$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639ca6d1-7807-4be2-a2bd-7143e777a14c.roa File: 639ca6d1-7807-4be2-a2bd-7143e777a14c.roa (raw, json) Hash identifier: VFfZy2wnSc84KOBo+ca1cWLRdLnxovYS8PRmwJQirSU= Subject key identifier: F9:F7:41:7E:DC:65:BE:79:ED:73:29:B3:22:A6:F8:DB:9A:BD:D8:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BA9E14C85F714505F2D51454EE9E6776DE80D77 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639ca6d1-7807-4be2-a2bd-7143e777a14c.roa Signing time: Wed 17 Jun 2026 22:47:57 +0000 ROA not before: Wed 17 Jun 2026 22:47:57 +0000 ROA not after: Tue 15 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a9:e1:4c:85:f7:14:50:5f:2d:51:45:4e:e9:e6:77:6d:e8:0d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 22:47:57 2026 GMT Not After : Sep 15 23:59:59 2026 GMT Subject: serialNumber=4fc2e84f718d7956b39f009a4b43021654946b159b7c7ff59a06ba95c8e67b95, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:61:df:12:34:99:d2:36:88:d5:b1:65:63: 1c:06:dc:b4:d2:0d:54:5b:90:da:8a:46:ff:ed:58: 33:94:82:04:f5:0b:aa:a1:18:9a:d5:f4:f1:5b:6b: 3b:5e:3e:ce:d2:17:fb:f9:d6:41:63:28:b6:b5:d7: 2c:df:3c:5c:b4:dc:0d:e3:e4:24:ba:da:bf:2d:f0: b1:64:a7:08:54:a7:96:77:1d:b7:be:89:f1:f3:b2: cd:d0:c2:30:76:a3:90:f1:0c:46:5f:13:9e:68:eb: 6e:ea:ac:77:90:05:bb:3e:59:fe:d0:d7:bb:4e:28: 45:2b:e2:0d:ca:10:ea:6b:c9:dc:14:03:ca:70:1c: 51:1f:db:98:de:f1:59:2a:5d:1a:f4:f0:54:f0:de: 1e:3d:4e:4f:98:19:37:34:a5:66:99:54:e6:2c:50: e6:b6:f9:bf:e1:cc:ca:fa:26:12:9a:f3:7d:57:9e: d7:ec:e2:bc:35:06:02:d6:fc:09:2a:19:12:2e:80: af:59:a9:c2:53:47:2f:67:6e:3b:aa:f3:76:49:41: 01:70:c6:ae:72:81:cc:49:69:9e:89:4c:94:75:79: d3:cf:cf:75:6e:24:0a:71:b4:e5:58:8a:3d:21:7b: 03:9e:52:5a:90:c1:32:42:de:73:c4:7b:5e:37:68: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F7:41:7E:DC:65:BE:79:ED:73:29:B3:22:A6:F8:DB:9A:BD:D8:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639ca6d1-7807-4be2-a2bd-7143e777a14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.22.103.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:91:f6:88:67:79:5c:7a:a0:0c:a8:2f:4e:f9:51:53:f4:ef: e8:ec:84:3e:b4:74:44:c4:61:1c:0c:23:2a:6d:3a:1d:cc:59: 2f:84:75:ce:b8:ca:c3:98:65:fa:2e:f1:b3:64:6b:71:92:4e: a9:38:35:5d:7f:d6:4e:4a:ee:db:6e:01:90:b6:a4:84:0f:d5: 85:34:5b:80:fb:a3:24:e2:e2:4f:f8:22:99:15:7b:30:ea:a9: b4:d4:38:2c:3c:91:cf:e8:f3:e1:10:3c:45:55:f4:0b:1b:df: b1:5c:47:9b:3f:9a:9b:e4:33:2c:fb:f0:58:b8:e6:d8:dc:76: 00:c4:cd:43:d0:19:a0:2f:51:0e:ed:77:5d:28:aa:f2:c3:0a: ef:f6:23:ed:31:f5:f9:cd:b8:56:a4:67:9b:78:22:09:1b:97: 42:f7:da:a8:f1:bf:64:b9:b2:5c:6f:c7:3a:fb:77:3e:25:ea: c8:8d:2b:83:52:c9:3a:aa:e7:39:87:16:99:2f:49:55:59:5a: d2:5d:d6:71:87:b5:d7:47:5f:b0:38:87:c3:32:1d:03:80:3f: e2:93:c4:50:31:c4:dd:41:0d:99:de:2a:04:e2:c0:86:41:7b: 1d:2d:27:a9:d4:db:fe:dc:2b:9b:51:16:de:39:eb:2c:a9:d3: 53:6e:0e:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC6nhTIX3FFBfLVFFTunmd23oDXcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjE3MjI0NzU3WhcNMjYwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmMyZTg0ZjcxOGQ3OTU2YjM5ZjAwOWE0YjQzMDIxNjU0 OTQ2YjE1OWI3YzdmZjU5YTA2YmE5NWM4ZTY3Yjk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkw2HfEjSZ0jaI1bFlYxwG3LTSDVRbkNqKRv/tWDOUggT1 C6qhGJrV9PFbaztePs7SF/v51kFjKLa11yzfPFy03A3j5CS62r8t8LFkpwhUp5Z3 Hbe+ifHzss3QwjB2o5DxDEZfE55o627qrHeQBbs+Wf7Q17tOKEUr4g3KEOprydwU A8pwHFEf25je8VkqXRr08FTw3h49Tk+YGTc0pWaZVOYsUOa2+b/hzMr6JhKa831X ntfs4rw1BgLW/AkqGRIugK9ZqcJTRy9nbjuq83ZJQQFwxq5ygcxJaZ6JTJR1edPP z3VuJApxtOVYij0hewOeUlqQwTJC3nPEe143aJc9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+fdBftxlvnntcymzIqb425q92BYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzOWNhNmQxLTc4MDctNGJlMi1hMmJkLTcxNDNlNzc3YTE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGFmcwDQYJKoZIhvcNAQELBQADggEBAIyR9ohneVx6oAyoL075UVP07+js hD60dETEYRwMIyptOh3MWS+Edc64ysOYZfou8bNka3GSTqk4NV1/1k5K7ttuAZC2 pIQP1YU0W4D7oyTi4k/4IpkVezDqqbTUOCw8kc/o8+EQPEVV9Asb37FcR5s/mpvk Myz78Fi45tjcdgDEzUPQGaAvUQ7td10oqvLDCu/2I+0x9fnNuFakZ5t4Igkbl0L3 2qjxv2S5slxvxzr7dz4l6siNK4NSyTqq5zmHFpkvSVVZWtJd1nGHtddHX7A4h8My HQOAP+KTxFAxxN1BDZneKgTiwIZBex0tJ6nU2/7cK5tRFt456yyp01NuDnc= -----END CERTIFICATE-----Generated at Fri Jun 19 03:52:54 2026 by rpki-client