$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b563bd1e-4507-4091-b93e-830c6573340d.roa File: b563bd1e-4507-4091-b93e-830c6573340d.roa (raw, json) Hash identifier: ZyCCiYPTJX2jgi5GHks4ywjpchsDR6hHiC56AICj8rI= Subject key identifier: 04:D9:D8:60:8E:EE:AA:F6:75:B7:EF:1F:68:FC:CF:17:EF:26:A5:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 10609D517160945F1C7B20338B81E265A702CD67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b563bd1e-4507-4091-b93e-830c6573340d.roa Signing time: Mon 05 Oct 2026 00:21:23 +0000 ROA not before: Mon 05 Oct 2026 00:21:23 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.224.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:60:9d:51:71:60:94:5f:1c:7b:20:33:8b:81:e2:65:a7:02:cd:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:21:23 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=eeb9d0c567d14147ce7a06db04407c8c594f3178fe20be5c079e64121a1a37cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6d:49:6c:a9:23:e1:fb:fd:04:a1:e6:eb:e1: f6:1c:e5:41:99:f3:08:b6:79:d5:02:6f:0d:2b:29: 7b:88:05:4f:24:f3:3f:8d:f6:60:fa:3f:4f:cb:1d: 85:ff:47:a9:f1:7a:29:5a:f1:f2:35:e8:89:4b:44: b9:f2:0e:0f:f6:40:c3:26:22:d3:2b:c0:0f:45:b2: 5f:64:ca:a1:40:12:5a:8e:14:05:c5:a3:6d:d4:24: df:df:ff:5b:97:fa:ea:44:f6:47:37:35:85:45:7d: ca:67:68:df:eb:c5:8f:24:89:65:ab:93:24:74:58: 7d:39:16:2d:f1:d9:04:c3:a7:0e:d5:fd:0a:f5:f6: 0c:0e:92:50:e6:56:8b:5a:83:19:50:b2:c9:73:5f: 70:bc:c2:f1:dd:cc:15:46:68:72:13:5b:52:73:40: 66:91:9a:fb:0b:21:c0:14:76:8b:01:95:23:6e:09: 54:7d:f8:38:9c:10:c9:38:95:ab:26:42:74:0e:eb: 5b:1f:9e:ab:33:3e:e5:81:3a:32:ea:60:8e:19:40: 12:16:6f:c9:2d:43:8e:34:0e:cd:47:cc:54:83:93: 36:de:fa:92:fb:fe:0d:3b:b9:c6:65:f5:f8:b2:c0: 72:f5:ff:55:f7:96:6f:da:d5:b5:fc:f2:b4:15:ba: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D9:D8:60:8E:EE:AA:F6:75:B7:EF:1F:68:FC:CF:17:EF:26:A5:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b563bd1e-4507-4091-b93e-830c6573340d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.224.128.0/17 Signature Algorithm: sha256WithRSAEncryption a0:f6:61:2e:1d:5a:0f:77:3d:b9:00:aa:13:78:20:ea:b3:44: a6:d7:17:ca:2b:14:79:43:2f:26:52:b5:26:83:e5:08:84:1c: 0b:c7:7e:36:5c:e4:22:36:f8:8a:6f:89:a2:77:51:14:85:c8: 34:f5:33:d8:5b:d2:5e:64:2f:9a:90:62:1a:08:6c:2c:5d:f8: 52:55:7e:62:28:9c:2c:e0:ec:6f:b5:1b:0c:3b:6a:83:78:43: f2:be:c5:d1:fa:03:1b:8a:a1:15:91:79:41:a6:65:b5:0f:dd: 3b:13:5b:23:f7:d1:34:7c:5b:14:b6:03:ba:f6:c0:9f:eb:0e: e7:7d:db:ba:62:24:ee:74:95:8b:6e:7f:db:b1:1d:5f:b5:a3: 19:4e:4c:bb:b8:4c:52:41:48:cd:83:95:74:dd:fe:fd:61:ac: c3:ef:8b:3f:fc:dc:86:23:09:43:f2:0c:4a:6d:2c:8a:5a:bc: f1:5d:b0:6e:54:5c:9d:63:bd:28:af:c0:b8:57:25:36:0f:12: 2e:e8:59:09:82:8f:79:88:28:8b:11:d2:ec:fd:65:62:e3:81: 0d:2e:39:b9:4e:29:af:4e:9f:2d:e6:3c:eb:bc:6c:5a:e8:be: da:94:de:f5:94:d9:e3:9b:f6:c2:4c:0a:02:16:f0:ec:b0:1b: 2f:b9:d3:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEGCdUXFglF8ceyAzi4HiZacCzWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAyMTIzWhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWI5ZDBjNTY3ZDE0MTQ3Y2U3YTA2ZGIwNDQwN2M4YzU5 NGYzMTc4ZmUyMGJlNWMwNzllNjQxMjFhMWEzN2NmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSbUlsqSPh+/0Eoebr4fYc5UGZ8wi2edUCbw0rKXuIBU8k 8z+N9mD6P0/LHYX/R6nxeila8fI16IlLRLnyDg/2QMMmItMrwA9Fsl9kyqFAElqO FAXFo23UJN/f/1uX+upE9kc3NYVFfcpnaN/rxY8kiWWrkyR0WH05Fi3x2QTDpw7V /Qr19gwOklDmVotagxlQsslzX3C8wvHdzBVGaHITW1JzQGaRmvsLIcAUdosBlSNu CVR9+DicEMk4lasmQnQO61sfnqszPuWBOjLqYI4ZQBIWb8ktQ440Ds1HzFSDkzbe +pL7/g07ucZl9fiywHL1/1X3lm/a1bX88rQVuijNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBNnYYI7uqvZ1t+8faPzPF+8mpTwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1NjNiZDFlLTQ1MDctNDA5MS1iOTNlLTgzMGM2NTczMzQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcP4IAwDQYJKoZIhvcNAQELBQADggEBAKD2YS4dWg93PbkAqhN4IOqzRKbX F8orFHlDLyZStSaD5QiEHAvHfjZc5CI2+IpviaJ3URSFyDT1M9hb0l5kL5qQYhoI bCxd+FJVfmIonCzg7G+1Gww7aoN4Q/K+xdH6AxuKoRWReUGmZbUP3TsTWyP30TR8 WxS2A7r2wJ/rDud927piJO50lYtuf9uxHV+1oxlOTLu4TFJBSM2DlXTd/v1hrMPv iz/83IYjCUPyDEptLIpavPFdsG5UXJ1jvSivwLhXJTYPEi7oWQmCj3mIKIsR0uz9 ZWLjgQ0uOblOKa9Ony3mPOu8bFrovtqU3vWU2eOb9sJMCgIW8OywGy+505s= -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:34 2026 by rpki-client