$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/640db256-ea3a-41a0-b252-1d52034e7dfa.roa File: 640db256-ea3a-41a0-b252-1d52034e7dfa.roa (raw, json) Hash identifier: YIpdpboVmY2Dfv3DLpXg8gxC5kiFa9NaJCupqcaMf0s= Subject key identifier: 27:8A:F6:44:81:37:A5:D7:E1:55:40:0E:60:6C:45:5A:F9:40:FA:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09A54639AA8A502709483C422ED913E582197A9C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/640db256-ea3a-41a0-b252-1d52034e7dfa.roa Signing time: Tue 04 Aug 2026 02:31:15 +0000 ROA not before: Tue 04 Aug 2026 02:31:15 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a5:46:39:aa:8a:50:27:09:48:3c:42:2e:d9:13:e5:82:19:7a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:31:15 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=c5f75638ea549959b773d0c7c9387fadcc47d2029bb5b829fe58766fafbbfd9d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:71:82:61:26:31:24:a1:42:09:7a:d2:01: 05:2a:02:c3:ad:74:04:b2:fc:c7:67:7b:e3:af:94: ce:7b:9d:f6:a2:c7:52:ab:aa:e2:37:84:a8:d3:09: 49:ae:64:7b:cf:09:74:12:51:c6:18:91:3b:7d:12: ce:5d:d1:42:86:af:a9:5b:fb:2f:d7:52:e7:61:87: 5f:73:81:4d:f2:98:e2:dc:a6:0f:c6:f1:f1:a8:00: 62:43:17:fd:a0:c3:4f:6b:35:a1:17:b3:e3:a6:bc: ad:1c:98:0f:d9:aa:04:54:4f:89:e5:0e:fa:be:e1: 92:cc:46:a5:25:54:b0:85:ef:36:63:2b:f4:97:a5: cc:14:40:3d:51:57:7f:22:4d:56:34:8c:3a:a0:e8: 17:98:8e:d5:83:bb:5b:ef:74:d7:63:67:51:69:86: 90:26:53:c1:91:32:38:76:50:a7:b6:9c:de:f9:ec: a3:be:b5:98:10:58:63:55:fd:54:59:1f:76:84:5a: 83:4f:e6:5d:c2:38:4e:79:5d:7c:83:7f:a7:b6:88: a6:4d:e1:16:57:a8:66:d6:10:fe:7d:33:06:2f:78: 50:9a:6f:15:de:64:4b:a5:69:b0:ba:df:76:8a:a4: 11:d4:94:a6:18:46:14:5d:02:c1:bb:fb:63:3a:7b: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:F6:44:81:37:A5:D7:E1:55:40:0E:60:6C:45:5A:F9:40:FA:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/640db256-ea3a-41a0-b252-1d52034e7dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.29.0/24 Signature Algorithm: sha256WithRSAEncryption 56:5a:c6:fb:20:a1:b7:ab:a5:5d:41:2e:a7:7a:c9:b4:a4:b5: dc:af:7a:97:4d:be:77:6d:5c:09:98:f6:14:45:6a:77:03:6d: 40:b9:40:a9:14:4a:9c:eb:0d:c7:d5:4b:92:74:59:dc:78:e9: 58:20:80:d7:b4:12:ca:56:34:8f:ec:03:b2:00:85:f7:82:20: 84:ab:3d:1d:74:91:ea:0a:ca:9e:f2:d7:57:d9:bd:ab:a6:41: 8d:97:e3:d3:ad:fb:cb:51:39:09:be:69:40:d8:7d:8f:6a:a1: 35:36:f1:c8:57:31:4e:a6:24:ec:05:84:fd:15:b7:c7:63:aa: 03:27:82:2e:1b:18:3c:7b:a7:62:0d:62:95:93:3e:67:d5:03: 69:4e:65:a1:37:b0:5b:bb:a4:9f:7d:7d:c8:06:85:8b:dc:49: a2:ff:0a:a0:57:4d:90:e6:62:e8:4e:b6:56:da:d5:f7:7c:d2: 10:bd:94:f5:48:7b:ec:54:cd:fd:c7:dc:b1:85:92:10:7a:99: 09:f3:66:17:18:90:5a:26:07:91:77:7b:98:9b:74:9c:d0:cc: 39:f8:73:4a:8b:1f:cd:57:01:e9:bb:3b:d4:1c:25:22:53:58: 5e:47:e6:cf:55:12:f6:23:d5:95:8b:ba:df:79:7a:f6:b4:50: 3d:b6:04:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCaVGOaqKUCcJSDxCLtkT5YIZepwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIzMTE1WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWY3NTYzOGVhNTQ5OTU5Yjc3M2QwYzdjOTM4N2ZhZGNj NDdkMjAyOWJiNWI4MjlmZTU4NzY2ZmFmYmJmZDlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQFnGCYSYxJKFCCXrSAQUqAsOtdASy/Mdne+OvlM57nfai x1KrquI3hKjTCUmuZHvPCXQSUcYYkTt9Es5d0UKGr6lb+y/XUudhh19zgU3ymOLc pg/G8fGoAGJDF/2gw09rNaEXs+OmvK0cmA/ZqgRUT4nlDvq+4ZLMRqUlVLCF7zZj K/SXpcwUQD1RV38iTVY0jDqg6BeYjtWDu1vvdNdjZ1FphpAmU8GRMjh2UKe2nN75 7KO+tZgQWGNV/VRZH3aEWoNP5l3COE55XXyDf6e2iKZN4RZXqGbWEP59MwYveFCa bxXeZEulabC633aKpBHUlKYYRhRdAsG7+2M6e2zXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ4r2RIE3pdfhVUAOYGxFWvlA+lgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0MGRiMjU2LWVhM2EtNDFhMC1iMjUyLTFkNTIwMzRlN2RmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABu7x0wDQYJKoZIhvcNAQELBQADggEBAFZaxvsgoberpV1BLqd6ybSktdyv epdNvndtXAmY9hRFancDbUC5QKkUSpzrDcfVS5J0Wdx46VgggNe0EspWNI/sA7IA hfeCIISrPR10keoKyp7y11fZvaumQY2X49Ot+8tROQm+aUDYfY9qoTU28chXMU6m JOwFhP0Vt8djqgMngi4bGDx7p2INYpWTPmfVA2lOZaE3sFu7pJ99fcgGhYvcSaL/ CqBXTZDmYuhOtlba1fd80hC9lPVIe+xUzf3H3LGFkhB6mQnzZhcYkFomB5F3e5ib dJzQzDn4c0qLH81XAem7O9QcJSJTWF5H5s9VEvYj1ZWLut95eva0UD22BLU= -----END CERTIFICATE-----Generated at Tue Sep 15 13:21:23 2026 by rpki-client