$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa File: f4745733-2600-4627-8fbe-3ab8ab0b9769.roa (raw, json) Hash identifier: 9NJan9qxFYzhCBiDrj2r5VVtJ/ynz6KzFkj7+lmcKQI= Subject key identifier: 31:CB:F7:17:B3:5A:08:06:E2:5A:23:9C:4E:E6:DC:9E:46:04:17:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64EC62266E4D5249D21C33482F2136323A60F825 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa Signing time: Mon 12 Oct 2026 00:30:45 +0000 ROA not before: Mon 12 Oct 2026 00:30:45 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 50.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ec:62:26:6e:4d:52:49:d2:1c:33:48:2f:21:36:32:3a:60:f8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:30:45 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=8c73f723153319f770eb8ba6476bb99ce661c5fb2b719daf67db1a2e156f1ea9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:c9:36:4d:81:7d:3a:2f:f4:a6:db:f8:09: 94:33:cf:f8:a2:02:3e:08:e3:dd:a9:fa:e8:93:ee: e9:ef:2e:15:e8:a4:47:28:c3:29:79:8a:18:c7:63: 4a:04:68:9b:5f:8d:db:f7:4c:37:48:0d:80:39:af: f2:f9:5f:0e:84:91:69:78:6d:8a:1b:a7:69:9c:ab: 21:c1:76:c7:44:9e:c4:77:ac:6c:26:3c:dc:82:c3: d8:b6:ad:d3:73:05:01:6c:b1:e6:8d:5f:c2:f8:e9: d6:37:38:bd:2e:d2:a0:d1:2c:6d:d1:eb:c2:0f:c8: 7b:1e:7c:a0:a2:5d:77:7c:6c:c3:58:9e:d6:ee:81: 60:5b:71:9f:d2:7b:0a:00:b0:a1:df:e0:c1:b8:9c: 98:80:e9:b0:99:fa:3f:26:51:65:f4:cb:e0:ab:ac: a7:2a:77:2d:cf:a0:dd:04:e3:2b:20:55:86:6f:d1: b9:34:20:b9:2d:01:df:db:01:f1:e2:78:60:ab:7e: 10:86:41:a7:a8:f1:47:02:19:21:27:e7:4d:6b:2e: 36:c7:88:01:32:4d:3a:1d:34:f5:c3:01:55:95:76: 5e:06:53:fa:70:74:9b:ea:67:e8:62:99:91:29:87: 01:00:5a:21:be:e4:ae:1c:00:fa:ce:da:cd:dc:39: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CB:F7:17:B3:5A:08:06:E2:5A:23:9C:4E:E6:DC:9E:46:04:17:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:d3:68:c3:02:5d:9f:0a:2c:8e:17:ac:ae:3c:c8:86:e1:1e: 9c:fc:5e:a6:4d:d1:27:aa:92:b1:80:06:f6:0b:d3:7c:91:9e: 05:91:28:8d:3d:c2:12:5f:c4:bb:cd:64:f8:58:d6:51:5a:8c: 11:60:f9:4b:d6:7b:05:5e:68:ce:a4:74:9a:0a:a0:1f:91:c5: 25:38:aa:97:23:5d:09:a6:41:e5:87:3b:6f:79:23:db:d4:f1: 34:8d:d8:5f:ea:99:70:db:d9:4c:23:f8:bf:fe:fa:f0:a3:63: 35:20:1f:54:03:ba:dc:05:85:9a:9d:a6:ce:e4:bd:b2:b3:44: 71:68:a1:d7:4f:bd:b1:4c:67:98:cb:7c:51:8f:00:36:9d:8b: 60:e3:fd:9b:df:1d:23:c5:c0:ae:e4:dd:78:68:c4:cc:da:9b: 0d:56:d9:ca:13:cb:a2:0d:fa:51:83:36:98:ef:cb:04:17:f7: 08:88:5b:c3:ce:2f:93:4e:49:66:5e:a5:87:f2:c9:57:a3:cd: 17:23:13:88:f4:0e:63:86:05:9e:ad:cd:23:37:8d:9b:be:e2: 51:69:c2:dc:87:14:8f:59:a6:97:92:df:7a:99:25:1a:34:35: 1c:e4:3c:ec:02:f2:b0:a6:b6:e9:04:27:91:ab:6b:b2:86:22: 39:3e:40:73 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZOxiJm5NUknSHDNILyE2Mjpg+CUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAzMDQ1WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzczZjcyMzE1MzMxOWY3NzBlYjhiYTY0NzZiYjk5Y2U2 NjFjNWZiMmI3MTlkYWY2N2RiMWEyZTE1NmYxZWE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFV8k2TYF9Oi/0ptv4CZQzz/iiAj4I492p+uiT7unvLhXo pEcowyl5ihjHY0oEaJtfjdv3TDdIDYA5r/L5Xw6EkWl4bYobp2mcqyHBdsdEnsR3 rGwmPNyCw9i2rdNzBQFsseaNX8L46dY3OL0u0qDRLG3R68IPyHsefKCiXXd8bMNY ntbugWBbcZ/SewoAsKHf4MG4nJiA6bCZ+j8mUWX0y+CrrKcqdy3PoN0E4ysgVYZv 0bk0ILktAd/bAfHieGCrfhCGQaeo8UcCGSEn501rLjbHiAEyTTodNPXDAVWVdl4G U/pwdJvqZ+himZEphwEAWiG+5K4cAPrO2s3cOZNFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMcv3F7NaCAbiWiOcTubcnkYEF8YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0NzQ1NzMzLTI2MDAtNDYyNy04ZmJlLTNhYjhhYjBiOTc2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyETANBgkqhkiG9w0BAQsFAAOCAQEARdNowwJdnwosjhesrjzIhuEenPxe pk3RJ6qSsYAG9gvTfJGeBZEojT3CEl/Eu81k+FjWUVqMEWD5S9Z7BV5ozqR0mgqg H5HFJTiqlyNdCaZB5Yc7b3kj29TxNI3YX+qZcNvZTCP4v/768KNjNSAfVAO63AWF mp2mzuS9srNEcWih10+9sUxnmMt8UY8ANp2LYOP9m98dI8XAruTdeGjEzNqbDVbZ yhPLog36UYM2mO/LBBf3CIhbw84vk05JZl6lh/LJV6PNFyMTiPQOY4YFnq3NIzeN m77iUWnC3IcUj1mml5LfepklGjQ1HOQ87ALysKa26QQnkatrsoYiOT5Acw== -----END CERTIFICATE-----Generated at Sun Nov 15 10:07:23 2026 by rpki-client