$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa File: 2ab45e62-7d44-4885-a10e-81a21539a820.roa (raw, json) Hash identifier: fVHEp9Gw30hbF3wZr9kCfSAeaxdXsTlWAJ1VhXlXy2U= Subject key identifier: 48:57:3A:F4:C7:5F:3B:A0:A2:8F:20:B5:5B:6C:BF:94:73:EC:76:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25528FB25824417A40B38C257289957D02371F7B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa Signing time: Fri 23 Oct 2026 00:20:09 +0000 ROA not before: Fri 23 Oct 2026 00:20:09 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:52:8f:b2:58:24:41:7a:40:b3:8c:25:72:89:95:7d:02:37:1f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:20:09 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=7c0ac376ac816431ca990378d97a593d62d7510c677b271c799c01bd8efe4b92, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:46:99:02:51:4c:81:e0:34:3b:4b:3d:53: 52:62:ea:ab:8f:6b:96:7e:1c:c6:f7:0a:5a:cf:32: a2:c7:99:26:ff:e5:cf:7d:57:71:e0:18:c7:5d:4a: 73:a1:44:16:f2:af:6c:3c:53:83:16:8d:ee:39:a4: 01:95:ff:da:20:b0:83:10:7f:e5:ce:7f:c8:94:fc: 74:9e:d7:d5:3f:df:ac:8a:8b:d6:03:c0:89:43:2b: 5c:d7:9e:39:83:91:ad:59:11:17:21:eb:21:58:82: c7:3c:9c:34:82:36:52:48:a3:aa:40:ea:79:6f:0a: fd:b0:9d:40:03:53:ee:31:ff:72:c4:90:39:c7:47: 2d:23:e0:17:6d:8f:9e:44:4b:7c:a5:84:5d:02:3c: 45:f2:20:20:13:fc:0f:f9:8c:da:cb:02:02:03:7e: 10:01:a9:9e:c9:b3:7f:9a:65:a8:65:10:dc:51:e4: f2:04:11:91:b5:60:6c:da:ee:68:d7:db:07:80:43: 5e:9d:1a:2b:86:70:27:77:17:43:50:ba:41:fd:f4: 2e:86:48:ce:86:4d:9d:22:c0:d1:36:36:81:d6:ed: 3d:56:74:c9:de:df:f3:ea:a6:f6:29:e5:84:18:44: 7e:60:77:18:b5:53:37:ed:41:6d:71:b8:35:70:7c: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:3A:F4:C7:5F:3B:A0:A2:8F:20:B5:5B:6C:BF:94:73:EC:76:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.72.0/22 Signature Algorithm: sha256WithRSAEncryption 52:53:d9:e6:36:a4:19:4d:99:f9:4b:9b:6a:42:82:c6:c6:c3: 60:4b:b8:bd:0b:fa:b7:0c:ce:f2:72:b4:07:fe:e5:e8:c1:80: 08:55:fd:3f:b4:a9:0a:19:d6:cb:44:49:d2:f9:16:2c:48:ef: 2c:8f:6f:ea:f5:84:7e:12:b9:70:07:e5:d0:e7:df:a9:c5:d5: 18:f3:30:57:8c:fb:00:c3:68:f8:b0:7a:a9:0e:2e:11:c5:f2: 73:52:09:70:2a:e5:ec:ac:86:6e:b0:63:f7:60:f5:c7:a9:2a: 2e:9d:ec:74:e0:88:f5:d9:03:85:50:1a:cd:1c:63:50:84:74: e3:ec:92:82:23:3c:e5:31:ed:b9:42:01:d9:71:2b:4e:93:dd: 4f:3a:e7:55:e6:0f:40:60:dc:86:88:98:68:a9:b6:f4:62:1b: 21:f5:7e:c1:e1:7d:4b:3c:ae:a2:ee:7b:30:8c:6b:57:db:5f: ac:32:8b:e7:54:2f:73:16:56:77:fa:9b:13:b8:16:5f:92:f4: af:ef:84:71:8b:fb:cc:de:78:e0:77:6c:79:67:52:8b:68:60: e5:bb:3a:c2:61:d1:eb:14:ce:4f:8c:f9:db:fb:18:f9:c5:29: 03:38:92:c3:53:0b:f3:e4:a4:b4:9a:95:6b:18:04:74:c2:5a: d2:c7:ca:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJVKPslgkQXpAs4wlcomVfQI3H3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAyMDA5WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzBhYzM3NmFjODE2NDMxY2E5OTAzNzhkOTdhNTkzZDYy ZDc1MTBjNjc3YjI3MWM3OTljMDFiZDhlZmU0YjkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWpEaZAlFMgeA0O0s9U1Ji6quPa5Z+HMb3ClrPMqLHmSb/ 5c99V3HgGMddSnOhRBbyr2w8U4MWje45pAGV/9ogsIMQf+XOf8iU/HSe19U/36yK i9YDwIlDK1zXnjmDka1ZERch6yFYgsc8nDSCNlJIo6pA6nlvCv2wnUADU+4x/3LE kDnHRy0j4Bdtj55ES3ylhF0CPEXyICAT/A/5jNrLAgIDfhABqZ7Js3+aZahlENxR 5PIEEZG1YGza7mjX2weAQ16dGiuGcCd3F0NQukH99C6GSM6GTZ0iwNE2NoHW7T1W dMne3/PqpvYp5YQYRH5gdxi1UzftQW1xuDVwfNF9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSFc69MdfO6CijyC1W2y/lHPsdlswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhYjQ1ZTYyLTdkNDQtNDg4NS1hMTBlLTgxYTIxNTM5YTgyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXF0gwDQYJKoZIhvcNAQELBQADggEBAFJT2eY2pBlNmflLm2pCgsbGw2BL uL0L+rcMzvJytAf+5ejBgAhV/T+0qQoZ1stESdL5FixI7yyPb+r1hH4SuXAH5dDn 36nF1RjzMFeM+wDDaPiweqkOLhHF8nNSCXAq5eyshm6wY/dg9cepKi6d7HTgiPXZ A4VQGs0cY1CEdOPskoIjPOUx7blCAdlxK06T3U8651XmD0Bg3IaImGiptvRiGyH1 fsHhfUs8rqLuezCMa1fbX6wyi+dUL3MWVnf6mxO4Fl+S9K/vhHGL+8zeeOB3bHln UotoYOW7OsJh0esUzk+M+dv7GPnFKQM4ksNTC/PkpLSalWsYBHTCWtLHymU= -----END CERTIFICATE-----Generated at Tue Nov 3 12:01:47 2026 by rpki-client