$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb585bc4-a775-43d7-a10b-741706f5e07f.roa File: bb585bc4-a775-43d7-a10b-741706f5e07f.roa (raw, json) Hash identifier: eUTCg7x2u9KUZj6VO57bPCaP7ourV4ZS2wAi1GxAi1k= Subject key identifier: BB:33:70:82:64:44:F4:7D:98:7F:16:68:B9:53:33:B4:7D:F9:FB:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BF2D18571BE3B384CDE918AA55DDB4A9C0512F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb585bc4-a775-43d7-a10b-741706f5e07f.roa Signing time: Thu 30 Jul 2026 00:31:18 +0000 ROA not before: Thu 30 Jul 2026 00:31:18 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f2:d1:85:71:be:3b:38:4c:de:91:8a:a5:5d:db:4a:9c:05:12:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 30 00:31:18 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=97068ec43c056196cc6893e16e6ac704bb713a018f366dc8d0252b17d71b8609, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:10:df:78:81:fd:29:5d:50:c2:89:1b:3e: 69:3f:b5:8b:b2:c8:76:a6:90:97:80:7c:53:59:e3: 4c:47:46:b1:6f:e1:47:48:a6:a5:92:22:09:4f:e9: ef:5e:4e:9e:99:bf:db:df:19:8c:cc:87:39:59:d7: 66:03:f1:f9:d6:25:37:4a:31:7e:75:2f:41:1e:bf: 19:5c:f2:85:fa:ff:44:2a:a5:70:cc:e5:79:79:86: e5:87:f4:7a:f8:a7:e4:fd:02:2b:ed:b6:72:41:95: 6f:bf:c6:31:76:90:e6:2f:aa:e7:37:c6:aa:dd:e5: 0d:ab:c3:29:30:f6:a4:d0:e2:29:36:f8:a9:14:ce: 4b:de:42:e8:7b:85:9b:a9:b6:2d:d7:98:c2:71:4a: ee:2d:38:14:17:9b:93:33:21:f0:8a:e4:79:2a:44: 4c:cd:4c:c6:ac:08:ba:56:60:18:3b:2e:ca:81:c0: 70:a2:56:33:0b:71:52:92:94:96:19:98:45:89:bb: 7d:27:6c:72:db:d7:eb:a5:6f:29:07:0e:84:53:82: 5f:24:05:ee:44:44:6e:f2:8a:77:ef:9f:17:4a:b1: 0b:d0:fb:a0:40:da:04:c1:2f:8e:f5:d8:c3:39:b5: 6c:96:13:dd:06:02:cd:59:db:0e:7f:a9:cc:b8:f4: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:33:70:82:64:44:F4:7D:98:7F:16:68:B9:53:33:B4:7D:F9:FB:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb585bc4-a775-43d7-a10b-741706f5e07f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.33.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:12:df:11:13:b4:e7:ec:fe:13:45:84:b1:b6:53:06:18:bb: 30:4e:83:55:66:59:22:9c:18:8b:5e:86:db:35:6a:52:e2:f2: 0b:d7:3e:c1:9b:f4:71:b3:af:08:86:ad:b8:d5:18:c1:66:8a: 41:05:44:12:a1:5b:66:35:ee:d5:f3:79:65:91:e8:6c:d0:16: dc:5f:87:58:d7:6d:53:d4:7f:bb:57:fa:ef:06:4c:14:dc:fc: 80:9c:6b:68:92:12:50:3d:66:a3:c1:ec:56:6d:25:8f:60:ad: 1b:4a:de:ec:72:1a:07:6f:be:a4:1a:95:b4:02:77:7d:a6:24: 0d:3c:c0:aa:ad:da:29:df:f4:2e:a9:1e:03:a9:10:40:31:97: 5a:86:48:f0:04:54:c5:66:51:68:16:7a:f0:2b:92:78:39:c7: 95:72:32:89:16:46:37:68:c6:ce:5a:2d:39:27:36:8b:1d:f2: da:5b:98:15:33:d5:ba:8a:a4:ba:23:ca:93:05:60:c6:2f:43: eb:6c:08:9b:bc:98:f9:27:12:2e:83:0d:03:ae:a9:f1:32:7d: 41:8e:2d:41:04:79:45:2d:b7:f9:c1:52:56:87:a8:f9:49:39: c6:91:cf:b8:59:4f:e1:c4:7a:7e:b6:22:3f:bb:0e:5e:b5:d9: fc:3d:fa:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC/LRhXG+OzhM3pGKpV3bSpwFEvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMwMDAzMTE4WhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzA2OGVjNDNjMDU2MTk2Y2M2ODkzZTE2ZTZhYzcwNGJi NzEzYTAxOGYzNjZkYzhkMDI1MmIxN2Q3MWI4NjA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbThDfeIH9KV1QwokbPmk/tYuyyHamkJeAfFNZ40xHRrFv 4UdIpqWSIglP6e9eTp6Zv9vfGYzMhzlZ12YD8fnWJTdKMX51L0Eevxlc8oX6/0Qq pXDM5Xl5huWH9Hr4p+T9AivttnJBlW+/xjF2kOYvquc3xqrd5Q2rwykw9qTQ4ik2 +KkUzkveQuh7hZupti3XmMJxSu4tOBQXm5MzIfCK5HkqREzNTMasCLpWYBg7LsqB wHCiVjMLcVKSlJYZmEWJu30nbHLb1+ulbykHDoRTgl8kBe5ERG7yinfvnxdKsQvQ +6BA2gTBL4712MM5tWyWE90GAs1Z2w5/qcy49BFXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuzNwgmRE9H2YfxZouVMztH35+0QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiNTg1YmM0LWE3NzUtNDNkNy1hMTBiLTc0MTcwNmY1ZTA3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAYbiEwDQYJKoZIhvcNAQELBQADggEBAE8S3xETtOfs/hNFhLG2UwYYuzBO g1VmWSKcGItehts1alLi8gvXPsGb9HGzrwiGrbjVGMFmikEFRBKhW2Y17tXzeWWR 6GzQFtxfh1jXbVPUf7tX+u8GTBTc/ICca2iSElA9ZqPB7FZtJY9grRtK3uxyGgdv vqQalbQCd32mJA08wKqt2inf9C6pHgOpEEAxl1qGSPAEVMVmUWgWevArkng5x5Vy MokWRjdoxs5aLTknNosd8tpbmBUz1bqKpLojypMFYMYvQ+tsCJu8mPknEi6DDQOu qfEyfUGOLUEEeUUtt/nBUlaHqPlJOcaRz7hZT+HEen62Ij+7Dl612fw9+tk= -----END CERTIFICATE-----Generated at Mon Aug 3 05:41:32 2026 by rpki-client