$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23dbcf86-c5be-4d6b-9352-9636311b582a.roa File: 23dbcf86-c5be-4d6b-9352-9636311b582a.roa (raw, json) Hash identifier: ecZenWLaozyVsCxcTCGY/euHwP+XHknTdFwAlKgJwng= Subject key identifier: B8:4B:6F:6E:DA:6E:CC:60:36:08:7F:F1:3F:AF:B2:8D:FE:A0:F5:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D9E408735F806758AEE3F618BD539F71680EDC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23dbcf86-c5be-4d6b-9352-9636311b582a.roa Signing time: Wed 22 Jul 2026 00:00:16 +0000 ROA not before: Wed 22 Jul 2026 00:00:16 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9e:40:87:35:f8:06:75:8a:ee:3f:61:8b:d5:39:f7:16:80:ed:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:16 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=1bd5b75d69266e757dc079969801a0a0a7e69f39934479dae0cddaf31527b777, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:17:0c:f1:ed:bb:e8:88:66:56:d4:b7:f1: 21:60:52:9f:58:37:8b:14:50:34:05:ba:15:ac:8b: 93:5f:f0:e5:54:98:4b:af:d5:0a:4a:1f:03:2a:b4: fe:89:38:23:f0:d1:3e:e4:40:2a:bf:aa:36:d7:ac: 3f:c5:f2:b0:4d:fc:6f:7d:cc:2e:a4:7e:cf:2e:50: b2:0d:11:97:37:d1:38:f5:44:af:25:ae:f6:87:75: 0e:77:db:4a:f9:b5:5d:98:af:af:bd:f3:d2:24:b4: 71:d5:76:b3:da:e5:00:87:a9:ec:70:30:df:b1:c3: 3b:44:40:c8:99:06:d0:a1:f9:87:ce:83:2b:b9:95: 0a:65:d8:b8:17:b6:d6:0d:f6:83:0e:62:92:15:b6: 8e:7e:ec:87:7c:2b:45:97:f9:cc:f8:fe:d8:f9:b9: 28:e0:56:c6:d9:91:4e:94:d5:87:2f:f9:25:67:10: 5d:ac:4c:c7:55:1b:74:e4:0b:71:77:f0:24:a9:92: 66:d0:a5:12:73:5e:57:1d:4a:6a:1c:21:e2:42:6a: 6e:ef:13:64:46:c1:40:ff:32:4a:09:75:71:58:45: 9d:9b:bc:07:91:59:f6:77:d2:c0:c2:5a:a3:23:ca: 79:e7:92:33:92:14:dd:67:95:c2:d8:ff:ee:d5:ca: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4B:6F:6E:DA:6E:CC:60:36:08:7F:F1:3F:AF:B2:8D:FE:A0:F5:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23dbcf86-c5be-4d6b-9352-9636311b582a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.195.0/24 Signature Algorithm: sha256WithRSAEncryption b4:32:27:fc:cc:f5:7b:b4:74:f7:86:3c:12:10:2a:8e:6e:ef: 41:ef:e5:a8:16:b1:f1:3f:3b:65:52:32:d6:44:9e:75:56:03: 82:d3:d1:23:19:08:b0:30:90:54:1d:20:ec:1e:f4:ae:74:1f: 94:8b:97:53:63:c8:2c:1c:c2:f4:a9:70:53:f4:b6:af:e3:09: 96:75:06:da:cf:2c:9c:94:1e:2f:59:ad:12:72:82:39:bb:2d: 48:6a:6a:8d:b4:5e:cf:c9:28:0d:8f:74:63:47:3f:cd:73:38: 16:5a:85:ad:05:fb:fc:12:12:cf:e1:8d:f7:35:61:b1:79:02: a5:ce:fb:d0:b9:8e:4c:eb:43:64:46:1d:d4:c5:9e:dd:b1:51: 90:b4:97:e5:b3:5a:4a:7a:82:58:65:6f:e6:89:00:f0:e0:22: 6e:ca:07:5d:43:a6:86:19:71:aa:e9:7d:00:7c:8f:b2:7e:37: 7f:23:97:15:ec:7e:86:60:a2:48:7f:ec:e7:e9:fe:c5:86:b1: c6:ae:ad:7e:bf:42:fd:72:5f:1e:29:91:d3:5c:19:76:37:4b: fa:ab:df:ef:e5:d6:69:c5:76:15:8b:1a:87:f2:13:37:02:b1: 13:1a:c0:8a:93:98:ee:7c:e6:c3:9b:dd:d3:5b:26:9d:16:e6: d7:97:da:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPZ5AhzX4BnWK7j9hi9U59xaA7ckwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMDE2WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmQ1Yjc1ZDY5MjY2ZTc1N2RjMDc5OTY5ODAxYTBhMGE3 ZTY5ZjM5OTM0NDc5ZGFlMGNkZGFmMzE1MjdiNzc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVchcM8e276IhmVtS38SFgUp9YN4sUUDQFuhWsi5Nf8OVU mEuv1QpKHwMqtP6JOCPw0T7kQCq/qjbXrD/F8rBN/G99zC6kfs8uULINEZc30Tj1 RK8lrvaHdQ5320r5tV2Yr6+989IktHHVdrPa5QCHqexwMN+xwztEQMiZBtCh+YfO gyu5lQpl2LgXttYN9oMOYpIVto5+7Id8K0WX+cz4/tj5uSjgVsbZkU6U1Ycv+SVn EF2sTMdVG3TkC3F38CSpkmbQpRJzXlcdSmocIeJCam7vE2RGwUD/MkoJdXFYRZ2b vAeRWfZ30sDCWqMjynnnkjOSFN1nlcLY/+7VyvXXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuEtvbtpuzGA2CH/xP6+yjf6g9UcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzZGJjZjg2LWM1YmUtNGQ2Yi05MzUyLTk2MzYzMTFiNTgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7sMwDQYJKoZIhvcNAQELBQADggEBALQyJ/zM9Xu0dPeGPBIQKo5u70Hv 5agWsfE/O2VSMtZEnnVWA4LT0SMZCLAwkFQdIOwe9K50H5SLl1NjyCwcwvSpcFP0 tq/jCZZ1BtrPLJyUHi9ZrRJygjm7LUhqao20Xs/JKA2PdGNHP81zOBZaha0F+/wS Es/hjfc1YbF5AqXO+9C5jkzrQ2RGHdTFnt2xUZC0l+WzWkp6glhlb+aJAPDgIm7K B11DpoYZcarpfQB8j7J+N38jlxXsfoZgokh/7Ofp/sWGscaurX6/Qv1yXx4pkdNc GXY3S/qr3+/l1mnFdhWLGofyEzcCsRMawIqTmO585sOb3dNbJp0W5teX2oQ= -----END CERTIFICATE-----Generated at Thu Jul 23 21:31:53 2026 by rpki-client