$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa File: 5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa (raw, json) Hash identifier: Wyvu+pgpgCEFemc9oh9daSQC8pnKWyA2csI86cSgoYs= Subject key identifier: 27:F5:CA:3C:B3:10:99:EF:45:D6:7E:81:A6:F4:33:71:D7:E8:14:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43048F848BA6A757CFF9DD194340D3808A589BB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa Signing time: Thu 30 Jul 2026 00:31:16 +0000 ROA not before: Thu 30 Jul 2026 00:31:16 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:04:8f:84:8b:a6:a7:57:cf:f9:dd:19:43:40:d3:80:8a:58:9b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 30 00:31:16 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=85240e77db79f679491fd622fdc3dd88510ab9699ee5109d1f140e77d919c4e5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:42:76:11:ee:74:64:f0:dd:a5:fd:47:31: 65:57:ad:aa:51:ee:a7:05:53:3a:b7:cb:7f:b5:f4: 91:e1:dd:b0:a3:7e:2a:d9:ae:30:31:a0:64:ce:43: 97:2c:db:62:1c:d1:b3:39:57:fb:86:53:81:49:af: da:5c:d0:76:06:01:fd:4e:5a:0f:da:85:60:b2:c2: 96:3b:bc:ff:b2:03:0d:1e:2d:39:14:32:a9:b0:45: 53:2c:56:29:7a:33:b8:10:04:83:cc:a2:bf:4b:45: ee:d7:f1:29:6e:76:84:af:0a:8b:02:44:9c:8b:bc: ee:60:40:17:d4:9b:aa:9d:f5:84:63:86:c0:9d:2f: f3:43:31:0b:47:73:9e:aa:06:81:62:e7:ba:48:3e: 28:92:ec:76:03:66:a0:17:3c:4f:6d:8b:56:77:f0: aa:1e:a7:56:11:11:3f:a7:65:ab:97:cd:58:fd:1f: 54:7c:21:c3:85:ed:14:d4:11:8a:79:1b:03:12:fd: 03:75:a9:27:cf:5f:bb:0e:25:dc:ef:da:b3:f5:15: 20:71:79:7b:78:ca:23:6d:e1:3e:76:61:d3:dc:88: 01:dc:80:fe:67:10:b4:75:6d:7c:f7:21:ef:62:61: 4d:2e:a2:c9:98:e9:cb:51:3d:b5:09:37:1d:db:01: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F5:CA:3C:B3:10:99:EF:45:D6:7E:81:A6:F4:33:71:D7:E8:14:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.2.0/24 Signature Algorithm: sha256WithRSAEncryption b9:1a:42:08:38:d8:1b:6c:46:87:01:ce:74:c4:6d:4c:ce:6e: 2a:0b:c1:4d:85:7d:e5:76:64:12:9b:a4:9b:53:36:03:98:6b: 86:87:c5:b3:78:b6:aa:81:66:7e:b0:aa:83:5a:f0:9c:27:c4: f4:27:7f:16:38:ce:7e:5d:e0:f3:86:c4:05:8e:25:f8:e3:d9: f4:15:c8:0a:81:19:a3:c4:a2:7e:78:19:cf:3c:92:6c:d8:78: bb:05:40:36:ee:c3:2d:0b:41:31:d9:29:df:03:db:27:ab:08: a3:2d:9b:96:de:e1:07:a6:11:74:83:14:1b:44:db:50:79:f8: 3d:c8:eb:72:ee:21:ac:bd:44:3d:5d:5d:c7:58:95:d9:59:74: 1c:0c:bd:94:28:fa:05:51:ce:df:77:0b:96:ee:fb:98:98:18: 99:dc:23:75:04:af:b8:18:b7:96:93:5f:c1:7a:20:a4:30:fc: 3c:22:31:05:29:f4:40:de:c7:44:a7:83:44:fb:58:0b:19:52: b1:9e:1a:c4:9e:74:2e:d2:b7:e0:85:c9:d2:0b:36:3d:28:db: e4:eb:fe:16:32:49:b6:56:18:2f:08:38:34:3e:e7:58:22:a6: 28:e8:33:bf:81:cb:e9:3a:c8:74:d2:27:0f:8c:4e:7c:08:3f: ef:fd:6c:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQwSPhIump1fP+d0ZQ0DTgIpYm7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMwMDAzMTE2WhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTI0MGU3N2RiNzlmNjc5NDkxZmQ2MjJmZGMzZGQ4ODUx MGFiOTY5OWVlNTEwOWQxZjE0MGU3N2Q5MTljNGU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrIEJ2Ee50ZPDdpf1HMWVXrapR7qcFUzq3y3+19JHh3bCj firZrjAxoGTOQ5cs22Ic0bM5V/uGU4FJr9pc0HYGAf1OWg/ahWCywpY7vP+yAw0e LTkUMqmwRVMsVil6M7gQBIPMor9LRe7X8SludoSvCosCRJyLvO5gQBfUm6qd9YRj hsCdL/NDMQtHc56qBoFi57pIPiiS7HYDZqAXPE9ti1Z38Koep1YRET+nZauXzVj9 H1R8IcOF7RTUEYp5GwMS/QN1qSfPX7sOJdzv2rP1FSBxeXt4yiNt4T52YdPciAHc gP5nELR1bXz3Ie9iYU0uosmY6ctRPbUJNx3bAXzFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ/XKPLMQme9F1n6BpvQzcdfoFOQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlMzcwM2EzLTE2OGUtNDQwNy05YmVkLTRmZmI5M2EyYzUzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWwIwDQYJKoZIhvcNAQELBQADggEBALkaQgg42BtsRocBznTEbUzObioL wU2FfeV2ZBKbpJtTNgOYa4aHxbN4tqqBZn6wqoNa8JwnxPQnfxY4zn5d4POGxAWO Jfjj2fQVyAqBGaPEon54Gc88kmzYeLsFQDbuwy0LQTHZKd8D2yerCKMtm5be4Qem EXSDFBtE21B5+D3I63LuIay9RD1dXcdYldlZdBwMvZQo+gVRzt93C5bu+5iYGJnc I3UEr7gYt5aTX8F6IKQw/DwiMQUp9EDex0Sng0T7WAsZUrGeGsSedC7St+CFydIL Nj0o2+Tr/hYySbZWGC8IODQ+51gipijoM7+By+k6yHTSJw+MTnwIP+/9bFo= -----END CERTIFICATE-----Generated at Mon Aug 3 05:40:25 2026 by rpki-client