$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96af5014-b4fc-4580-beb4-50a83f943fe0.roa File: 96af5014-b4fc-4580-beb4-50a83f943fe0.roa (raw, json) Hash identifier: u7Ycbc+cDVw7GPPnoqnKj2eenk9swMco6LHLYiZKhgM= Subject key identifier: 33:EF:C1:D7:9F:02:27:08:03:DE:8D:CE:EF:E7:FB:4C:70:04:98:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BC1B52220DAC16FBD3D2A50F974DE2237811AF8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96af5014-b4fc-4580-beb4-50a83f943fe0.roa Signing time: Mon 19 Oct 2026 01:40:11 +0000 ROA not before: Mon 19 Oct 2026 01:40:11 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c1:b5:22:20:da:c1:6f:bd:3d:2a:50:f9:74:de:22:37:81:1a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:40:11 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=ee70d5ff6b6ca9189f882c4f4f0d3745ef85facaa325a98bfc6e22b8adba042f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:57:c0:37:00:62:ef:ee:b0:9d:d0:86:68: 17:da:4f:59:97:ab:c5:fc:01:41:23:c4:8e:24:6c: d2:c1:9e:08:5f:b3:8f:33:8e:ac:b9:70:f3:18:95: 52:ce:e6:68:fa:16:f2:0b:5e:1f:d2:c7:e8:f6:60: 78:5b:ba:bd:c0:c8:81:05:06:2c:92:07:f9:8e:97: 64:41:14:14:cb:21:fa:f1:02:35:a6:3d:f2:f7:f6: 5e:23:09:67:e1:dd:9f:e3:2f:7f:c3:80:f9:9c:e0: dc:f2:08:e6:ce:c7:2c:3a:df:89:d2:78:30:46:07: 91:54:65:75:ae:41:be:78:59:a8:10:90:f0:bc:1c: f7:95:99:d9:bd:c9:29:c9:30:65:cd:6e:b1:07:70: c4:39:3d:0d:51:9c:74:db:5a:a6:4d:59:48:d0:b3: 85:72:b6:65:c1:95:bf:41:07:8e:21:88:df:3d:20: 7a:91:e1:99:8f:a3:b3:08:75:3b:41:bc:d2:96:21: fb:6a:56:77:2f:b7:58:38:2f:bd:50:1a:a6:b3:2b: 4d:9a:b7:d8:08:07:9c:4d:1a:02:9b:60:86:86:a7: 83:99:07:40:ca:c9:8e:70:73:af:f9:eb:8f:64:c1: 43:f6:c6:df:fe:1d:f6:96:6c:fb:f5:80:39:4c:af: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EF:C1:D7:9F:02:27:08:03:DE:8D:CE:EF:E7:FB:4C:70:04:98:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96af5014-b4fc-4580-beb4-50a83f943fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.77.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:31:49:bc:35:ae:66:c6:2d:52:89:55:a5:67:72:27:56:de: 94:5c:ce:6e:9f:f9:04:4a:ee:0f:f1:d8:61:77:44:a9:1f:65: 1c:0a:24:ff:c5:94:72:cb:36:77:46:c9:29:6c:b5:2f:95:d3: 2a:97:28:2e:6a:32:62:d1:05:30:2e:93:2b:1f:8a:19:e8:d8: ea:3f:9b:b6:65:d6:46:2b:ce:15:d1:55:73:2a:b8:1c:ff:d8: 5e:41:5b:65:da:99:bf:1e:66:21:74:ea:79:db:32:2b:72:cb: 30:d1:e0:be:2c:81:3d:9e:85:e9:d1:9b:1d:ca:ef:ad:45:23: 92:a1:83:59:42:1b:e9:0c:9b:98:8a:41:c5:bb:55:5b:33:c2: b4:5e:a9:49:0d:79:86:c2:f0:42:17:a7:1e:0a:40:3d:f6:e3: c4:30:76:e2:56:92:49:90:f6:90:5b:37:a8:f6:3f:cb:4e:30: 22:a3:c7:82:c6:e0:2b:9c:82:7f:98:f4:15:7f:52:ef:69:e2: 7c:4a:e5:fd:94:2a:79:01:09:66:2e:53:d5:95:5c:d5:eb:e2: ce:5f:2d:9f:54:12:f8:31:58:b6:ce:d2:ea:32:33:c9:be:9e: d4:35:b8:91:1d:b6:1f:89:d8:ba:39:e8:92:df:ee:59:97:6e: 29:98:0e:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO8G1IiDawW+9PSpQ+XTeIjeBGvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDE0MDExWhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTcwZDVmZjZiNmNhOTE4OWY4ODJjNGY0ZjBkMzc0NWVm ODVmYWNhYTMyNWE5OGJmYzZlMjJiOGFkYmEwNDJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI91fANwBi7+6wndCGaBfaT1mXq8X8AUEjxI4kbNLBnghf s48zjqy5cPMYlVLO5mj6FvILXh/Sx+j2YHhbur3AyIEFBiySB/mOl2RBFBTLIfrx AjWmPfL39l4jCWfh3Z/jL3/DgPmc4NzyCObOxyw634nSeDBGB5FUZXWuQb54WagQ kPC8HPeVmdm9ySnJMGXNbrEHcMQ5PQ1RnHTbWqZNWUjQs4VytmXBlb9BB44hiN89 IHqR4ZmPo7MIdTtBvNKWIftqVncvt1g4L71QGqazK02at9gIB5xNGgKbYIaGp4OZ B0DKyY5wc6/5649kwUP2xt/+HfaWbPv1gDlMr7HrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM+/B158CJwgD3o3O7+f7THAEmPowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2YWY1MDE0LWI0ZmMtNDU4MC1iZWI0LTUwYTgzZjk0M2ZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsE0wDQYJKoZIhvcNAQELBQADggEBAB8xSbw1rmbGLVKJVaVncidW3pRc zm6f+QRK7g/x2GF3RKkfZRwKJP/FlHLLNndGySlstS+V0yqXKC5qMmLRBTAukysf ihno2Oo/m7Zl1kYrzhXRVXMquBz/2F5BW2Xamb8eZiF06nnbMityyzDR4L4sgT2e henRmx3K761FI5Khg1lCG+kMm5iKQcW7VVszwrReqUkNeYbC8EIXpx4KQD3248Qw duJWkkmQ9pBbN6j2P8tOMCKjx4LG4Cucgn+Y9BV/Uu9p4nxK5f2UKnkBCWYuU9WV XNXr4s5fLZ9UEvgxWLbO0uoyM8m+ntQ1uJEdth+J2Lo56JLf7lmXbimYDuI= -----END CERTIFICATE-----Generated at Tue Nov 3 04:11:22 2026 by rpki-client