$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa File: be713b82-ae33-4ba7-81a1-ce725d0392dd.roa (raw, json) Hash identifier: wAZVJb7jQbHaTdi6mx3cTK2+TZgVdeneFzdjzuGTwBk= Subject key identifier: 8D:CF:47:CD:6D:22:A0:A6:28:52:40:70:03:70:AE:49:8E:F0:91:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D26DF084D1C5E9F15B917B55A77E6CB271C63AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa Signing time: Fri 07 Aug 2026 00:40:33 +0000 ROA not before: Fri 07 Aug 2026 00:40:33 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 57.193.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:26:df:08:4d:1c:5e:9f:15:b9:17:b5:5a:77:e6:cb:27:1c:63:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:40:33 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=2a17f2b834b0f9d2ddb47c50ec39e5fb8500627611c6bd33d5194194039a93f7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:1c:87:c3:87:74:1a:a9:cf:8e:28:00:f7: b3:ef:b3:50:d7:dd:9c:38:b9:a5:e9:64:18:66:04: 09:ef:ed:2f:2c:51:c3:20:e6:0d:7a:2f:f4:45:ed: 41:c2:63:5a:5e:3b:ae:06:2d:21:fd:51:a0:c9:f0: 3a:cb:be:8e:41:42:76:6d:81:f4:ee:d7:41:b6:e0: 51:e8:b1:ae:6a:34:63:17:2f:b6:31:bf:ab:28:36: b5:df:7e:b8:ee:c6:63:76:61:5e:b2:b6:6a:b5:52: 42:00:b3:19:94:1b:c9:b3:9b:55:e4:3f:72:24:b8: 56:b6:ce:ff:68:48:a2:29:5b:80:0a:4d:6b:79:c8: ab:20:64:04:e5:52:13:a6:5b:b1:3b:c0:c7:71:b1: cd:75:1c:ce:18:42:10:63:18:5d:4b:b6:54:3e:24: f4:9d:78:de:88:d3:d4:3a:0e:a0:be:e0:d9:dc:ad: a2:bc:db:6f:92:73:8f:e0:41:70:23:21:cf:1a:74: 95:40:36:01:16:59:57:6a:fd:d8:7d:1a:fe:0b:d2: aa:10:fb:9d:01:1a:49:c8:7e:31:27:ac:1e:4f:43: df:8f:13:bb:83:c7:4d:a9:aa:c9:f3:52:c7:89:58: ad:12:63:75:e9:69:b0:86:24:28:09:e8:10:fe:af: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CF:47:CD:6D:22:A0:A6:28:52:40:70:03:70:AE:49:8E:F0:91:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:17:af:c0:13:ba:c9:c0:02:ca:b0:70:85:d3:e4:e7:b7:69: b6:52:9b:df:ef:67:5c:77:b1:ca:0c:bd:a4:00:b7:7d:6b:6f: c6:e9:d0:f1:58:11:7e:e2:b7:b9:81:31:61:80:87:fc:6e:e7: d3:65:0d:4f:ca:6e:9a:e7:d5:29:b5:d3:a0:4f:a6:96:44:8f: 47:e7:9a:51:6a:83:14:79:7a:96:29:f9:b3:45:a8:5e:ac:50: ae:fc:84:b5:80:7b:d9:e0:50:00:4e:55:08:14:8c:e2:28:11: f6:2a:8d:81:2a:38:99:35:07:4c:2f:52:6f:5e:bd:c3:3d:c1: 38:77:05:1a:fe:ec:04:71:65:80:62:d4:97:de:8d:0a:7f:e3: 4f:7d:24:6d:b8:ad:02:81:6b:c7:76:18:ec:72:06:c0:d2:e2: 0e:8d:05:51:63:98:94:3c:d2:37:62:c4:7a:50:ae:80:9b:67: 93:2e:08:43:49:5c:a4:a3:de:93:eb:6c:76:37:50:8f:16:2b: bc:89:60:4a:3d:73:47:5d:08:53:f6:12:1e:c8:c4:59:ad:e2: 63:92:f0:a9:26:39:ce:96:0f:f5:3a:b6:39:6d:53:b0:72:97: 1a:20:9f:47:bb:62:cf:e7:db:21:3c:09:81:91:1a:8c:1e:5d: 54:a4:ba:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHSbfCE0cXp8VuRe1WnfmyyccY64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDMzWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTE3ZjJiODM0YjBmOWQyZGRiNDdjNTBlYzM5ZTVmYjg1 MDA2Mjc2MTFjNmJkMzNkNTE5NDE5NDAzOWE5M2Y3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdPxyHw4d0GqnPjigA97Pvs1DX3Zw4uaXpZBhmBAnv7S8s UcMg5g16L/RF7UHCY1peO64GLSH9UaDJ8DrLvo5BQnZtgfTu10G24FHosa5qNGMX L7Yxv6soNrXffrjuxmN2YV6ytmq1UkIAsxmUG8mzm1XkP3IkuFa2zv9oSKIpW4AK TWt5yKsgZATlUhOmW7E7wMdxsc11HM4YQhBjGF1LtlQ+JPSdeN6I09Q6DqC+4Nnc raK822+Sc4/gQXAjIc8adJVANgEWWVdq/dh9Gv4L0qoQ+50BGknIfjEnrB5PQ9+P E7uDx02pqsnzUseJWK0SY3XpabCGJCgJ6BD+r6C1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjc9HzW0ioKYoUkBwA3CuSY7wkfcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlNzEzYjgyLWFlMzMtNGJhNy04MWExLWNlNzI1ZDAzOTJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5wTANBgkqhkiG9w0BAQsFAAOCAQEAERevwBO6ycACyrBwhdPk57dptlKb 3+9nXHexygy9pAC3fWtvxunQ8VgRfuK3uYExYYCH/G7n02UNT8pumufVKbXToE+m lkSPR+eaUWqDFHl6lin5s0WoXqxQrvyEtYB72eBQAE5VCBSM4igR9iqNgSo4mTUH TC9Sb169wz3BOHcFGv7sBHFlgGLUl96NCn/jT30kbbitAoFrx3YY7HIGwNLiDo0F UWOYlDzSN2LEelCugJtnky4IQ0lcpKPek+tsdjdQjxYrvIlgSj1zR10IU/YSHsjE Wa3iY5LwqSY5zpYP9Tq2OW1TsHKXGiCfR7tiz+fbITwJgZEajB5dVKS64w== -----END CERTIFICATE-----Generated at Thu Sep 17 17:15:27 2026 by rpki-client