$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa File: 2300825a-8820-45a1-837c-e7e6b3f0eca5.roa (raw, json) Hash identifier: YoHN9jk1UVvt/XwueM1C7BktYP6TEsYOX0jRv2u8CRM= Subject key identifier: 5B:43:05:61:84:79:47:95:8B:2D:D7:9F:7C:7B:70:48:19:AC:19:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35BE790BFAEC8F7E333E29822D4308B0A4913190 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa Signing time: Tue 04 Aug 2026 02:31:48 +0000 ROA not before: Tue 04 Aug 2026 02:31:48 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:be:79:0b:fa:ec:8f:7e:33:3e:29:82:2d:43:08:b0:a4:91:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:31:48 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=925e0c9f1491a6d474e5ffe5f97181e651b3f769ac890a21b3ee823c1c51622a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:a9:92:e5:c1:27:8e:79:2d:67:12:a0:4d: 73:a8:41:c9:4d:77:68:79:cb:e7:7f:04:1c:1b:42: d5:54:82:5a:56:53:d2:5e:aa:1c:49:75:55:6c:9c: 8c:13:f8:b1:79:c0:4a:6f:55:c1:c5:79:52:5c:74: d4:56:e1:d9:92:22:f5:69:4f:55:17:86:56:ab:4f: ff:c8:2b:48:03:d4:2a:e7:6b:72:76:b4:2f:49:19: 9e:ae:03:3d:8f:56:13:cf:b1:3b:d2:66:51:38:04: 67:77:85:d1:40:b1:84:00:ff:c4:47:44:02:c5:8a: 6e:c0:17:89:5e:54:08:74:9e:a0:ed:e2:bd:c4:2e: 5f:03:ae:e3:3e:c2:a4:d1:b8:e4:84:97:2e:5b:e5: 7c:4c:40:bf:8c:f7:9e:28:a3:7e:72:9d:87:03:04: 1d:66:6a:29:fc:46:bd:04:c4:ae:8e:0a:f2:00:74: 30:81:df:90:ce:ac:35:a2:16:72:17:08:43:52:18: 96:e1:3a:79:da:ac:5d:dd:f3:62:6c:e7:ce:ec:64: 1b:27:85:8a:4a:d7:bb:eb:95:32:29:7b:61:f9:2d: 8c:26:d7:e6:c6:05:16:23:98:e1:21:8e:41:b4:27: 88:db:8e:6c:93:7c:26:e6:92:94:9a:45:45:f4:63: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:43:05:61:84:79:47:95:8B:2D:D7:9F:7C:7B:70:48:19:AC:19:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.2.0/23 Signature Algorithm: sha256WithRSAEncryption bf:2d:64:ff:99:12:12:42:56:2d:90:b5:82:ce:02:b2:b9:34: 6e:79:31:4a:86:cf:7c:f5:47:b5:ca:28:bd:bd:f8:99:56:67: e3:9b:96:8f:ca:fb:94:78:31:ec:ad:22:8c:34:57:32:9d:13: 8c:ee:9d:45:9c:27:ad:04:89:65:92:13:c8:ad:a9:3a:6b:f5: 54:a5:9d:1b:d8:66:6e:31:76:a1:b5:c6:ea:0c:21:01:a4:2f: e7:58:c8:4e:53:fc:89:06:4c:44:28:7a:1f:75:ab:f3:68:09: d8:b6:8f:69:e6:14:8c:38:0d:03:32:9d:7a:c3:9d:b9:82:4f: 90:2b:41:96:e6:e8:4a:33:bc:d6:ce:f8:4b:62:f2:c2:bf:2a: 80:7d:12:c2:55:ac:86:da:37:fa:70:1c:91:26:59:75:95:77: 84:e2:9b:77:61:5e:36:70:e1:86:36:3c:37:e5:03:d8:79:7d: de:c5:3d:ae:e2:71:43:dd:a8:ac:ff:a7:da:2a:64:d1:9b:f7: 0c:0f:ff:89:08:44:ef:83:10:6d:e1:06:11:ca:75:4e:fe:f2: 06:9c:a5:d1:2b:ae:f6:ea:bd:d0:f3:0f:5c:b9:18:05:ae:ee: de:68:28:91:6c:8e:9c:4d:8b:1a:67:64:8d:0d:5c:05:00:bf: e6:2a:8c:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNb55C/rsj34zPimCLUMIsKSRMZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIzMTQ4WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjVlMGM5ZjE0OTFhNmQ0NzRlNWZmZTVmOTcxODFlNjUx YjNmNzY5YWM4OTBhMjFiM2VlODIzYzFjNTE2MjJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ6KmS5cEnjnktZxKgTXOoQclNd2h5y+d/BBwbQtVUglpW U9JeqhxJdVVsnIwT+LF5wEpvVcHFeVJcdNRW4dmSIvVpT1UXhlarT//IK0gD1Crn a3J2tC9JGZ6uAz2PVhPPsTvSZlE4BGd3hdFAsYQA/8RHRALFim7AF4leVAh0nqDt 4r3ELl8DruM+wqTRuOSEly5b5XxMQL+M954oo35ynYcDBB1main8Rr0ExK6OCvIA dDCB35DOrDWiFnIXCENSGJbhOnnarF3d82Js587sZBsnhYpK17vrlTIpe2H5LYwm 1+bGBRYjmOEhjkG0J4jbjmyTfCbmkpSaRUX0Y+LDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW0MFYYR5R5WLLdeffHtwSBmsGdIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzMDA4MjVhLTg4MjAtNDVhMS04MzdjLWU3ZTZiM2YwZWNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBswIwDQYJKoZIhvcNAQELBQADggEBAL8tZP+ZEhJCVi2QtYLOArK5NG55 MUqGz3z1R7XKKL29+JlWZ+Oblo/K+5R4MeytIow0VzKdE4zunUWcJ60EiWWSE8it qTpr9VSlnRvYZm4xdqG1xuoMIQGkL+dYyE5T/IkGTEQoeh91q/NoCdi2j2nmFIw4 DQMynXrDnbmCT5ArQZbm6EozvNbO+Eti8sK/KoB9EsJVrIbaN/pwHJEmWXWVd4Ti m3dhXjZw4YY2PDflA9h5fd7FPa7icUPdqKz/p9oqZNGb9wwP/4kIRO+DEG3hBhHK dU7+8gacpdErrvbqvdDzD1y5GAWu7t5oKJFsjpxNixpnZI0NXAUAv+YqjOs= -----END CERTIFICATE-----Generated at Thu Sep 17 16:16:52 2026 by rpki-client