$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ed5efce-0c41-4a1c-9d27-8ce4cb48378f.roa File: 8ed5efce-0c41-4a1c-9d27-8ce4cb48378f.roa (raw, json) Hash identifier: kf+au2MBhDwFcaOHSJPBcTYwUHMI8SNgeR3vA2TTq80= Subject key identifier: C9:71:8E:EC:12:7A:B7:F4:B0:CD:42:DB:64:2F:54:09:9B:2A:C6:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 654E278504827930E0FC9103ED0D294693D1422F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ed5efce-0c41-4a1c-9d27-8ce4cb48378f.roa Signing time: Sat 24 Oct 2026 00:10:06 +0000 ROA not before: Sat 24 Oct 2026 00:10:06 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.5.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4e:27:85:04:82:79:30:e0:fc:91:03:ed:0d:29:46:93:d1:42:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:10:06 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=a25259ab97581e4d44df76cc6016366533e96937a930e3b3d41de107ed90e3e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:86:f9:2d:c7:53:de:4b:67:de:a6:cb:fc: 70:76:2c:b7:2b:4b:1b:6d:9c:b5:4f:5c:8f:a8:cb: 7a:10:e1:44:9c:64:2a:ef:2c:0b:28:2a:d8:8b:77: e9:81:df:ec:4b:69:16:e3:b1:b8:8e:39:4f:c1:bf: 6a:be:84:c1:2d:a8:e0:bb:8a:c7:9f:f9:3a:8d:94: 91:51:61:9c:f4:2e:d6:7d:ef:bf:4e:84:60:32:81: 55:5b:9d:23:9a:9d:15:f4:67:c9:9b:d3:59:54:8b: 8b:8a:bd:52:84:0a:2b:f6:37:22:8c:9d:1f:57:f7: ce:d1:cc:3e:17:15:42:e7:37:a3:5e:d6:92:5c:51: 8d:19:ce:1c:9a:06:88:71:e6:62:51:35:21:6b:eb: c2:de:e4:5b:86:fd:cf:ee:73:47:21:b6:3d:d2:e7: f7:37:b7:13:3d:02:64:eb:33:c2:14:c2:eb:6b:11: 64:02:77:4e:ea:cd:0b:8c:07:90:78:56:56:ad:e1: 22:8d:bc:b2:54:37:03:d2:7f:1c:01:27:57:72:74: 71:1c:09:ac:91:0b:b3:3d:92:d8:80:78:24:fb:b7: 37:48:f9:d8:99:0a:f4:0c:61:c8:a3:6e:b3:92:da: cf:1c:d9:ab:99:21:be:dd:28:57:38:54:29:93:4a: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:71:8E:EC:12:7A:B7:F4:B0:CD:42:DB:64:2F:54:09:9B:2A:C6:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ed5efce-0c41-4a1c-9d27-8ce4cb48378f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.5.0.0/16 Signature Algorithm: sha256WithRSAEncryption c3:c1:73:cb:03:fb:20:11:58:a3:4d:c1:98:35:f9:e1:52:4b: b4:16:34:71:36:e0:d8:dd:28:fe:23:5d:c4:cf:53:31:60:a0: 78:f8:a0:ec:7a:f5:97:52:d7:3c:8a:1b:28:d5:97:dc:0f:07: 06:02:aa:62:1f:f9:a5:23:26:8a:15:71:73:bf:3f:f5:2f:a3: c1:dd:05:5f:ce:6a:de:ae:d2:84:81:2e:5f:c9:94:9c:61:85: f2:ab:1c:ec:46:7f:5d:79:95:bb:33:18:56:35:aa:eb:8a:ce: 83:27:47:e9:7b:44:c3:5b:eb:43:d3:cf:32:c5:57:a2:f8:f3: ca:10:2f:36:e4:0e:ad:5f:29:97:d0:9b:76:b4:4f:b6:71:47: 5c:c7:45:fa:79:6f:63:13:16:83:d8:cb:8e:06:72:d7:2a:9f: 9d:bb:60:ab:49:37:2d:27:87:3d:5a:69:c1:29:92:2c:a0:3b: de:c1:6b:ca:cc:07:c7:5a:0a:8f:c8:bc:e7:3e:f5:dc:2b:a4: b0:4b:94:b2:d3:a0:dd:fc:d3:5b:69:72:5a:31:10:26:0e:1a: 2a:2a:23:91:79:02:dd:77:39:0f:6e:2c:65:df:0f:2a:2e:87: 51:fc:90:93:16:1b:73:75:57:1f:29:2f:17:55:82:cc:a1:af: de:57:c2:78 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZU4nhQSCeTDg/JED7Q0pRpPRQi8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAxMDA2WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjUyNTlhYjk3NTgxZTRkNDRkZjc2Y2M2MDE2MzY2NTMz ZTk2OTM3YTkzMGUzYjNkNDFkZTEwN2VkOTBlM2U4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI44b5LcdT3ktn3qbL/HB2LLcrSxttnLVPXI+oy3oQ4USc ZCrvLAsoKtiLd+mB3+xLaRbjsbiOOU/Bv2q+hMEtqOC7isef+TqNlJFRYZz0LtZ9 779OhGAygVVbnSOanRX0Z8mb01lUi4uKvVKECiv2NyKMnR9X987RzD4XFULnN6Ne 1pJcUY0ZzhyaBohx5mJRNSFr68Le5FuG/c/uc0chtj3S5/c3txM9AmTrM8IUwutr EWQCd07qzQuMB5B4Vlat4SKNvLJUNwPSfxwBJ1dydHEcCayRC7M9ktiAeCT7tzdI +diZCvQMYcijbrOS2s8c2auZIb7dKFc4VCmTSvKHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyXGO7BJ6t/SwzULbZC9UCZsqxkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlZDVlZmNlLTBjNDEtNGExYy05ZDI3LThjZTRjYjQ4Mzc4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4BTANBgkqhkiG9w0BAQsFAAOCAQEAw8FzywP7IBFYo03BmDX54VJLtBY0 cTbg2N0o/iNdxM9TMWCgePig7Hr1l1LXPIobKNWX3A8HBgKqYh/5pSMmihVxc78/ 9S+jwd0FX85q3q7ShIEuX8mUnGGF8qsc7EZ/XXmVuzMYVjWq64rOgydH6XtEw1vr Q9PPMsVXovjzyhAvNuQOrV8pl9CbdrRPtnFHXMdF+nlvYxMWg9jLjgZy1yqfnbtg q0k3LSeHPVppwSmSLKA73sFryswHx1oKj8i85z713CuksEuUstOg3fzTW2lyWjEQ Jg4aKiojkXkC3Xc5D24sZd8PKi6HUfyQkxYbc3VXHykvF1WCzKGv3lfCeA== -----END CERTIFICATE-----Generated at Mon Nov 2 21:11:28 2026 by rpki-client