$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa File: b2c3c467-0357-412c-8f21-70113f26e16c.roa (raw, json) Hash identifier: CwINUacdQEAGtfGXyXQif3Y/w9A0y3xJtec5uHwtNMo= Subject key identifier: D2:93:3C:7C:E3:30:B3:58:F7:7A:47:E7:68:49:A6:BC:0C:76:01:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21D1BFE61D9899AD606D18E572466756C95EB853 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa Signing time: Tue 27 Oct 2026 00:11:15 +0000 ROA not before: Tue 27 Oct 2026 00:11:15 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 205.172.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d1:bf:e6:1d:98:99:ad:60:6d:18:e5:72:46:67:56:c9:5e:b8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:11:15 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=13e663aeb1c3a335fe8543a33b3b974a54ea4aa945a5e4263d47733e0b4b43c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:d6:27:04:19:5e:bc:24:80:23:dc:35:23: 47:95:9d:5e:5d:75:af:8e:75:5d:c9:58:a0:8a:ab: 48:37:27:5a:e0:8c:13:7e:97:69:7d:e4:0e:86:8f: 96:73:52:65:02:40:8f:d2:37:13:93:7a:5f:9c:f4: 45:da:c7:4d:d8:45:60:69:f7:9e:d8:85:77:1e:ae: 30:7d:cb:fd:fe:8a:88:cc:3c:48:6b:e6:20:db:00: 9e:74:ab:b0:ae:8d:d4:b7:a5:50:ed:dd:1a:59:70: f9:58:41:7d:cf:f3:8a:0d:1e:29:54:ac:0c:f9:12: e7:1c:1d:7f:ef:ed:2a:c5:c0:00:c1:9f:fd:ef:ed: 16:93:ad:9f:79:0d:cb:25:0d:5e:fe:bf:58:8b:79: cc:fc:e1:ac:30:ab:bc:6d:d2:64:73:ec:6e:81:82: d7:33:40:4e:9b:7f:92:3e:52:b9:90:7b:75:d1:de: 76:bf:ba:a7:c3:11:c8:a3:a1:bc:88:b6:e1:c7:31: b9:be:be:73:47:d6:c1:69:c4:25:37:d9:08:54:c9: e6:9f:e7:14:af:17:2e:bf:eb:a3:48:5f:8c:37:b8: 03:a0:39:19:38:20:91:7f:5f:3d:28:99:e3:f7:c4: a7:dc:ec:21:db:55:98:62:26:c7:31:c4:9e:fe:b1: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:93:3C:7C:E3:30:B3:58:F7:7A:47:E7:68:49:A6:BC:0C:76:01:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.172.176.0/22 Signature Algorithm: sha256WithRSAEncryption 47:a7:ed:52:79:89:1f:43:19:7d:0d:bc:c0:61:2f:35:64:1c: d2:8f:bd:8b:f9:fb:cc:8f:e3:14:82:24:9f:55:dc:15:f5:03: bd:36:b7:cc:08:2f:c0:0e:bb:c9:32:7d:dd:35:e7:dd:4d:a4: 38:a3:31:1f:6f:fc:d5:76:f0:3a:0c:fb:d2:76:33:f0:99:05: bc:d2:e9:2a:97:4f:fa:07:f6:d3:b7:d3:35:da:55:1e:3a:b9: 71:e3:63:df:87:30:2a:cb:1c:b5:8b:a1:24:7f:45:89:55:55: 0e:47:e6:b9:f3:09:9d:d6:ec:0d:8c:d5:38:1a:56:9c:22:20: fd:fd:a0:c1:15:b7:e6:d3:1e:cf:94:b7:f5:55:08:20:01:99: 22:69:b0:32:27:98:30:59:a1:16:a3:60:e0:e0:b7:02:45:6c: 46:51:d0:2a:db:35:a8:0f:23:f0:7d:ae:70:e3:7a:88:37:bd: 32:3d:6a:71:3b:6b:12:05:e7:6c:c7:fe:a7:a3:13:48:ff:12: 14:17:eb:5e:6a:41:fc:fb:ac:35:cb:ce:e5:31:bd:d5:95:8f: c2:df:76:86:1f:44:9c:5a:c9:68:8a:72:5c:03:a6:f1:c3:52: e3:0d:74:8c:8f:11:d2:d3:f6:42:23:27:ab:48:01:27:d4:79: 7d:c1:5e:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIdG/5h2Yma1gbRjlckZnVsleuFMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAxMTE1WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2U2NjNhZWIxYzNhMzM1ZmU4NTQzYTMzYjNiOTc0YTU0 ZWE0YWE5NDVhNWU0MjYzZDQ3NzMzZTBiNGI0M2M2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm2dYnBBlevCSAI9w1I0eVnV5dda+OdV3JWKCKq0g3J1rg jBN+l2l95A6Gj5ZzUmUCQI/SNxOTel+c9EXax03YRWBp957YhXcerjB9y/3+iojM PEhr5iDbAJ50q7CujdS3pVDt3RpZcPlYQX3P84oNHilUrAz5EuccHX/v7SrFwADB n/3v7RaTrZ95DcslDV7+v1iLecz84awwq7xt0mRz7G6BgtczQE6bf5I+UrmQe3XR 3na/uqfDEcijobyItuHHMbm+vnNH1sFpxCU32QhUyeaf5xSvFy6/66NIX4w3uAOg ORk4IJF/Xz0omeP3xKfc7CHbVZhiJscxxJ7+sQvTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0pM8fOMws1j3ekfnaEmmvAx2Ac0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyYzNjNDY3LTAzNTctNDEyYy04ZjIxLTcwMTEzZjI2ZTE2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALNrLAwDQYJKoZIhvcNAQELBQADggEBAEen7VJ5iR9DGX0NvMBhLzVkHNKP vYv5+8yP4xSCJJ9V3BX1A702t8wIL8AOu8kyfd01591NpDijMR9v/NV28DoM+9J2 M/CZBbzS6SqXT/oH9tO30zXaVR46uXHjY9+HMCrLHLWLoSR/RYlVVQ5H5rnzCZ3W 7A2M1TgaVpwiIP39oMEVt+bTHs+Ut/VVCCABmSJpsDInmDBZoRajYODgtwJFbEZR 0CrbNagPI/B9rnDjeog3vTI9anE7axIF52zH/qejE0j/EhQX615qQfz7rDXLzuUx vdWVj8LfdoYfRJxayWiKclwDpvHDUuMNdIyPEdLT9kIjJ6tIASfUeX3BXrg= -----END CERTIFICATE-----Generated at Sat Oct 31 12:31:35 2026 by rpki-client