$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1875431-4714-40a0-876a-6f900c906c52.roa File: d1875431-4714-40a0-876a-6f900c906c52.roa (raw, json) Hash identifier: ycE2XlxgJRqNnarPMpXYJyGJ4w6CEUnm4zVw4o2OxTg= Subject key identifier: E4:1B:C3:58:65:BF:31:37:E9:3E:57:44:96:27:A0:64:AC:26:47:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 070307FA7C5DD12E73FED49E2736025D675D9D3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1875431-4714-40a0-876a-6f900c906c52.roa Signing time: Sat 24 Oct 2026 00:50:09 +0000 ROA not before: Sat 24 Oct 2026 00:50:09 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:03:07:fa:7c:5d:d1:2e:73:fe:d4:9e:27:36:02:5d:67:5d:9d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:50:09 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=cfa561434d6c90bffd713b07dd39a0c61711bd9c13fb666936aff930f5977f54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:fc:31:1c:b4:c2:95:6f:8e:1a:63:13:ba: 79:ab:8c:c3:39:a0:d9:1c:cf:0f:bd:c0:26:05:62: 45:2c:65:33:5e:a8:08:14:11:2f:54:aa:be:4e:b4: f8:e3:e4:77:79:1f:a4:20:71:36:08:08:f3:42:d9: 88:fa:41:fa:7c:76:6a:56:70:8d:1a:4d:ce:81:a2: c1:a6:5a:e8:e6:9d:8d:f5:d3:be:e2:f0:e8:5c:4b: 7f:df:24:46:e9:c1:79:64:0e:65:1d:72:15:21:93: 51:6f:bc:46:36:53:5a:da:16:3b:db:7f:6d:2d:e0: 89:14:b7:26:85:cd:75:97:08:fb:3f:7b:75:d4:a1: 5a:84:0d:b2:76:88:36:87:16:86:51:d1:08:f7:5b: e0:9b:8a:87:01:da:94:aa:ec:04:73:80:c0:bb:c2: 53:ca:73:c0:62:f7:85:ed:3b:19:2b:a2:78:b5:49: e0:bf:46:d3:99:c8:86:f0:cb:f2:ff:db:0c:4d:48: c6:91:d5:23:a9:a1:34:d8:84:f6:a6:2d:c5:8d:2e: 62:a0:ae:ed:0c:c8:7c:4a:e1:ea:42:cc:fb:89:65: e1:40:65:b8:d0:ac:f1:08:04:13:77:72:5e:48:f4: 34:ae:ba:d8:94:f6:6c:0a:81:11:95:85:32:77:ef: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1B:C3:58:65:BF:31:37:E9:3E:57:44:96:27:A0:64:AC:26:47:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1875431-4714-40a0-876a-6f900c906c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.245.0/24 Signature Algorithm: sha256WithRSAEncryption b6:dc:ec:c0:05:3a:d4:b9:a3:01:e0:e6:90:a4:50:3e:3b:76: ee:98:e2:53:13:be:a4:16:1b:3a:8d:b8:01:04:3a:b5:a7:b6: 72:51:ce:b2:0a:00:f6:38:91:ba:08:1f:2b:e2:d0:36:82:03: c2:ec:8d:61:bb:f4:db:3a:88:cd:c0:1a:b1:53:7a:44:ea:83: d3:5a:77:59:74:6b:9a:f5:84:4b:0f:ec:3e:76:16:50:a1:87: a8:26:f8:8d:5b:67:6b:9f:cb:56:76:4f:ef:03:26:77:74:c0: 55:34:fa:c6:f8:95:a2:bf:be:2c:01:2f:62:63:d6:91:6f:d6: df:03:8a:db:09:ca:9d:75:dd:e6:73:ff:50:03:7b:d4:5f:bf: 2e:d2:a0:98:9a:a6:52:50:33:37:ca:7a:76:56:71:12:2f:d7: 81:48:3d:71:26:04:af:5b:44:27:e6:c7:9f:0b:39:ab:0d:8e: 6e:be:0a:73:45:3c:3c:99:a1:73:40:2b:9d:0b:31:64:14:7e: f9:8b:f4:81:87:81:ad:95:8a:0c:5d:f9:c0:29:9f:80:8c:e3: bf:39:8b:52:5e:8f:eb:ae:3a:40:4b:0d:a7:15:04:40:5e:83: b4:60:11:f7:47:bf:65:74:da:71:90:99:66:32:2f:d0:1a:8e: 75:98:58:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBwMH+nxd0S5z/tSeJzYCXWddnTswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDA1MDA5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmE1NjE0MzRkNmM5MGJmZmQ3MTNiMDdkZDM5YTBjNjE3 MTFiZDljMTNmYjY2NjkzNmFmZjkzMGY1OTc3ZjU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf0/wxHLTClW+OGmMTunmrjMM5oNkczw+9wCYFYkUsZTNe qAgUES9Uqr5OtPjj5Hd5H6QgcTYICPNC2Yj6Qfp8dmpWcI0aTc6BosGmWujmnY31 077i8OhcS3/fJEbpwXlkDmUdchUhk1FvvEY2U1raFjvbf20t4IkUtyaFzXWXCPs/ e3XUoVqEDbJ2iDaHFoZR0Qj3W+CbiocB2pSq7ARzgMC7wlPKc8Bi94XtOxkroni1 SeC/RtOZyIbwy/L/2wxNSMaR1SOpoTTYhPamLcWNLmKgru0MyHxK4epCzPuJZeFA ZbjQrPEIBBN3cl5I9DSuutiU9mwKgRGVhTJ378zJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5BvDWGW/MTfpPldEliegZKwmR0MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxODc1NDMxLTQ3MTQtNDBhMC04NzZhLTZmOTAwYzkwNmM1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFfUwDQYJKoZIhvcNAQELBQADggEBALbc7MAFOtS5owHg5pCkUD47du6Y 4lMTvqQWGzqNuAEEOrWntnJRzrIKAPY4kboIHyvi0DaCA8LsjWG79Ns6iM3AGrFT ekTqg9Nad1l0a5r1hEsP7D52FlChh6gm+I1bZ2ufy1Z2T+8DJnd0wFU0+sb4laK/ viwBL2Jj1pFv1t8DitsJyp113eZz/1ADe9Rfvy7SoJiaplJQMzfKenZWcRIv14FI PXEmBK9bRCfmx58LOasNjm6+CnNFPDyZoXNAK50LMWQUfvmL9IGHga2Vigxd+cAp n4CM4785i1Jej+uuOkBLDacVBEBeg7RgEfdHv2V02nGQmWYyL9AajnWYWPo= -----END CERTIFICATE-----Generated at Sun Nov 15 17:53:36 2026 by rpki-client