$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b5b7a17-0ebb-4ced-a785-129bfe7910d2.roa File: 3b5b7a17-0ebb-4ced-a785-129bfe7910d2.roa (raw, json) Hash identifier: Xfr6yOQ37Odw3VTLGCT1cAI/bFc4Xg1wxsTKRApD2wk= Subject key identifier: BE:17:70:99:F8:90:24:E8:E9:7E:91:3C:D1:21:BF:F3:8B:C9:BF:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A7C492404C25B8714D4994BAEE6BCB8B6EF2DEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b5b7a17-0ebb-4ced-a785-129bfe7910d2.roa Signing time: Tue 25 Aug 2026 18:34:59 +0000 ROA not before: Tue 25 Aug 2026 18:34:59 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.31.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7c:49:24:04:c2:5b:87:14:d4:99:4b:ae:e6:bc:b8:b6:ef:2d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 18:34:59 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=7721b49b65c884f8d3b6898b22c679872e84915f35b18315c0564aa399cb536b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:97:e8:b8:10:8c:e1:98:0c:45:ad:86:e5: d8:2d:76:99:77:e7:e4:11:02:62:23:42:82:9a:82: c9:c3:85:de:5a:64:e1:45:f7:45:df:b6:8c:3b:50: 07:c2:6d:ae:7b:77:39:42:9b:8c:28:a2:7f:cd:15: 6c:60:70:cc:9a:30:b8:4e:e1:ea:9a:6d:f9:d9:27: b2:8c:6f:b7:9c:b7:81:b3:40:75:cd:f9:45:79:7d: a3:dc:8f:42:2c:fc:49:59:45:05:02:0b:a7:82:82: 48:ce:77:71:91:b6:76:ac:ef:73:01:08:78:45:a2: 6b:e0:0a:97:35:ef:5b:c8:0c:d2:3a:cf:9d:d6:eb: 78:dc:fe:3e:37:ce:52:6a:d8:23:40:40:50:12:47: 82:16:6a:28:f2:bf:8f:f2:7b:7e:5b:7e:9a:7f:2e: 10:b2:cc:2f:00:0a:02:aa:ea:b5:0e:f8:ef:dc:74: 29:57:cd:d5:fb:6e:7f:5c:d8:dc:f2:25:96:69:83: 16:24:61:20:97:61:a5:4a:f4:3f:ec:b1:21:58:b1: 3c:72:7b:15:12:12:46:1a:09:ee:60:6b:6b:9f:81: 12:8b:8c:e2:cb:ba:f7:ad:79:05:b5:77:61:21:86: fe:a2:59:61:59:c8:83:1b:1a:dd:d2:0b:83:53:cb: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:17:70:99:F8:90:24:E8:E9:7E:91:3C:D1:21:BF:F3:8B:C9:BF:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b5b7a17-0ebb-4ced-a785-129bfe7910d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.31.0.0/16 Signature Algorithm: sha256WithRSAEncryption 81:a8:0c:5d:01:ce:04:01:0f:f9:00:1b:c3:fa:52:97:96:43: 4a:4f:dc:53:35:ff:30:c0:d6:e0:42:dc:24:aa:03:c6:39:1e: 07:9d:d5:17:d1:2f:86:a6:d5:1d:bf:61:e8:d5:82:cd:54:cc: 29:8f:32:6d:39:40:b9:ef:5f:7a:3b:dd:b3:eb:ff:02:67:a9: 3d:26:57:5c:48:0e:3a:ff:8e:88:5f:42:78:3e:85:44:1f:9c: e0:9c:b1:c0:b4:63:05:8b:c1:54:6f:a5:e0:d2:51:35:ed:79: 81:78:3a:ea:aa:df:04:51:b0:82:84:91:0f:f6:2f:92:79:f3: 0b:fe:dc:30:96:69:98:dc:60:8f:ac:cc:69:88:19:47:09:46: bc:17:b6:83:8b:2a:6d:a9:35:f3:10:c7:ee:51:25:16:fc:57: d9:3d:0f:ed:3d:00:9d:31:5f:c3:86:63:63:9d:07:ba:cf:ce: 91:84:da:18:17:66:2e:d6:a3:23:38:e2:df:1c:f1:50:e8:ce: 9a:ad:0d:cd:f8:7f:2f:0f:0c:7d:97:61:af:cd:01:f8:f9:b3: 9e:6c:cd:ef:79:b1:62:11:11:14:c6:24:a0:72:f4:a0:66:00: eb:85:6d:e3:fc:18:64:f3:8b:6e:9e:1e:a0:22:6b:aa:6a:43: 94:72:d4:78 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWnxJJATCW4cU1JlLrua8uLbvLe8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MTgzNDU5WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzIxYjQ5YjY1Yzg4NGY4ZDNiNjg5OGIyMmM2Nzk4NzJl ODQ5MTVmMzViMTgzMTVjMDU2NGFhMzk5Y2I1MzZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyj5fouBCM4ZgMRa2G5dgtdpl35+QRAmIjQoKagsnDhd5a ZOFF90Xftow7UAfCba57dzlCm4woon/NFWxgcMyaMLhO4eqabfnZJ7KMb7ect4Gz QHXN+UV5faPcj0Is/ElZRQUCC6eCgkjOd3GRtnas73MBCHhFomvgCpc171vIDNI6 z53W63jc/j43zlJq2CNAQFASR4IWaijyv4/ye35bfpp/LhCyzC8ACgKq6rUO+O/c dClXzdX7bn9c2NzyJZZpgxYkYSCXYaVK9D/ssSFYsTxyexUSEkYaCe5ga2ufgRKL jOLLuveteQW1d2Ehhv6iWWFZyIMbGt3SC4NTy197AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvhdwmfiQJOjpfpE80SG/84vJv6swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiNWI3YTE3LTBlYmItNGNlZC1hNzg1LTEyOWJmZTc5MTBkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2HzANBgkqhkiG9w0BAQsFAAOCAQEAgagMXQHOBAEP+QAbw/pSl5ZDSk/c UzX/MMDW4ELcJKoDxjkeB53VF9EvhqbVHb9h6NWCzVTMKY8ybTlAue9fejvds+v/ AmepPSZXXEgOOv+OiF9CeD6FRB+c4JyxwLRjBYvBVG+l4NJRNe15gXg66qrfBFGw goSRD/YvknnzC/7cMJZpmNxgj6zMaYgZRwlGvBe2g4sqbak18xDH7lElFvxX2T0P 7T0AnTFfw4ZjY50Hus/OkYTaGBdmLtajIzji3xzxUOjOmq0Nzfh/Lw8MfZdhr80B +PmznmzN73mxYhERFMYkoHL0oGYA64Vt4/wYZPOLbp4eoCJrqmpDlHLUeA== -----END CERTIFICATE-----Generated at Tue Sep 15 13:16:18 2026 by rpki-client