$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f83beaf6-ae8e-43d8-969a-76724e17dca0.roa File: f83beaf6-ae8e-43d8-969a-76724e17dca0.roa (raw, json) Hash identifier: 6dZ29cUmSviodI2fnwhwPwFHiVIPEV4zMli7DqwbNAo= Subject key identifier: A0:A5:BF:CE:CE:F3:14:DC:F8:FA:05:DF:9E:F8:F7:BD:A2:C5:C4:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 677EAAD86FF3ABF7796D969AC7667D0426D7A96E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f83beaf6-ae8e-43d8-969a-76724e17dca0.roa Signing time: Mon 03 Aug 2026 00:31:26 +0000 ROA not before: Mon 03 Aug 2026 00:31:26 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7e:aa:d8:6f:f3:ab:f7:79:6d:96:9a:c7:66:7d:04:26:d7:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:31:26 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=3e8b3ff223efba05c9db5ca57f4e509e218b61e4fd8f248caf58f4ab1538a1fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:99:9c:65:d0:b4:8d:bc:49:f7:e8:e1:e4: 28:a7:be:e8:26:7e:23:3e:a1:8a:23:9e:ed:9f:70: 70:1e:29:68:aa:48:41:16:b9:64:50:1b:ce:1f:ec: 2c:20:e7:bf:b3:30:3c:ac:63:b6:ad:b4:e6:b1:db: b6:d4:5e:47:83:bd:4c:8f:f9:d5:57:46:b1:d9:70: ef:d5:3b:16:5a:28:af:6d:a6:15:c4:6a:4d:60:e4: 35:bd:82:2d:89:ea:fd:9d:87:86:b1:09:1b:9d:21: d1:df:82:db:72:e1:44:3c:0a:cf:2f:50:66:a3:02: a7:23:43:b3:41:83:7e:a1:00:b6:4e:9d:e6:7b:1d: 95:3a:d0:cf:61:c8:18:47:62:1c:8a:d9:6b:36:8d: 58:4a:8c:6f:f1:b8:d5:a3:39:d1:13:c7:97:7e:87: 51:00:21:7e:ba:f7:53:96:e6:53:04:c2:90:8b:26: b2:6f:4f:4e:dc:3f:1e:b1:ee:99:44:cc:b4:d7:05: 23:dc:16:7d:dd:8e:13:0f:85:c3:ef:62:d2:78:e2: 06:7d:c7:c0:b8:06:23:56:9a:ee:d4:dd:28:0e:94: ff:af:6e:63:49:22:2d:c7:c3:27:c7:ee:36:75:4c: 59:2a:72:83:42:b0:31:bc:55:36:fc:ec:0a:f7:b6: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:BF:CE:CE:F3:14:DC:F8:FA:05:DF:9E:F8:F7:BD:A2:C5:C4:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f83beaf6-ae8e-43d8-969a-76724e17dca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.152.0/21 Signature Algorithm: sha256WithRSAEncryption 39:f7:eb:4c:ee:11:98:df:ab:05:26:6b:86:cb:ef:6a:43:ca: c0:81:1b:4b:15:a9:a2:0d:27:03:68:66:14:43:ed:f3:6f:66: 8e:1c:6b:40:04:0b:d5:97:fc:7d:94:eb:72:39:0d:64:58:c2: f1:3b:21:f2:02:2e:e8:da:85:09:e8:16:d8:e3:1d:b9:9a:28: 03:f6:94:1d:92:65:35:c7:1b:8d:da:5d:87:35:6c:a2:8f:5a: b8:35:80:83:b0:bd:c6:fb:25:2f:bf:4e:02:e9:84:1c:df:e6: 02:f2:11:fd:52:76:4d:a2:bd:2d:17:80:bb:c4:db:7d:26:cd: 94:88:28:1e:43:95:18:e7:e1:f7:84:1c:61:f2:91:48:df:bf: 26:de:4f:57:a8:dd:38:35:2e:d9:17:41:18:80:11:8c:fd:a1: 91:d6:bd:0e:2b:f8:86:70:0e:7f:70:1c:67:b8:b0:95:59:62: 8f:ed:73:98:b8:b0:be:e3:62:9a:c8:b0:87:bb:9e:9b:f5:35: 7f:34:1b:01:2f:e4:a8:5b:08:da:5e:b3:8a:d2:7c:c0:71:9d: cc:5f:1c:ab:be:4c:de:43:90:e3:2a:ff:52:b5:f3:6a:eb:96: c1:c1:63:f7:c9:14:3c:ef:b0:21:4b:37:a4:db:f1:37:d2:4c: ca:e9:88:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ36q2G/zq/d5bZaax2Z9BCbXqW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDAzMTI2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZThiM2ZmMjIzZWZiYTA1YzlkYjVjYTU3ZjRlNTA5ZTIx OGI2MWU0ZmQ4ZjI0OGNhZjU4ZjRhYjE1MzhhMWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3ppmcZdC0jbxJ9+jh5CinvugmfiM+oYojnu2fcHAeKWiq SEEWuWRQG84f7Cwg57+zMDysY7attOax27bUXkeDvUyP+dVXRrHZcO/VOxZaKK9t phXEak1g5DW9gi2J6v2dh4axCRudIdHfgtty4UQ8Cs8vUGajAqcjQ7NBg36hALZO neZ7HZU60M9hyBhHYhyK2Ws2jVhKjG/xuNWjOdETx5d+h1EAIX6691OW5lMEwpCL JrJvT07cPx6x7plEzLTXBSPcFn3djhMPhcPvYtJ44gZ9x8C4BiNWmu7U3SgOlP+v bmNJIi3HwyfH7jZ1TFkqcoNCsDG8VTb87Ar3tsKnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoKW/zs7zFNz4+gXfnvj3vaLFxJEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4M2JlYWY2LWFlOGUtNDNkOC05NjlhLTc2NzI0ZTE3ZGNhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANu7pgwDQYJKoZIhvcNAQELBQADggEBADn360zuEZjfqwUma4bL72pDysCB G0sVqaINJwNoZhRD7fNvZo4ca0AEC9WX/H2U63I5DWRYwvE7IfICLujahQnoFtjj HbmaKAP2lB2SZTXHG43aXYc1bKKPWrg1gIOwvcb7JS+/TgLphBzf5gLyEf1Sdk2i vS0XgLvE230mzZSIKB5DlRjn4feEHGHykUjfvybeT1eo3Tg1LtkXQRiAEYz9oZHW vQ4r+IZwDn9wHGe4sJVZYo/tc5i4sL7jYprIsIe7npv1NX80GwEv5KhbCNpes4rS fMBxncxfHKu+TN5DkOMq/1K182rrlsHBY/fJFDzvsCFLN6Tb8TfSTMrpiLA= -----END CERTIFICATE-----Generated at Tue Sep 15 13:26:10 2026 by rpki-client