$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b951404-fe94-4107-b6e1-4c514a10c475.roa File: 3b951404-fe94-4107-b6e1-4c514a10c475.roa (raw, json) Hash identifier: 0UdAu9oNzYhGuxWt2Xqntb9UG4HNMBVo8I+ph6KxAJ0= Subject key identifier: 7A:DF:7D:19:27:10:B9:4B:DA:1F:6D:9D:DE:1C:FA:66:53:9F:E4:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1880D2FA7E22AD63DEE2DEED6916BF4445525355 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b951404-fe94-4107-b6e1-4c514a10c475.roa Signing time: Fri 24 Jul 2026 00:40:10 +0000 ROA not before: Fri 24 Jul 2026 00:40:10 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 50.17.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:80:d2:fa:7e:22:ad:63:de:e2:de:ed:69:16:bf:44:45:52:53:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:40:10 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=a99a2831f3017267c13784295d99ca2af7c80a5544e26d5a23685717c58cf5cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:2e:3c:bc:95:a1:0d:02:4e:3c:c9:5f:7b: 7b:c0:5a:5e:06:3c:90:db:12:10:cc:a7:e4:b1:ed: 76:03:70:b9:76:4d:bc:08:ac:d2:ce:91:ed:b7:4f: df:b2:03:06:78:48:dc:e9:04:e7:c5:7f:ab:5f:99: 97:28:34:dc:cb:5a:27:b7:6b:97:aa:93:73:7f:f0: 28:88:9e:68:0c:e0:8d:3a:14:10:1c:d1:9b:c7:f6: d1:d2:0a:64:0f:68:77:4e:7b:b5:e1:e1:fe:79:8d: d3:51:94:6a:54:92:0b:dd:88:b1:92:1b:76:4a:19: 58:4d:9e:45:df:cf:cb:96:fa:92:bd:86:7b:ad:a2: 18:83:c8:26:3a:ff:0d:14:9c:3b:01:fc:8e:12:5f: 3b:fd:13:12:5e:37:58:67:6f:72:67:91:32:8b:45: 82:70:fc:a1:29:56:4d:4a:00:89:25:db:b5:b1:67: 65:3a:c2:ab:75:84:76:91:c9:de:2d:d2:01:13:1f: c4:e3:73:28:65:ea:b3:db:85:a4:f5:6f:5d:a4:b5: 3a:98:6a:dd:41:45:63:ac:73:3d:fe:be:2a:78:a0: 2d:d7:52:06:9e:1d:d0:2e:d7:77:4b:a2:5d:cf:52: b4:db:81:dc:88:3b:9b:ac:e2:31:f0:3d:01:a9:ca: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DF:7D:19:27:10:B9:4B:DA:1F:6D:9D:DE:1C:FA:66:53:9F:E4:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b951404-fe94-4107-b6e1-4c514a10c475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.0.0/17 Signature Algorithm: sha256WithRSAEncryption bb:10:76:1c:9d:3f:88:99:cc:e9:08:f1:6c:e1:7f:d3:18:22: 00:ad:77:e1:a1:00:8b:ff:84:b3:82:bf:09:14:dd:01:16:f1: 3e:64:fa:22:7c:aa:65:f5:d8:8c:73:d9:c4:da:16:bc:eb:2b: ff:59:5f:0f:3e:ea:d4:f6:05:a7:b2:40:f1:48:a5:d8:f5:4a: 06:4c:98:b6:86:72:a2:7c:88:a0:9b:3c:a3:85:a6:9d:db:c6: 4d:94:cd:dd:e8:87:47:a6:9a:db:bf:d0:c6:d5:c2:4a:d4:5d: 9f:ca:db:5e:5b:1a:e1:7e:5d:e5:53:38:6e:1b:b2:f4:f4:ea: cd:b3:4b:4d:46:5b:a9:73:34:f9:f8:b3:a5:fb:65:3e:79:54: 3d:93:66:46:ca:01:6b:0b:53:f9:79:96:85:00:b1:00:e3:a3: f0:81:9c:6c:b1:5d:1a:97:b1:00:49:1e:f7:75:4b:35:38:32: 88:ee:02:ad:54:f4:92:ba:b6:43:e5:30:c0:2c:83:a5:0e:3f: 15:ec:57:a0:b4:00:91:0d:a1:b3:77:e9:17:db:36:1e:bf:0d: 30:e5:06:e7:5f:22:8f:1b:e3:7a:86:b1:25:1b:a2:fa:5b:b8: 26:56:c9:9d:93:52:b0:55:49:e2:9a:e6:48:32:bb:33:fb:05: 28:4c:0c:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGIDS+n4irWPe4t7taRa/REVSU1UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDA0MDEwWhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTlhMjgzMWYzMDE3MjY3YzEzNzg0Mjk1ZDk5Y2EyYWY3 YzgwYTU1NDRlMjZkNWEyMzY4NTcxN2M1OGNmNWNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4OS48vJWhDQJOPMlfe3vAWl4GPJDbEhDMp+Sx7XYDcLl2 TbwIrNLOke23T9+yAwZ4SNzpBOfFf6tfmZcoNNzLWie3a5eqk3N/8CiInmgM4I06 FBAc0ZvH9tHSCmQPaHdOe7Xh4f55jdNRlGpUkgvdiLGSG3ZKGVhNnkXfz8uW+pK9 hnutohiDyCY6/w0UnDsB/I4SXzv9ExJeN1hnb3JnkTKLRYJw/KEpVk1KAIkl27Wx Z2U6wqt1hHaRyd4t0gETH8Tjcyhl6rPbhaT1b12ktTqYat1BRWOscz3+vip4oC3X UgaeHdAu13dLol3PUrTbgdyIO5us4jHwPQGpyiFfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUet99GScQuUvaH22d3hz6ZlOf5AMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiOTUxNDA0LWZlOTQtNDEwNy1iNmUxLTRjNTE0YTEwYzQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcyEQAwDQYJKoZIhvcNAQELBQADggEBALsQdhydP4iZzOkI8Wzhf9MYIgCt d+GhAIv/hLOCvwkU3QEW8T5k+iJ8qmX12Ixz2cTaFrzrK/9ZXw8+6tT2BaeyQPFI pdj1SgZMmLaGcqJ8iKCbPKOFpp3bxk2Uzd3oh0emmtu/0MbVwkrUXZ/K215bGuF+ XeVTOG4bsvT06s2zS01GW6lzNPn4s6X7ZT55VD2TZkbKAWsLU/l5loUAsQDjo/CB nGyxXRqXsQBJHvd1SzU4MojuAq1U9JK6tkPlMMAsg6UOPxXsV6C0AJENobN36Rfb Nh6/DTDlBudfIo8b43qGsSUbovpbuCZWyZ2TUrBVSeKa5kgyuzP7BShMDII= -----END CERTIFICATE-----Generated at Tue Jul 28 16:04:35 2026 by rpki-client