$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b569042f-9c20-4ac1-9b4a-ae999bb55097.roa File: b569042f-9c20-4ac1-9b4a-ae999bb55097.roa (raw, json) Hash identifier: VGAtKbyWQ7Uh68Ik1SiZxKesP1s+6M1iNvUgX7kkk5s= Subject key identifier: CA:6A:AB:5F:8A:37:40:A3:D4:DD:9A:80:92:6E:2D:61:C6:7D:61:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: AD25BBFD5A6E35F085694F3BC306BD7C0BD6BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b569042f-9c20-4ac1-9b4a-ae999bb55097.roa Signing time: Tue 04 Aug 2026 00:20:41 +0000 ROA not before: Tue 04 Aug 2026 00:20:41 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 168.192.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ad:25:bb:fd:5a:6e:35:f0:85:69:4f:3b:c3:06:bd:7c:0b:d6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:20:41 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=1d71e3c500d97e3b0b8221a4ffbad84f95b8d50fa8c4ad98efe8a6da18ad0456, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:d2:18:ff:83:d4:97:d8:46:93:7b:5b:43: 5e:dc:64:32:80:5d:8d:b6:de:c2:45:d8:52:76:f4: 14:4c:38:ac:aa:6e:f8:43:37:a9:af:6a:a0:bd:09: da:b4:76:6a:cd:e6:4c:29:75:56:71:8a:b4:a9:71: ca:d2:72:55:3a:7a:43:3c:6e:49:1f:13:17:8a:7c: 01:a1:f4:73:a0:36:cd:23:19:6d:dc:9e:a8:05:23: d0:80:2f:73:a9:f2:5a:30:f4:89:b9:78:3b:0d:44: 3c:af:ca:38:91:1a:76:2b:5e:f0:88:9b:71:27:e5: ce:fa:82:af:77:d3:ac:e6:80:e1:90:e1:ce:ed:05: 52:a4:c3:2e:85:7a:dc:f4:4f:1c:24:b1:8e:1c:25: 85:15:53:76:16:8f:f6:76:8b:8c:f3:f7:f7:91:43: 22:ab:9c:e3:c4:79:d2:95:a4:a7:4b:da:3b:82:51: 8e:bc:df:53:d1:de:91:a3:a9:74:30:60:f6:18:f7: c4:e3:4c:13:fa:0b:b2:80:76:d6:b0:22:13:37:df: b4:ac:9e:ed:c4:36:cf:15:78:5d:14:97:02:ec:fa: d6:dc:de:12:f6:81:44:92:a5:55:ea:4a:80:fc:68: 27:bd:cb:5d:7b:87:90:9c:2e:89:60:3c:9b:50:99: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6A:AB:5F:8A:37:40:A3:D4:DD:9A:80:92:6E:2D:61:C6:7D:61:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b569042f-9c20-4ac1-9b4a-ae999bb55097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.192.0.0/15 Signature Algorithm: sha256WithRSAEncryption 96:02:2f:19:76:10:d2:42:14:0c:16:6d:63:96:cb:12:a7:b9: 85:1d:db:4e:78:47:cd:2a:98:3e:82:a8:e4:04:9b:77:e4:da: 2a:55:ae:5f:6f:0d:31:ae:bd:60:b8:84:f8:b0:af:ae:f0:90: 72:c1:9d:52:bf:8e:42:cd:1d:cf:37:ff:b8:6a:d3:ae:18:41: 58:92:3b:b7:41:7c:88:dc:33:f6:6a:77:12:db:80:f4:bc:4b: 3a:dc:3e:fb:b4:49:56:ba:c6:a1:40:8e:77:0d:3d:d4:45:85: d8:e9:15:01:b1:e1:05:13:28:86:5b:eb:cb:fb:86:3b:6a:1d: 90:01:27:a4:77:c6:e3:78:25:7e:b5:d3:86:4b:c8:12:69:2e: dc:87:f3:07:b1:c6:b6:61:62:9c:d7:e3:05:78:6b:8f:d1:35: 28:81:87:7f:3f:df:8d:13:d8:71:df:66:1f:04:da:4b:13:0d: 25:04:01:df:67:b8:f1:ac:55:bc:cc:81:09:c7:c3:f9:2d:7b: 2f:11:99:45:a8:06:b9:40:1c:10:04:c9:8d:de:d6:41:8c:e1: 92:8c:66:ef:ad:b9:7a:82:65:51:cd:de:08:bb:22:b6:1f:96: 93:49:b1:7f:7c:31:45:7d:59:e9:01:89:ca:00:5a:57:a8:68: bd:99:18:56 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAK0lu/1abjXwhWlPO8MGvXwL1r4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAyMDQxWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDcxZTNjNTAwZDk3ZTNiMGI4MjIxYTRmZmJhZDg0Zjk1 YjhkNTBmYThjNGFkOThlZmU4YTZkYTE4YWQwNDU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWvNIY/4PUl9hGk3tbQ17cZDKAXY223sJF2FJ29BRMOKyq bvhDN6mvaqC9Cdq0dmrN5kwpdVZxirSpccrSclU6ekM8bkkfExeKfAGh9HOgNs0j GW3cnqgFI9CAL3Op8low9Im5eDsNRDyvyjiRGnYrXvCIm3En5c76gq9306zmgOGQ 4c7tBVKkwy6Fetz0TxwksY4cJYUVU3YWj/Z2i4zz9/eRQyKrnOPEedKVpKdL2juC UY6831PR3pGjqXQwYPYY98TjTBP6C7KAdtawIhM337Ssnu3ENs8VeF0UlwLs+tbc 3hL2gUSSpVXqSoD8aCe9y117h5CcLolgPJtQmbYXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUymqrX4o3QKPU3ZqAkm4tYcZ9YbcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1NjkwNDJmLTljMjAtNGFjMS05YjRhLWFlOTk5YmI1NTA5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGowDANBgkqhkiG9w0BAQsFAAOCAQEAlgIvGXYQ0kIUDBZtY5bLEqe5hR3b TnhHzSqYPoKo5ASbd+TaKlWuX28NMa69YLiE+LCvrvCQcsGdUr+OQs0dzzf/uGrT rhhBWJI7t0F8iNwz9mp3EtuA9LxLOtw++7RJVrrGoUCOdw091EWF2OkVAbHhBRMo hlvry/uGO2odkAEnpHfG43glfrXThkvIEmku3IfzB7HGtmFinNfjBXhrj9E1KIGH fz/fjRPYcd9mHwTaSxMNJQQB32e48axVvMyBCcfD+S17LxGZRagGuUAcEATJjd7W QYzhkoxm7625eoJlUc3eCLsith+Wk0mxf3wxRX1Z6QGJygBaV6hovZkYVg== -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:09 2026 by rpki-client