$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa File: 4509cfff-2756-4090-9163-f198714b099d.roa (raw, json) Hash identifier: boNhd/xqXjYqC706XIBQwCaZZ2RvwfUr0aVAnR0j7bk= Subject key identifier: 49:51:3C:DA:D9:07:BC:2A:4F:C4:EE:60:84:9F:97:3C:C6:CF:8F:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 526DC6609B1F4A9F9C1C16FCDAF9F1AC5CC363D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa Signing time: Thu 22 Oct 2026 02:20:04 +0000 ROA not before: Thu 22 Oct 2026 02:20:04 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 16.51.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6d:c6:60:9b:1f:4a:9f:9c:1c:16:fc:da:f9:f1:ac:5c:c3:63:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:20:04 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=e873c0c24649870227f63907ef86a3529643404f34f5d18361966b790cc358e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:1d:ad:bf:71:0a:5e:5b:49:52:5b:74:fb: ce:f8:48:93:a3:02:d7:b4:33:37:1a:0e:a6:d7:d1: 63:11:73:4b:ee:5e:64:9b:0c:85:cb:2b:86:02:66: e7:f8:7d:aa:5d:01:ab:61:11:7c:1e:c8:68:60:b9: 8d:40:f5:b6:7e:a2:cd:f1:a4:57:11:62:8f:79:a1: 6b:94:61:3e:b8:07:00:57:33:40:60:45:2a:db:a3: cb:8b:70:87:7c:5b:06:84:91:46:a5:dc:c9:f3:5b: ec:bb:c2:87:c2:f9:f3:8e:f3:0f:5b:57:de:2e:6b: 5a:fc:9e:cd:b3:17:19:0d:00:52:65:ae:0a:66:fa: 78:d8:bb:15:b6:66:3e:b4:a2:64:f9:4e:32:b0:06: 0a:55:17:1e:73:f8:52:f6:85:6e:01:55:6d:e6:3b: d7:6c:04:39:16:93:1e:95:57:aa:1d:8f:69:cc:4b: e7:8a:d2:cd:e5:f2:9a:4f:cb:d1:db:67:d0:e9:e5: 62:24:3c:5a:1f:44:b9:9a:78:f9:78:9b:86:62:f6: 6f:70:9c:9e:63:61:d0:f7:9a:34:ea:cd:9f:0e:ec: 57:6e:bc:91:80:de:00:eb:46:23:e5:a6:49:6f:3c: 43:e8:cb:a5:16:0b:cf:b4:06:71:6a:e6:16:fc:52: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:3C:DA:D9:07:BC:2A:4F:C4:EE:60:84:9F:97:3C:C6:CF:8F:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.51.30.0/23 Signature Algorithm: sha256WithRSAEncryption 38:b0:5e:9c:c8:cb:26:92:41:20:13:12:ce:cb:8b:00:bc:35: 82:90:1b:e1:38:95:90:78:1a:32:a0:8f:d2:fd:c0:16:38:55: 7c:53:65:12:86:b5:81:e5:fd:49:3d:c5:0b:76:50:97:b2:17: dc:9f:49:3d:1a:a3:98:d0:52:42:ca:47:72:ec:45:1c:9f:f9: 9b:ee:c9:d0:02:50:66:93:73:24:17:c2:d2:29:e7:a7:fb:ba: 20:fe:5f:ee:d5:cf:89:02:9c:af:4b:d6:30:20:0a:b2:27:d0: 69:e2:da:c5:77:0c:53:f1:fe:b8:98:0f:ca:9e:35:9c:63:67: 24:be:fd:f4:f6:b7:15:86:d8:4d:6f:11:b3:93:58:59:0a:3d: 2c:10:3d:b3:75:36:bb:df:10:07:30:4d:d8:34:b9:cf:8e:43: f9:84:2e:6e:a0:00:a1:4b:d6:aa:3b:c7:a2:bb:89:ba:c0:6a: 50:fc:6a:20:3f:47:fd:41:32:6f:40:67:87:7d:fe:e4:3f:4d: d6:7f:93:4c:f2:eb:9e:4d:e0:40:0b:e4:f0:02:23:23:6e:0d: ee:e3:0c:c8:84:eb:b6:ca:4b:40:d0:ec:4d:dc:32:b7:03:b9: c5:af:58:23:03:94:77:be:4a:1b:f9:59:39:0e:78:0c:de:f1: 69:f3:22:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUm3GYJsfSp+cHBb82vnxrFzDY9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIyMDA0WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODczYzBjMjQ2NDk4NzAyMjdmNjM5MDdlZjg2YTM1Mjk2 NDM0MDRmMzRmNWQxODM2MTk2NmI3OTBjYzM1OGUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5nh2tv3EKXltJUlt0+874SJOjAte0MzcaDqbX0WMRc0vu XmSbDIXLK4YCZuf4fapdAathEXweyGhguY1A9bZ+os3xpFcRYo95oWuUYT64BwBX M0BgRSrbo8uLcId8WwaEkUal3MnzW+y7wofC+fOO8w9bV94ua1r8ns2zFxkNAFJl rgpm+njYuxW2Zj60omT5TjKwBgpVFx5z+FL2hW4BVW3mO9dsBDkWkx6VV6odj2nM S+eK0s3l8ppPy9HbZ9Dp5WIkPFofRLmaePl4m4Zi9m9wnJ5jYdD3mjTqzZ8O7Fdu vJGA3gDrRiPlpklvPEPoy6UWC8+0BnFq5hb8UmQBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSVE82tkHvCpPxO5ghJ+XPMbPj2gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MDljZmZmLTI3NTYtNDA5MC05MTYzLWYxOTg3MTRiMDk5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQMx4wDQYJKoZIhvcNAQELBQADggEBADiwXpzIyyaSQSATEs7LiwC8NYKQ G+E4lZB4GjKgj9L9wBY4VXxTZRKGtYHl/Uk9xQt2UJeyF9yfST0ao5jQUkLKR3Ls RRyf+ZvuydACUGaTcyQXwtIp56f7uiD+X+7Vz4kCnK9L1jAgCrIn0Gni2sV3DFPx /riYD8qeNZxjZyS+/fT2txWG2E1vEbOTWFkKPSwQPbN1NrvfEAcwTdg0uc+OQ/mE Lm6gAKFL1qo7x6K7ibrAalD8aiA/R/1BMm9AZ4d9/uQ/TdZ/k0zy655N4EAL5PAC IyNuDe7jDMiE67bKS0DQ7E3cMrcDucWvWCMDlHe+Shv5WTkOeAze8WnzIoY= -----END CERTIFICATE-----Generated at Tue Nov 3 03:49:48 2026 by rpki-client