$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa File: e73183cc-2907-425e-bd2b-10fd1986e4bd.roa (raw, json) Hash identifier: yGCruNbzZKt5QynNelBmSxV7yOAkrHe9JNUHvDFekGw= Subject key identifier: 0F:28:F8:B2:96:77:2D:81:2C:81:31:91:F8:2C:68:28:12:7F:12:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F61E349CC93623D2B3DE2C42E4BB3E347E800B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa Signing time: Mon 12 Oct 2026 00:30:46 +0000 ROA not before: Mon 12 Oct 2026 00:30:46 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 50.16.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:61:e3:49:cc:93:62:3d:2b:3d:e2:c4:2e:4b:b3:e3:47:e8:00:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:30:46 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=fe820593b8d83baba592cc6eb633120c9cb25e9de2053f2e0b160b5575853275, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:88:9e:e2:cd:c6:dd:93:d3:2f:56:c5:8e: 7d:41:3a:b2:d0:a1:69:57:ef:c0:4a:9e:3e:23:a4: 09:d7:52:72:3d:7d:39:12:f1:0b:30:1c:8b:42:3c: 6d:4a:e6:89:d1:5a:18:71:0c:c1:9e:cf:bd:08:f7: e0:10:87:d9:84:ab:8e:73:fc:19:cb:4c:38:41:27: 9d:f5:5b:da:c4:51:93:cb:aa:de:55:65:23:ea:5c: 08:f0:d5:ac:13:ed:97:f5:2c:78:1f:ae:cc:13:96: 08:15:24:6f:5c:b0:cd:4a:3a:95:b6:f2:0c:d9:b9: f7:56:7b:a3:0b:d0:08:79:4f:a6:d7:01:cc:44:74: d0:2b:8a:a8:18:55:76:e0:87:2a:e5:12:50:eb:bb: 6d:45:84:f9:8d:0e:74:f2:07:76:e2:8a:2e:3e:4b: 70:e6:12:4c:bb:61:59:36:61:80:7a:c0:75:55:a4: 88:7e:0e:fd:74:3a:e6:c7:72:42:dd:7e:4e:67:c4: 9c:81:7b:5c:e3:a3:bc:b7:53:ad:d8:de:4d:f7:03: db:03:73:3e:69:82:77:ef:27:4e:b8:03:7b:58:e3: e2:0c:ed:55:62:2f:59:68:26:6a:eb:45:02:31:97: c9:35:66:b8:90:a9:92:d9:5b:c3:8a:9d:d1:b6:c7: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:F8:B2:96:77:2D:81:2C:81:31:91:F8:2C:68:28:12:7F:12:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2d:73:b5:66:24:d1:11:b0:9e:d3:52:34:0b:1b:e3:69:7f:0a: 55:c6:24:c8:36:f2:72:5d:6d:d1:58:1b:48:8f:a1:04:66:13: 96:31:f3:f7:a6:83:c1:e7:3b:6b:b6:c5:a1:4f:3d:24:86:05: 87:be:13:58:8c:e5:ed:66:52:e6:c3:19:32:2e:38:f4:32:c9: 70:e6:51:0c:ab:63:6e:e1:a1:24:70:3a:91:0c:10:58:bd:91: 5e:17:db:6a:4b:81:98:ec:7f:b6:3d:77:d9:ee:db:7d:c0:7a: 1e:c8:6c:c1:de:e7:ea:d8:6c:dd:82:a3:8c:9e:37:3a:0c:4a: 0b:e7:7f:db:0d:d5:ab:0f:43:58:b0:ed:f4:7e:e2:b0:6d:d3: ee:74:34:c6:c3:c0:ad:ad:2b:29:67:98:f8:45:1e:cb:59:2a: 3e:13:6a:e6:93:7d:68:40:59:be:fe:e4:2a:2d:5a:89:34:7f: d8:b4:09:72:15:0c:15:83:a2:e1:c3:3b:16:8c:18:67:83:40: e4:b3:0c:e3:74:1d:9e:d0:de:2c:40:3c:01:bf:51:af:ca:eb: 10:08:4f:c2:61:86:2f:38:bf:62:62:db:63:6b:86:9e:e6:cf: 06:cc:32:11:3e:1c:44:de:45:d6:3d:ab:0c:e2:52:7c:87:32: 81:26:70:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD2HjScyTYj0rPeLELkuz40foALkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAzMDQ2WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTgyMDU5M2I4ZDgzYmFiYTU5MmNjNmViNjMzMTIwYzlj YjI1ZTlkZTIwNTNmMmUwYjE2MGI1NTc1ODUzMjc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxCoie4s3G3ZPTL1bFjn1BOrLQoWlX78BKnj4jpAnXUnI9 fTkS8QswHItCPG1K5onRWhhxDMGez70I9+AQh9mEq45z/BnLTDhBJ531W9rEUZPL qt5VZSPqXAjw1awT7Zf1LHgfrswTlggVJG9csM1KOpW28gzZufdWe6ML0Ah5T6bX AcxEdNAriqgYVXbghyrlElDru21FhPmNDnTyB3biii4+S3DmEky7YVk2YYB6wHVV pIh+Dv10OubHckLdfk5nxJyBe1zjo7y3U63Y3k33A9sDcz5pgnfvJ064A3tY4+IM 7VViL1loJmrrRQIxl8k1ZriQqZLZW8OKndG2x2IZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDyj4spZ3LYEsgTGR+CxoKBJ/EoEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U3MzE4M2NjLTI5MDctNDI1ZS1iZDJiLTEwZmQxOTg2ZTRiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcyEAAwDQYJKoZIhvcNAQELBQADggEBAC1ztWYk0RGwntNSNAsb42l/ClXG JMg28nJdbdFYG0iPoQRmE5Yx8/emg8HnO2u2xaFPPSSGBYe+E1iM5e1mUubDGTIu OPQyyXDmUQyrY27hoSRwOpEMEFi9kV4X22pLgZjsf7Y9d9nu233Aeh7IbMHe5+rY bN2Co4yeNzoMSgvnf9sN1asPQ1iw7fR+4rBt0+50NMbDwK2tKylnmPhFHstZKj4T auaTfWhAWb7+5CotWok0f9i0CXIVDBWDouHDOxaMGGeDQOSzDON0HZ7Q3ixAPAG/ Ua/K6xAIT8Jhhi84v2Ji22Nrhp7mzwbMMhE+HETeRdY9qwziUnyHMoEmcN0= -----END CERTIFICATE-----Generated at Tue Nov 10 14:13:18 2026 by rpki-client