$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9b8e82b-078a-4a97-81ce-dd3038a91d45.roa File: b9b8e82b-078a-4a97-81ce-dd3038a91d45.roa (raw, json) Hash identifier: JfDfXNkkcHNAVfuLn57kPWfAspI5SbpAMEACi7pMTvM= Subject key identifier: 4D:DF:DC:95:BF:62:B4:92:B7:3D:82:3C:A8:F2:73:D7:C3:E7:D0:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CD55C03CA7B5D471A11FD861B511F42275216C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9b8e82b-078a-4a97-81ce-dd3038a91d45.roa Signing time: Wed 05 Aug 2026 00:11:30 +0000 ROA not before: Wed 05 Aug 2026 00:11:30 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 69.0.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d5:5c:03:ca:7b:5d:47:1a:11:fd:86:1b:51:1f:42:27:52:16:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:11:30 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=8eeaf5b19694926303e00fd7b5330600133b3707387d400a388b46b8e994de2e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:0f:4f:1c:0b:64:af:3a:7b:7c:06:7a:49: 48:3f:b3:c5:3b:35:b0:ff:30:85:34:2f:50:07:43: 01:5d:09:fb:a4:d6:dc:4d:1c:13:0a:23:a8:47:a8: 86:14:cc:e7:85:87:39:d6:36:e2:67:20:48:40:ac: 35:31:4e:73:58:78:f6:fa:52:71:17:92:06:29:c5: b1:7f:2b:62:ab:a6:68:32:92:15:9a:74:26:b5:99: 1d:b2:7e:47:fa:3f:8d:48:45:69:0a:62:54:7d:bc: 5c:28:54:30:2d:8a:70:f4:d7:72:ac:6a:38:a7:17: 6b:c7:4c:63:74:01:7f:76:fd:c7:7c:43:4e:10:1e: 9b:bc:fe:dc:11:e7:ee:2f:85:0f:9b:3d:c9:c6:f9: eb:44:61:69:20:ce:fb:24:e4:d0:38:e8:1e:08:a3: 57:86:12:ba:ad:68:e2:a7:93:fe:69:15:b5:da:21: f7:b6:19:4d:6e:c4:70:2b:6f:35:7f:85:d7:51:5d: 5f:d1:2c:4b:70:2a:bc:de:84:43:20:36:80:82:1a: f5:0f:03:b1:d0:72:59:b9:09:a2:8e:07:19:7e:dc: 01:47:76:a4:6a:97:37:d6:e3:74:0f:25:54:fe:67: 81:de:1c:15:1f:24:fe:23:55:09:30:b3:50:c1:d5: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DF:DC:95:BF:62:B4:92:B7:3D:82:3C:A8:F2:73:D7:C3:E7:D0:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9b8e82b-078a-4a97-81ce-dd3038a91d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.212.0/23 Signature Algorithm: sha256WithRSAEncryption 33:4f:48:f3:63:29:c8:af:c7:c8:ef:65:7b:6e:ac:52:af:40: 90:e2:3d:19:a1:06:25:72:6b:01:e9:2d:55:72:f2:da:2b:de: c2:e8:7f:b7:70:45:82:d0:1d:bb:50:7e:d5:a6:36:39:58:88: 20:07:2e:f9:bf:98:33:50:3a:c1:0c:23:bf:11:ff:90:19:3f: 39:0c:ad:91:bd:6f:a8:91:94:71:56:40:51:43:ec:1b:28:c8: a5:4c:51:3b:3e:bc:42:84:01:b9:c9:3f:7d:49:31:7e:b7:d9: 99:68:61:6e:8c:ba:29:18:1d:e3:cc:79:b2:f3:f9:42:6b:4d: f5:4c:a0:dc:82:3d:12:d9:9b:86:e3:b5:13:db:13:cf:62:35: 48:9f:22:bc:7c:42:af:5d:54:ea:52:3c:f7:63:39:31:36:d9: 52:6f:73:bb:08:d5:99:c0:95:ed:d0:64:03:b8:f3:5a:ba:5c: ee:85:12:98:3d:ef:75:11:04:bb:08:f1:9a:05:a5:7f:71:41: 0d:19:b6:2f:42:6b:8b:26:a2:2e:74:39:cc:74:06:97:73:c8: 40:d2:78:b4:65:a0:8a:26:cd:3d:fe:52:a0:86:a4:03:9b:ec: cb:6d:d0:f6:af:6b:5c:6d:71:b1:a5:73:33:3a:1d:30:f2:bd: ed:82:1e:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXNVcA8p7XUcaEf2GG1EfQidSFsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAxMTMwWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWVhZjViMTk2OTQ5MjYzMDNlMDBmZDdiNTMzMDYwMDEz M2IzNzA3Mzg3ZDQwMGEzODhiNDZiOGU5OTRkZTJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8eg9PHAtkrzp7fAZ6SUg/s8U7NbD/MIU0L1AHQwFdCfuk 1txNHBMKI6hHqIYUzOeFhznWNuJnIEhArDUxTnNYePb6UnEXkgYpxbF/K2Krpmgy khWadCa1mR2yfkf6P41IRWkKYlR9vFwoVDAtinD013KsajinF2vHTGN0AX92/cd8 Q04QHpu8/twR5+4vhQ+bPcnG+etEYWkgzvsk5NA46B4Io1eGErqtaOKnk/5pFbXa Ife2GU1uxHArbzV/hddRXV/RLEtwKrzehEMgNoCCGvUPA7HQclm5CaKOBxl+3AFH dqRqlzfW43QPJVT+Z4HeHBUfJP4jVQkws1DB1eV3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTd/clb9itJK3PYI8qPJz18Pn0A0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5YjhlODJiLTA3OGEtNGE5Ny04MWNlLWRkMzAzOGE5MWQ0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFANQwDQYJKoZIhvcNAQELBQADggEBADNPSPNjKcivx8jvZXturFKvQJDi PRmhBiVyawHpLVVy8tor3sLof7dwRYLQHbtQftWmNjlYiCAHLvm/mDNQOsEMI78R /5AZPzkMrZG9b6iRlHFWQFFD7BsoyKVMUTs+vEKEAbnJP31JMX632ZloYW6MuikY HePMebLz+UJrTfVMoNyCPRLZm4bjtRPbE89iNUifIrx8Qq9dVOpSPPdjOTE22VJv c7sI1ZnAle3QZAO481q6XO6FEpg973URBLsI8ZoFpX9xQQ0Zti9Ca4smoi50Ocx0 BpdzyEDSeLRloIomzT3+UqCGpAOb7Mtt0Pava1xtcbGlczM6HTDyve2CHos= -----END CERTIFICATE-----Generated at Thu Sep 17 17:06:57 2026 by rpki-client