$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f71dae1-9f28-4da4-a716-ff71375425eb.roa File: 9f71dae1-9f28-4da4-a716-ff71375425eb.roa (raw, json) Hash identifier: 9JCphttFYvgjIwF5rSavV8T54jUqk7QnI9Kbe8VRyyw= Subject key identifier: 93:E5:C5:11:86:41:2E:85:3C:AA:44:56:81:6E:09:80:70:E8:E2:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EB48268671A19FA478AB4AE10167815B67CFD54 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f71dae1-9f28-4da4-a716-ff71375425eb.roa Signing time: Wed 30 Sep 2026 00:00:05 +0000 ROA not before: Wed 30 Sep 2026 00:00:05 +0000 ROA not after: Tue 29 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.61.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b4:82:68:67:1a:19:fa:47:8a:b4:ae:10:16:78:15:b6:7c:fd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 30 00:00:05 2026 GMT Not After : Dec 29 23:59:59 2026 GMT Subject: serialNumber=d55c50a2db8cfab65740adf05f39c7527171cb69b74b5de2df915ea4f525c61c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:21:15:ec:cd:8e:6c:0c:eb:d5:8f:7f:f5: dd:6f:ec:44:df:13:e2:61:34:aa:7d:26:1c:be:5c: 34:db:0b:32:2c:ba:68:23:2e:95:19:b1:f1:16:1c: 5c:f4:0b:ea:4e:3a:9c:de:9e:99:8c:4a:ba:84:7c: 1d:6e:4a:c1:a1:19:be:cc:72:5f:aa:8f:b8:8a:db: a8:ac:17:07:10:7b:24:7b:7c:47:c0:02:21:51:37: 18:ef:ca:01:b6:32:f4:a7:95:f5:0f:7c:60:a1:cf: fa:22:c1:e3:84:65:58:41:b0:cf:4c:5d:a1:12:c4: 22:0e:84:0b:41:b6:d8:a6:b7:65:96:81:ec:ef:c7: 20:70:b8:f2:59:a7:3a:17:5a:f0:5c:35:50:b9:19: f0:9a:c3:6a:fb:29:3b:fa:d2:21:2d:51:57:2a:b4: 46:87:6c:e5:54:97:46:33:97:0f:6c:d6:45:26:f3: 53:66:fc:0d:c9:91:ab:a0:e6:73:d1:ce:fa:5e:c5: 03:e2:f8:08:6a:a6:9a:f0:0b:d9:6e:b5:bd:65:f5: f7:aa:07:b9:8e:45:55:35:29:a1:49:12:4c:d4:b8: 73:14:00:00:fd:9f:b9:08:25:b7:6a:57:8a:fc:ef: 7f:fe:7a:9e:df:be:36:c8:30:95:0c:72:a9:0e:f4: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E5:C5:11:86:41:2E:85:3C:AA:44:56:81:6E:09:80:70:E8:E2:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f71dae1-9f28-4da4-a716-ff71375425eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.61.68.0/23 Signature Algorithm: sha256WithRSAEncryption b5:a9:e7:fe:34:d6:7e:c1:dd:ca:26:89:c1:b9:c3:e4:08:3d: 10:4e:0f:10:f7:f3:2b:6e:99:5c:57:ff:95:b4:30:e3:c2:ca: f9:23:50:80:08:4b:43:65:cc:87:11:fe:0f:55:e4:e4:5f:03: d8:ba:91:60:99:c5:61:06:77:71:2f:31:10:7b:12:55:07:7f: 42:96:ee:bf:fa:24:14:e3:f2:02:b8:42:d1:e1:fa:e9:06:4c: c0:fe:4c:29:df:ba:3b:5c:6f:89:1b:bc:1d:0f:15:d8:f0:18: 78:ee:e5:0d:5a:2c:a1:ab:06:ea:ed:ae:1e:5b:e4:4a:71:b4: 02:36:6f:ec:3e:86:c7:49:44:e6:b4:81:7c:b5:8d:d4:9e:8d: 6a:78:dd:53:93:44:f3:de:96:d4:3f:48:2e:86:b6:a6:69:68: 56:30:18:6e:0e:bc:4b:0c:43:8a:41:54:3a:96:04:18:d9:af: 19:00:a0:be:a6:1e:c1:00:64:36:a1:41:3c:27:00:73:af:f5: da:f7:4c:e1:94:49:bf:e8:c3:27:59:d2:e0:39:e7:27:bb:df: ba:54:f1:5a:e4:3e:1d:62:1a:a1:f1:3e:03:c4:3c:7d:31:33: 97:31:2b:19:34:08:05:22:86:93:95:39:9c:9e:1e:f5:6c:6b: 40:a5:a8:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTrSCaGcaGfpHirSuEBZ4FbZ8/VQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTMwMDAwMDA1WhcNMjYxMjI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTVjNTBhMmRiOGNmYWI2NTc0MGFkZjA1ZjM5Yzc1Mjcx NzFjYjY5Yjc0YjVkZTJkZjkxNWVhNGY1MjVjNjFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJyiEV7M2ObAzr1Y9/9d1v7ETfE+JhNKp9Jhy+XDTbCzIs umgjLpUZsfEWHFz0C+pOOpzenpmMSrqEfB1uSsGhGb7Mcl+qj7iK26isFwcQeyR7 fEfAAiFRNxjvygG2MvSnlfUPfGChz/oiweOEZVhBsM9MXaESxCIOhAtBttimt2WW gezvxyBwuPJZpzoXWvBcNVC5GfCaw2r7KTv60iEtUVcqtEaHbOVUl0Yzlw9s1kUm 81Nm/A3Jkaug5nPRzvpexQPi+AhqpprwC9lutb1l9feqB7mORVU1KaFJEkzUuHMU AAD9n7kIJbdqV4r873/+ep7fvjbIMJUMcqkO9AiHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk+XFEYZBLoU8qkRWgW4JgHDo4nowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmNzFkYWUxLTlmMjgtNGRhNC1hNzE2LWZmNzEzNzU0MjVlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQPUQwDQYJKoZIhvcNAQELBQADggEBALWp5/401n7B3comicG5w+QIPRBO DxD38ytumVxX/5W0MOPCyvkjUIAIS0NlzIcR/g9V5ORfA9i6kWCZxWEGd3EvMRB7 ElUHf0KW7r/6JBTj8gK4QtHh+ukGTMD+TCnfujtcb4kbvB0PFdjwGHju5Q1aLKGr Burtrh5b5EpxtAI2b+w+hsdJROa0gXy1jdSejWp43VOTRPPeltQ/SC6GtqZpaFYw GG4OvEsMQ4pBVDqWBBjZrxkAoL6mHsEAZDahQTwnAHOv9dr3TOGUSb/owydZ0uA5 5ye737pU8VrkPh1iGqHxPgPEPH0xM5cxKxk0CAUihpOVOZyeHvVsa0ClqKk= -----END CERTIFICATE-----Generated at Tue Nov 3 16:17:51 2026 by rpki-client