$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b244a5b6-00de-4670-b373-5a50fd91bc2a.roa File: b244a5b6-00de-4670-b373-5a50fd91bc2a.roa (raw, json) Hash identifier: +bsr4LDnmXpk/l/H5OTj2JaAYD6KnpkhEFaBKFGtk2g= Subject key identifier: 20:F9:9B:C6:EE:FD:A9:3F:C5:3A:E3:50:B5:50:CB:10:FA:24:81:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 525A127787ED8C575E3F62703E7DB38074E7AEF3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b244a5b6-00de-4670-b373-5a50fd91bc2a.roa Signing time: Thu 15 Oct 2026 00:31:31 +0000 ROA not before: Thu 15 Oct 2026 00:31:31 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.25.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5a:12:77:87:ed:8c:57:5e:3f:62:70:3e:7d:b3:80:74:e7:ae:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:31:31 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=6775813c1e47e321e46e77271c057d2ad02e4009aaccf3152af7cc62030c3de3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:de:2e:24:b3:a1:b8:4a:9a:b3:f6:a4:3f: 95:42:ef:a8:50:dd:40:f9:c9:40:4a:40:65:e0:6f: ba:47:d7:27:8b:b3:14:5f:6d:22:62:6b:a1:91:86: 34:83:58:0f:fb:33:63:7f:4e:7a:b7:44:f9:47:2c: 30:7d:62:57:44:63:9f:ce:97:96:8f:04:60:9c:c6: 30:d5:bf:eb:8c:07:02:89:a0:62:67:65:73:a9:03: 24:e6:c9:7d:92:41:f9:87:9c:f3:94:17:a2:6b:38: a4:bc:07:ff:1c:f0:c1:93:3a:da:e4:e7:f6:7f:3a: 95:1a:dc:1e:11:0e:e4:af:a8:58:cb:83:39:ca:bf: d7:61:fd:1d:78:4c:66:d9:13:df:63:64:3e:e9:36: 2a:73:bf:f2:25:c0:a9:7f:35:83:3d:a2:6d:1a:ba: 48:f0:79:15:8f:15:e3:5b:a8:e3:93:33:67:90:16: 28:4d:1c:26:71:fd:37:a0:4c:95:13:66:7c:77:be: 8f:06:68:c5:63:a0:17:53:be:9c:c4:11:53:1f:93: 62:8c:6c:b8:64:16:c7:4a:d8:4b:21:84:82:82:8b: 52:ff:c0:37:10:c6:de:63:e1:da:02:c4:16:d5:8a: d5:b6:19:38:64:2a:42:49:db:89:ea:33:cd:46:c0: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F9:9B:C6:EE:FD:A9:3F:C5:3A:E3:50:B5:50:CB:10:FA:24:81:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b244a5b6-00de-4670-b373-5a50fd91bc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.25.232.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:37:92:b3:6e:85:63:8c:ce:f5:d5:46:85:e3:cd:08:6a:6f: 95:c9:15:86:cd:31:6d:c6:c1:a8:03:58:14:a0:01:0d:5b:f7: 09:fc:b9:6d:e9:83:70:37:50:06:27:39:ad:d2:79:1f:69:c0: b0:a7:3e:f5:fe:b7:92:bf:24:73:38:94:4a:52:44:06:2c:f6: 55:2a:33:71:ef:f3:76:62:5d:92:a2:d5:a9:76:c3:32:fb:8a: 41:f8:6d:70:09:a5:4f:9d:c7:16:f6:e6:a3:64:d9:eb:a7:db: 31:e2:0d:26:b1:1a:40:71:08:23:e3:f4:25:a0:6c:23:6d:84: 72:dc:c7:d2:36:c7:70:0e:cf:92:40:98:78:af:5d:55:78:ed: 94:19:96:81:12:4c:da:91:13:84:65:30:40:01:2f:8c:2d:b3: 25:fa:ca:89:a4:cd:e0:96:0a:39:e8:c0:44:76:4c:57:88:d5: 9b:de:67:ce:8b:82:de:b1:23:dd:16:d7:40:4c:db:a8:e6:d5: ef:aa:34:9f:62:3d:1d:79:9e:ae:51:6d:18:ed:18:0f:04:5f: 92:af:11:01:bc:88:c2:0d:34:74:ac:63:29:1e:26:71:c4:98: e9:f9:19:a0:18:45:82:64:6f:7d:96:a2:84:b4:e1:f9:1c:10: 64:9d:45:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUloSd4ftjFdeP2JwPn2zgHTnrvMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAzMTMxWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Nzc1ODEzYzFlNDdlMzIxZTQ2ZTc3MjcxYzA1N2QyYWQw MmU0MDA5YWFjY2YzMTUyYWY3Y2M2MjAzMGMzZGUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHP94uJLOhuEqas/akP5VC76hQ3UD5yUBKQGXgb7pH1yeL sxRfbSJia6GRhjSDWA/7M2N/Tnq3RPlHLDB9YldEY5/Ol5aPBGCcxjDVv+uMBwKJ oGJnZXOpAyTmyX2SQfmHnPOUF6JrOKS8B/8c8MGTOtrk5/Z/OpUa3B4RDuSvqFjL gznKv9dh/R14TGbZE99jZD7pNipzv/IlwKl/NYM9om0aukjweRWPFeNbqOOTM2eQ FihNHCZx/TegTJUTZnx3vo8GaMVjoBdTvpzEEVMfk2KMbLhkFsdK2EshhIKCi1L/ wDcQxt5j4doCxBbVitW2GThkKkJJ24nqM81GwNETAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIPmbxu79qT/FOuNQtVDLEPokgRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyNDRhNWI2LTAwZGUtNDY3MC1iMzczLTVhNTBmZDkxYmMyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFGegwDQYJKoZIhvcNAQELBQADggEBAH83krNuhWOMzvXVRoXjzQhqb5XJ FYbNMW3GwagDWBSgAQ1b9wn8uW3pg3A3UAYnOa3SeR9pwLCnPvX+t5K/JHM4lEpS RAYs9lUqM3Hv83ZiXZKi1al2wzL7ikH4bXAJpU+dxxb25qNk2eun2zHiDSaxGkBx CCPj9CWgbCNthHLcx9I2x3AOz5JAmHivXVV47ZQZloESTNqRE4RlMEABL4wtsyX6 yomkzeCWCjnowER2TFeI1ZveZ86Lgt6xI90W10BM26jm1e+qNJ9iPR15nq5RbRjt GA8EX5KvEQG8iMINNHSsYykeJnHEmOn5GaAYRYJkb32WooS04fkcEGSdRaw= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:25 2026 by rpki-client