$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa File: 04458f53-1b58-4ea6-b808-1d18094e2918.roa (raw, json) Hash identifier: 1H8TmiSAJz9DucQpr8CHATTdlS3XIVMZH1zM33SAPfE= Subject key identifier: 99:90:53:C1:AB:17:A0:09:F9:3D:D4:1B:42:98:F5:1C:59:00:E0:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49BC6FAE78370F7178B3C99DAC71292EB2B3FE4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa Signing time: Tue 04 Aug 2026 00:30:14 +0000 ROA not before: Tue 04 Aug 2026 00:30:14 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.182.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bc:6f:ae:78:37:0f:71:78:b3:c9:9d:ac:71:29:2e:b2:b3:fe:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:30:14 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=e83dc59887bf3bfb5c56482360f95583c146be912b45526efec552980e1b761b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:25:ff:28:ba:85:be:cc:45:13:d5:9d:c9: e8:6e:ce:f4:52:51:54:8e:f9:45:43:58:30:4a:2a: de:24:56:6a:4b:d8:f2:05:3e:f9:0a:d2:9b:76:46: 16:d3:40:a4:d1:ac:b4:77:f5:f8:47:d2:b8:93:34: c4:a3:f4:5e:fc:b1:ce:3f:21:0c:41:72:bc:e3:e8: 95:e1:45:e8:a5:d6:04:1f:d2:80:9b:27:2e:ca:e7: 16:3f:2a:e8:82:0f:22:6c:a2:e8:af:bf:2c:41:01: 51:2f:75:76:ab:8c:4a:71:13:c4:12:fe:6c:69:25: 8f:60:3f:c8:29:b2:51:82:cc:59:03:ec:a4:cc:6a: 76:cf:b6:0b:84:e9:c5:25:ca:3e:18:e7:fc:91:8f: 64:2a:9d:7c:a7:e6:da:4b:da:c8:73:17:19:3b:2a: 2b:14:2c:24:53:4a:08:e9:39:4e:d9:c2:3f:91:21: 16:1e:cd:89:c5:8d:a1:eb:0a:4a:7f:8e:f3:08:31: 25:b1:bd:a8:cd:f3:f8:c6:a6:f6:b7:f4:3e:2a:3c: 24:75:fd:c0:cd:6a:f2:9b:29:ec:5f:f2:2e:60:c1: a9:1f:15:39:a7:55:83:86:9c:b7:d1:a5:4f:db:9a: 2d:a7:c5:7c:06:43:bb:dc:54:ec:32:eb:c9:1a:14: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:90:53:C1:AB:17:A0:09:F9:3D:D4:1B:42:98:F5:1C:59:00:E0:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.182.224.0/21 Signature Algorithm: sha256WithRSAEncryption 11:ef:5d:8f:97:8e:43:ad:f5:c8:51:16:dc:03:d8:37:39:c8: ea:e1:7b:60:5f:6a:9f:26:67:02:10:e1:dc:37:de:48:e9:d5: 6a:da:2b:f6:70:ff:75:46:e6:a7:6e:d5:8f:26:ba:0b:d5:26: c7:b5:22:71:d8:4f:4a:6b:9a:ad:29:99:0d:a0:9c:a8:50:37: 6f:47:a4:32:d2:90:c5:24:60:07:5e:ba:2a:23:1c:21:79:6a: f9:1e:46:75:04:c0:17:67:ef:5e:30:9f:93:c6:f7:87:1b:6e: 63:e0:5b:b8:f4:72:7e:51:67:42:10:c6:fb:88:ae:be:5a:e3: 07:4b:34:f4:a1:4b:0b:52:d4:da:a0:25:e2:60:52:e2:42:e6: d5:54:64:9b:bc:0a:6c:22:5c:43:55:48:e2:bd:0f:e1:98:71: 61:d7:2e:5a:9a:c6:e7:bd:d6:85:6a:69:8f:e9:b1:29:b2:3c: 22:a3:f5:79:6c:a5:99:96:6f:82:78:59:64:4a:30:05:63:58: 42:e2:45:1a:73:a1:17:e4:75:9f:4d:ac:8d:a0:9f:99:fc:55: ec:ff:bd:cf:0a:c0:13:37:1f:86:1e:43:54:d0:83:f6:cb:fb: f6:f8:82:a9:e2:84:91:fd:64:10:ad:6b:e3:a4:58:ec:e4:5f: 36:e3:9c:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSbxvrng3D3F4s8mdrHEpLrKz/kowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAzMDE0WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODNkYzU5ODg3YmYzYmZiNWM1NjQ4MjM2MGY5NTU4M2Mx NDZiZTkxMmI0NTUyNmVmZWM1NTI5ODBlMWI3NjFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC3iX/KLqFvsxFE9WdyehuzvRSUVSO+UVDWDBKKt4kVmpL 2PIFPvkK0pt2RhbTQKTRrLR39fhH0riTNMSj9F78sc4/IQxBcrzj6JXhReil1gQf 0oCbJy7K5xY/KuiCDyJsouivvyxBAVEvdXarjEpxE8QS/mxpJY9gP8gpslGCzFkD 7KTManbPtguE6cUlyj4Y5/yRj2QqnXyn5tpL2shzFxk7KisULCRTSgjpOU7Zwj+R IRYezYnFjaHrCkp/jvMIMSWxvajN8/jGpva39D4qPCR1/cDNavKbKexf8i5gwakf FTmnVYOGnLfRpU/bmi2nxXwGQ7vcVOwy68kaFAGXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmZBTwasXoAn5PdQbQpj1HFkA4OswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NDU4ZjUzLTFiNTgtNGVhNi1iODA4LTFkMTgwOTRlMjkxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYtuAwDQYJKoZIhvcNAQELBQADggEBABHvXY+XjkOt9chRFtwD2Dc5yOrh e2Bfap8mZwIQ4dw33kjp1WraK/Zw/3VG5qdu1Y8mugvVJse1InHYT0prmq0pmQ2g nKhQN29HpDLSkMUkYAdeuiojHCF5avkeRnUEwBdn714wn5PG94cbbmPgW7j0cn5R Z0IQxvuIrr5a4wdLNPShSwtS1NqgJeJgUuJC5tVUZJu8CmwiXENVSOK9D+GYcWHX Llqaxue91oVqaY/psSmyPCKj9XlspZmWb4J4WWRKMAVjWELiRRpzoRfkdZ9NrI2g n5n8Vez/vc8KwBM3H4YeQ1TQg/bL+/b4gqnihJH9ZBCta+OkWOzkXzbjnJc= -----END CERTIFICATE-----Generated at Thu Sep 17 17:07:39 2026 by rpki-client