$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa File: 45481046-38a5-409c-a78c-876f51ced0e5.roa (raw, json) Hash identifier: bO92Gek7HBWhMMtCB9mRygPi4/EYTbQS8d3x9QPDTMs= Subject key identifier: 67:7F:94:06:73:35:9E:28:84:AC:93:0C:04:A3:83:9F:CA:78:77:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A72F4C5154480FB38A57958526C6C1A77A1F923 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa Signing time: Sat 08 Aug 2026 00:10:43 +0000 ROA not before: Sat 08 Aug 2026 00:10:43 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.53.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:72:f4:c5:15:44:80:fb:38:a5:79:58:52:6c:6c:1a:77:a1:f9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:10:43 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=5da48a7785449fed9fa5c97ba92e4d7456391707f38caa17956f4c0ccbe61b5c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:69:cd:af:08:f0:2a:97:e2:9e:20:5d:a8: f9:06:67:de:3e:bc:ec:df:a9:5e:dc:f6:ae:2e:2a: 77:fa:09:b1:bb:9b:5a:9d:4d:14:92:c1:63:3d:c3: 54:37:fa:16:cb:5f:3c:f6:bd:49:72:fd:95:bc:71: c6:86:3d:61:dd:07:9d:86:bd:ae:df:9b:ee:1c:35: e0:63:05:52:aa:2f:59:15:d2:74:8e:af:9a:19:69: 4d:f4:7a:84:26:56:91:ef:05:4a:99:a1:d0:b9:55: b4:33:27:3d:ad:ec:e6:ff:96:2d:07:bd:21:6f:12: fc:72:25:3a:df:c6:0e:50:17:83:71:ae:5b:74:2f: b3:d5:15:bd:bb:14:ef:a7:7e:ca:60:5b:f9:b2:d3: ae:0f:93:dc:a2:22:5a:04:7b:90:54:8c:2a:1b:0e: 39:41:73:df:2e:8f:17:00:2f:2c:ed:7b:09:c7:4d: ae:0f:55:ce:8d:fe:b9:3f:d3:a1:06:c6:9f:5c:89: 6f:f5:7b:c0:b7:3a:93:50:e8:f5:dd:dd:cf:38:1c: 1b:43:0f:e7:51:49:f0:56:cb:d9:ad:5a:99:9f:9e: 10:aa:fd:89:56:3d:7f:5f:4b:c6:96:a5:7e:4f:9b: 7e:c4:ca:fb:1d:63:cf:d1:14:1a:0b:c3:46:f8:83: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7F:94:06:73:35:9E:28:84:AC:93:0C:04:A3:83:9F:CA:78:77:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption d1:f3:0e:af:76:91:e2:66:1c:68:4b:6e:9c:5d:13:e1:32:64: 16:8d:a5:f9:6e:a4:5b:e3:dc:a6:8d:2d:43:fa:db:32:1d:40: 1b:79:9d:7e:c0:5e:09:02:b8:96:23:53:9e:f7:89:79:bc:bd: 8c:cf:48:5c:56:4c:10:6a:38:27:19:79:f8:1a:cd:eb:4e:0a: d2:75:44:38:96:a4:fd:2a:92:18:ef:f2:3a:95:d5:6d:c3:97: a8:f9:2d:0a:db:4d:d7:a2:09:68:e1:79:56:51:be:f8:55:5d: 28:8e:db:95:4b:ab:ac:fe:15:69:29:46:f2:1b:78:97:e3:87: 06:0c:dd:ab:e6:7a:47:3c:7e:f7:07:fa:04:7e:fd:a4:6d:65: 77:f7:95:8f:81:1e:f2:b3:75:88:95:36:bb:4b:5e:18:50:8e: 21:ed:38:0f:b0:40:8a:e1:38:de:88:c4:7e:4d:b1:d3:04:45: da:dc:d6:f1:ae:5c:31:16:89:05:24:6d:0c:72:7b:93:3f:27: da:74:75:8d:3f:91:0d:40:73:4c:88:24:35:f8:b8:97:ff:1c: ea:57:76:a3:d6:e1:92:be:09:71:1e:3d:8c:24:e8:30:a6:e5: 19:b8:09:ad:74:e9:b0:7b:d6:8e:9e:f3:11:2c:63:14:5d:5b: 7b:49:5e:c8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUenL0xRVEgPs4pXlYUmxsGneh+SMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAxMDQzWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGE0OGE3Nzg1NDQ5ZmVkOWZhNWM5N2JhOTJlNGQ3NDU2 MzkxNzA3ZjM4Y2FhMTc5NTZmNGMwY2NiZTYxYjVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo82nNrwjwKpfiniBdqPkGZ94+vOzfqV7c9q4uKnf6CbG7 m1qdTRSSwWM9w1Q3+hbLXzz2vUly/ZW8ccaGPWHdB52Gva7fm+4cNeBjBVKqL1kV 0nSOr5oZaU30eoQmVpHvBUqZodC5VbQzJz2t7Ob/li0HvSFvEvxyJTrfxg5QF4Nx rlt0L7PVFb27FO+nfspgW/my064Pk9yiIloEe5BUjCobDjlBc98ujxcALyztewnH Ta4PVc6N/rk/06EGxp9ciW/1e8C3OpNQ6PXd3c84HBtDD+dRSfBWy9mtWpmfnhCq /YlWPX9fS8aWpX5Pm37EyvsdY8/RFBoLw0b4g0kLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZ3+UBnM1niiErJMMBKODn8p4d3YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1NDgxMDQ2LTM4YTUtNDA5Yy1hNzhjLTg3NmY1MWNlZDBlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4NTANBgkqhkiG9w0BAQsFAAOCAQEA0fMOr3aR4mYcaEtunF0T4TJkFo2l +W6kW+Pcpo0tQ/rbMh1AG3mdfsBeCQK4liNTnveJeby9jM9IXFZMEGo4Jxl5+BrN 604K0nVEOJak/SqSGO/yOpXVbcOXqPktCttN16IJaOF5VlG++FVdKI7blUurrP4V aSlG8ht4l+OHBgzdq+Z6Rzx+9wf6BH79pG1ld/eVj4Ee8rN1iJU2u0teGFCOIe04 D7BAiuE43ojEfk2x0wRF2tzW8a5cMRaJBSRtDHJ7kz8n2nR1jT+RDUBzTIgkNfi4 l/8c6ld2o9bhkr4JcR49jCToMKblGbgJrXTpsHvWjp7zESxjFF1be0leyA== -----END CERTIFICATE-----Generated at Sat Aug 22 07:28:52 2026 by rpki-client