$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa File: ef59c634-b428-4d89-99f2-8f22503d93d7.roa (raw, json) Hash identifier: wooeOGIxnJbdUCm9tIhfJkg2Hgbif32+CFR5w77Dxgs= Subject key identifier: 6C:74:64:F7:98:C3:EA:9C:10:E1:DA:72:4A:8F:10:86:A1:BE:A3:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50225718762CDBDCAEC0E2FF1819F35186C93A9E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa Signing time: Mon 03 Aug 2026 00:41:03 +0000 ROA not before: Mon 03 Aug 2026 00:41:03 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 161.193.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:22:57:18:76:2c:db:dc:ae:c0:e2:ff:18:19:f3:51:86:c9:3a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:41:03 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=aba2d5f2042b08591d31885642f9267bf1060e773ba517e5b436a9f2075ef769, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:54:bf:be:0f:69:7c:24:37:94:80:45:a3: a9:2b:79:10:f6:8d:64:0f:e5:64:02:26:b0:3b:59: 9e:3f:92:a4:e5:ba:9e:2e:73:62:f9:2b:13:61:fc: c2:6e:ca:6f:1a:85:4e:b7:0c:71:31:ba:fa:bc:09: 97:2d:e8:5e:d8:21:3a:9e:33:6e:ed:7d:dc:d7:7d: 9d:83:a0:9f:46:34:a3:36:9d:8c:1b:e5:60:a0:70: d8:2e:97:d1:96:e5:7d:7d:5a:63:ef:b8:78:1f:7b: 5c:69:ed:70:d6:ab:22:62:3e:8f:ba:31:18:f4:8f: c5:21:40:2b:cb:fa:76:32:ac:60:81:20:4d:2b:47: 36:33:7d:44:14:7e:d4:5e:e9:9f:ba:e7:cf:32:70: e5:06:37:96:ab:c1:cb:c4:ed:0d:52:95:5e:74:20: 9f:59:cf:d9:40:e7:5b:d8:69:88:da:15:b1:12:8f: 2c:0f:62:be:73:0a:bb:01:4b:84:f3:bc:12:52:1d: cd:e6:a3:2c:d6:6f:2e:05:d7:81:e6:5f:43:9f:25: 6e:d9:89:9c:25:db:93:f4:d9:91:98:b1:f5:4c:82: 76:fd:6c:e2:6c:91:cc:89:95:ae:54:a6:c1:4f:11: e0:a2:09:38:86:77:d2:59:b8:53:2d:fc:c2:01:45: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:74:64:F7:98:C3:EA:9C:10:E1:DA:72:4A:8F:10:86:A1:BE:A3:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.193.128.0/19 Signature Algorithm: sha256WithRSAEncryption 8b:8e:f8:73:e9:5c:d6:bd:62:4f:ff:a4:7e:e9:bd:2d:cf:65: 84:ee:9e:9c:ab:7e:0f:ff:94:ed:5b:4a:3f:6e:e3:a6:48:f0: 9e:be:13:0b:7a:bf:ca:91:16:63:ed:7d:73:8b:66:46:26:80: 6a:ab:09:1f:0e:7e:f1:33:f5:4e:07:f2:f2:83:2e:63:42:6c: 1c:6d:01:91:a7:ee:29:b7:4e:49:c6:9f:04:89:4c:2d:45:b7: e3:07:9a:20:a6:c5:98:b7:2f:ff:fa:f6:04:da:27:23:c6:48: ff:c4:5f:bc:89:7e:81:4b:11:ab:d9:62:2c:d0:2a:3a:2a:d0: 6a:fe:57:6f:4a:6a:76:82:8d:93:24:6a:23:35:75:80:52:96: 8d:7d:47:a3:b0:03:9e:4b:fd:cc:58:ce:71:1e:9b:0c:42:05: b0:09:ba:b7:7c:9a:88:e3:ce:58:d0:12:ec:4d:3c:8a:9b:8f: d1:01:fd:bb:ae:5d:78:72:cd:b2:7f:87:88:c5:36:f3:36:6d: a1:43:97:e5:3e:86:e4:56:2f:f0:e1:27:d4:54:66:fb:30:7d: d8:68:23:cb:d3:d7:43:7e:12:89:7e:e6:e2:0d:44:1c:fc:b6: ce:6a:b9:24:28:f6:84:c7:a5:15:af:36:0d:3a:0f:67:4f:d1: 22:00:d6:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUCJXGHYs29yuwOL/GBnzUYbJOp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA0MTAzWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmEyZDVmMjA0MmIwODU5MWQzMTg4NTY0MmY5MjY3YmYx MDYwZTc3M2JhNTE3ZTViNDM2YTlmMjA3NWVmNzY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz8FS/vg9pfCQ3lIBFo6kreRD2jWQP5WQCJrA7WZ4/kqTl up4uc2L5KxNh/MJuym8ahU63DHExuvq8CZct6F7YITqeM27tfdzXfZ2DoJ9GNKM2 nYwb5WCgcNgul9GW5X19WmPvuHgfe1xp7XDWqyJiPo+6MRj0j8UhQCvL+nYyrGCB IE0rRzYzfUQUftRe6Z+6588ycOUGN5arwcvE7Q1SlV50IJ9Zz9lA51vYaYjaFbES jywPYr5zCrsBS4TzvBJSHc3moyzWby4F14HmX0OfJW7ZiZwl25P02ZGYsfVMgnb9 bOJskcyJla5UpsFPEeCiCTiGd9JZuFMt/MIBRadZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbHRk95jD6pwQ4dpySo8QhqG+o8IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmNTljNjM0LWI0MjgtNGQ4OS05OWYyLThmMjI1MDNkOTNkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWhwYAwDQYJKoZIhvcNAQELBQADggEBAIuO+HPpXNa9Yk//pH7pvS3PZYTu npyrfg//lO1bSj9u46ZI8J6+Ewt6v8qRFmPtfXOLZkYmgGqrCR8OfvEz9U4H8vKD LmNCbBxtAZGn7im3TknGnwSJTC1Ft+MHmiCmxZi3L//69gTaJyPGSP/EX7yJfoFL EavZYizQKjoq0Gr+V29KanaCjZMkaiM1dYBSlo19R6OwA55L/cxYznEemwxCBbAJ urd8mojjzljQEuxNPIqbj9EB/buuXXhyzbJ/h4jFNvM2baFDl+U+huRWL/DhJ9RU ZvswfdhoI8vT10N+Eol+5uINRBz8ts5quSQo9oTHpRWvNg06D2dP0SIA1t8= -----END CERTIFICATE-----Generated at Tue Sep 15 13:23:23 2026 by rpki-client