$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f57a5d-c030-4116-adc4-0419c9f485bd.roa File: 48f57a5d-c030-4116-adc4-0419c9f485bd.roa (raw, json) Hash identifier: q7/FJEQxYBsoj9hOxpev0b3YdGNJpYhhDE35f2TRv2w= Subject key identifier: 70:2F:E6:03:8B:4D:09:B2:EF:D1:06:52:A6:00:EC:91:82:9B:44:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 565E948F314E16A3D39216E9AB55C265F4733E52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f57a5d-c030-4116-adc4-0419c9f485bd.roa Signing time: Tue 11 Aug 2026 21:32:16 +0000 ROA not before: Tue 11 Aug 2026 21:32:16 +0000 ROA not after: Mon 09 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.188.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5e:94:8f:31:4e:16:a3:d3:92:16:e9:ab:55:c2:65:f4:73:3e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 21:32:16 2026 GMT Not After : Nov 9 23:59:59 2026 GMT Subject: serialNumber=025c619f7cb47901cdf1fa23f68c69589f225f9e4155868e92f499b3b496a8a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:af:c9:f7:95:b7:a3:a7:80:a7:be:7e:05: a6:09:82:4c:49:26:57:0c:00:15:21:b7:f2:6a:22: 60:0b:d7:d1:01:bf:ce:e5:8f:a6:2c:4a:95:51:b0: 98:27:ff:c7:99:6c:3c:14:cc:7e:98:5c:6a:4f:a2: 30:18:d9:fa:07:fb:18:94:8a:7c:01:5e:dd:c6:83: d1:b2:83:15:34:de:32:34:70:c3:89:75:c7:bf:05: 88:c7:cd:2a:7e:e4:6e:e7:ad:2f:34:d5:77:0b:ec: 79:5e:b2:53:ba:51:25:88:80:67:b9:4d:89:bd:01: 45:88:73:d1:1b:9e:06:05:2f:69:32:ad:76:6b:d9: a9:24:94:5c:35:90:51:4c:21:39:44:a7:c1:49:35: 70:05:38:27:19:8f:cf:fa:77:4d:19:a5:13:6b:94: 01:e0:d1:6b:ad:38:f5:ea:43:0d:49:f4:44:19:d0: 26:55:eb:25:ad:24:76:be:8c:00:2b:4a:e3:be:3a: ec:cb:5c:b8:d5:76:48:b9:ff:74:57:fc:41:c8:dd: b8:6b:8a:0f:db:03:78:cb:b0:05:3c:22:94:7c:b8: cc:a7:f0:88:cd:93:5c:48:8f:c0:42:2e:71:5c:f9: ec:c2:9e:ad:e3:a8:a0:21:85:42:85:73:7d:8c:f2: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2F:E6:03:8B:4D:09:B2:EF:D1:06:52:A6:00:EC:91:82:9B:44:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f57a5d-c030-4116-adc4-0419c9f485bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.188.0.0/14 Signature Algorithm: sha256WithRSAEncryption 1c:da:9d:de:fd:9c:a9:cd:7a:02:6d:d5:c5:b9:ff:19:3c:a0: ff:83:c1:20:dd:9f:b3:16:4e:30:d5:d3:55:2a:00:d8:bd:64: 41:35:e9:59:74:77:70:15:5b:9c:d6:75:ab:42:70:7b:07:cc: cf:e6:d2:5c:b8:9b:25:a4:bf:7a:4a:61:64:a2:ea:0c:03:10: 89:fd:34:58:c9:b9:37:fc:8f:71:48:86:75:0f:60:d2:14:c3: 11:d1:c1:59:4c:1c:e9:16:0a:37:83:64:a1:cf:de:6b:8e:1c: 50:6a:9d:27:a0:2f:5c:3c:13:c9:40:b5:c2:0b:c9:d9:9f:18: f6:1b:cd:fc:63:e3:1c:3c:14:c0:ec:0f:b4:18:23:98:61:28: 64:35:81:82:8e:c8:3f:bb:9b:af:07:3c:12:f6:0f:bb:0f:21: 0a:c4:47:5c:c1:b8:d3:1c:50:b3:48:c1:2d:7f:12:79:73:9f: 93:63:50:73:dd:7c:cc:6b:3d:53:6e:51:cd:c5:49:93:3a:71: 53:d0:e8:da:e9:56:00:98:ca:45:40:99:f2:1d:35:55:d6:8e: e9:74:7a:1a:23:eb:f2:f2:c6:d8:c4:1e:be:d9:b0:ba:0e:91: b3:36:4b:10:8a:a9:4c:7c:53:45:d1:48:27:b7:66:45:2d:0d: 16:bc:65:ca -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVl6UjzFOFqPTkhbpq1XCZfRzPlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODExMjEzMjE2WhcNMjYxMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjVjNjE5ZjdjYjQ3OTAxY2RmMWZhMjNmNjhjNjk1ODlm MjI1ZjllNDE1NTg2OGU5MmY0OTliM2I0OTZhOGEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkfa/J95W3o6eAp75+BaYJgkxJJlcMABUht/JqImAL19EB v87lj6YsSpVRsJgn/8eZbDwUzH6YXGpPojAY2foH+xiUinwBXt3Gg9GygxU03jI0 cMOJdce/BYjHzSp+5G7nrS801XcL7HleslO6USWIgGe5TYm9AUWIc9EbngYFL2ky rXZr2akklFw1kFFMITlEp8FJNXAFOCcZj8/6d00ZpRNrlAHg0WutOPXqQw1J9EQZ 0CZV6yWtJHa+jAArSuO+OuzLXLjVdki5/3RX/EHI3bhrig/bA3jLsAU8IpR8uMyn 8IjNk1xIj8BCLnFc+ezCnq3jqKAhhUKFc32M8m7/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcC/mA4tNCbLv0QZSpgDskYKbRPUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4ZjU3YTVkLWMwMzAtNDExNi1hZGM0LTA0MTljOWY0ODViZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINvDANBgkqhkiG9w0BAQsFAAOCAQEAHNqd3v2cqc16Am3Vxbn/GTyg/4PB IN2fsxZOMNXTVSoA2L1kQTXpWXR3cBVbnNZ1q0JwewfMz+bSXLibJaS/ekphZKLq DAMQif00WMm5N/yPcUiGdQ9g0hTDEdHBWUwc6RYKN4Nkoc/ea44cUGqdJ6AvXDwT yUC1wgvJ2Z8Y9hvN/GPjHDwUwOwPtBgjmGEoZDWBgo7IP7ubrwc8EvYPuw8hCsRH XMG40xxQs0jBLX8SeXOfk2NQc918zGs9U25RzcVJkzpxU9Do2ulWAJjKRUCZ8h01 VdaO6XR6GiPr8vLG2MQevtmwug6RszZLEIqpTHxTRdFIJ7dmRS0NFrxlyg== -----END CERTIFICATE-----Generated at Sat Aug 15 07:42:37 2026 by rpki-client