$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/961075b0-0601-4672-a02a-3745102a7d23.roa File: 961075b0-0601-4672-a02a-3745102a7d23.roa (raw, json) Hash identifier: 1uEcEPQirvY0eQ86+rxi7Iesai3clXKmZiZbAR3Svvk= Subject key identifier: 96:8A:86:5C:AD:20:4E:D1:2F:B1:0B:E3:2F:48:8B:1E:D2:8C:16:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F0AB4693876181A1EB746D5ACA7595B9D5DA0B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/961075b0-0601-4672-a02a-3745102a7d23.roa Signing time: Thu 22 Oct 2026 00:10:10 +0000 ROA not before: Thu 22 Oct 2026 00:10:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.107.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0a:b4:69:38:76:18:1a:1e:b7:46:d5:ac:a7:59:5b:9d:5d:a0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 00:10:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=49355c5e97db676127c21ae2fb5f8f8bf56bd591165e63ca564231bbbf07e1fd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:28:b7:b7:b3:7e:ac:24:4f:43:bf:d7:eb: df:a0:6d:f1:f3:26:28:d0:d7:81:86:dc:77:a4:cd: 17:46:7d:68:f5:76:33:15:60:9f:80:dc:3d:b9:60: dc:72:e2:c1:8d:e4:31:a5:68:7d:38:47:9e:55:d4: b3:26:0a:e1:21:01:7b:32:e5:59:63:5e:16:12:29: 31:28:5d:2d:02:f8:53:ca:5d:86:23:00:ea:71:60: c7:0c:51:33:34:33:25:92:01:5c:de:25:99:a5:ad: a2:49:df:90:9a:98:09:3b:81:e3:d8:14:39:d3:e1: a9:9f:c8:55:c9:8b:1f:af:6a:b1:cc:ae:54:14:46: 08:52:db:bd:f0:c9:af:4e:39:f4:43:a7:83:14:fa: 04:74:08:b0:08:80:94:f4:e9:2d:a1:9f:64:f1:19: 11:87:af:59:77:4d:76:9f:75:42:96:d9:9e:d3:5f: a6:cf:9f:6e:7b:bb:c6:62:81:09:59:bf:b7:f2:b2: 34:d1:20:37:43:56:c5:be:db:68:8f:45:6c:a3:7c: d1:25:e0:e6:0a:77:42:5b:77:8b:4a:19:6f:dd:0a: fb:0b:a5:15:f0:44:50:11:ca:34:2c:0a:93:db:97: 93:70:56:64:fb:c6:94:05:16:0e:65:21:0b:fe:ff: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8A:86:5C:AD:20:4E:D1:2F:B1:0B:E3:2F:48:8B:1E:D2:8C:16:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/961075b0-0601-4672-a02a-3745102a7d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.107.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:3f:a9:d6:0e:c2:91:94:49:10:b3:bc:1f:61:4e:f1:a2:af: c1:87:90:e2:2b:bd:13:48:e0:cd:0f:31:10:7f:e0:a7:48:6d: 74:9a:7e:54:7a:80:cc:c0:ef:78:7b:b4:db:96:67:d3:cb:44: a4:cc:e3:16:25:7d:cf:15:72:fd:47:e2:9c:54:72:d3:e1:ab: e8:88:84:4a:1f:70:ba:35:55:1d:13:c5:b4:59:dc:45:14:0e: 76:66:49:8c:30:5e:8d:43:65:df:91:12:9a:dc:9d:b6:f8:23: 84:bc:ae:15:73:f1:c4:b9:24:21:f1:b5:2f:8c:d8:d2:62:50: e2:95:38:96:e4:cb:71:53:9e:70:a7:d2:37:c6:ec:cc:0b:6e: e3:80:c1:32:89:b5:9c:27:b0:81:18:4d:76:bc:ab:c4:5f:d9: 98:3a:06:05:fc:66:f4:b1:92:94:1b:42:79:f5:6f:71:2f:84: b1:5c:e4:4d:fe:6b:b1:dc:61:d3:69:5a:cd:87:9f:1a:e7:8c: de:fa:36:cc:33:f0:9a:fb:b8:29:78:7c:96:38:d0:17:bf:28: 05:53:e2:40:b1:b4:db:fd:3d:ca:3e:c0:44:30:38:2b:a7:39: fe:b6:8c:fe:ff:37:cb:b8:8d:a7:76:3e:4c:2a:aa:11:9b:e0: 17:0e:96:41 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTwq0aTh2GBoet0bVrKdZW51doLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDAxMDEwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTM1NWM1ZTk3ZGI2NzYxMjdjMjFhZTJmYjVmOGY4YmY1 NmJkNTkxMTY1ZTYzY2E1NjQyMzFiYmJmMDdlMWZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCswyi3t7N+rCRPQ7/X69+gbfHzJijQ14GG3HekzRdGfWj1 djMVYJ+A3D25YNxy4sGN5DGlaH04R55V1LMmCuEhAXsy5VljXhYSKTEoXS0C+FPK XYYjAOpxYMcMUTM0MyWSAVzeJZmlraJJ35CamAk7gePYFDnT4amfyFXJix+varHM rlQURghS273wya9OOfRDp4MU+gR0CLAIgJT06S2hn2TxGRGHr1l3TXafdUKW2Z7T X6bPn257u8ZigQlZv7fysjTRIDdDVsW+22iPRWyjfNEl4OYKd0Jbd4tKGW/dCvsL pRXwRFARyjQsCpPbl5NwVmT7xpQFFg5lIQv+/yn7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUloqGXK0gTtEvsQvjL0iLHtKMFiYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2MTA3NWIwLTA2MDEtNDY3Mi1hMDJhLTM3NDUxMDJhN2QyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQazANBgkqhkiG9w0BAQsFAAOCAQEAhD+p1g7CkZRJELO8H2FO8aKvwYeQ 4iu9E0jgzQ8xEH/gp0htdJp+VHqAzMDveHu025Zn08tEpMzjFiV9zxVy/UfinFRy 0+Gr6IiESh9wujVVHRPFtFncRRQOdmZJjDBejUNl35ESmtydtvgjhLyuFXPxxLkk IfG1L4zY0mJQ4pU4luTLcVOecKfSN8bszAtu44DBMom1nCewgRhNdryrxF/ZmDoG Bfxm9LGSlBtCefVvcS+EsVzkTf5rsdxh02lazYefGueM3vo2zDPwmvu4KXh8ljjQ F78oBVPiQLG02/09yj7ARDA4K6c5/raM/v83y7iNp3Y+TCqqEZvgFw6WQQ== -----END CERTIFICATE-----Generated at Tue Nov 3 19:21:33 2026 by rpki-client