$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa File: b3605182-73be-4b14-a693-b70c018bdd57.roa (raw, json) Hash identifier: 3Hufbs8oj8nRLGmasGxoThwlN7546+ehh0CLrQRD9XQ= Subject key identifier: 11:2B:14:96:9C:DB:6E:F4:D3:D6:92:8F:AF:D8:69:62:FA:55:FD:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67264157AAB6618770480ADC75290854FF8C94E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa Signing time: Tue 06 Oct 2026 00:40:43 +0000 ROA not before: Tue 06 Oct 2026 00:40:43 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.171.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:26:41:57:aa:b6:61:87:70:48:0a:dc:75:29:08:54:ff:8c:94:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:40:43 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=316bbb53122398253554018d8b38a95fe29f3d694670bca0a750da3d6d233f66, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e8:4d:63:6a:22:82:71:cc:99:de:26:46:92: 10:36:00:bd:a8:0a:32:45:a8:fc:06:97:ca:a7:68: ff:e2:d6:04:4b:66:9a:70:d5:21:e6:ef:1f:74:54: 2b:21:97:12:2b:b8:7e:cb:02:ac:76:2a:16:23:4c: 12:a6:43:a4:53:ef:78:de:92:b5:0e:ae:a4:91:b4: 16:b9:c7:b4:69:78:c2:dc:90:39:1a:36:6d:20:32: 5e:45:ba:1b:52:0f:f7:bf:e1:df:b4:c7:2e:82:67: 23:98:cb:08:4c:7e:38:10:73:d2:78:59:25:2e:05: 39:b5:34:3b:fd:a2:a2:25:e1:32:56:6d:34:03:70: b5:60:0a:7a:9d:16:92:1d:68:9f:70:89:84:ae:c9: 77:69:53:96:3f:71:c4:bb:53:36:16:58:f1:0b:9a: 56:08:30:2d:67:e8:06:ca:e6:12:d9:60:95:ea:f3: 70:5e:6d:0e:df:a3:2f:93:d0:51:63:8d:a1:ea:05: 5e:3d:ad:47:ff:11:6b:84:79:6f:7d:49:4f:bb:4c: 93:82:46:b3:5f:cf:10:bc:6b:ed:27:e1:0f:84:b1: eb:0b:27:50:f8:70:20:ed:59:e0:9d:b1:ac:bb:b7: f1:87:84:d4:50:63:e7:70:a6:ac:b2:3d:27:47:92: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:14:96:9C:DB:6E:F4:D3:D6:92:8F:AF:D8:69:62:FA:55:FD:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption ab:15:48:06:b8:e7:8a:25:ac:13:a5:cf:0c:3e:68:69:e6:e0: 55:92:8b:f3:b4:e3:81:fd:fc:39:2e:b9:05:2c:a2:05:68:b8: 40:60:6b:be:46:54:8c:e0:51:9b:1c:d7:c4:ad:84:ab:79:15: a5:f6:ed:e3:38:c3:a2:bf:18:01:00:41:03:d3:8c:d8:34:40: 4f:0f:31:24:57:87:6f:43:7b:3d:69:e4:ed:ca:aa:c3:43:cd: b6:6d:e6:36:57:9c:f1:a8:df:2a:ae:a3:e9:42:65:41:70:c8: f5:4e:fb:52:bd:25:7c:3c:94:60:91:f2:da:5d:bb:f9:66:52: 39:92:e8:83:4f:7d:5d:77:f3:c8:05:62:d4:ff:60:a4:ac:23: 7a:63:04:8d:69:f1:52:09:e5:e9:96:af:71:3e:36:b2:ad:c8: b6:39:c3:3d:da:92:a0:c7:05:18:81:09:b2:8b:03:48:99:44: de:fc:c6:f6:70:56:e5:ed:e4:d8:51:52:c5:d1:35:61:2a:e9: cd:7f:16:67:a1:b4:86:0c:7c:5c:44:a2:68:5c:65:8f:18:8b: ec:50:05:8c:5d:70:72:f5:2b:30:d8:cd:10:1f:e5:70:da:96: 69:d9:cc:50:d9:59:7b:98:74:ca:dc:87:ff:bb:4b:7b:c7:96: c3:37:68:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZyZBV6q2YYdwSArcdSkIVP+MlOYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA0MDQzWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTZiYmI1MzEyMjM5ODI1MzU1NDAxOGQ4YjM4YTk1ZmUy OWYzZDY5NDY3MGJjYTBhNzUwZGEzZDZkMjMzZjY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDn6E1jaiKCccyZ3iZGkhA2AL2oCjJFqPwGl8qnaP/i1gRL Zppw1SHm7x90VCshlxIruH7LAqx2KhYjTBKmQ6RT73jekrUOrqSRtBa5x7RpeMLc kDkaNm0gMl5FuhtSD/e/4d+0xy6CZyOYywhMfjgQc9J4WSUuBTm1NDv9oqIl4TJW bTQDcLVgCnqdFpIdaJ9wiYSuyXdpU5Y/ccS7UzYWWPELmlYIMC1n6AbK5hLZYJXq 83BebQ7foy+T0FFjjaHqBV49rUf/EWuEeW99SU+7TJOCRrNfzxC8a+0n4Q+EsesL J1D4cCDtWeCdsay7t/GHhNRQY+dwpqyyPSdHksm5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUESsUlpzbbvTT1pKPr9hpYvpV/XAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzNjA1MTgyLTczYmUtNGIxNC1hNjkzLWI3MGMwMThiZGQ1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCCqzANBgkqhkiG9w0BAQsFAAOCAQEAqxVIBrjniiWsE6XPDD5oaebgVZKL 87Tjgf38OS65BSyiBWi4QGBrvkZUjOBRmxzXxK2Eq3kVpfbt4zjDor8YAQBBA9OM 2DRATw8xJFeHb0N7PWnk7cqqw0PNtm3mNlec8ajfKq6j6UJlQXDI9U77Ur0lfDyU YJHy2l27+WZSOZLog099XXfzyAVi1P9gpKwjemMEjWnxUgnl6ZavcT42sq3ItjnD PdqSoMcFGIEJsosDSJlE3vzG9nBW5e3k2FFSxdE1YSrpzX8WZ6G0hgx8XESiaFxl jxiL7FAFjF1wcvUrMNjNEB/lcNqWadnMUNlZe5h0ytyH/7tLe8eWwzdoEw== -----END CERTIFICATE-----Generated at Tue Nov 3 12:01:47 2026 by rpki-client