$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa File: 74f23cab-f771-4629-9fb9-72d19a1d7df6.roa (raw, json) Hash identifier: yv1qMhN0668UOZQtsnXB4VDDjADGBO/BTp0JjXbxdEc= Subject key identifier: BB:09:E1:40:C0:60:39:B7:61:BD:59:23:26:FE:F8:71:83:D6:84:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2041030065FC9868A7EFBF5CE1EDB9FCF4AC89C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa Signing time: Fri 07 Aug 2026 00:11:26 +0000 ROA not before: Fri 07 Aug 2026 00:11:26 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:41:03:00:65:fc:98:68:a7:ef:bf:5c:e1:ed:b9:fc:f4:ac:89:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:11:26 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=80823cc16232919e7b4d1fb40113f4810328604c7e7adc888eebce5813bf3eda, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:1c:08:a1:4c:81:51:84:4d:dd:24:7b:1c: b2:7f:ed:ae:aa:00:3c:ce:8f:83:ce:d5:9d:b2:fa: a4:12:4a:98:3c:64:e2:d9:cb:42:07:82:e0:3b:76: d1:d3:7c:e0:8d:ed:6b:4c:51:91:3b:68:c4:aa:88: c2:9d:73:62:ce:1a:71:86:fb:e9:da:a8:b5:b0:96: e6:b2:71:e4:8b:54:65:22:83:83:64:5b:32:62:04: b8:52:0a:89:39:ab:9b:84:e2:85:8c:7c:4e:c5:be: 10:38:cd:ed:80:2d:c3:d0:8a:a1:6f:5d:cc:3c:34: d2:bf:69:4b:8f:c4:0f:47:bb:6b:10:11:f1:ac:84: 87:d3:60:db:6a:b8:5a:e7:41:ff:43:3b:2b:04:59: 47:91:98:9d:a8:41:3d:04:ae:f9:8b:c9:81:ac:1d: cf:7c:9d:8c:80:b6:eb:db:0f:83:3d:be:0b:32:bd: c6:67:f4:9f:2e:4b:94:fa:0a:e0:ff:7d:15:cd:3e: 77:b3:9b:cf:67:4f:38:ff:54:d1:f7:51:e7:df:69: 85:3d:d2:4c:60:ee:0a:07:a9:fe:15:73:88:d4:45: 3e:e0:2f:58:84:69:88:94:ee:5e:de:f2:92:64:0c: ed:62:0d:6a:a1:f4:64:88:c1:cf:85:4f:c8:7c:02: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:09:E1:40:C0:60:39:B7:61:BD:59:23:26:FE:F8:71:83:D6:84:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:47:3a:9e:7e:07:7c:e4:5f:18:6d:8f:f7:85:d8:2d:46:fc: 50:4e:80:49:b6:1e:1a:88:9f:fa:a2:ed:82:65:98:d5:d4:92: 02:63:47:bc:3f:b7:4f:6e:d7:b3:e5:e8:d0:28:ec:3f:c8:53: 9c:b8:1a:ed:a1:83:a5:a5:0b:c6:1f:a4:11:f7:07:f9:29:5c: 07:8b:1f:01:7f:a8:e8:76:94:ce:32:e8:1c:9a:b3:e5:0f:3a: 74:37:e3:36:29:67:57:17:26:d7:87:f2:f9:87:3a:90:45:47: be:21:3a:aa:6a:8b:9d:4d:70:8e:f8:4d:2c:9b:55:52:49:96: 0d:4a:00:2f:73:99:7f:3d:cd:60:5a:2b:0a:e0:4b:13:16:c0: 32:84:41:b5:9f:bd:ea:10:29:ee:76:f7:f7:80:1f:b9:51:59: c6:74:b6:c3:c9:8f:20:d9:67:77:09:08:24:f2:dd:65:0b:f4: 6a:15:d2:4d:42:ec:92:35:04:91:cc:c2:fd:b3:f3:59:d0:cb: ca:d2:f2:16:ea:ae:9f:2e:e4:64:fc:9e:15:81:0e:6e:85:51: f1:6b:c7:5f:43:78:5b:f7:82:d1:f6:45:64:80:b5:27:6c:75: dd:1b:61:ec:d0:3c:99:6e:6e:27:31:2f:c7:cd:35:a7:d5:e1: 93:b4:fd:58 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIEEDAGX8mGin779c4e25/PSsiccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAxMTI2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDgyM2NjMTYyMzI5MTllN2I0ZDFmYjQwMTEzZjQ4MTAz Mjg2MDRjN2U3YWRjODg4ZWViY2U1ODEzYmYzZWRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKJxwIoUyBUYRN3SR7HLJ/7a6qADzOj4PO1Z2y+qQSSpg8 ZOLZy0IHguA7dtHTfOCN7WtMUZE7aMSqiMKdc2LOGnGG++naqLWwluayceSLVGUi g4NkWzJiBLhSCok5q5uE4oWMfE7FvhA4ze2ALcPQiqFvXcw8NNK/aUuPxA9Hu2sQ EfGshIfTYNtquFrnQf9DOysEWUeRmJ2oQT0ErvmLyYGsHc98nYyAtuvbD4M9vgsy vcZn9J8uS5T6CuD/fRXNPnezm89nTzj/VNH3UeffaYU90kxg7goHqf4Vc4jURT7g L1iEaYiU7l7e8pJkDO1iDWqh9GSIwc+FT8h8AkJBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuwnhQMBgObdhvVkjJv74cYPWhHEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0ZjIzY2FiLWY3NzEtNDYyOS05ZmI5LTcyZDE5YTFkN2RmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQMDANBgkqhkiG9w0BAQsFAAOCAQEArkc6nn4HfORfGG2P94XYLUb8UE6A SbYeGoif+qLtgmWY1dSSAmNHvD+3T27Xs+Xo0CjsP8hTnLga7aGDpaULxh+kEfcH +SlcB4sfAX+o6HaUzjLoHJqz5Q86dDfjNilnVxcm14fy+Yc6kEVHviE6qmqLnU1w jvhNLJtVUkmWDUoAL3OZfz3NYForCuBLExbAMoRBtZ+96hAp7nb394AfuVFZxnS2 w8mPINlndwkIJPLdZQv0ahXSTULskjUEkczC/bPzWdDLytLyFuquny7kZPyeFYEO boVR8WvHX0N4W/eC0fZFZIC1J2x13Rth7NA8mW5uJzEvx801p9Xhk7T9WA== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:18 2026 by rpki-client