$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa File: 0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa (raw, json) Hash identifier: 3XYS9AwvlrRdrpoNs9GVSCjNtJKFbqIl9K4LlChTK5E= Subject key identifier: A4:E5:EE:D7:B6:08:E1:10:3D:FD:90:58:56:E2:E1:9E:60:41:D8:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D85663131C8AD27D42387B77EA9025D358D51AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa Signing time: Thu 30 Jul 2026 00:20:09 +0000 ROA not before: Thu 30 Jul 2026 00:20:09 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:85:66:31:31:c8:ad:27:d4:23:87:b7:7e:a9:02:5d:35:8d:51:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 30 00:20:09 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=ad1c118a8a0f491e60267519227ba96ab6e7ea5bfae8b63115c1416d26d92863, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:ef:d3:72:53:8a:54:c9:66:c0:a4:1c:24: 2e:d1:20:73:cc:8e:19:82:1e:8a:fd:3e:97:07:1f: f8:55:00:07:df:f1:65:04:33:5d:2a:84:36:41:4c: c3:1e:02:98:a7:a3:1a:ad:aa:2e:58:6f:77:3d:75: 9a:21:63:9b:da:05:71:98:1d:ee:3c:2f:8e:5b:79: da:3d:45:65:a4:2c:c0:5a:ec:90:bb:b1:82:7e:b8: 28:fb:d2:fe:d3:cc:eb:cf:19:66:93:78:54:eb:18: 20:93:03:77:53:b3:27:e0:81:89:55:a4:a6:43:d6: 6c:37:fe:fa:b2:91:45:ad:7c:fb:49:88:b1:0c:e6: 03:1a:ae:af:a4:81:38:a2:2b:fc:fd:66:b5:3e:46: 6c:ca:28:99:c3:c6:e2:66:ef:c7:b4:9a:6e:aa:88: 86:a9:eb:84:ce:87:a8:4a:29:1a:8f:18:4a:b1:89: 0f:32:b2:67:44:2a:0a:4f:64:cb:6c:08:0f:c6:5d: aa:da:7a:f8:33:40:fd:0b:ff:e5:d0:4b:76:2c:54: 9c:08:42:c5:e2:ff:84:ee:f6:c2:45:db:61:8a:bc: d0:7f:e1:45:6f:fd:e7:bd:8f:e5:32:a5:e9:56:65: c1:27:35:95:46:19:51:2e:ec:07:38:11:f5:c2:86: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E5:EE:D7:B6:08:E1:10:3D:FD:90:58:56:E2:E1:9E:60:41:D8:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.23.0/24 Signature Algorithm: sha256WithRSAEncryption bc:3a:78:7c:49:b2:89:0b:d7:e7:99:3c:3d:e5:e8:57:84:2a: 79:0d:2b:a3:ae:06:4a:7d:a0:f2:cd:4f:4a:65:c9:e1:a4:37: 0f:7f:f5:3f:be:4c:24:6a:6d:5a:fd:8b:be:55:29:29:8e:1a: dd:c2:17:c5:ef:c8:08:2b:07:d0:f1:ba:bc:7d:f3:38:cd:a1: 37:13:6d:1e:a8:85:d8:95:bf:9b:9a:c0:e7:61:67:12:2a:ef: eb:73:d8:3f:7d:57:f5:a8:c3:6b:8c:34:08:ba:df:e0:bf:50: a9:40:51:17:d5:e1:64:6e:ae:14:70:4b:3f:a0:cc:21:b7:91: dd:d4:c6:29:b2:81:cf:19:6a:27:f8:1c:43:d3:fc:0a:e5:b0: 68:f8:e0:07:11:35:26:74:c8:7e:c6:8a:fc:ee:2c:c7:78:e6: 73:f8:93:9d:cd:4a:8f:82:9b:11:07:49:a3:3d:bc:b5:6f:1f: a3:fd:95:e6:17:c6:6e:2a:f2:0f:20:2d:bb:14:cf:7e:b3:9d: 04:82:b4:17:41:49:46:e2:b1:93:95:98:31:fb:a3:b6:e4:6e: 37:a4:8d:63:0d:16:e4:71:47:88:d3:45:ce:d3:e0:05:cc:b1: f4:1e:7a:d7:d6:5d:bc:54:90:8c:2c:20:6a:1f:3a:f6:23:5c: e5:64:8a:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPYVmMTHIrSfUI4e3fqkCXTWNUaswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMwMDAyMDA5WhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDFjMTE4YThhMGY0OTFlNjAyNjc1MTkyMjdiYTk2YWI2 ZTdlYTViZmFlOGI2MzExNWMxNDE2ZDI2ZDkyODYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPYO/TclOKVMlmwKQcJC7RIHPMjhmCHor9PpcHH/hVAAff 8WUEM10qhDZBTMMeApinoxqtqi5Yb3c9dZohY5vaBXGYHe48L45bedo9RWWkLMBa 7JC7sYJ+uCj70v7TzOvPGWaTeFTrGCCTA3dTsyfggYlVpKZD1mw3/vqykUWtfPtJ iLEM5gMarq+kgTiiK/z9ZrU+RmzKKJnDxuJm78e0mm6qiIap64TOh6hKKRqPGEqx iQ8ysmdEKgpPZMtsCA/GXaraevgzQP0L/+XQS3YsVJwIQsXi/4Tu9sJF22GKvNB/ 4UVv/ee9j+UypelWZcEnNZVGGVEu7Ac4EfXChozvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpOXu17YI4RA9/ZBYVuLhnmBB2DcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjOWQ5OTgzLTBkZDAtNDM3NS1hMjc4LTI2NmI0ZGEzZTBhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWxcwDQYJKoZIhvcNAQELBQADggEBALw6eHxJsokL1+eZPD3l6FeEKnkN K6OuBkp9oPLNT0plyeGkNw9/9T++TCRqbVr9i75VKSmOGt3CF8XvyAgrB9Dxurx9 8zjNoTcTbR6ohdiVv5uawOdhZxIq7+tz2D99V/Wow2uMNAi63+C/UKlAURfV4WRu rhRwSz+gzCG3kd3Uximygc8Zaif4HEPT/ArlsGj44AcRNSZ0yH7GivzuLMd45nP4 k53NSo+CmxEHSaM9vLVvH6P9leYXxm4q8g8gLbsUz36znQSCtBdBSUbisZOVmDH7 o7bkbjekjWMNFuRxR4jTRc7T4AXMsfQeetfWXbxUkIwsIGofOvYjXOVkivQ= -----END CERTIFICATE-----Generated at Mon Aug 3 05:42:16 2026 by rpki-client