$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cd2582c-5441-4a94-a847-e0367f121957.roa File: 9cd2582c-5441-4a94-a847-e0367f121957.roa (raw, json) Hash identifier: afnhf0111qriYmrjb6i+vgwVFZbLx2hbzJV8HvWBOfY= Subject key identifier: A6:3B:58:4A:F9:E3:9B:4C:A6:18:47:D4:3B:07:CE:B7:6C:E7:8F:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B602C36FB11104548695054767F52C0C1C6FC54 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cd2582c-5441-4a94-a847-e0367f121957.roa Signing time: Thu 08 Oct 2026 00:20:08 +0000 ROA not before: Thu 08 Oct 2026 00:20:08 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 71.141.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:60:2c:36:fb:11:10:45:48:69:50:54:76:7f:52:c0:c1:c6:fc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:20:08 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=baa0abd729a3b10413a7ae713835d345267c54c16bff2f4f3c582f68fe709a95, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:04:66:00:4e:cc:a5:14:f6:5e:03:b3:ee: a7:83:65:10:29:4f:47:46:3d:58:dd:3c:33:17:86: ed:c6:59:43:93:8a:2f:14:ae:fe:02:5b:a7:18:a8: 99:66:16:de:96:57:b0:4b:fe:2f:66:13:1b:11:c1: 21:10:2e:5e:0f:f0:e8:73:d9:1a:80:72:ba:8d:c9: e1:55:3a:63:47:46:97:06:88:15:ef:48:b8:a4:f2: 9c:3c:6f:58:2e:8f:f3:48:7c:ee:35:92:32:c8:5b: 5f:fc:1d:2e:83:65:aa:8c:36:b1:16:16:06:f5:4f: 98:27:9b:99:ba:f0:22:ba:9b:fc:2d:75:dd:57:e4: cf:e6:13:73:75:a6:e5:c6:c6:a5:d6:7e:6b:4d:69: 9c:31:aa:c2:3e:d0:2f:2b:3c:31:f6:cd:67:ca:66: 04:c7:28:0b:17:71:cc:ee:34:1f:cf:50:dc:3f:23: 72:91:4e:51:4b:2d:8b:f7:0d:db:e4:d2:a1:17:4b: 27:7c:e8:4a:ee:80:ab:40:d3:ef:3a:cb:e7:17:99: 66:54:55:28:77:36:59:37:9c:35:ae:e4:29:fc:f1: 80:d2:27:36:cb:5d:e8:83:34:3f:53:95:fe:82:2b: fb:93:d4:29:a8:8e:e7:0c:eb:00:d3:a8:7d:33:03: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:58:4A:F9:E3:9B:4C:A6:18:47:D4:3B:07:CE:B7:6C:E7:8F:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cd2582c-5441-4a94-a847-e0367f121957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.141.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:34:43:ad:38:08:5b:5e:18:42:db:90:20:3e:f8:4d:c3:e8: 4d:e1:2d:91:ef:13:95:db:e0:eb:c1:1d:04:e0:3a:63:89:73: 0f:e5:71:54:4e:98:fb:c7:08:70:f5:f9:d0:a2:80:f9:17:b7: 18:98:a0:1f:7a:1a:46:ed:27:db:44:50:c4:7f:9a:9e:86:1e: eb:22:0a:71:c3:3f:f7:9f:ee:c9:9a:b1:53:ad:4d:bc:a7:84: 1f:8d:36:ce:e2:4e:72:41:64:6d:c4:b5:ed:8d:8c:ec:31:1a: d8:ee:a4:dc:8d:59:3e:f1:95:30:10:e2:d3:99:f2:9f:d6:52: e4:63:ed:b6:90:19:fd:0e:67:c8:2a:4d:35:d7:ad:e4:54:87: 8c:49:69:18:97:49:88:f5:be:41:df:32:3b:3f:fc:e0:f6:3c: 2c:d6:3b:49:b2:f3:79:ae:f7:10:f7:de:ec:cb:dd:82:b7:bd: 2d:51:30:da:8f:d5:0c:1f:e0:ef:e7:e9:cb:e7:c3:81:dd:a0: 52:37:8b:19:6a:16:9a:66:f3:37:4b:89:e0:61:64:66:72:93: 0e:39:55:7f:ce:9b:c5:8f:b9:65:03:87:d8:3b:3f:d0:b5:42: c2:21:56:f1:75:a3:d4:3c:60:8b:a3:99:be:e3:3e:e5:9e:c9: a7:e9:63:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO2AsNvsREEVIaVBUdn9SwMHG/FQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAyMDA4WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWEwYWJkNzI5YTNiMTA0MTNhN2FlNzEzODM1ZDM0NTI2 N2M1NGMxNmJmZjJmNGYzYzU4MmY2OGZlNzA5YTk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG1gRmAE7MpRT2XgOz7qeDZRApT0dGPVjdPDMXhu3GWUOT ii8Urv4CW6cYqJlmFt6WV7BL/i9mExsRwSEQLl4P8Ohz2RqAcrqNyeFVOmNHRpcG iBXvSLik8pw8b1guj/NIfO41kjLIW1/8HS6DZaqMNrEWFgb1T5gnm5m68CK6m/wt dd1X5M/mE3N1puXGxqXWfmtNaZwxqsI+0C8rPDH2zWfKZgTHKAsXcczuNB/PUNw/ I3KRTlFLLYv3Ddvk0qEXSyd86ErugKtA0+86y+cXmWZUVSh3Nlk3nDWu5Cn88YDS JzbLXeiDND9Tlf6CK/uT1CmojucM6wDTqH0zAzdjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpjtYSvnjm0ymGEfUOwfOt2znj80wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljZDI1ODJjLTU0NDEtNGE5NC1hODQ3LWUwMzY3ZjEyMTk1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZHjQAwDQYJKoZIhvcNAQELBQADggEBAA40Q604CFteGELbkCA++E3D6E3h LZHvE5Xb4OvBHQTgOmOJcw/lcVROmPvHCHD1+dCigPkXtxiYoB96GkbtJ9tEUMR/ mp6GHusiCnHDP/ef7smasVOtTbynhB+NNs7iTnJBZG3Ete2NjOwxGtjupNyNWT7x lTAQ4tOZ8p/WUuRj7baQGf0OZ8gqTTXXreRUh4xJaRiXSYj1vkHfMjs//OD2PCzW O0my83mu9xD33uzL3YK3vS1RMNqP1Qwf4O/n6cvnw4HdoFI3ixlqFppm8zdLieBh ZGZykw45VX/Om8WPuWUDh9g7P9C1QsIhVvF1o9Q8YIujmb7jPuWeyafpY/8= -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:27 2026 by rpki-client