$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8532f83-3dde-406f-8419-338d61f9d18a.roa File: a8532f83-3dde-406f-8419-338d61f9d18a.roa (raw, json) Hash identifier: cXyRg8J3LMXBpdty/qxCIPBVx2aEC5S/S0yJIztNx3s= Subject key identifier: 69:BE:8A:96:79:21:93:1E:1F:02:41:CF:B7:08:7A:9C:44:F9:C4:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EA91B621395F8D7DD1D4988690DA0DBB884989F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8532f83-3dde-406f-8419-338d61f9d18a.roa Signing time: Fri 21 Aug 2026 00:00:07 +0000 ROA not before: Fri 21 Aug 2026 00:00:07 +0000 ROA not after: Thu 19 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 100.52.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a9:1b:62:13:95:f8:d7:dd:1d:49:88:69:0d:a0:db:b8:84:98:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 21 00:00:07 2026 GMT Not After : Nov 19 23:59:59 2026 GMT Subject: serialNumber=313e411c3e10428d3b4023ac242c1dcde921ab7fb82703faee5753a0b2ebc8ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:ad:58:1e:3e:4a:d8:40:88:f4:f6:22:be: f6:44:db:b4:e8:23:0d:09:72:11:75:51:9e:4d:9b: 03:c9:6a:77:b0:d2:bf:cb:8f:be:49:c0:2a:e8:80: 37:00:2a:ba:4c:ec:a2:2d:d1:f0:67:d8:1b:50:e9: ab:d1:de:19:eb:5f:91:a9:16:ac:c9:dc:bb:13:db: e0:f1:55:73:cb:49:cf:03:22:52:36:7d:87:b5:86: 93:b7:03:94:a8:36:43:ad:a6:26:3c:0b:32:59:83: 37:e2:3b:3c:0d:e2:20:c7:58:82:45:65:7f:b3:5f: 05:27:75:f4:d6:81:a3:b8:0d:1b:17:de:c1:0c:d8: ef:0c:99:fe:17:9d:0a:e6:33:33:b3:1e:44:c7:83: 53:34:a1:a5:aa:37:d0:36:c3:01:fb:21:d2:a6:1e: c6:b9:0e:33:b3:6a:53:c1:f7:f0:f8:98:80:3d:e7: fe:2a:64:87:2f:7b:97:fa:60:1c:96:a0:e4:8b:82: cd:02:15:db:75:c2:d7:21:ae:09:13:8c:77:4f:a4: 66:be:a9:ec:94:aa:fd:65:8d:24:18:9f:1a:f8:47: d2:df:01:f8:5b:66:b0:34:78:3d:0f:aa:5e:60:3d: f2:41:3c:15:49:df:d5:ee:a5:13:e3:0f:e0:c5:a1: 95:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BE:8A:96:79:21:93:1E:1F:02:41:CF:B7:08:7A:9C:44:F9:C4:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8532f83-3dde-406f-8419-338d61f9d18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.52.164.0/23 Signature Algorithm: sha256WithRSAEncryption 97:5e:b5:3f:39:ff:8e:20:f8:07:b5:0a:94:ed:a8:0a:a8:3e: ab:62:cb:63:61:62:6d:45:59:8d:e8:4a:62:dc:6f:63:21:12: 49:b9:f8:9a:87:2c:0f:f1:e9:ed:30:d6:c9:76:72:78:f0:2f: 78:c9:f8:9d:a1:81:a9:50:fb:61:42:d4:c7:f3:ab:d5:5a:39: 18:99:85:7a:11:ea:78:54:c7:14:29:82:4d:7d:b3:18:da:04: 03:0f:09:d4:ef:df:24:68:ef:d6:14:75:6f:8f:c1:12:c5:d2: 03:26:5e:51:53:cf:48:73:06:80:7d:90:b1:e0:24:29:57:72: 4e:5e:92:ab:bc:16:e3:bd:ed:ab:9b:bb:02:8b:81:73:6a:de: 24:54:46:7a:10:c2:eb:0d:a0:8e:fc:1f:3c:7c:e2:94:85:5d: 08:f4:ff:f0:bd:0f:9b:49:df:a5:a2:0c:3c:4c:36:65:a5:e2: 28:df:79:53:7d:b4:e8:d0:f6:65:fa:9f:1a:ed:c7:c5:4b:c9: 03:f8:d2:d8:ea:25:ba:fe:f0:74:99:c2:f0:78:8f:b6:31:93: 84:2a:9d:86:91:33:c8:d6:0b:9a:fb:e1:32:cd:72:38:3d:86: 3e:2e:fe:01:97:14:c5:fe:af:cd:9d:56:1d:c5:31:07:c6:18: f2:39:ad:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXqkbYhOV+NfdHUmIaQ2g27iEmJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODIxMDAwMDA3WhcNMjYxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTNlNDExYzNlMTA0MjhkM2I0MDIzYWMyNDJjMWRjZGU5 MjFhYjdmYjgyNzAzZmFlZTU3NTNhMGIyZWJjOGFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCch61YHj5K2ECI9PYivvZE27ToIw0JchF1UZ5NmwPJanew 0r/Lj75JwCrogDcAKrpM7KIt0fBn2BtQ6avR3hnrX5GpFqzJ3LsT2+DxVXPLSc8D IlI2fYe1hpO3A5SoNkOtpiY8CzJZgzfiOzwN4iDHWIJFZX+zXwUndfTWgaO4DRsX 3sEM2O8Mmf4XnQrmMzOzHkTHg1M0oaWqN9A2wwH7IdKmHsa5DjOzalPB9/D4mIA9 5/4qZIcve5f6YByWoOSLgs0CFdt1wtchrgkTjHdPpGa+qeyUqv1ljSQYnxr4R9Lf AfhbZrA0eD0Pql5gPfJBPBVJ39XupRPjD+DFoZVZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUab6Klnkhkx4fAkHPtwh6nET5xGYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4NTMyZjgzLTNkZGUtNDA2Zi04NDE5LTMzOGQ2MWY5ZDE4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFkNKQwDQYJKoZIhvcNAQELBQADggEBAJdetT85/44g+Ae1CpTtqAqoPqti y2NhYm1FWY3oSmLcb2MhEkm5+JqHLA/x6e0w1sl2cnjwL3jJ+J2hgalQ+2FC1Mfz q9VaORiZhXoR6nhUxxQpgk19sxjaBAMPCdTv3yRo79YUdW+PwRLF0gMmXlFTz0hz BoB9kLHgJClXck5ekqu8FuO97aubuwKLgXNq3iRURnoQwusNoI78Hzx84pSFXQj0 //C9D5tJ36WiDDxMNmWl4ijfeVN9tOjQ9mX6nxrtx8VLyQP40tjqJbr+8HSZwvB4 j7Yxk4QqnYaRM8jWC5r74TLNcjg9hj4u/gGXFMX+r82dVh3FMQfGGPI5rcg= -----END CERTIFICATE-----Generated at Thu Sep 17 17:13:59 2026 by rpki-client