$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa File: b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa (raw, json) Hash identifier: awtkeOawhMPtUOLlgsCVtQMPg6MczZ/j0GcJBwdRx3M= Subject key identifier: 4E:74:6A:D1:67:38:6D:4D:E4:EC:E9:6B:A7:9C:5C:59:84:92:E2:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54DE831036181C807E0E5AECBAC6AA22D828E4EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa Signing time: Mon 27 Jul 2026 00:31:25 +0000 ROA not before: Mon 27 Jul 2026 00:31:25 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 206.191.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:de:83:10:36:18:1c:80:7e:0e:5a:ec:ba:c6:aa:22:d8:28:e4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:31:25 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=8d19d03515b39a57e4abe44f01956dc76e6166d207adf5443f3a72c5f4bd1523, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:d2:b2:45:51:78:cc:37:44:47:a2:25:a4: ef:16:09:e6:79:a6:32:97:a9:20:8b:d7:4a:67:2d: 61:e5:6f:42:73:be:0e:ce:c2:f9:73:67:a5:9b:eb: 7c:32:e2:70:e9:5e:85:df:eb:11:8e:95:7e:c0:2d: fd:4d:e3:5d:f5:9c:d3:ea:f2:39:31:f5:dd:79:72: 66:a3:f8:d7:2c:c7:6d:2d:19:c3:32:be:ac:f4:dc: 04:c3:8e:b8:a9:39:5f:aa:32:2c:c5:2d:ce:a7:6f: b1:72:c5:6b:0c:9a:49:3e:57:5d:f3:5f:d9:2d:e8: 4e:34:37:8c:1b:92:6e:a7:16:61:5b:22:ca:f3:eb: 11:17:66:c7:38:25:c3:2e:f7:be:b3:66:d0:32:b9: 9f:21:7d:a2:00:a8:77:46:b3:b1:0c:06:5f:e6:80: aa:39:64:1f:b7:4a:5d:8a:15:03:6c:b6:c2:d1:5b: 11:2f:fc:1c:20:68:d3:74:e4:ab:b6:3a:52:23:66: 8a:1d:1e:b0:7d:6e:89:1d:07:3e:76:f3:22:43:7e: e4:0d:3c:ca:7b:84:67:73:0c:17:7f:b2:eb:3a:5b: ed:80:2e:0e:1a:b6:f0:86:87:74:df:6b:82:8a:f9: 3f:41:83:eb:f5:ad:11:e3:cb:36:96:d4:5a:0a:4f: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:6A:D1:67:38:6D:4D:E4:EC:E9:6B:A7:9C:5C:59:84:92:E2:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.191.184.0/21 Signature Algorithm: sha256WithRSAEncryption d2:b2:92:14:53:d6:ce:7c:84:1e:24:1d:b1:76:a2:5c:30:57: c9:98:d8:5e:70:20:f2:c6:a8:b4:67:3c:ce:03:f0:04:96:0a: 5e:48:01:7c:85:1a:5d:83:ff:09:e2:5a:24:27:97:91:8b:dc: 48:28:3d:5e:70:dc:36:f7:f7:59:48:d6:6a:6a:53:b7:f5:b4: c7:16:ae:ef:f2:fb:4d:68:8b:37:17:e6:33:a7:2a:3c:60:0d: 23:50:5e:cb:73:af:6d:c8:72:24:57:82:2c:15:2e:11:5a:4d: 93:9b:48:91:50:7e:c1:ca:df:bc:b0:87:e9:0f:51:e7:15:aa: c6:af:7a:4d:b0:a3:76:bc:dc:a1:f7:43:0f:7f:b0:b2:00:90: b8:a9:e2:35:fc:51:e2:dc:02:e5:6c:7a:89:a3:87:0b:e2:c1: ad:20:77:a7:d0:95:dc:d5:30:f8:e5:d1:c3:9e:06:2d:ee:cc: 8e:b4:5d:d8:62:a3:cf:0f:d0:5c:18:0c:f9:41:6b:df:a7:84: 8d:07:91:e5:1d:f3:ec:d8:31:fe:87:a8:3b:1d:2e:83:d6:96: b2:aa:df:96:53:c1:0e:c1:60:1e:64:e3:34:11:74:bb:91:fc: 8c:dd:0f:5c:40:2d:b0:4f:cd:e7:db:cd:09:5b:35:6c:94:95: bd:4c:34:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVN6DEDYYHIB+DlrsusaqItgo5OswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAzMTI1WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDE5ZDAzNTE1YjM5YTU3ZTRhYmU0NGYwMTk1NmRjNzZl NjE2NmQyMDdhZGY1NDQzZjNhNzJjNWY0YmQxNTIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk1tKyRVF4zDdER6IlpO8WCeZ5pjKXqSCL10pnLWHlb0Jz vg7OwvlzZ6Wb63wy4nDpXoXf6xGOlX7ALf1N4131nNPq8jkx9d15cmaj+Ncsx20t GcMyvqz03ATDjripOV+qMizFLc6nb7FyxWsMmkk+V13zX9kt6E40N4wbkm6nFmFb Isrz6xEXZsc4JcMu976zZtAyuZ8hfaIAqHdGs7EMBl/mgKo5ZB+3Sl2KFQNstsLR WxEv/BwgaNN05Ku2OlIjZoodHrB9bokdBz528yJDfuQNPMp7hGdzDBd/sus6W+2A Lg4atvCGh3Tfa4KK+T9Bg+v1rRHjyzaW1FoKT8dpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTnRq0Wc4bU3k7Olrp5xcWYSS4nUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4NmY3NWU3LTdlZmEtNGUzOS1hZDU4LWFmZGU2NmJkZDIyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPOv7gwDQYJKoZIhvcNAQELBQADggEBANKykhRT1s58hB4kHbF2olwwV8mY 2F5wIPLGqLRnPM4D8ASWCl5IAXyFGl2D/wniWiQnl5GL3EgoPV5w3Db391lI1mpq U7f1tMcWru/y+01oizcX5jOnKjxgDSNQXstzr23IciRXgiwVLhFaTZObSJFQfsHK 37ywh+kPUecVqsavek2wo3a83KH3Qw9/sLIAkLip4jX8UeLcAuVseomjhwviwa0g d6fQldzVMPjl0cOeBi3uzI60Xdhio88P0FwYDPlBa9+nhI0HkeUd8+zYMf6HqDsd LoPWlrKq35ZTwQ7BYB5k4zQRdLuR/IzdD1xALbBPzefbzQlbNWyUlb1MNDA= -----END CERTIFICATE-----Generated at Mon Aug 3 05:37:43 2026 by rpki-client