$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a52ac74-46ae-4e2e-adef-8b6c4c3118dd.roa File: 9a52ac74-46ae-4e2e-adef-8b6c4c3118dd.roa (raw, json) Hash identifier: izoRKtAKg8Cea7cQmIc1Hxx1ByflDrG563zhKs9cBRU= Subject key identifier: 87:60:74:E8:5D:C9:15:FF:80:3F:7C:C5:AD:B3:1B:DC:BE:9D:9D:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03CA44ECADF92162B370CE249D33FE62E30C0C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a52ac74-46ae-4e2e-adef-8b6c4c3118dd.roa Signing time: Tue 20 Oct 2026 00:40:55 +0000 ROA not before: Tue 20 Oct 2026 00:40:55 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 137.19.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ca:44:ec:ad:f9:21:62:b3:70:ce:24:9d:33:fe:62:e3:0c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 20 00:40:55 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=1803ba050327b9de486bf51ac3da53a32c50a0c6a267e541e614dcbb27c8baf5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:56:b7:14:6a:d9:22:ac:51:c3:a9:36:3c: 26:eb:26:44:4c:2b:77:90:84:52:4b:c4:6d:c4:8b: e2:49:8f:a5:9d:cf:46:c5:6a:79:5c:2b:88:9a:bc: 3b:6f:07:71:33:21:23:98:43:c6:99:f6:fb:30:2e: 25:e1:28:33:af:d8:5d:e8:6f:23:d2:f6:44:dc:9f: 2b:2f:3b:39:d9:81:bb:e5:45:42:22:aa:ef:99:23: 02:6c:5c:f4:6b:fe:31:ab:89:59:19:6e:b5:f0:01: 72:59:e4:59:0f:39:4f:4b:37:ef:28:82:a7:0b:2a: f5:92:42:2c:90:ed:bb:dd:de:1c:03:55:80:64:8a: 75:08:da:f4:90:e8:72:e7:d2:cc:46:52:6d:2a:61: 59:e3:00:4a:90:37:fc:fd:45:b7:ea:3e:f9:b0:2c: 3f:5c:03:3f:91:a2:45:91:d7:47:00:a3:0f:ad:3c: 56:53:4b:a6:26:a5:18:e1:fb:3d:66:0a:e3:7e:53: 03:a3:12:67:a4:a1:5f:17:27:c2:3e:9f:c4:b5:4a: 79:99:b7:38:a9:d4:69:89:05:4e:fc:5f:fc:e7:53: 4d:6b:46:e2:fb:ed:32:6c:3f:b4:61:53:cc:55:f2: ed:34:09:11:c8:da:a7:17:17:b2:64:20:f7:e0:2c: 44:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:60:74:E8:5D:C9:15:FF:80:3F:7C:C5:AD:B3:1B:DC:BE:9D:9D:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a52ac74-46ae-4e2e-adef-8b6c4c3118dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.19.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:77:ea:c9:71:a0:a4:b7:47:9c:0a:48:47:6f:9a:71:df:f0: bd:b4:18:6c:f2:1e:90:9d:2c:5c:fc:eb:a5:6c:ae:46:4a:b2: 34:ae:df:d8:ab:fe:ee:3f:3d:d3:cf:54:f3:97:e7:58:48:dd: e1:b7:0f:ea:75:df:40:ba:ff:66:60:ab:b4:16:8f:e2:08:c3: 75:ed:78:4d:7e:51:53:76:f4:fc:45:fb:d5:ff:e3:9d:5f:30: 79:ea:ac:6f:72:bb:24:cd:b9:02:74:39:89:a1:04:80:d6:42: ec:0d:7c:08:22:df:b4:b6:e1:1f:da:ec:4d:96:21:a4:f2:16: fa:ff:c1:0f:d4:f2:c9:4e:0d:2f:4a:84:6f:53:47:b6:ba:d8: 50:ee:33:fb:48:ec:ca:0f:31:f0:a5:1b:bf:74:2a:61:12:aa: c4:68:41:b9:77:94:22:d4:e8:37:90:ee:f1:4d:dc:19:83:4b: 92:b4:10:96:1e:50:ab:0d:56:26:81:a0:f6:94:cf:b3:d8:0a: b3:ad:a9:cf:4f:d1:22:1d:02:da:12:56:88:ca:fc:be:fb:a6: 3a:e5:e6:5c:a1:aa:ee:a3:0a:37:77:a8:fd:d8:8a:46:78:84: ba:3f:30:60:6c:84:1c:40:39:c0:d1:f1:28:3f:bf:e9:33:dd: c3:dd:b5:86 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITA8pE7K35IWKzcM4knTP+YuMMDDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMjAwMDQwNTVaFw0yNzAxMTgyMzU5NTla MHoxSTBHBgNVBAUTQDE4MDNiYTA1MDMyN2I5ZGU0ODZiZjUxYWMzZGE1M2EzMmM1 MGEwYzZhMjY3ZTU0MWU2MTRkY2JiMjdjOGJhZjUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALZvVrcUatkirFHDqTY8JusmREwrd5CEUkvEbcSL4kmPpZ3P RsVqeVwriJq8O28HcTMhI5hDxpn2+zAuJeEoM6/YXehvI9L2RNyfKy87OdmBu+VF QiKq75kjAmxc9Gv+MauJWRlutfABclnkWQ85T0s37yiCpwsq9ZJCLJDtu93eHANV gGSKdQja9JDocufSzEZSbSphWeMASpA3/P1Ft+o++bAsP1wDP5GiRZHXRwCjD608 VlNLpialGOH7PWYK435TA6MSZ6ShXxcnwj6fxLVKeZm3OKnUaYkFTvxf/OdTTWtG 4vvtMmw/tGFTzFXy7TQJEcjapxcXsmQg9+AsRFUCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBSHYHToXckV/4A/fMWtsxvcvp2d5zAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvOWE1MmFjNzQtNDZhZS00ZTJlLWFkZWYtOGI2YzRjMzExOGRkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAIkTMA0GCSqGSIb3DQEBCwUAA4IBAQA2d+rJcaCkt0ecCkhHb5px3/C9tBhs 8h6QnSxc/OulbK5GSrI0rt/Yq/7uPz3Tz1Tzl+dYSN3htw/qdd9Auv9mYKu0Fo/i CMN17XhNflFTdvT8RfvV/+OdXzB56qxvcrskzbkCdDmJoQSA1kLsDXwIIt+0tuEf 2uxNliGk8hb6/8EP1PLJTg0vSoRvU0e2uthQ7jP7SOzKDzHwpRu/dCphEqrEaEG5 d5Qi1Og3kO7xTdwZg0uStBCWHlCrDVYmgaD2lM+z2AqzranPT9EiHQLaElaIyvy+ +6Y65eZcoaruowo3d6j92IpGeIS6PzBgbIQcQDnA0fEoP7/pM93D3bWG -----END CERTIFICATE-----Generated at Sun Nov 1 13:03:22 2026 by rpki-client