$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/149d54cb-bed0-4c9c-8a74-1a31efba3f57.roa File: 149d54cb-bed0-4c9c-8a74-1a31efba3f57.roa (raw, json) Hash identifier: r6BNDCknMfNFU8RZE2pACthZkgwBmqSUEQsyxCsHDds= Subject key identifier: 04:8A:F7:08:98:F5:C2:C5:1B:42:01:86:06:A9:78:2D:FB:75:06:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24D2AAEA16006B15E590055406F767BAC894A04F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/149d54cb-bed0-4c9c-8a74-1a31efba3f57.roa Signing time: Thu 23 Jul 2026 00:30:42 +0000 ROA not before: Thu 23 Jul 2026 00:30:42 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 75.2.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d2:aa:ea:16:00:6b:15:e5:90:05:54:06:f7:67:ba:c8:94:a0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:30:42 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=d62b6fe1dc4b9b861b9d74e43b416745d37064546d1f3306c2277e05478f761f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:6d:86:a6:30:44:ea:31:18:65:e9:af:53: 88:fc:fb:34:47:01:f7:51:56:07:54:12:21:d5:b7: bd:4d:6b:14:ba:41:ae:76:aa:33:eb:60:16:40:b1: fd:df:c3:5c:1f:4e:7d:ba:e0:89:f9:fc:ec:80:64: 79:f5:7b:10:ce:3a:86:c1:20:3f:26:15:b5:6c:40: f0:11:ee:ad:56:eb:af:a2:a3:9a:b1:07:d4:ff:53: 25:3a:2f:ba:25:78:8f:ae:a6:6e:77:b4:ab:99:8a: 4a:26:58:0c:3c:3e:32:c9:09:7b:4c:22:0e:ff:74: 5f:05:37:d7:d5:d1:f3:d8:c8:22:3b:a9:c0:4e:36: 8f:4c:5a:92:db:71:15:e1:b2:a1:15:89:3f:2f:50: 85:55:b3:4a:a3:c0:28:34:49:68:6e:93:22:5a:da: 6f:65:6d:3d:b0:7d:b8:31:49:1f:3d:d2:46:f7:0e: ba:63:20:97:22:fd:9f:1f:e4:54:85:67:20:5f:3a: 21:ca:0e:22:90:02:86:d3:33:32:7d:6b:2f:fb:6a: cb:6d:e8:aa:a8:19:61:48:4b:26:80:e7:4b:1b:53: 79:37:b3:16:a9:46:6d:2f:c4:34:6d:d3:d4:4c:28: bc:96:51:f4:df:6e:00:2c:7f:1b:b2:79:ab:2f:25: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:F7:08:98:F5:C2:C5:1B:42:01:86:06:A9:78:2D:FB:75:06:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/149d54cb-bed0-4c9c-8a74-1a31efba3f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.48.0/20 Signature Algorithm: sha256WithRSAEncryption 65:43:41:93:5f:45:e0:63:75:a3:81:79:69:74:ec:38:20:bd: d5:68:52:e3:c0:dc:49:9e:6e:d3:2f:28:ee:9c:c6:5c:f0:5e: bb:0a:65:5d:47:56:ec:cf:b1:82:be:80:4e:60:52:14:ac:4f: bf:2b:a5:46:93:4f:41:37:59:b7:db:60:d3:2a:ad:4d:18:95: 88:db:cc:7a:d8:53:e9:db:16:72:6e:94:b6:9b:02:99:6a:70: f6:9a:69:e4:ce:40:99:5c:86:8d:a6:74:6a:19:8d:a9:d8:80: 0b:98:8b:e2:af:26:9c:8e:c4:7b:f3:84:34:da:dd:01:0a:4f: 6f:ed:30:72:4f:ec:a7:54:6e:95:e7:0b:b3:60:82:cb:d8:67: 43:32:57:79:cb:24:86:62:e0:48:df:26:2f:42:19:39:20:86: 32:9b:78:b0:a2:d3:44:d7:b7:75:c3:a1:76:0d:f4:13:bb:8a: 05:a5:d3:7c:79:d1:82:3c:1e:de:3d:1a:5d:ef:67:94:25:9d: d7:42:ed:21:21:bf:08:8e:59:d3:a5:a0:2f:64:08:55:6b:94: dc:c7:f1:db:31:51:81:69:0d:f4:37:b6:6b:f8:38:f4:ff:b3: c7:17:33:d1:d8:86:f9:95:91:17:88:7a:c3:d3:2a:70:2a:19: eb:c2:ff:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJNKq6hYAaxXlkAVUBvdnusiUoE8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAzMDQyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjJiNmZlMWRjNGI5Yjg2MWI5ZDc0ZTQzYjQxNjc0NWQz NzA2NDU0NmQxZjMzMDZjMjI3N2UwNTQ3OGY3NjFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOi22GpjBE6jEYZemvU4j8+zRHAfdRVgdUEiHVt71NaxS6 Qa52qjPrYBZAsf3fw1wfTn264In5/OyAZHn1exDOOobBID8mFbVsQPAR7q1W66+i o5qxB9T/UyU6L7oleI+upm53tKuZikomWAw8PjLJCXtMIg7/dF8FN9fV0fPYyCI7 qcBONo9MWpLbcRXhsqEViT8vUIVVs0qjwCg0SWhukyJa2m9lbT2wfbgxSR890kb3 DrpjIJci/Z8f5FSFZyBfOiHKDiKQAobTMzJ9ay/7astt6KqoGWFISyaA50sbU3k3 sxapRm0vxDRt09RMKLyWUfTfbgAsfxuyeasvJRYrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBIr3CJj1wsUbQgGGBql4Lft1BoEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE0OWQ1NGNiLWJlZDAtNGM5Yy04YTc0LTFhMzFlZmJhM2Y1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARLAjAwDQYJKoZIhvcNAQELBQADggEBAGVDQZNfReBjdaOBeWl07DggvdVo UuPA3EmebtMvKO6cxlzwXrsKZV1HVuzPsYK+gE5gUhSsT78rpUaTT0E3WbfbYNMq rU0YlYjbzHrYU+nbFnJulLabAplqcPaaaeTOQJlcho2mdGoZjanYgAuYi+KvJpyO xHvzhDTa3QEKT2/tMHJP7KdUbpXnC7NggsvYZ0MyV3nLJIZi4EjfJi9CGTkghjKb eLCi00TXt3XDoXYN9BO7igWl03x50YI8Ht49Gl3vZ5QlnddC7SEhvwiOWdOloC9k CFVrlNzH8dsxUYFpDfQ3tmv4OPT/s8cXM9HYhvmVkReIesPTKnAqGevC/8Y= -----END CERTIFICATE-----Generated at Thu Jul 23 21:31:18 2026 by rpki-client