$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dd9631d-f62a-4e6b-bb1f-c37022abd70c.roa File: 5dd9631d-f62a-4e6b-bb1f-c37022abd70c.roa (raw, json) Hash identifier: NQvYLOHrt9yfh9J5EZGhfqdnXt5lzZT8DNJyTtn0zzA= Subject key identifier: 08:40:38:E1:6F:42:C4:34:9C:CB:F7:CF:86:2C:C1:B7:80:A6:2E:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DD02CD08DEB25F453070FA318490BA43CD23D5A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dd9631d-f62a-4e6b-bb1f-c37022abd70c.roa Signing time: Wed 19 Aug 2026 11:22:46 +0000 ROA not before: Wed 19 Aug 2026 11:22:46 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.54.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d0:2c:d0:8d:eb:25:f4:53:07:0f:a3:18:49:0b:a4:3c:d2:3d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 11:22:46 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=6f2da13f0ee7138334e09460dc3a36ded1d9bc0e021d32cb9cfd8223d111b22c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:e7:64:f5:ab:ad:cf:fc:f9:b2:4a:9e:3a: be:02:09:5a:66:0e:db:42:9c:13:2a:f5:d3:a7:fe: 8b:24:26:0b:30:b8:2a:c7:29:4e:d4:ec:10:d8:fe: 77:e1:b0:e9:ba:26:e5:31:4e:dd:62:09:c8:19:aa: 6d:ae:48:c1:1c:b2:cf:33:88:c4:f0:85:70:d0:f9: 99:ff:70:d5:0b:65:b9:f2:34:ed:1b:d7:f5:70:17: db:08:75:4d:dc:77:0a:33:fa:0d:57:a2:a0:cf:39: c1:52:81:7a:30:3c:08:c3:a8:29:86:7d:e8:49:96: 49:5b:d4:e1:4a:37:7b:c2:6f:59:35:f4:6f:67:ce: db:7b:1c:a3:6f:7c:52:54:b2:7c:a2:a8:fb:7b:fc: 30:ea:f2:25:6d:1c:a3:cf:3c:55:f7:1d:78:50:ed: 8c:36:26:71:e5:dc:4c:42:87:d4:fc:7c:35:56:db: 6d:e6:15:93:68:b7:1b:ea:d1:ca:80:82:b3:16:a5: 47:cd:3f:fc:40:b5:42:06:f5:5f:36:b8:00:9d:ee: 16:08:bf:19:9b:09:0d:6b:18:3e:a7:a2:42:0a:65: 82:58:b6:d1:b4:6c:15:5e:ca:e1:00:79:82:b9:cd: 98:ed:b9:a2:0f:7f:c1:8e:89:93:34:77:b6:69:0e: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:40:38:E1:6F:42:C4:34:9C:CB:F7:CF:86:2C:C1:B7:80:A6:2E:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dd9631d-f62a-4e6b-bb1f-c37022abd70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.54.48.0/23 Signature Algorithm: sha256WithRSAEncryption bf:3d:3f:41:b5:28:f0:a1:ac:39:df:82:ba:03:95:2e:4c:f2: 57:5b:2b:f0:5d:c0:44:76:ac:bd:c2:31:4e:2c:72:48:c0:9e: 74:87:7b:7a:2b:d9:75:86:ef:9e:43:24:70:9c:c6:a2:e5:46: 6a:94:49:8f:de:aa:a9:cd:b1:02:cf:e9:42:3a:7b:be:c2:d2: cf:77:f6:c7:5b:e3:a1:5f:48:0a:24:24:7c:53:84:3b:ca:ae: c5:4e:ea:be:2d:e4:3a:2c:fc:83:5d:db:64:08:bf:eb:b1:da: 5d:f8:aa:2e:d7:87:2b:81:bb:8d:40:3b:a5:ce:c8:b4:ac:90: 21:fe:82:d3:46:fc:f5:a0:d5:b9:6d:b8:55:45:c0:6c:72:69: 4e:44:7b:c2:23:e4:e5:6f:8c:34:cd:e4:5a:bc:bb:b6:4a:24: e9:5b:6f:f7:e4:d4:8f:ee:44:b9:e5:d4:90:4b:e8:fe:29:ff: cb:ec:0b:08:2f:2f:64:af:1f:da:c6:04:37:49:23:1b:e1:51: 89:07:1d:d9:de:04:e7:aa:4d:a5:85:1d:4f:0d:28:ca:70:a8: 42:08:12:b9:c3:9a:cd:22:d5:53:89:90:94:d1:14:76:cb:38: 40:a9:dd:07:b0:89:23:31:18:54:3a:32:9f:8d:e1:d4:23:ff: 08:2a:48:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfdAs0I3rJfRTBw+jGEkLpDzSPVowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MTEyMjQ2WhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjJkYTEzZjBlZTcxMzgzMzRlMDk0NjBkYzNhMzZkZWQx ZDliYzBlMDIxZDMyY2I5Y2ZkODIyM2QxMTFiMjJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpHOdk9autz/z5skqeOr4CCVpmDttCnBMq9dOn/oskJgsw uCrHKU7U7BDY/nfhsOm6JuUxTt1iCcgZqm2uSMEcss8ziMTwhXDQ+Zn/cNULZbny NO0b1/VwF9sIdU3cdwoz+g1XoqDPOcFSgXowPAjDqCmGfehJlklb1OFKN3vCb1k1 9G9nztt7HKNvfFJUsnyiqPt7/DDq8iVtHKPPPFX3HXhQ7Yw2JnHl3ExCh9T8fDVW 223mFZNotxvq0cqAgrMWpUfNP/xAtUIG9V82uACd7hYIvxmbCQ1rGD6nokIKZYJY ttG0bBVeyuEAeYK5zZjtuaIPf8GOiZM0d7ZpDmq5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCEA44W9CxDScy/fPhizBt4CmLucwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkZDk2MzFkLWY2MmEtNGU2Yi1iYjFmLWMzNzAyMmFiZDcwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2NjAwDQYJKoZIhvcNAQELBQADggEBAL89P0G1KPChrDnfgroDlS5M8ldb K/BdwER2rL3CMU4sckjAnnSHe3or2XWG755DJHCcxqLlRmqUSY/eqqnNsQLP6UI6 e77C0s939sdb46FfSAokJHxThDvKrsVO6r4t5Dos/INd22QIv+ux2l34qi7XhyuB u41AO6XOyLSskCH+gtNG/PWg1bltuFVFwGxyaU5Ee8Ij5OVvjDTN5Fq8u7ZKJOlb b/fk1I/uRLnl1JBL6P4p/8vsCwgvL2SvH9rGBDdJIxvhUYkHHdneBOeqTaWFHU8N KMpwqEIIErnDms0i1VOJkJTRFHbLOECp3QewiSMxGFQ6Mp+N4dQj/wgqSOM= -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:42 2026 by rpki-client