$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba36d6cd-d053-4e4a-aeb0-54c496bc17f5.roa File: ba36d6cd-d053-4e4a-aeb0-54c496bc17f5.roa (raw, json) Hash identifier: gOXrfLP/D91YB1ErKRmOuF4qKfj7uLc9kmbg6SjiFEU= Subject key identifier: 8F:7A:70:88:36:DB:98:3F:8F:57:1B:5D:C8:63:2D:3F:E0:91:3E:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E3C71B4BCF035D029FFCA6BB940A98B9491A62E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba36d6cd-d053-4e4a-aeb0-54c496bc17f5.roa Signing time: Wed 05 Aug 2026 00:31:02 +0000 ROA not before: Wed 05 Aug 2026 00:31:02 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 56.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3c:71:b4:bc:f0:35:d0:29:ff:ca:6b:b9:40:a9:8b:94:91:a6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:31:02 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=19d6cc79e7a97b161e93ac2ee605326d61154a18508b0abe1ec4e86aaeee666d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:a4:d9:ad:63:02:3f:79:3b:36:26:1b:15: 6d:7b:04:35:34:e3:5c:a9:3f:81:b8:62:d0:38:89: 75:32:4f:ad:01:d3:0e:33:02:59:57:b2:df:aa:c3: 97:84:fc:26:8f:f2:9b:13:66:e9:e8:89:f6:dd:b2: fa:f6:ad:91:0f:e7:16:6b:f6:d6:20:e3:a0:2a:3a: 31:40:5e:e7:a1:5a:a1:b5:a7:d1:b6:b8:f6:25:a7: 1b:80:9c:d0:2a:48:20:7c:36:4e:db:5e:8e:b7:9c: 68:4d:65:bc:06:51:a0:6f:fb:65:04:22:bd:b8:6f: 5c:8d:aa:5f:22:dd:d4:e1:25:d5:bd:2a:11:91:39: 69:18:e4:d0:f0:8c:24:3d:e9:9e:65:43:47:c8:53: f8:ed:07:0c:00:af:38:74:47:7b:55:49:dd:1d:9a: e2:09:62:f2:bf:5e:f8:a4:b4:5e:87:23:22:74:61: 25:13:d9:5d:e4:3a:cd:3f:8d:07:de:a6:7d:7b:81: c5:af:b0:f0:a7:43:5e:99:c1:41:b8:0a:b4:3c:3c: da:e5:44:ca:79:ac:ad:21:42:24:ea:58:89:ec:76: 0d:a1:4d:c8:8a:4b:29:19:c7:ea:ab:a7:97:c2:34: 20:9f:0c:78:7a:8b:36:3c:14:cd:35:18:cd:08:84: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7A:70:88:36:DB:98:3F:8F:57:1B:5D:C8:63:2D:3F:E0:91:3E:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba36d6cd-d053-4e4a-aeb0-54c496bc17f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.245.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:db:d3:eb:f6:cd:64:5b:6c:74:72:7d:4c:dc:1b:fe:c6:a7: 9b:3e:ad:0f:94:7e:90:1a:8f:10:37:41:39:25:0c:cf:14:c8: 00:b8:d8:d8:48:9d:0a:eb:10:eb:47:34:2f:ea:8d:20:6f:ef: 63:3e:60:21:f8:bc:6e:a6:34:4e:69:c9:40:d4:43:96:31:fb: 99:72:5b:a0:1f:55:8a:f4:79:b6:f2:f7:a8:1b:0d:ee:c6:34: c6:df:f4:9c:a9:78:30:83:ec:3a:06:14:e8:4a:43:e7:bd:b0: a4:5d:1e:00:cb:86:fa:10:2e:d5:a1:63:d2:8b:71:31:ee:80: e2:74:10:a6:4d:82:60:3e:61:2c:66:b3:fc:c1:51:a4:b3:85: e3:6e:5d:f1:c4:ed:94:1f:df:d8:25:f3:d4:6c:7d:68:1f:6c: c5:f0:86:6d:a3:9c:fc:5b:bc:0a:68:05:19:a5:1b:68:b9:03: 63:ca:af:e1:68:91:15:d2:7c:a1:a7:30:42:9b:ed:bc:f8:ad: 79:f4:36:af:88:b6:89:7a:40:77:7a:2c:95:ce:0b:2a:79:cb: 44:63:79:35:4e:21:d2:37:19:65:b2:84:39:d6:ce:fb:70:41: 16:08:ee:e4:56:28:c7:8f:83:8e:68:e6:6a:19:c7:19:23:95: e6:a5:c7:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULjxxtLzwNdAp/8pruUCpi5SRpi4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAzMTAyWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWQ2Y2M3OWU3YTk3YjE2MWU5M2FjMmVlNjA1MzI2ZDYx MTU0YTE4NTA4YjBhYmUxZWM0ZTg2YWFlZWU2NjZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTmaTZrWMCP3k7NiYbFW17BDU041ypP4G4YtA4iXUyT60B 0w4zAllXst+qw5eE/CaP8psTZunoifbdsvr2rZEP5xZr9tYg46AqOjFAXuehWqG1 p9G2uPYlpxuAnNAqSCB8Nk7bXo63nGhNZbwGUaBv+2UEIr24b1yNql8i3dThJdW9 KhGROWkY5NDwjCQ96Z5lQ0fIU/jtBwwArzh0R3tVSd0dmuIJYvK/XviktF6HIyJ0 YSUT2V3kOs0/jQfepn17gcWvsPCnQ16ZwUG4CrQ8PNrlRMp5rK0hQiTqWInsdg2h TciKSykZx+qrp5fCNCCfDHh6izY8FM01GM0IhGiDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUj3pwiDbbmD+PVxtdyGMtP+CRPhMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMzZkNmNkLWQwNTMtNGU0YS1hZWIwLTU0YzQ5NmJjMTdmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA49TANBgkqhkiG9w0BAQsFAAOCAQEAYtvT6/bNZFtsdHJ9TNwb/sanmz6t D5R+kBqPEDdBOSUMzxTIALjY2EidCusQ60c0L+qNIG/vYz5gIfi8bqY0TmnJQNRD ljH7mXJboB9VivR5tvL3qBsN7sY0xt/0nKl4MIPsOgYU6EpD572wpF0eAMuG+hAu 1aFj0otxMe6A4nQQpk2CYD5hLGaz/MFRpLOF425d8cTtlB/f2CXz1Gx9aB9sxfCG baOc/Fu8CmgFGaUbaLkDY8qv4WiRFdJ8oacwQpvtvPitefQ2r4i2iXpAd3oslc4L KnnLRGN5NU4h0jcZZbKEOdbO+3BBFgju5FYox4+DjmjmahnHGSOV5qXH2g== -----END CERTIFICATE-----Generated at Thu Aug 20 21:54:56 2026 by rpki-client