$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d368fe-1e55-4c65-884c-70b8e9458a4d.roa File: 83d368fe-1e55-4c65-884c-70b8e9458a4d.roa (raw, json) Hash identifier: GVNx95QOE1bM50u0okVe/mdt3qEQGpFcCM186lhOACU= Subject key identifier: 36:D8:CE:2A:D4:B6:76:55:09:21:E2:EE:BD:DF:23:33:8E:FB:D9:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C139210FE4FF48A5EF9416D084B635C49D8A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d368fe-1e55-4c65-884c-70b8e9458a4d.roa Signing time: Fri 31 Jul 2026 01:31:42 +0000 ROA not before: Fri 31 Jul 2026 01:31:42 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:13:92:10:fe:4f:f4:8a:5e:f9:41:6d:08:4b:63:5c:49:d8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 01:31:42 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=46012e8c89fc3642b859104bb824dffbee7f415e92c84a9ae358fa1d9d72ebfa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:0f:37:8f:cf:2f:a4:6c:c1:81:47:2c:24: e5:a5:7b:18:60:e0:a2:59:2f:99:26:3d:7e:0c:9e: 4d:74:bb:18:bf:7a:e3:cf:68:35:90:68:a4:f0:f9: e9:31:6a:fd:8a:29:2d:32:8e:ed:f4:dc:73:f8:e3: 55:2b:9e:f8:0a:1a:53:3a:2e:b5:3f:db:46:11:d9: 76:56:98:04:2a:95:f5:33:13:6f:9a:11:44:db:4c: e1:00:55:2e:93:08:67:c5:f1:53:92:e5:37:09:2d: c1:9c:76:b7:f7:c1:64:00:21:3c:74:30:76:38:00: 58:bb:2c:98:a6:53:3e:c4:0e:0e:d5:5a:1d:ec:e9: cd:db:42:28:fe:a5:dd:08:06:f2:86:88:6f:88:7d: 93:35:15:24:81:84:e2:f8:27:f1:1e:eb:9c:12:85: b3:43:0d:1f:06:88:cb:18:cc:e3:4b:27:2b:f6:8f: ef:44:03:d4:76:f5:a0:6d:c2:46:79:cf:33:4e:fc: 6b:1a:67:76:82:07:40:7d:db:8e:f0:31:51:43:2a: ac:d7:20:69:91:ca:74:7a:88:33:4c:2d:fe:31:47: 8f:5b:7e:4a:1a:ae:2f:bf:05:88:72:5e:a9:e3:2e: 01:6a:67:82:a1:06:92:ee:7e:d1:64:fb:3e:8a:59: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:CE:2A:D4:B6:76:55:09:21:E2:EE:BD:DF:23:33:8E:FB:D9:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d368fe-1e55-4c65-884c-70b8e9458a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.27.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:18:ec:ba:ff:47:2d:5a:6b:3b:28:8e:09:70:88:e5:51:7c: 25:d4:5a:2a:2e:40:a6:1f:e0:22:21:8d:fb:3e:60:ea:bc:99: ba:92:37:95:c9:75:09:e0:6a:fc:56:c7:72:3c:c7:30:97:9e: fd:0e:c1:21:af:2b:d0:c1:c3:7a:19:3d:4d:07:b2:06:e8:f9: df:42:37:33:39:33:19:14:87:0a:44:d4:29:e0:51:ac:58:fc: 13:ac:2b:1f:9b:28:45:ea:3a:4d:51:a2:ad:1e:1b:1c:4f:cf: 16:d9:df:bf:93:64:c1:7d:be:45:08:2b:fd:f1:42:f4:16:af: af:42:45:28:4c:2a:9f:f6:8a:ae:b6:d8:5c:78:03:6f:0b:02: e2:b5:a3:54:46:82:bf:ca:c5:a6:4f:9b:be:c5:b9:63:2e:b1: 88:aa:17:83:ea:a2:aa:58:0a:a4:a6:0f:e0:49:c4:c3:77:00: f7:23:c8:f4:79:93:2c:52:a6:c4:29:90:12:4b:54:c6:8f:70: c1:2f:bc:6d:c0:39:c6:d6:70:71:df:51:99:65:76:01:6f:4e: f2:50:52:b0:ed:53:46:54:92:c0:3f:69:eb:05:28:13:9b:a2: 85:55:68:ae:d0:a3:3f:bb:62:a1:d0:d9:c6:1b:50:81:a7:1a: 0e:00:b0:36 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITPBOSEP5P9Ipe+UFtCEtjXEnYpzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA3MzEwMTMxNDJaFw0yNjEwMjkyMzU5NTla MHoxSTBHBgNVBAUTQDQ2MDEyZThjODlmYzM2NDJiODU5MTA0YmI4MjRkZmZiZWU3 ZjQxNWU5MmM4NGE5YWUzNThmYTFkOWQ3MmViZmExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALBXDzePzy+kbMGBRywk5aV7GGDgolkvmSY9fgyeTXS7GL96 489oNZBopPD56TFq/YopLTKO7fTcc/jjVSue+AoaUzoutT/bRhHZdlaYBCqV9TMT b5oRRNtM4QBVLpMIZ8XxU5LlNwktwZx2t/fBZAAhPHQwdjgAWLssmKZTPsQODtVa HezpzdtCKP6l3QgG8oaIb4h9kzUVJIGE4vgn8R7rnBKFs0MNHwaIyxjM40snK/aP 70QD1Hb1oG3CRnnPM078axpndoIHQH3bjvAxUUMqrNcgaZHKdHqIM0wt/jFHj1t+ ShquL78FiHJeqeMuAWpngqEGku5+0WT7PopZ3tcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQ22M4q1LZ2VQkh4u693yMzjvvZlzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvODNkMzY4ZmUtMWU1NS00YzY1LTg4NGMtNzBiOGU5NDU4YTRkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAEeYGzANBgkqhkiG9w0BAQsFAAOCAQEAjBjsuv9HLVprOyiOCXCI5VF8JdRa Ki5Aph/gIiGN+z5g6ryZupI3lcl1CeBq/FbHcjzHMJee/Q7BIa8r0MHDehk9TQey Buj530I3MzkzGRSHCkTUKeBRrFj8E6wrH5soReo6TVGirR4bHE/PFtnfv5NkwX2+ RQgr/fFC9Bavr0JFKEwqn/aKrrbYXHgDbwsC4rWjVEaCv8rFpk+bvsW5Yy6xiKoX g+qiqlgKpKYP4EnEw3cA9yPI9HmTLFKmxCmQEktUxo9wwS+8bcA5xtZwcd9RmWV2 AW9O8lBSsO1TRlSSwD9p6wUoE5uihVVortCjP7tiodDZxhtQgacaDgCwNg== -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:57 2026 by rpki-client