$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2223e481-8629-4442-883a-03fe651afe9d.roa File: 2223e481-8629-4442-883a-03fe651afe9d.roa (raw, json) Hash identifier: CKNn9UDg2TPfERRDqHSBpX5bSmRyDVx0SChxwMzw5p4= Subject key identifier: 78:9E:06:49:8A:E8:4B:45:FD:67:5E:42:E9:1B:47:33:48:63:5F:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 084B7151F5BCAC961B6A14F24DBFCAA9A7F29986 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2223e481-8629-4442-883a-03fe651afe9d.roa Signing time: Thu 25 Jun 2026 14:02:22 +0000 ROA not before: Thu 25 Jun 2026 14:02:22 +0000 ROA not after: Wed 23 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.164.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4b:71:51:f5:bc:ac:96:1b:6a:14:f2:4d:bf:ca:a9:a7:f2:99:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 25 14:02:22 2026 GMT Not After : Sep 23 23:59:59 2026 GMT Subject: serialNumber=b26e4977d59c011ba6581584a040b933be1969b4eb51ac6eae955f80a6194fe8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cc:5b:5e:82:11:45:e0:88:92:39:b6:c7:e7: 05:2b:ae:b6:66:a8:d5:c0:2a:d2:3b:35:f6:12:4f: 0f:23:2e:8a:93:8a:90:25:1b:c6:8e:7a:39:59:a7: 8c:31:58:e9:12:00:b0:b6:ea:4c:0b:70:9c:76:be: 5a:05:51:17:33:fb:fa:3e:56:54:38:19:68:9c:e6: 36:c9:80:14:fa:32:54:ca:97:a4:01:bd:74:2a:49: 61:f5:15:db:dd:07:4f:97:db:31:ff:75:f3:dd:b4: 83:c2:dd:29:9e:f2:40:93:5a:80:97:2a:0d:49:eb: cd:0b:dd:5d:45:f3:9c:79:75:52:8e:37:40:a5:51: 83:da:10:b2:fe:d7:77:75:15:53:61:e0:b8:a5:55: e8:60:65:8a:9a:4a:21:42:94:62:aa:74:94:82:0c: ec:c0:ed:03:13:10:04:ca:a4:b5:cb:d0:f8:6f:3d: bc:14:1b:5d:73:26:d7:08:8f:a7:00:e4:2d:37:06: b5:c2:66:b0:6d:10:49:22:1d:50:78:22:c0:49:ec: 3f:87:f3:c0:e8:66:77:a7:89:ae:a7:d6:0a:60:db: 99:cf:67:2f:3b:8f:3d:a8:c6:88:2b:38:88:d3:10: 8a:f1:9a:e1:2c:2e:bd:cc:8a:b5:26:71:7b:7d:1b: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9E:06:49:8A:E8:4B:45:FD:67:5E:42:E9:1B:47:33:48:63:5F:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2223e481-8629-4442-883a-03fe651afe9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.164.2.0/23 Signature Algorithm: sha256WithRSAEncryption 76:05:71:c4:ec:0c:be:6a:e0:be:7f:ab:d1:52:b7:44:af:54: cf:85:7f:17:b0:2a:67:fd:b6:40:fc:16:10:32:b0:13:f5:e6: cb:e9:cd:82:ab:5a:2c:f2:58:ca:c3:2d:54:c9:14:04:a4:17: 15:0d:02:28:e3:76:5a:85:79:58:b8:cf:97:dc:d2:d5:78:49: a3:68:68:07:82:9b:24:fc:60:56:51:19:3f:a5:d8:70:52:38: f3:24:79:08:d5:8c:df:f0:dc:82:e1:d4:3d:e9:32:54:b7:2c: df:52:d1:1b:d6:f4:75:6a:e5:92:94:8a:1f:8a:57:85:2a:a0: 5c:1f:23:de:15:c9:07:0f:23:2c:bb:e8:56:9c:af:48:20:ca: 03:53:52:cf:5e:c1:a2:fd:2f:6b:c5:f3:a3:c2:44:e6:c4:8a: 95:ae:d0:ed:d6:d0:a3:e8:8e:0b:bd:00:db:5a:ef:34:e4:19: dc:60:7e:45:3f:04:f8:57:41:4e:ce:1d:0b:b0:96:04:21:26: 0f:b2:08:6c:9b:f4:55:c2:a2:81:d3:58:c6:6f:ba:e5:c9:9e: ff:40:98:fa:ce:30:3f:7c:4d:d9:ee:ca:68:b6:3d:d4:57:e0: 95:4e:b2:a2:02:47:c2:3e:76:7d:c3:78:80:43:9a:bc:4f:c8: 83:16:cc:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCEtxUfW8rJYbahTyTb/KqafymYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjI1MTQwMjIyWhcNMjYwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjZlNDk3N2Q1OWMwMTFiYTY1ODE1ODRhMDQwYjkzM2Jl MTk2OWI0ZWI1MWFjNmVhZTk1NWY4MGE2MTk0ZmU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnzFteghFF4IiSObbH5wUrrrZmqNXAKtI7NfYSTw8jLoqT ipAlG8aOejlZp4wxWOkSALC26kwLcJx2vloFURcz+/o+VlQ4GWic5jbJgBT6MlTK l6QBvXQqSWH1FdvdB0+X2zH/dfPdtIPC3Sme8kCTWoCXKg1J680L3V1F85x5dVKO N0ClUYPaELL+13d1FVNh4LilVehgZYqaSiFClGKqdJSCDOzA7QMTEATKpLXL0Phv PbwUG11zJtcIj6cA5C03BrXCZrBtEEkiHVB4IsBJ7D+H88DoZnenia6n1gpg25nP Zy87jz2oxogrOIjTEIrxmuEsLr3MirUmcXt9G925AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeJ4GSYroS0X9Z15C6RtHM0hjX0IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyMjNlNDgxLTg2MjktNDQ0Mi04ODNhLTAzZmU2NTFhZmU5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEopAIwDQYJKoZIhvcNAQELBQADggEBAHYFccTsDL5q4L5/q9FSt0SvVM+F fxewKmf9tkD8FhAysBP15svpzYKrWizyWMrDLVTJFASkFxUNAijjdlqFeVi4z5fc 0tV4SaNoaAeCmyT8YFZRGT+l2HBSOPMkeQjVjN/w3ILh1D3pMlS3LN9S0RvW9HVq 5ZKUih+KV4UqoFwfI94VyQcPIyy76Facr0ggygNTUs9ewaL9L2vF86PCRObEipWu 0O3W0KPojgu9ANta7zTkGdxgfkU/BPhXQU7OHQuwlgQhJg+yCGyb9FXCooHTWMZv uuXJnv9AmPrOMD98Tdnuymi2PdRX4JVOsqICR8I+dn3DeIBDmrxPyIMWzC0= -----END CERTIFICATE-----Generated at Wed Jul 1 06:19:50 2026 by rpki-client