$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5cade7-274f-4d8d-9062-f019edfa1e70.roa File: 8e5cade7-274f-4d8d-9062-f019edfa1e70.roa (raw, json) Hash identifier: bkbyM2SIF5DfQHJUa6c9/bYeCX4QNgaoY8XtFbWeVUg= Subject key identifier: 46:8F:7A:65:B2:6E:C8:FC:22:FC:14:18:5A:CE:5D:6F:BF:99:47:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C5721AB617183BF926018510184CA53061D526F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5cade7-274f-4d8d-9062-f019edfa1e70.roa Signing time: Mon 12 Oct 2026 00:51:25 +0000 ROA not before: Mon 12 Oct 2026 00:51:25 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:57:21:ab:61:71:83:bf:92:60:18:51:01:84:ca:53:06:1d:52:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:51:25 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=bcf9aeaed087e1c6ef2496a27a64e464717e374c821c1acba6b43dc4d381ef7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:19:41:0a:fe:71:66:a4:37:62:aa:e5:67: 80:db:8b:ff:52:28:99:70:53:d3:2c:67:95:3e:f7: f4:ef:a4:f1:cf:7a:69:67:3a:5c:5a:64:b5:ce:61: 28:e1:4a:01:13:95:72:40:bf:48:a6:59:b6:23:40: c1:36:4c:cc:51:67:9b:4a:c9:c7:a6:26:ac:80:1f: e1:21:07:21:6b:fb:b5:54:ea:c7:2e:4e:b8:b9:a7: d3:b8:bb:c1:19:a8:b4:10:82:9c:a0:df:e0:d2:68: 90:35:c9:33:6c:8f:f0:41:5c:81:6a:41:4a:c5:95: e1:58:f3:e4:03:94:91:93:f3:1a:06:d4:85:eb:a8: 81:b9:4a:bf:a4:26:5f:6b:e0:a9:b3:74:c8:67:b6: f9:2a:8a:79:54:f9:6d:e2:c9:2b:2b:a4:cc:86:ec: cb:c1:13:3b:80:2d:12:74:c7:4a:8f:66:4d:2f:f2: 43:e3:24:75:ec:8a:14:72:3e:72:da:a9:c3:7c:83: 29:c3:ad:ed:71:3d:e0:2c:ae:41:7d:d5:e8:c4:e3: 54:bd:9a:d2:37:fb:ce:d7:87:bb:af:a1:a6:72:06: c7:d8:cf:c2:88:1d:38:06:9a:22:c4:6d:ac:68:bf: 8a:5e:a0:4e:9e:92:86:68:79:d7:13:93:46:b0:c3: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8F:7A:65:B2:6E:C8:FC:22:FC:14:18:5A:CE:5D:6F:BF:99:47:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5cade7-274f-4d8d-9062-f019edfa1e70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.64.0/20 Signature Algorithm: sha256WithRSAEncryption a7:35:22:ad:5e:19:d3:0f:29:f1:1b:9e:10:aa:12:7e:68:4d: 01:fd:85:33:88:32:19:76:e8:b5:02:79:f3:2b:f6:d5:ea:29: 06:47:a8:e4:17:07:3c:7b:31:f3:d4:c3:6e:5d:05:1e:41:d5: 16:07:cf:bb:86:f8:36:f2:81:e0:5a:5f:70:4d:d7:12:5c:6e: 70:70:0e:3c:74:78:5e:8f:a0:a6:29:01:0a:7c:f8:e0:d7:5b: 51:95:51:0f:48:35:a9:05:97:96:83:82:d8:66:91:ee:7b:80: 49:7f:0a:d4:3b:79:58:62:f4:f4:6f:e1:54:b6:e8:71:00:0f: 97:47:b4:2a:d9:68:2a:ab:18:4a:c0:15:2c:4c:4f:7f:53:d9: 02:04:88:47:91:82:f0:97:9f:42:5c:04:75:0d:b2:b0:eb:78: 09:dc:0f:63:f7:94:15:4c:90:ad:59:e2:df:f1:a3:5c:c5:e7: d7:71:08:44:fa:ef:3e:31:4c:bc:c7:25:90:90:56:b2:9c:e9: 7c:41:a0:e8:18:9a:3b:13:97:7f:3a:66:03:14:97:4a:8a:be: b7:98:57:f3:55:41:ab:68:a3:13:9a:40:44:a2:4e:22:02:d7: cf:0d:c7:1f:07:14:b4:28:8d:83:78:94:c2:71:5e:4e:fa:33: 82:f8:f4:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHFchq2Fxg7+SYBhRAYTKUwYdUm8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MTI1WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2Y5YWVhZWQwODdlMWM2ZWYyNDk2YTI3YTY0ZTQ2NDcx N2UzNzRjODIxYzFhY2JhNmI0M2RjNGQzODFlZjdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChUhlBCv5xZqQ3YqrlZ4Dbi/9SKJlwU9MsZ5U+9/TvpPHP emlnOlxaZLXOYSjhSgETlXJAv0imWbYjQME2TMxRZ5tKycemJqyAH+EhByFr+7VU 6scuTri5p9O4u8EZqLQQgpyg3+DSaJA1yTNsj/BBXIFqQUrFleFY8+QDlJGT8xoG 1IXrqIG5Sr+kJl9r4KmzdMhntvkqinlU+W3iySsrpMyG7MvBEzuALRJ0x0qPZk0v 8kPjJHXsihRyPnLaqcN8gynDre1xPeAsrkF91ejE41S9mtI3+87Xh7uvoaZyBsfY z8KIHTgGmiLEbaxov4peoE6ekoZoedcTk0aww9dPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURo96ZbJuyPwi/BQYWs5db7+ZRwIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlNWNhZGU3LTI3NGYtNGQ4ZC05MDYyLWYwMTllZGZhMWU3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAS4SEAwDQYJKoZIhvcNAQELBQADggEBAKc1Iq1eGdMPKfEbnhCqEn5oTQH9 hTOIMhl26LUCefMr9tXqKQZHqOQXBzx7MfPUw25dBR5B1RYHz7uG+DbygeBaX3BN 1xJcbnBwDjx0eF6PoKYpAQp8+ODXW1GVUQ9INakFl5aDgthmke57gEl/CtQ7eVhi 9PRv4VS26HEAD5dHtCrZaCqrGErAFSxMT39T2QIEiEeRgvCXn0JcBHUNsrDreAnc D2P3lBVMkK1Z4t/xo1zF59dxCET67z4xTLzHJZCQVrKc6XxBoOgYmjsTl386ZgMU l0qKvreYV/NVQatooxOaQESiTiIC188Nxx8HFLQojYN4lMJxXk76M4L49Hs= -----END CERTIFICATE-----Generated at Mon Nov 2 19:33:00 2026 by rpki-client