$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa File: aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa (raw, json) Hash identifier: 1+QbKBQqX1un7aQBkCJk87WS0nU3M3i7vWJGcDm7Ecw= Subject key identifier: D6:93:C3:2E:00:D2:2D:E1:1D:75:6B:6C:56:9F:4C:BE:DD:E7:39:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DE89997DCAEE21EA81EF2C93A202CD0A6B1905F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa Signing time: Sun 11 Oct 2026 01:08:18 +0000 ROA not before: Sun 11 Oct 2026 01:08:18 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e8:99:97:dc:ae:e2:1e:a8:1e:f2:c9:3a:20:2c:d0:a6:b1:90:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 11 01:08:18 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=ae9043920427fb10a6f440d73cf0efbb4ea2425cb29d507d58fb0ca1bc78cf4e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b8:e2:21:28:fe:0f:fc:0e:f5:d0:d9:bc:c9: 31:3a:fe:10:9f:a1:38:c8:3d:5e:bd:d4:c8:ef:06: 0b:ff:a4:ff:e3:fe:ac:9d:cd:b3:64:e9:d2:0b:bb: 41:e3:4a:c7:3b:7f:42:fb:a3:13:27:f6:81:91:ba: d2:c8:08:dd:ef:69:dc:46:c6:b2:93:14:e3:e1:b6: 5b:b8:ce:f1:6d:05:23:ef:46:dc:ca:23:11:9c:34: 4d:e0:b6:02:43:52:ca:a0:25:77:8d:d7:97:d3:33: 93:e2:42:5d:32:3a:e3:e0:41:70:db:b3:28:29:6e: 10:c5:b5:5d:46:0d:c2:de:5c:e4:54:e1:92:f5:a2: 0c:bb:5c:14:9b:5b:8e:ac:ec:64:b9:70:e1:57:7e: fa:a8:ea:cb:3e:b8:f5:1f:5a:18:34:27:ef:c5:2f: e9:be:4c:6b:82:49:d6:8d:0f:a0:bf:d5:51:5b:94: 9d:58:3b:b6:c2:fe:a2:e1:4f:a8:08:66:e4:fe:74: bb:a2:d0:97:d1:32:79:53:a2:59:ad:e9:bf:b7:8a: 22:50:1f:2f:a4:0f:fe:32:3e:3f:92:3d:2e:d0:29: 31:25:58:63:c4:fb:1f:e6:83:2d:2c:48:f3:55:a6: 8b:e9:4d:c0:ac:b3:91:d1:cf:ff:dd:81:d3:2c:ca: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:93:C3:2E:00:D2:2D:E1:1D:75:6B:6C:56:9F:4C:BE:DD:E7:39:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.128.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:a1:6b:6a:df:af:92:ec:bc:6c:f2:5a:43:49:13:f1:14:b8: 6f:2f:65:1b:1a:c8:d3:5e:c0:99:db:76:84:2c:b0:2b:7d:71: 69:1b:5d:15:7e:ed:f8:63:6c:bc:4b:d9:6d:da:90:88:c8:1b: be:f3:66:d5:55:58:9c:23:36:08:49:ce:2b:9c:e0:cd:bb:4b: f8:14:37:da:26:93:f1:65:3e:a8:68:55:60:bf:b6:25:e8:f1: 2c:51:b6:de:6c:e5:42:7e:b8:90:31:cf:f4:9b:62:d0:39:db: 62:08:ff:bd:0d:40:b6:86:f0:ce:7e:14:57:48:3a:89:b3:af: 4e:b4:e5:7a:95:0f:fa:b3:60:0a:4d:cf:40:38:96:8b:11:29: 64:5a:78:f4:2b:34:86:f9:1a:82:d4:1f:4a:12:a9:7e:8a:9c: f9:5a:f3:4c:f7:36:fd:cc:42:c8:20:a4:97:13:d0:d0:4b:a3: 7a:9f:01:c2:72:01:9f:c2:3d:78:52:7b:1b:99:25:78:c4:7c: d3:f4:3a:ec:4c:fc:ca:65:e6:62:82:47:c1:a0:2f:ba:2d:0b: 4c:95:c5:54:dc:87:bb:af:4c:d4:20:cd:49:25:1b:68:01:72: 53:31:40:8f:01:16:f8:2f:c0:ce:4d:9f:49:ff:50:64:43:0f: d6:e5:ff:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDeiZl9yu4h6oHvLJOiAs0KaxkF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDEwODE4WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTkwNDM5MjA0MjdmYjEwYTZmNDQwZDczY2YwZWZiYjRl YTI0MjVjYjI5ZDUwN2Q1OGZiMGNhMWJjNzhjZjRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnuOIhKP4P/A710Nm8yTE6/hCfoTjIPV691MjvBgv/pP/j /qydzbNk6dILu0HjSsc7f0L7oxMn9oGRutLICN3vadxGxrKTFOPhtlu4zvFtBSPv RtzKIxGcNE3gtgJDUsqgJXeN15fTM5PiQl0yOuPgQXDbsygpbhDFtV1GDcLeXORU 4ZL1ogy7XBSbW46s7GS5cOFXfvqo6ss+uPUfWhg0J+/FL+m+TGuCSdaND6C/1VFb lJ1YO7bC/qLhT6gIZuT+dLui0JfRMnlTolmt6b+3iiJQHy+kD/4yPj+SPS7QKTEl WGPE+x/mgy0sSPNVpovpTcCss5HRz//dgdMsykPJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1pPDLgDSLeEddWtsVp9Mvt3nObowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmZjVmNmJhLWYwZmMtNDExMS1iMmRiLTJlYjZkMjU5MTY2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgIAwDQYJKoZIhvcNAQELBQADggEBAE2ha2rfr5LsvGzyWkNJE/EUuG8v ZRsayNNewJnbdoQssCt9cWkbXRV+7fhjbLxL2W3akIjIG77zZtVVWJwjNghJziuc 4M27S/gUN9omk/FlPqhoVWC/tiXo8SxRtt5s5UJ+uJAxz/SbYtA522II/70NQLaG 8M5+FFdIOomzr0605XqVD/qzYApNz0A4losRKWRaePQrNIb5GoLUH0oSqX6KnPla 80z3Nv3MQsggpJcT0NBLo3qfAcJyAZ/CPXhSexuZJXjEfNP0OuxM/Mpl5mKCR8Gg L7otC0yVxVTch7uvTNQgzUklG2gBclMxQI8BFvgvwM5Nn0n/UGRDD9bl/w8= -----END CERTIFICATE-----Generated at Sun Nov 1 19:40:40 2026 by rpki-client