$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa File: 1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa (raw, json) Hash identifier: lkkNLUSXH523cdBTzos1/IJXIQaBgOmzgZZAbMcoZbQ= Subject key identifier: 34:36:B3:3B:FF:27:D0:1C:53:07:04:EB:9A:5F:92:8C:A2:0B:24:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0457340425B895976D92F4C2B97E5BA3723FB080 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa Signing time: Tue 27 Oct 2026 00:02:23 +0000 ROA not before: Tue 27 Oct 2026 00:02:23 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 398378 IP address blocks: 192.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:57:34:04:25:b8:95:97:6d:92:f4:c2:b9:7e:5b:a3:72:3f:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:02:23 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=485f62c09a318b09bd04534182343b0fcd81772bd86ebb24d20ff9e9eb6e10fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:e5:b7:a2:7c:af:a8:90:85:92:07:1a:2c: 05:f8:82:b5:bf:2e:84:03:53:62:68:69:0c:1d:98: 07:46:1f:f5:e7:54:2c:c0:e3:71:bc:0f:59:79:c3: 31:0b:4e:01:86:bb:1f:21:a6:38:09:01:5a:41:67: b1:dc:44:75:3b:de:73:16:42:e0:ae:2f:ef:58:97: 79:7c:4c:3b:83:a9:8c:85:26:f5:34:56:c8:6d:0b: 3b:88:46:63:2e:6f:1a:92:48:fd:ec:d8:91:45:75: d0:3f:9f:51:14:02:89:27:a2:47:65:c7:3e:4a:a2: 7f:c0:af:ee:61:55:35:05:de:a4:80:0f:6b:a8:9b: bc:01:2f:9a:37:40:31:08:e4:38:b7:d3:2a:1e:06: 36:59:78:53:c9:98:d6:7a:92:60:1d:4e:3f:f9:0f: 83:0d:5b:8b:36:c8:d2:fc:e2:f3:e0:ab:57:c4:0f: ea:0f:fc:a7:e2:9d:48:14:af:58:15:a8:dd:cf:1f: ab:6a:75:0f:a6:ad:32:10:ce:f1:b3:d6:d8:a8:ab: 26:ba:88:cd:98:b9:18:1e:fa:f8:6d:12:14:14:db: e9:d0:4c:35:d9:e9:1d:8b:fc:4b:1b:0e:ce:a0:a7: bf:0f:0a:4e:79:2b:93:42:47:ce:f0:b5:57:e4:b2: 34:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:36:B3:3B:FF:27:D0:1C:53:07:04:EB:9A:5F:92:8C:A2:0B:24:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:80:9b:b7:aa:03:68:6d:a7:2f:f6:a9:cd:f8:b2:42:8b:09: af:a1:94:d9:bc:8c:92:66:76:95:d2:8b:6f:e3:b2:5f:72:99: af:76:26:cb:c7:f5:ae:eb:fd:ba:2f:86:59:29:d7:74:40:6f: bd:20:d9:95:e8:85:b4:77:34:9c:b0:7e:72:e4:91:1b:5f:cc: 6c:ea:a6:33:4b:f7:0c:ff:a2:55:f6:e5:93:98:5b:f3:14:ec: 4f:87:90:b9:5b:0b:d7:77:67:5d:c0:6b:17:dc:b5:ea:f5:0e: 65:6a:71:dd:25:f6:41:3f:5e:52:69:7e:94:32:ed:81:59:8e: 1d:a8:1d:4f:42:ca:c6:b2:d0:4c:1c:bf:54:05:79:b9:c3:d5: dd:96:e2:bd:d8:70:20:af:8b:29:85:f7:ec:1f:7a:0c:4c:70: 29:a7:d9:eb:8b:1b:d4:40:d2:62:a1:18:48:38:93:89:87:e3: c3:81:62:83:fa:56:03:04:35:c9:98:12:1d:99:fd:32:9a:cd: 40:0a:c0:57:ca:3e:f2:b5:be:5e:2c:10:a2:56:67:a1:5d:99: fa:3e:8b:d9:69:d7:70:73:62:16:57:eb:61:a2:31:25:60:b8: 0b:7e:ad:0d:b4:1b:f2:d9:5d:25:ee:9b:88:e5:e7:19:38:6a: cb:4b:80:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBFc0BCW4lZdtkvTCuX5bo3I/sIAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAwMjIzWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODVmNjJjMDlhMzE4YjA5YmQwNDUzNDE4MjM0M2IwZmNk ODE3NzJiZDg2ZWJiMjRkMjBmZjllOWViNmUxMGZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCD+W3onyvqJCFkgcaLAX4grW/LoQDU2JoaQwdmAdGH/Xn VCzA43G8D1l5wzELTgGGux8hpjgJAVpBZ7HcRHU73nMWQuCuL+9Yl3l8TDuDqYyF JvU0VshtCzuIRmMubxqSSP3s2JFFddA/n1EUAoknokdlxz5Kon/Ar+5hVTUF3qSA D2uom7wBL5o3QDEI5Di30yoeBjZZeFPJmNZ6kmAdTj/5D4MNW4s2yNL84vPgq1fE D+oP/KfinUgUr1gVqN3PH6tqdQ+mrTIQzvGz1tioqya6iM2YuRge+vhtEhQU2+nQ TDXZ6R2L/EsbDs6gp78PCk55K5NCR87wtVfksjRzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNDazO/8n0BxTBwTrml+SjKILJL0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmZWZhN2Q5LWJhZjAtNGQ5Mi1hMjliLWZkMjcxMGY1ZWZmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBAB+Am7eqA2htpy/2qc34skKLCa+h lNm8jJJmdpXSi2/jsl9yma92JsvH9a7r/bovhlkp13RAb70g2ZXohbR3NJywfnLk kRtfzGzqpjNL9wz/olX25ZOYW/MU7E+HkLlbC9d3Z13Aaxfcter1DmVqcd0l9kE/ XlJpfpQy7YFZjh2oHU9Cysay0Ewcv1QFebnD1d2W4r3YcCCviymF9+wfegxMcCmn 2euLG9RA0mKhGEg4k4mH48OBYoP6VgMENcmYEh2Z/TKazUAKwFfKPvK1vl4sEKJW Z6Fdmfo+i9lp13BzYhZX62GiMSVguAt+rQ20G/LZXSXum4jl5xk4astLgJQ= -----END CERTIFICATE-----Generated at Tue Nov 10 12:02:14 2026 by rpki-client