$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa264b3d-8132-4f1a-9f40-817238e6d836.roa File: aa264b3d-8132-4f1a-9f40-817238e6d836.roa (raw, json) Hash identifier: mPcrByENowrId5ahbXC7K0XOZkOSCgZEL76SlrfBDqc= Subject key identifier: EB:EB:67:05:3A:17:20:05:02:BC:DC:EA:10:30:33:67:E3:96:DB:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 210704B65CDB13C09DEF8DADB30459EC43029802 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa264b3d-8132-4f1a-9f40-817238e6d836.roa Signing time: Sat 08 Aug 2026 00:30:14 +0000 ROA not before: Sat 08 Aug 2026 00:30:14 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.250.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:07:04:b6:5c:db:13:c0:9d:ef:8d:ad:b3:04:59:ec:43:02:98:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:30:14 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=327a58fc6f6da2947524fcb2f89c7fb5a1eecc6e170a731db3b3ddf51343ec5c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:35:3b:e5:d5:c0:26:30:6c:2a:42:4b:fc: 25:2b:dc:1a:76:68:e7:2f:7c:98:28:be:84:cc:ad: ed:8c:bd:b0:11:41:fe:dd:f3:21:a6:b5:4c:24:7f: e0:90:2c:ed:31:53:91:eb:75:03:8f:c1:19:9a:c0: 1b:7d:d9:34:c6:a4:e8:9b:71:c4:68:44:e9:af:b0: 56:f8:2d:d8:7b:eb:1a:39:92:2c:1f:2b:6b:71:90: c5:f7:78:bb:88:30:64:51:37:fe:79:9a:82:dd:83: 39:37:92:39:8e:91:01:3f:e0:d0:a1:d4:02:8e:2b: 55:e0:38:46:ab:45:fd:25:54:4d:28:ec:a2:a2:db: ba:50:95:87:22:60:46:a8:d0:42:03:a3:e5:c4:31: bd:d9:0a:d8:6b:0e:7a:2c:41:ed:73:60:ea:ff:c2: 19:c9:13:fa:3b:ca:ae:77:a7:c6:fe:88:63:24:bb: d6:41:94:8b:d6:0f:59:0b:de:b5:75:db:87:fa:2e: 11:8e:53:69:2b:67:69:1d:c7:11:a5:8e:59:05:6c: 80:42:24:c8:1e:2e:08:f3:0f:cf:a9:aa:85:a3:a7: 38:68:11:af:cc:70:3e:93:7a:7e:89:94:57:c0:79: 47:34:e5:3c:07:59:64:df:7f:a8:4f:f7:37:39:7e: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:67:05:3A:17:20:05:02:BC:DC:EA:10:30:33:67:E3:96:DB:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa264b3d-8132-4f1a-9f40-817238e6d836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.250.0.0/17 Signature Algorithm: sha256WithRSAEncryption 55:17:b4:0b:ab:3f:b6:bb:76:f2:d3:73:df:54:4a:b3:89:c1: c2:10:c7:83:9c:de:fd:ae:99:f2:89:29:3e:33:bd:e7:36:c0: 1d:72:51:fc:5f:95:98:0f:59:fb:ae:1d:ac:67:38:33:c3:a1: 93:eb:75:df:fa:59:f9:32:77:c6:f1:b3:3e:14:71:fd:2f:f2: 03:0f:6b:06:cd:63:2e:90:55:82:d0:87:68:63:a9:39:4b:2f: 04:7d:65:77:cd:1b:e9:6b:79:83:7f:fb:eb:81:d8:60:34:d6: 58:38:c7:8e:1d:30:92:35:7c:c0:db:e9:3c:18:4a:4b:fb:6d: 2e:af:4f:e6:57:4c:f9:63:26:50:8f:50:54:c1:3f:72:07:03: b0:df:91:e9:1a:5d:74:fe:e6:24:03:db:d1:23:d6:6f:77:60: b4:0c:54:73:01:25:d5:82:23:6b:a9:84:d8:79:86:17:bd:56: 71:47:d2:f3:a6:24:5c:e6:6b:6e:ad:a8:63:5f:ce:23:06:98: 47:e2:d0:c9:16:f0:90:33:c9:eb:c5:e5:13:90:1d:95:34:ae: 4f:a2:f4:12:61:dd:e1:83:c9:c1:d6:9c:ac:c5:5e:12:0b:ce: c5:54:12:a5:57:e7:01:48:bd:94:e2:cf:4a:d5:20:cd:35:b0: ae:f6:4c:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIQcEtlzbE8Cd742tswRZ7EMCmAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAzMDE0WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjdhNThmYzZmNmRhMjk0NzUyNGZjYjJmODljN2ZiNWEx ZWVjYzZlMTcwYTczMWRiM2IzZGRmNTEzNDNlYzVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvGzU75dXAJjBsKkJL/CUr3Bp2aOcvfJgovoTMre2MvbAR Qf7d8yGmtUwkf+CQLO0xU5HrdQOPwRmawBt92TTGpOibccRoROmvsFb4Ldh76xo5 kiwfK2txkMX3eLuIMGRRN/55moLdgzk3kjmOkQE/4NCh1AKOK1XgOEarRf0lVE0o 7KKi27pQlYciYEao0EIDo+XEMb3ZCthrDnosQe1zYOr/whnJE/o7yq53p8b+iGMk u9ZBlIvWD1kL3rV124f6LhGOU2krZ2kdxxGljlkFbIBCJMgeLgjzD8+pqoWjpzho Ea/McD6Ten6JlFfAeUc05TwHWWTff6hP9zc5fiSDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6+tnBToXIAUCvNzqEDAzZ+OW22owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhMjY0YjNkLTgxMzItNGYxYS05ZjQwLTgxNzIzOGU2ZDgzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcX+gAwDQYJKoZIhvcNAQELBQADggEBAFUXtAurP7a7dvLTc99USrOJwcIQ x4Oc3v2umfKJKT4zvec2wB1yUfxflZgPWfuuHaxnODPDoZPrdd/6Wfkyd8bxsz4U cf0v8gMPawbNYy6QVYLQh2hjqTlLLwR9ZXfNG+lreYN/++uB2GA01lg4x44dMJI1 fMDb6TwYSkv7bS6vT+ZXTPljJlCPUFTBP3IHA7DfkekaXXT+5iQD29Ej1m93YLQM VHMBJdWCI2uphNh5hhe9VnFH0vOmJFzma26tqGNfziMGmEfi0MkW8JAzyevF5ROQ HZU0rk+i9BJh3eGDycHWnKzFXhILzsVUEqVX5wFIvZTiz0rVIM01sK72TP0= -----END CERTIFICATE-----Generated at Thu Sep 17 17:09:08 2026 by rpki-client