82:67:8d:7f:85:9f:e9:a3:b6:e6:73:7b:2a:9b:4a:21:b8: e7:96:fb:d2:8c:52:5f:63:cb:a9:a4:d0:a0:0b:32:51:35:66: 71:ed:58:11:8b:ca:f6:98:24:cc:93:ff:a5:56:3b:82:45:7a: d6:ae:2e:fd:e1:3b:81:d4:9d:fb:19:15:d8:fe:4b:a3:f8:a9: 4b:39:94:c3:c8:43:3b:5e:0f:47:18:46:b5:18:63:08:4c:82: 6e:20:db:83:5a:81:a2:dd:b0:9e:ac:bf:58:21:9d:eb:7d:e2: 4b:77:02:ae:c5:32:d8:7d:79:13:72:8b:fd:16:8d:1d:6d:32: 28:1a:2c:20:29:a5:eb:9b:13:c9:e1:de:08:a5:02:cf:6c:f9: 25:10:89:94:ff:07:96:72:cd:93:f3:a3:26:a9:b9:e2:17:21: 2e:3f:50:a2:82:61:e5:d5:90:06:1a:b9:0c:55:3e:94:eb:3f: d1:ec:ec:c0:dc:c7:5b:b5:f9:fc:7f:2d:6d:08:06:6d:0e:4e: a8:06:ea:70:e0:bd:50:93:c4:79:3d:32:2c:0e:a6:90:3e:76: 31:08:70:8a:3a:b8:3c:ca:00:09:a5:5a:e8:1d:d0:8e:df:6c: 09:bf:96:23:da:63:9d:d4:6b:71:79:3a:eb:9d:ff:ab:d7:20: 9e:96:55:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOKnFPFYgz5B6abzXp+eDkS4JhSYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAyMDQzWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjJlYTg4NzcxNDk2YTk0YjQ0ZGViNDM0OWYwYTg1NzBh ZGQwNWFhMWZjMjhjODJmNjlkZjdjNjAyN2Y1NjRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCutGDfQfcqaT4dTfu0PzvpOi8I2wwVEJab6jG0XyG4BFAX 8NvwqsZDQbHguCdgcwuj3xZzwn519rxNG97piAueECVWT+zsMbULzh2IQUkSRE+K lc5cKqCFZVXLiA85N6Sy37sEPCf62HsKugu5bONnkp9D2wKDZvv+Hr74nClLUp60 +aSji25138Z3VQXFfB/2aXE7gB++RvPcHekGOVHhcIEX599PFfvy+Gql3eIg9z3t WRqraOPmZ+iy1SxBBI6r0rptz7u0JnfqLLZaeNVjcbvw6cq4fUbnv8joROfjnx/C AhNC2Y3YCHCC4kT/QN0Qg/Ol4Ax0vmQ+PeFV7zs9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbVKqnkIz8TpjWkUbOdjskORDgkwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4NmU2NmEyLWQwN2MtNDExNi04YjUzLWMxOWE4N2M0YjFlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcY7oAwDQYJKoZIhvcNAQELBQADggEBAHOCZ41/hZ/po7bmc3sqm0ohuOeW +9KMUl9jy6mk0KALMlE1ZnHtWBGLyvaYJMyT/6VWO4JFetauLv3hO4HUnfsZFdj+ S6P4qUs5lMPIQzteD0cYRrUYYwhMgm4g24NagaLdsJ6sv1ghnet94kt3Aq7FMth9 eRNyi/0WjR1tMigaLCAppeubE8nh3gilAs9s+SUQiZT/B5ZyzZPzoyapueIXIS4/ UKKCYeXVkAYauQxVPpTrP9Hs7MDcx1u1+fx/LW0IBm0OTqgG6nDgvVCTxHk9MiwO ppA+djEIcIo6uDzKAAmlWugd0I7fbAm/liPaY53Ua3F5Ouud/6vXIJ6WVW0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:47 2026 by rpki-client