$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbab0547-cbf6-46b4-a813-d27a961352db.roa File: bbab0547-cbf6-46b4-a813-d27a961352db.roa (raw, json) Hash identifier: Ih9D30beIWIlDieVqGLqlkR2pjsZ6vreTiQsSngwbkw= Subject key identifier: 8E:1B:32:EA:1E:78:64:D3:23:28:CE:E1:46:71:BC:28:29:D3:C9:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C377CEEDD4DBF4FF0E2CF669921026261A0695E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbab0547-cbf6-46b4-a813-d27a961352db.roa Signing time: Tue 04 Aug 2026 00:30:11 +0000 ROA not before: Tue 04 Aug 2026 00:30:11 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:37:7c:ee:dd:4d:bf:4f:f0:e2:cf:66:99:21:02:62:61:a0:69:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:30:11 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=3c444383509c8fab806e243950a3d6f8aa04900d4c41904f4c1390bea4a8d8ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:52:c4:fc:21:88:ba:a3:c4:4d:98:3a:94: b2:3b:92:03:97:7c:f0:e4:56:57:7e:c5:cc:4a:32: b2:87:77:c6:b6:b2:b1:09:9a:f4:64:5f:a6:88:33: e0:8c:cb:3d:ea:e8:c2:c3:e1:5f:1e:81:60:29:69: 03:7b:57:81:09:5b:97:cc:dd:e1:ff:d6:67:aa:d4: 24:e6:a6:ae:86:17:0d:27:fe:56:52:92:8c:85:d0: 7a:ac:05:2b:4b:92:02:e8:de:74:76:aa:d4:85:e7: cd:eb:9d:94:67:14:b6:b3:39:25:da:ae:37:44:21: a8:9e:96:e9:c5:31:b0:80:58:4e:f7:a5:6a:cb:28: 14:be:ef:86:c7:27:90:af:9e:86:e2:29:60:23:e2: 52:a4:76:5b:b9:34:f7:13:e9:9d:b0:aa:1a:e8:b2: 91:f3:c4:5f:d7:bf:31:57:b0:37:96:c6:c9:29:76: bc:6a:15:32:a7:e6:2c:ad:e3:06:63:47:59:0d:1e: e6:41:0e:64:5a:1a:b0:6d:9d:b6:6c:01:98:ce:0e: 0c:ff:41:92:fe:92:c8:aa:51:c9:45:26:10:a8:c8: 2e:f2:02:10:3b:85:e2:a1:fb:77:f6:9b:e6:7f:9c: ef:a7:7a:76:22:be:43:e5:74:7e:34:87:00:b6:c7: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1B:32:EA:1E:78:64:D3:23:28:CE:E1:46:71:BC:28:29:D3:C9:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbab0547-cbf6-46b4-a813-d27a961352db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.128.0/17 Signature Algorithm: sha256WithRSAEncryption 41:81:96:6d:c8:a6:77:c7:89:26:e2:40:4c:24:45:98:5f:fb: ac:c5:f7:28:82:18:19:e3:83:a3:03:01:af:b6:7b:28:c2:7d: 60:39:04:1b:b3:8e:da:b5:06:3d:3d:46:38:e7:82:13:58:bf: f2:09:05:d4:8f:72:5b:f1:66:76:34:f9:4a:47:41:38:94:6f: be:bc:f5:59:d1:42:da:ab:38:79:c8:d1:30:68:14:5a:6f:c0: b6:4e:bd:da:61:47:73:18:9f:79:d6:73:6a:73:41:87:44:a0: 66:85:5b:da:7d:9a:82:8f:d3:a2:31:36:19:9b:2c:8b:e4:0a: f1:e4:96:f4:6d:d2:04:68:c4:05:b0:0a:09:85:8b:4d:75:f6: 3a:98:f0:e5:62:0c:fd:e4:54:41:f0:7a:64:96:f1:4b:ad:36: 9f:43:9e:1a:0c:78:d7:6c:fc:55:5d:10:fb:98:31:70:9d:d4: 76:31:47:b7:f1:f9:87:ce:f8:5c:e2:c7:b4:e2:ac:ec:6a:8d: a4:24:8c:de:33:82:1d:71:5b:24:ab:6b:c7:18:68:9a:96:49: bb:23:04:bf:8b:d0:98:a7:67:2e:58:d6:63:ee:b4:e9:21:84: fa:00:df:93:68:03:f6:1d:54:74:9d:b3:3e:af:e0:fb:4a:e4: dc:44:15:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHDd87t1Nv0/w4s9mmSECYmGgaV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAzMDExWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzQ0NDM4MzUwOWM4ZmFiODA2ZTI0Mzk1MGEzZDZmOGFh MDQ5MDBkNGM0MTkwNGY0YzEzOTBiZWE0YThkOGFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6VVLE/CGIuqPETZg6lLI7kgOXfPDkVld+xcxKMrKHd8a2 srEJmvRkX6aIM+CMyz3q6MLD4V8egWApaQN7V4EJW5fM3eH/1meq1CTmpq6GFw0n /lZSkoyF0HqsBStLkgLo3nR2qtSF583rnZRnFLazOSXarjdEIaielunFMbCAWE73 pWrLKBS+74bHJ5CvnobiKWAj4lKkdlu5NPcT6Z2wqhrospHzxF/XvzFXsDeWxskp drxqFTKn5iyt4wZjR1kNHuZBDmRaGrBtnbZsAZjODgz/QZL+ksiqUclFJhCoyC7y AhA7heKh+3f2m+Z/nO+nenYivkPldH40hwC2xzrZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjhsy6h54ZNMjKM7hRnG8KCnTycAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiYWIwNTQ3LWNiZjYtNDZiNC1hODEzLWQyN2E5NjEzNTJkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcXF4AwDQYJKoZIhvcNAQELBQADggEBAEGBlm3IpnfHiSbiQEwkRZhf+6zF 9yiCGBnjg6MDAa+2eyjCfWA5BBuzjtq1Bj09RjjnghNYv/IJBdSPclvxZnY0+UpH QTiUb7689VnRQtqrOHnI0TBoFFpvwLZOvdphR3MYn3nWc2pzQYdEoGaFW9p9moKP 06IxNhmbLIvkCvHklvRt0gRoxAWwCgmFi0119jqY8OViDP3kVEHwemSW8UutNp9D nhoMeNds/FVdEPuYMXCd1HYxR7fx+YfO+Fzix7TirOxqjaQkjN4zgh1xWySra8cY aJqWSbsjBL+L0JinZy5Y1mPutOkhhPoA35NoA/YdVHSdsz6v4PtK5NxEFaA= -----END CERTIFICATE-----Generated at Sat Aug 15 07:44:05 2026 by rpki-client