$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa File: 6a28385f-c608-4722-b24d-8ffeb91ee27c.roa (raw, json) Hash identifier: kkeXzyGEWcf1PVAsiqJAo6ZvsFQsdLlkkL9nR3BeykI= Subject key identifier: 4E:30:01:97:CD:54:A2:D0:E2:20:A9:7A:D4:9C:B1:3B:9D:BB:3B:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40DC6380807023CEAE6E1505779F1AB81CC240C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa Signing time: Mon 12 Oct 2026 00:20:10 +0000 ROA not before: Mon 12 Oct 2026 00:20:10 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 50.19.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:dc:63:80:80:70:23:ce:ae:6e:15:05:77:9f:1a:b8:1c:c2:40:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:20:10 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=6253cd8cae8dac447155886e75759bf3955b5fb1b5a49c9f0ed5339c520cfa90, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:9d:90:c9:7a:27:e2:31:f3:d9:7e:ab:91: 5e:a6:0c:93:d4:64:af:fc:14:d5:db:df:d9:49:5a: 97:a1:3b:ac:28:3c:c3:a9:e6:17:10:cd:c8:ed:82: 5b:08:f4:11:f4:29:e0:98:34:42:f0:5c:d9:c1:96: 89:13:a9:04:73:32:87:55:80:48:dd:9a:7f:ac:6c: 21:92:4e:2e:a9:8e:cb:f0:8e:18:0a:e1:61:7b:65: 89:8c:d5:36:83:c9:fe:7e:d6:41:bd:55:e3:bc:80: 1b:e7:9c:fe:6f:6e:de:69:40:43:2c:ba:49:48:f8: a6:c7:8c:6c:78:f5:66:4a:48:95:bc:97:53:49:4b: 62:ae:43:19:f3:4c:c6:d7:a7:7e:69:6d:83:a6:85: d7:9e:13:90:6a:79:fa:70:78:fa:a3:35:1c:47:65: 29:a3:e0:f9:a3:7d:0c:89:6e:5e:9d:38:80:0a:f8: 4b:56:97:8a:88:f7:f2:30:ec:dd:97:a6:f0:fd:b0: 7c:db:ef:17:ef:34:cc:08:49:00:2f:ed:f8:1e:31: 4e:73:56:1a:79:4e:4c:4b:a2:0b:f6:1a:13:72:1b: 06:9e:11:b3:49:2b:6c:eb:50:b2:cd:49:21:d9:b1: d4:22:d2:84:f9:cd:98:35:03:1a:9c:8e:62:5f:f2: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:30:01:97:CD:54:A2:D0:E2:20:A9:7A:D4:9C:B1:3B:9D:BB:3B:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.128.0/18 Signature Algorithm: sha256WithRSAEncryption ae:6b:ce:aa:3a:c0:7a:4f:d5:f7:6e:05:59:9f:51:a6:04:5b: 33:82:be:06:7c:ee:f8:b2:1b:58:b8:42:05:19:79:d3:55:48: 9d:ec:b6:43:93:94:45:07:f3:c6:0d:b4:6c:70:65:86:4f:09: 82:eb:61:e4:f4:a5:04:92:10:04:3a:d4:d6:e1:4d:90:d6:19: 46:3d:40:eb:93:22:f3:df:78:73:73:e1:c0:2e:a7:7e:a0:e2: 48:5a:48:e1:62:c0:25:f7:93:74:a4:29:1a:35:f0:1b:1b:75: 4b:d7:0d:3d:fe:71:00:c0:9a:1f:fb:1c:29:83:5d:1c:f2:26: ad:e1:e6:24:a6:fb:8d:e3:15:81:6f:c6:15:d2:39:40:02:45: 19:fc:0e:ee:5e:ad:ce:f6:20:1b:d8:e6:aa:e1:0e:bb:94:b0: ce:89:5c:f4:4d:fd:e8:93:9f:a6:a6:3e:34:0a:2f:b8:b0:38: 5c:85:1c:24:84:bf:4d:6d:92:ae:1d:a8:11:b5:d6:bf:cf:75: c8:3e:6f:7b:8a:ae:48:7d:1d:04:8c:91:4c:f0:9b:7f:6f:b4: b9:d7:2c:56:50:9b:61:f7:92:df:06:16:2c:38:ed:e4:17:88: 05:e8:49:de:99:b9:03:30:f0:08:bd:2b:64:92:7f:80:cb:da: 68:d3:a8:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQNxjgIBwI86ubhUFd58auBzCQMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAyMDEwWhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjUzY2Q4Y2FlOGRhYzQ0NzE1NTg4NmU3NTc1OWJmMzk1 NWI1ZmIxYjVhNDljOWYwZWQ1MzM5YzUyMGNmYTkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/p52QyXon4jHz2X6rkV6mDJPUZK/8FNXb39lJWpehO6wo PMOp5hcQzcjtglsI9BH0KeCYNELwXNnBlokTqQRzModVgEjdmn+sbCGSTi6pjsvw jhgK4WF7ZYmM1TaDyf5+1kG9VeO8gBvnnP5vbt5pQEMsuklI+KbHjGx49WZKSJW8 l1NJS2KuQxnzTMbXp35pbYOmhdeeE5BqefpwePqjNRxHZSmj4PmjfQyJbl6dOIAK +EtWl4qI9/Iw7N2XpvD9sHzb7xfvNMwISQAv7fgeMU5zVhp5TkxLogv2GhNyGwae EbNJK2zrULLNSSHZsdQi0oT5zZg1AxqcjmJf8gprAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTjABl81UotDiIKl61JyxO527O0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhMjgzODVmLWM2MDgtNDcyMi1iMjRkLThmZmViOTFlZTI3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYyE4AwDQYJKoZIhvcNAQELBQADggEBAK5rzqo6wHpP1fduBVmfUaYEWzOC vgZ87viyG1i4QgUZedNVSJ3stkOTlEUH88YNtGxwZYZPCYLrYeT0pQSSEAQ61Nbh TZDWGUY9QOuTIvPfeHNz4cAup36g4khaSOFiwCX3k3SkKRo18BsbdUvXDT3+cQDA mh/7HCmDXRzyJq3h5iSm+43jFYFvxhXSOUACRRn8Du5erc72IBvY5qrhDruUsM6J XPRN/eiTn6amPjQKL7iwOFyFHCSEv01tkq4dqBG11r/Pdcg+b3uKrkh9HQSMkUzw m39vtLnXLFZQm2H3kt8GFiw47eQXiAXoSd6ZuQMw8Ai9K2SSf4DL2mjTqCk= -----END CERTIFICATE-----Generated at Tue Nov 3 19:21:46 2026 by rpki-client