$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef10fce-6f85-4d68-92dd-efe8ced6395c.roa File: 8ef10fce-6f85-4d68-92dd-efe8ced6395c.roa (raw, json) Hash identifier: u/1WStEnVQ7/Kkr9jYnwpAIVk/O1lyhx2DJaDVLUaNQ= Subject key identifier: F4:03:35:A8:BC:79:1D:5A:56:A7:6F:89:A1:9F:3C:4F:AA:B9:A1:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BC7FB3027D319DE61FF58AAD1CEBD20F97C2115 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef10fce-6f85-4d68-92dd-efe8ced6395c.roa Signing time: Fri 30 Oct 2026 00:03:28 +0000 ROA not before: Fri 30 Oct 2026 00:03:28 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 40.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c7:fb:30:27:d3:19:de:61:ff:58:aa:d1:ce:bd:20:f9:7c:21:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 30 00:03:28 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=bec1d4c820205b18ed84795c9eb72b4d849ed64a2900a712bf2e3540ed45095c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:c5:05:6a:3d:e2:e0:91:9a:dc:9c:2c:68: 40:c8:23:64:cd:ec:f6:b2:a8:a6:d9:cd:6e:47:9d: fc:5d:4c:39:c1:60:69:30:9c:06:7a:20:2d:a5:2d: 7a:bd:15:ef:f6:d7:c2:aa:1e:83:f6:2d:ef:d5:cc: d4:26:79:32:33:70:05:d3:ea:6b:88:50:b7:af:fa: 6a:bc:de:f1:7a:4d:c1:b8:d4:e2:3d:48:ac:db:75: 7f:61:d2:dd:38:58:a2:27:00:e8:22:c9:bf:e4:7b: 13:f6:a6:8d:27:ae:ef:7e:af:d3:bd:d6:56:7e:1b: 44:a6:f3:1a:e7:a3:db:eb:f5:ea:3b:b4:2f:7b:7d: 6e:41:10:cc:df:55:3a:0b:e7:7a:36:1b:69:c4:47: 4e:e3:4f:d2:aa:e3:cf:64:c8:d0:71:ec:c8:01:89: 47:30:45:30:f5:1c:6d:ba:4a:36:4c:cd:51:ab:a2: 19:fa:d4:f8:bf:42:ef:59:1f:1f:d7:2e:17:15:2f: 2d:fc:75:27:1c:05:79:75:0f:cd:e7:df:60:8a:6c: 28:0a:3a:10:fe:a4:da:0e:d4:5f:8c:42:b6:48:50: 5d:58:85:fb:b7:e9:88:6c:ef:86:d9:cc:bc:6d:69: 40:91:b2:e3:f1:2f:76:89:5d:ef:6e:ce:61:57:04: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:03:35:A8:BC:79:1D:5A:56:A7:6F:89:A1:9F:3C:4F:AA:B9:A1:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef10fce-6f85-4d68-92dd-efe8ced6395c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.180.0.0/16 Signature Algorithm: sha256WithRSAEncryption b9:28:69:30:63:04:0e:44:f1:67:eb:9e:11:1c:e7:63:c6:ca: ec:8f:0d:2e:5b:2b:d8:40:52:4d:9a:19:47:55:af:1e:68:73: b8:9c:11:fe:2f:65:02:c1:56:63:92:da:79:9a:bf:fe:40:c0: 44:a3:c5:c4:6c:4f:9b:e8:64:95:8b:ff:de:e0:07:e4:5a:ee: ca:46:ec:c1:37:19:bc:73:5e:16:7a:4d:3a:3e:9b:15:04:76: d7:fd:3b:bb:1c:dc:d7:d9:dd:79:25:39:1d:e0:25:22:d7:b9: 1a:53:cf:58:db:72:0e:a9:aa:72:65:79:a6:ef:54:c5:4e:d7: 74:be:f7:f6:bf:d7:ee:56:12:9e:e7:f1:63:67:6e:53:5b:bf: 1b:7d:e3:c0:d2:77:e2:16:9c:e2:e2:41:e9:ee:44:4b:ac:51: 22:9c:50:79:96:a8:f7:c4:0c:4c:e9:9a:2a:00:da:48:cb:93: e3:12:a9:a2:2b:69:b7:14:80:d2:01:22:b5:51:43:5e:9c:2e: 75:1d:0b:4e:cc:cd:42:ab:1a:89:d6:55:d2:c9:64:31:ab:5c: e2:37:02:0b:e9:ce:06:25:8b:6c:14:df:b3:3b:af:da:1f:66: 14:61:92:47:4a:44:06:4f:a7:9f:17:b2:fe:f4:59:c5:a7:d2: 5a:34:b9:c0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUC8f7MCfTGd5h/1iq0c69IPl8IRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDMwMDAwMzI4WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWMxZDRjODIwMjA1YjE4ZWQ4NDc5NWM5ZWI3MmI0ZDg0 OWVkNjRhMjkwMGE3MTJiZjJlMzU0MGVkNDUwOTVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJf8UFaj3i4JGa3JwsaEDII2TN7PayqKbZzW5HnfxdTDnB YGkwnAZ6IC2lLXq9Fe/218KqHoP2Le/VzNQmeTIzcAXT6muIULev+mq83vF6TcG4 1OI9SKzbdX9h0t04WKInAOgiyb/kexP2po0nru9+r9O91lZ+G0Sm8xrno9vr9eo7 tC97fW5BEMzfVToL53o2G2nER07jT9Kq489kyNBx7MgBiUcwRTD1HG26SjZMzVGr ohn61Pi/Qu9ZHx/XLhcVLy38dSccBXl1D83n32CKbCgKOhD+pNoO1F+MQrZIUF1Y hfu36Yhs74bZzLxtaUCRsuPxL3aJXe9uzmFXBAC9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9AM1qLx5HVpWp2+JoZ88T6q5odowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlZjEwZmNlLTZmODUtNGQ2OC05MmRkLWVmZThjZWQ2Mzk1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAotDANBgkqhkiG9w0BAQsFAAOCAQEAuShpMGMEDkTxZ+ueERznY8bK7I8N Llsr2EBSTZoZR1WvHmhzuJwR/i9lAsFWY5LaeZq//kDARKPFxGxPm+hklYv/3uAH 5FruykbswTcZvHNeFnpNOj6bFQR21/07uxzc19ndeSU5HeAlIte5GlPPWNtyDqmq cmV5pu9UxU7XdL739r/X7lYSnufxY2duU1u/G33jwNJ34hac4uJB6e5ES6xRIpxQ eZao98QMTOmaKgDaSMuT4xKpoitptxSA0gEitVFDXpwudR0LTszNQqsaidZV0slk Matc4jcCC+nOBiWLbBTfszuv2h9mFGGSR0pEBk+nnxey/vRZxafSWjS5wA== -----END CERTIFICATE-----Generated at Wed Nov 4 05:37:34 2026 by rpki-client