$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa File: e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa (raw, json) Hash identifier: 4jFU2YC288SuI6yB3C03lYhWsXb5cv9PRgetRUhX8po= Subject key identifier: 70:D5:7E:81:30:D0:F2:E1:54:17:A8:BD:0C:00:D3:98:D9:69:1D:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DB8A826B3E3AED263AB3AC5A2A67F6D0394E1E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa Signing time: Mon 05 Oct 2026 00:30:14 +0000 ROA not before: Mon 05 Oct 2026 00:30:14 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 159.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b8:a8:26:b3:e3:ae:d2:63:ab:3a:c5:a2:a6:7f:6d:03:94:e1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:30:14 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=5d01235598b7980b99fa8a94ed78b5dec6b7efc033e2a6094a0e846d0a8bde7c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:e3:1d:d0:da:a2:90:81:75:b5:28:65:14: 95:37:47:76:4d:e7:66:dd:85:f4:2b:25:1a:12:54: c7:ad:69:ab:ea:00:54:83:ed:bc:10:f5:94:4a:54: fc:16:15:03:01:73:9f:a6:d5:8d:c9:f7:aa:0f:36: 07:3a:9b:e6:dd:cb:3c:bb:e9:0f:16:d2:34:59:2a: 85:53:94:b4:78:82:0f:c4:b4:55:7d:e3:ad:aa:2d: 0e:e2:24:26:d7:db:32:49:f0:b5:81:25:13:0e:26: be:c5:55:ed:54:12:cf:bd:bd:bd:6b:b1:38:85:f7: 18:29:f4:d8:ad:e0:ce:9f:94:39:55:9b:58:d9:e6: e1:66:74:05:6b:8f:22:4e:27:4e:94:66:60:4c:cd: c0:f3:e0:1d:72:dc:bc:37:c4:09:1e:5a:17:e7:ae: 76:68:07:8e:82:a4:89:1a:1a:ed:bd:69:96:b6:bc: aa:5b:33:c5:d9:ca:24:22:7e:69:f3:e3:21:d2:28: 57:5e:de:0d:96:c3:63:7d:81:83:b2:df:0c:40:ee: ca:60:10:8a:3b:52:50:54:91:aa:5a:c4:3f:60:ae: 23:31:9b:f7:5d:6a:81:01:86:2e:71:cb:53:ba:96: 08:ac:2d:5a:b7:25:5b:90:3c:0f:ef:cd:36:c4:12: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:7E:81:30:D0:F2:E1:54:17:A8:BD:0C:00:D3:98:D9:69:1D:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 66:bf:6a:20:83:cf:fd:78:73:60:25:90:f2:46:55:54:81:50: a6:05:be:4d:76:17:c5:5b:df:71:56:ff:b0:ea:94:66:29:fd: 01:35:f9:2e:10:1f:17:a6:5c:b3:09:41:29:d0:41:da:fb:5a: 8d:62:b5:7a:52:4c:78:e8:d2:66:ab:d3:fb:fd:61:34:7a:f6: 00:5d:87:fc:8b:c5:5e:39:bd:6b:b9:25:75:63:a2:6a:27:48: b1:41:80:96:1f:7c:39:64:e0:c0:23:49:64:1e:49:8e:b7:f2: 04:fd:55:8b:6d:4b:7c:df:7d:95:b5:84:57:0f:1b:4a:37:a1: 43:d1:9c:37:54:25:c2:3e:08:d2:82:47:c7:5e:0b:31:6e:f9: 32:ac:8a:1f:2f:38:8a:a9:eb:eb:e0:a9:28:05:e5:ed:34:7b: 09:95:39:af:42:a3:17:63:80:d6:3e:ef:de:3e:0f:4d:a0:d7: d1:6d:c6:28:d7:72:e2:20:15:41:02:83:ad:78:bd:84:f9:d2: ec:8b:b8:7c:2e:04:c2:b5:fe:b5:86:69:30:64:34:0b:a9:c9: 5b:87:ef:ed:97:a9:e2:bd:e6:59:ec:49:cb:a3:93:7f:17:3f: 95:81:34:eb:da:4c:37:cc:98:a1:d4:42:46:fc:2d:71:5f:67: 05:0d:44:36 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTbioJrPjrtJjqzrFoqZ/bQOU4ekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAzMDE0WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDAxMjM1NTk4Yjc5ODBiOTlmYThhOTRlZDc4YjVkZWM2 YjdlZmMwMzNlMmE2MDk0YTBlODQ2ZDBhOGJkZTdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJUuMd0NqikIF1tShlFJU3R3ZN52bdhfQrJRoSVMetaavq AFSD7bwQ9ZRKVPwWFQMBc5+m1Y3J96oPNgc6m+bdyzy76Q8W0jRZKoVTlLR4gg/E tFV9462qLQ7iJCbX2zJJ8LWBJRMOJr7FVe1UEs+9vb1rsTiF9xgp9Nit4M6flDlV m1jZ5uFmdAVrjyJOJ06UZmBMzcDz4B1y3Lw3xAkeWhfnrnZoB46CpIkaGu29aZa2 vKpbM8XZyiQifmnz4yHSKFde3g2Ww2N9gYOy3wxA7spgEIo7UlBUkapaxD9griMx m/ddaoEBhi5xy1O6lgisLVq3JVuQPA/vzTbEEnPBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcNV+gTDQ8uFUF6i9DADTmNlpHTAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U3NmJhODg4LWUxYWMtNDhhNS04MTZmLTg1ZmY5MGRjMmY5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCfLzANBgkqhkiG9w0BAQsFAAOCAQEAZr9qIIPP/XhzYCWQ8kZVVIFQpgW+ TXYXxVvfcVb/sOqUZin9ATX5LhAfF6ZcswlBKdBB2vtajWK1elJMeOjSZqvT+/1h NHr2AF2H/IvFXjm9a7kldWOiaidIsUGAlh98OWTgwCNJZB5JjrfyBP1Vi21LfN99 lbWEVw8bSjehQ9GcN1Qlwj4I0oJHx14LMW75MqyKHy84iqnr6+CpKAXl7TR7CZU5 r0KjF2OA1j7v3j4PTaDX0W3GKNdy4iAVQQKDrXi9hPnS7Iu4fC4EwrX+tYZpMGQ0 C6nJW4fv7Zep4r3mWexJy6OTfxc/lYE069pMN8yYodRCRvwtcV9nBQ1ENg== -----END CERTIFICATE-----Generated at Thu Oct 22 01:41:42 2026 by rpki-client