$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa File: a4d49ad1-da76-4d40-801d-8877c08472a5.roa (raw, json) Hash identifier: a8rIh+2VS3cUGD5VlrQd3o265CSKOfCpzcfdSfc3fD8= Subject key identifier: 23:27:A6:52:63:AC:11:32:D0:1E:63:D4:CE:18:80:9E:32:16:66:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3730FD74A557C0E97E7A8EB0FD70A398AE4ABB67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa Signing time: Mon 26 Oct 2026 00:30:42 +0000 ROA not before: Mon 26 Oct 2026 00:30:42 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.194.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:30:fd:74:a5:57:c0:e9:7e:7a:8e:b0:fd:70:a3:98:ae:4a:bb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:30:42 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=5bdcd11bfd8dadaa37001d00ed10926f4a004565228770129fcac2eb60d5713d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:a9:98:95:2d:f4:2e:92:cb:37:9d:d8:9e: c2:05:b1:1c:85:06:42:a1:a8:c1:8e:81:87:c4:3e: 03:21:91:45:01:c4:2f:00:76:47:e9:29:26:ae:ec: 2c:65:ba:6c:6d:54:5b:06:8c:5b:d5:bf:f2:8d:ee: b5:8f:5c:50:43:5f:cc:e2:3c:2d:26:78:03:f0:4e: 66:be:35:48:5b:82:fc:a8:3c:fd:88:86:92:c4:8a: 01:32:d8:f4:97:11:05:5f:b6:c8:1e:92:a8:68:19: c9:ff:11:ed:c8:8b:4a:3f:44:11:1f:15:76:73:b5: d1:45:48:00:9e:f9:47:e6:11:50:b0:d5:e6:d7:19: be:0e:5c:a8:51:55:62:aa:bc:d4:ab:d6:38:d7:45: 89:af:c4:e9:f4:be:80:e3:27:4d:bb:44:ac:27:7c: 09:ec:8a:b0:cd:46:a0:1a:60:e8:fd:c1:95:9a:51: 6e:e6:df:f4:d5:53:4b:a3:2b:1c:39:0e:a4:20:8b: 42:7f:19:d1:a6:31:5b:d2:80:45:66:e3:ce:3d:bc: 36:fc:07:0e:2c:01:3a:8a:e7:1e:3a:f4:04:f6:51: 76:a9:bc:01:48:1e:2b:8f:c4:c7:ea:6b:1b:c5:0a: 60:89:5f:ab:5b:66:ab:23:ab:a3:be:51:61:9c:06: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:27:A6:52:63:AC:11:32:D0:1E:63:D4:CE:18:80:9E:32:16:66:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4e:4a:26:56:53:1a:9e:b0:a5:7b:ea:37:aa:36:8e:32:6b:7e: 1e:66:34:b4:73:7a:97:b4:b0:4a:ca:77:0f:2a:ea:72:a0:d2: 2b:fd:5f:ab:47:d7:4d:7b:14:cf:2c:62:ba:1d:de:e0:cd:27: b7:bd:b5:ef:53:18:fc:9e:55:19:6b:08:a5:eb:13:e0:fe:39: 33:2b:43:bb:9f:f0:27:21:cf:6d:33:b6:ff:9d:bd:ce:83:ca: a5:a4:2d:65:7c:67:e4:49:3a:45:d0:2e:96:87:6b:5d:cd:a7: 72:fa:ed:b4:7c:38:ef:f1:34:db:2d:91:18:16:9b:fb:8f:d0: e9:85:b1:cd:1e:b9:c4:b6:a2:6d:24:3b:c9:b4:f7:ec:23:56: a0:5f:fa:5f:a8:4b:50:69:39:b4:06:d0:2c:7d:e8:8a:11:e6: e9:68:bd:e7:3a:13:d7:dd:28:24:35:d0:13:39:31:42:11:16: f8:26:d2:36:36:6b:73:c4:66:b9:0f:db:37:05:3a:ca:69:b4: d5:a9:01:63:16:fb:34:86:f4:8c:d6:62:db:8b:72:36:9d:97: 9a:37:86:6e:a3:b6:76:53:72:42:67:ed:50:83:24:1b:0f:ad: 59:3a:ee:2a:0d:86:2c:91:a1:e5:70:a9:e6:a9:ad:19:3a:b6: f8:19:81:e6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNzD9dKVXwOl+eo6w/XCjmK5Ku2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAzMDQyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmRjZDExYmZkOGRhZGFhMzcwMDFkMDBlZDEwOTI2ZjRh MDA0NTY1MjI4NzcwMTI5ZmNhYzJlYjYwZDU3MTNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfGamYlS30LpLLN53YnsIFsRyFBkKhqMGOgYfEPgMhkUUB xC8AdkfpKSau7CxlumxtVFsGjFvVv/KN7rWPXFBDX8ziPC0meAPwTma+NUhbgvyo PP2IhpLEigEy2PSXEQVftsgekqhoGcn/Ee3Ii0o/RBEfFXZztdFFSACe+UfmEVCw 1ebXGb4OXKhRVWKqvNSr1jjXRYmvxOn0voDjJ027RKwnfAnsirDNRqAaYOj9wZWa UW7m3/TVU0ujKxw5DqQgi0J/GdGmMVvSgEVm4849vDb8Bw4sATqK5x469AT2UXap vAFIHiuPxMfqaxvFCmCJX6tbZqsjq6O+UWGcBiklAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIyemUmOsETLQHmPUzhiAnjIWZrgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0ZDQ5YWQxLWRhNzYtNGQ0MC04MDFkLTg4NzdjMDg0NzJhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPwjANBgkqhkiG9w0BAQsFAAOCAQEATkomVlManrCle+o3qjaOMmt+HmY0 tHN6l7SwSsp3DyrqcqDSK/1fq0fXTXsUzyxiuh3e4M0nt72171MY/J5VGWsIpesT 4P45MytDu5/wJyHPbTO2/529zoPKpaQtZXxn5Ek6RdAulodrXc2ncvrttHw47/E0 2y2RGBab+4/Q6YWxzR65xLaibSQ7ybT37CNWoF/6X6hLUGk5tAbQLH3oihHm6Wi9 5zoT190oJDXQEzkxQhEW+CbSNjZrc8RmuQ/bNwU6ymm01akBYxb7NIb0jNZi24ty Np2XmjeGbqO2dlNyQmftUIMkGw+tWTruKg2GLJGh5XCp5qmtGTq2+BmB5g== -----END CERTIFICATE-----Generated at Mon Nov 2 18:49:13 2026 by rpki-client