$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d116cf97-5fa9-4951-bb85-9c31772f22e4.roa File: d116cf97-5fa9-4951-bb85-9c31772f22e4.roa (raw, json) Hash identifier: +UPpb52+X8+xSI9FcG/s3LTomUkCrOMga0TpGaCiENM= Subject key identifier: 9C:50:71:26:2C:91:60:6D:50:7F:E9:C2:BE:80:35:F0:F9:44:08:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 269C7CB0E3224C67C605BDD1FF966A909E576279 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d116cf97-5fa9-4951-bb85-9c31772f22e4.roa Signing time: Mon 05 Oct 2026 00:00:38 +0000 ROA not before: Mon 05 Oct 2026 00:00:38 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 16.175.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:7c:b0:e3:22:4c:67:c6:05:bd:d1:ff:96:6a:90:9e:57:62:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:00:38 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=731c26b94510ff9f7b2c27c52522dc134b976f5b7246e73dd8ccea2726898f37, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:1d:ea:5c:07:c3:df:2b:a4:c8:be:6e:51: 1d:9e:1e:c5:ca:37:8e:04:ce:40:74:a7:81:d1:e5: 76:30:ca:b1:10:0b:08:33:7c:7c:8d:35:af:a7:15: db:02:50:30:84:1d:72:57:32:c0:58:89:45:9b:26: 2d:b5:ad:af:f9:a5:3e:dd:ac:9c:fc:1f:7d:6e:df: 23:ee:88:b3:1c:96:2e:93:b1:6a:1a:54:51:49:67: 52:44:37:1f:1c:7f:2f:e9:67:08:2f:0e:0e:29:2c: a5:0e:53:ec:ac:8f:4f:8b:de:ea:7b:5b:fe:8d:c0: 9f:bd:c6:30:c4:1a:5c:f6:1b:c9:d3:94:f9:80:45: f8:d8:0d:6c:0f:18:5f:84:48:03:31:c5:ec:47:4f: fe:df:ef:29:2b:31:4c:e6:e4:fd:32:ab:ba:45:48: 99:49:e0:f8:fb:59:b0:25:8a:ca:20:ef:fe:b3:2c: e5:e9:57:13:56:69:9b:8c:ef:50:6f:5a:70:0a:a8: a7:01:02:67:55:5c:29:06:26:1d:75:3b:9d:25:45: b7:da:18:53:87:6c:66:3e:fd:5d:c4:7e:ea:0a:2b: 4a:97:f0:7f:53:75:fe:f9:72:1a:0d:a5:36:63:e8: 6d:1b:94:d2:ed:7a:c1:0a:d5:e4:b8:ca:69:91:f7: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:50:71:26:2C:91:60:6D:50:7F:E9:C2:BE:80:35:F0:F9:44:08:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d116cf97-5fa9-4951-bb85-9c31772f22e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:7e:b7:bb:61:b5:c2:68:8f:8e:2b:a2:3f:cb:be:76:f0:55: cd:bb:a0:54:09:6e:53:f4:1d:f2:9b:2d:a9:d5:d1:5b:d8:5e: ae:99:ab:db:a5:75:19:e1:ca:b4:d9:e9:d5:60:b9:41:98:3e: e7:6c:ac:7a:a5:5b:67:74:63:f0:bd:ec:73:74:c4:41:85:52: e8:cb:80:12:1e:5f:5b:e6:fc:14:ca:da:5a:37:e9:14:75:54: 0c:8c:ce:ec:83:e8:79:3c:b9:5e:8e:dc:15:e0:fc:a2:fe:8f: f0:28:b3:55:62:88:ef:04:b6:aa:88:07:2b:b2:15:d3:d4:e9: 78:08:2d:b8:5e:47:92:f4:e2:26:0f:94:d7:d3:61:cf:e9:fe: af:11:f2:48:c8:ef:5b:a7:38:31:8e:82:d2:bb:3c:a7:7c:f5: 99:82:3c:dd:1b:af:9e:07:52:df:b3:0f:47:ab:59:c0:cb:55: 64:29:8d:14:d0:ea:f1:4a:47:44:3a:b8:b4:d9:1b:73:e7:e4: cb:68:46:41:e6:46:c5:04:e6:97:52:12:bb:5a:1f:a8:7e:07: 1e:48:d4:38:4a:57:ed:2c:07:ab:b5:f4:e1:3e:21:f7:43:7d: c3:56:9f:66:a5:33:1c:ee:be:72:86:5c:dc:9a:8b:9a:00:a3: 56:9e:88:20 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJpx8sOMiTGfGBb3R/5ZqkJ5XYnkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAwMDM4WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzFjMjZiOTQ1MTBmZjlmN2IyYzI3YzUyNTIyZGMxMzRi OTc2ZjViNzI0NmU3M2RkOGNjZWEyNzI2ODk4ZjM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi7B3qXAfD3yukyL5uUR2eHsXKN44EzkB0p4HR5XYwyrEQ CwgzfHyNNa+nFdsCUDCEHXJXMsBYiUWbJi21ra/5pT7drJz8H31u3yPuiLMcli6T sWoaVFFJZ1JENx8cfy/pZwgvDg4pLKUOU+ysj0+L3up7W/6NwJ+9xjDEGlz2G8nT lPmARfjYDWwPGF+ESAMxxexHT/7f7ykrMUzm5P0yq7pFSJlJ4Pj7WbAlisog7/6z LOXpVxNWaZuM71BvWnAKqKcBAmdVXCkGJh11O50lRbfaGFOHbGY+/V3EfuoKK0qX 8H9Tdf75choNpTZj6G0blNLtesEK1eS4ymmR9z2HAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnFBxJiyRYG1Qf+nCvoA18PlECCEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxMTZjZjk3LTVmYTktNDk1MS1iYjg1LTljMzE3NzJmMjJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQrzANBgkqhkiG9w0BAQsFAAOCAQEAF363u2G1wmiPjiuiP8u+dvBVzbug VAluU/Qd8pstqdXRW9herpmr26V1GeHKtNnp1WC5QZg+52yseqVbZ3Rj8L3sc3TE QYVS6MuAEh5fW+b8FMraWjfpFHVUDIzO7IPoeTy5Xo7cFeD8ov6P8CizVWKI7wS2 qogHK7IV09TpeAgtuF5HkvTiJg+U19Nhz+n+rxHySMjvW6c4MY6C0rs8p3z1mYI8 3RuvngdS37MPR6tZwMtVZCmNFNDq8UpHRDq4tNkbc+fky2hGQeZGxQTml1ISu1of qH4HHkjUOEpX7SwHq7X04T4h90N9w1afZqUzHO6+coZc3JqLmgCjVp6IIA== -----END CERTIFICATE-----Generated at Tue Oct 6 01:24:36 2026 by rpki-client