$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9209ec50-a97b-47cf-8683-65bfefcf5cee.roa File: 9209ec50-a97b-47cf-8683-65bfefcf5cee.roa (raw, json) Hash identifier: 8l5nle6jUzD6sNwPc7AL9NHTY1XNE09rdAaHXZipXy4= Subject key identifier: 26:47:44:C8:8E:B4:D3:EC:3F:3F:96:42:6A:05:5A:2E:CF:75:FB:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D23E052F77E7065C1F74D341B5CA9F46E737D2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9209ec50-a97b-47cf-8683-65bfefcf5cee.roa Signing time: Wed 21 Oct 2026 00:09:47 +0000 ROA not before: Wed 21 Oct 2026 00:09:47 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:23:e0:52:f7:7e:70:65:c1:f7:4d:34:1b:5c:a9:f4:6e:73:7d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 21 00:09:47 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=918f09aae11888ae75e10bd6693f746a020948e66dcbad036a93ea35e6622024, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:59:db:24:4a:e3:cb:7b:28:7a:e4:2a:43: c2:66:60:74:c4:d7:58:f7:85:c9:38:40:66:04:ed: d0:e3:a9:68:c9:2a:e5:d6:81:22:ea:5f:13:83:50: de:ca:6a:b3:c7:9e:60:02:09:8a:56:aa:58:3d:11: fb:8d:3a:cc:fb:fb:1d:66:f6:19:3c:9f:01:95:e7: da:80:bc:91:98:a4:8a:c6:c3:b4:27:ee:68:6f:16: 28:47:1b:ec:d4:32:7d:0c:b9:97:07:4b:62:8f:d1: 41:d5:f5:8d:d3:72:4f:89:5a:87:a7:23:b0:cd:93: a1:be:17:b2:26:21:3a:65:1c:5a:07:5f:2e:a3:17: 8d:e7:9c:ce:c0:02:2f:ee:ae:63:a9:64:23:5a:d0: fd:78:5e:31:06:af:08:47:d8:26:70:0a:0e:d8:22: ef:62:68:00:1f:6e:a3:3c:76:3d:04:7b:3e:fd:76: ca:09:a2:5a:01:4a:c8:89:2f:0a:2e:11:a5:40:36: 17:f6:20:b5:35:f4:b3:47:37:10:f1:56:0c:9e:d9: 8d:46:91:c5:1f:c7:1a:db:83:72:b4:e9:ed:77:ff: 61:41:2a:d3:f3:29:10:60:30:cc:a6:d1:83:5a:ed: 14:fd:c3:2a:a8:bd:31:77:08:9f:b8:b5:d6:2e:50: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:47:44:C8:8E:B4:D3:EC:3F:3F:96:42:6A:05:5A:2E:CF:75:FB:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9209ec50-a97b-47cf-8683-65bfefcf5cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.54.0/23 Signature Algorithm: sha256WithRSAEncryption ca:c4:f7:cc:40:25:79:a9:99:89:3e:08:b1:e9:09:a8:90:b3: a2:7c:e7:87:cd:a9:fd:82:f8:d7:2e:3c:71:b0:cc:6c:51:c8: e1:b6:bf:0e:46:c3:5a:a8:c9:5f:36:2d:39:6f:26:0c:0a:b7: 1b:c4:cd:3a:eb:15:74:53:2e:46:95:b9:72:99:fc:23:80:c8: 94:9d:5b:80:d2:f4:69:c9:de:d1:fa:c5:d5:78:ca:4e:6e:c7: b6:ec:38:90:97:ae:d7:4b:e2:09:8f:19:b7:c8:93:61:06:01: 8e:58:40:5f:9c:6b:fe:8a:e1:e6:4d:a2:9c:a0:21:1f:ea:d5: 7e:7d:be:b6:f4:3f:8b:ea:6d:f4:f9:d9:57:20:bd:70:02:14: 22:17:42:e8:d6:56:b5:d1:68:2c:82:66:e2:12:1e:ad:01:c1: aa:1b:a0:fc:11:b6:bb:33:88:00:5a:a4:45:09:db:6a:75:05: 8f:c2:07:b5:6a:9f:09:5f:1d:76:58:97:07:15:88:52:8a:2c: ba:c0:d7:8e:8a:ac:09:50:b9:a9:37:b1:90:4b:7e:e5:62:cd: fe:23:d1:a9:34:66:85:8f:10:1c:a8:08:80:5a:67:40:e6:a2: fc:75:db:2f:47:53:b8:4e:12:ea:8e:71:ea:aa:d2:54:43:36: e0:8f:bd:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXSPgUvd+cGXB9000G1yp9G5zfSowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIxMDAwOTQ3WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MThmMDlhYWUxMTg4OGFlNzVlMTBiZDY2OTNmNzQ2YTAy MDk0OGU2NmRjYmFkMDM2YTkzZWEzNWU2NjIyMDI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw8lnbJErjy3soeuQqQ8JmYHTE11j3hck4QGYE7dDjqWjJ KuXWgSLqXxODUN7KarPHnmACCYpWqlg9EfuNOsz7+x1m9hk8nwGV59qAvJGYpIrG w7Qn7mhvFihHG+zUMn0MuZcHS2KP0UHV9Y3Tck+JWoenI7DNk6G+F7ImITplHFoH Xy6jF43nnM7AAi/urmOpZCNa0P14XjEGrwhH2CZwCg7YIu9iaAAfbqM8dj0Eez79 dsoJoloBSsiJLwouEaVANhf2ILU19LNHNxDxVgye2Y1GkcUfxxrbg3K06e13/2FB KtPzKRBgMMym0YNa7RT9wyqovTF3CJ+4tdYuUFv/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJkdEyI600+w/P5ZCagVaLs91++EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyMDllYzUwLWE5N2ItNDdjZi04NjgzLTY1YmZlZmNmNWNlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHRXDYwDQYJKoZIhvcNAQELBQADggEBAMrE98xAJXmpmYk+CLHpCaiQs6J8 54fNqf2C+NcuPHGwzGxRyOG2vw5Gw1qoyV82LTlvJgwKtxvEzTrrFXRTLkaVuXKZ /COAyJSdW4DS9GnJ3tH6xdV4yk5ux7bsOJCXrtdL4gmPGbfIk2EGAY5YQF+ca/6K 4eZNopygIR/q1X59vrb0P4vqbfT52VcgvXACFCIXQujWVrXRaCyCZuISHq0Bwaob oPwRtrsziABapEUJ22p1BY/CB7VqnwlfHXZYlwcViFKKLLrA146KrAlQuak3sZBL fuVizf4j0ak0ZoWPEByoCIBaZ0Dmovx12y9HU7hOEuqOceqq0lRDNuCPvcY= -----END CERTIFICATE-----Generated at Mon Nov 2 19:19:15 2026 by rpki-client