$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa File: 7a63d989-b13f-46b2-ada6-94bd07a73e86.roa (raw, json) Hash identifier: MWpfRL7o/X5HMu/AH8bQs2wzdrkAqhocfGeuPNZ6Y7k= Subject key identifier: 2E:E8:81:75:47:BE:AB:75:B9:BA:BF:33:E2:E0:F3:4E:AE:10:16:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7081D21169572E0D9C787742010184FC9F04A083 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa Signing time: Tue 04 Aug 2026 00:30:10 +0000 ROA not before: Tue 04 Aug 2026 00:30:10 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:81:d2:11:69:57:2e:0d:9c:78:77:42:01:01:84:fc:9f:04:a0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:30:10 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=b42de19ff2241a41126df66c42508d48d3c3ed117b097ff625971a8e273ade4b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:ba:f7:8b:92:70:a5:d6:69:41:0b:36:40: 09:a5:eb:05:f1:ac:d5:fe:7b:bb:92:71:10:c3:aa: 5a:fc:3f:cd:67:0d:64:ea:58:4b:31:eb:bd:a6:36: 31:2d:8e:df:ef:52:56:5f:2d:b2:dd:5a:58:b3:85: ec:5c:d3:6f:07:cd:02:25:79:b9:7e:3f:b5:aa:c9: 94:ac:84:b7:0a:8a:2d:88:31:62:53:e7:73:51:e3: 38:11:df:e8:44:53:a6:d5:02:47:5b:61:4a:c3:21: 68:fc:4b:7e:9f:89:20:cf:f2:c1:ba:28:b5:03:d5: f0:77:f3:5f:c5:36:26:11:67:c9:5f:7d:fe:c5:85: 84:bc:0b:7c:31:84:a5:2a:51:08:ff:4c:31:05:58: 24:58:d5:45:92:35:81:a1:a3:21:7b:a6:bd:4e:f6: 6c:d5:01:29:85:7a:13:cd:7f:dc:90:57:73:53:2a: 91:34:78:6b:fb:59:e6:89:ae:8d:a9:4c:6e:27:92: 7e:92:c8:c6:14:63:68:a9:6c:e4:95:5f:0b:78:27: bd:44:6a:2b:f5:b4:11:cd:ec:65:68:a4:93:da:b5: 51:38:80:e2:f1:ae:31:fc:b5:33:38:0b:7f:e2:e8: b6:09:27:f7:a8:44:77:e0:2c:83:62:9e:0e:8e:a0: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:81:75:47:BE:AB:75:B9:BA:BF:33:E2:E0:F3:4E:AE:10:16:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.128.0/17 Signature Algorithm: sha256WithRSAEncryption b6:0e:a1:4b:bb:c9:98:0f:df:7f:ba:f4:ae:0b:94:09:f3:39: 27:02:51:a0:0f:4c:23:ba:93:09:ec:4b:73:5d:a3:58:fe:d3: d0:02:3f:3c:e6:dc:ac:81:76:fc:86:b6:55:04:54:da:17:33: 96:83:6d:58:7c:8c:82:5f:87:9f:c7:ce:30:2d:37:24:94:c9: ac:82:e5:55:d1:cd:af:eb:bf:a3:2a:94:81:cf:d5:1e:9a:fb: 69:32:d8:82:78:0a:95:86:29:6d:04:02:b8:a9:49:72:e7:3b: 6b:2f:36:5c:5c:b2:64:6c:bb:d3:3c:be:be:fc:c6:1b:86:97: 7e:93:b6:3e:20:2f:4b:40:e6:70:94:df:1d:6d:9d:ea:61:fe: 18:69:e5:ea:2f:2f:5e:a1:ad:2a:74:86:a8:1f:4a:4a:de:19: 96:5a:42:77:3e:10:cd:19:69:59:98:72:0b:aa:55:c3:a8:b7: 38:10:e0:00:00:b2:62:b7:bb:b0:c0:bc:c8:21:4e:c6:e4:7b: c1:31:ef:58:e2:d2:1b:30:8e:74:1f:9a:e6:11:6c:0b:82:fd: 0f:eb:f4:7c:1a:d5:e5:53:ad:bd:5c:ea:20:82:80:36:05:73: 4e:6c:6b:40:b1:29:9c:ef:61:a3:a1:76:a8:f1:d8:4d:6c:ef: cd:17:13:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcIHSEWlXLg2ceHdCAQGE/J8EoIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAzMDEwWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDJkZTE5ZmYyMjQxYTQxMTI2ZGY2NmM0MjUwOGQ0OGQz YzNlZDExN2IwOTdmZjYyNTk3MWE4ZTI3M2FkZTRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgkLr3i5JwpdZpQQs2QAml6wXxrNX+e7uScRDDqlr8P81n DWTqWEsx672mNjEtjt/vUlZfLbLdWlizhexc028HzQIlebl+P7WqyZSshLcKii2I MWJT53NR4zgR3+hEU6bVAkdbYUrDIWj8S36fiSDP8sG6KLUD1fB381/FNiYRZ8lf ff7FhYS8C3wxhKUqUQj/TDEFWCRY1UWSNYGhoyF7pr1O9mzVASmFehPNf9yQV3NT KpE0eGv7WeaJro2pTG4nkn6SyMYUY2ipbOSVXwt4J71Eaiv1tBHN7GVopJPatVE4 gOLxrjH8tTM4C3/i6LYJJ/eoRHfgLINing6OoJstAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULuiBdUe+q3W5ur8z4uDzTq4QFvIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhNjNkOTg5LWIxM2YtNDZiMi1hZGE2LTk0YmQwN2E3M2U4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcXF4AwDQYJKoZIhvcNAQELBQADggEBALYOoUu7yZgP33+69K4LlAnzOScC UaAPTCO6kwnsS3Ndo1j+09ACPzzm3KyBdvyGtlUEVNoXM5aDbVh8jIJfh5/HzjAt NySUyayC5VXRza/rv6MqlIHP1R6a+2ky2IJ4CpWGKW0EAripSXLnO2svNlxcsmRs u9M8vr78xhuGl36Ttj4gL0tA5nCU3x1tneph/hhp5eovL16hrSp0hqgfSkreGZZa Qnc+EM0ZaVmYcguqVcOotzgQ4AAAsmK3u7DAvMghTsbke8Ex71ji0hswjnQfmuYR bAuC/Q/r9Hwa1eVTrb1c6iCCgDYFc05sa0CxKZzvYaOhdqjx2E1s780XEws= -----END CERTIFICATE-----Generated at Thu Sep 17 16:16:37 2026 by rpki-client