$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa File: 257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa (raw, json) Hash identifier: f+QYkPN1haSFZpfwl4fhi4LyCK+Usfibr0eUlg0ugKU= Subject key identifier: 5C:FD:F0:E6:91:FD:09:90:2C:BB:9A:84:AC:79:1D:6D:DA:43:69:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E3CC36D24891082AED0F2BE9ADFD9260E80A5F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa Signing time: Fri 24 Jul 2026 00:31:03 +0000 ROA not before: Fri 24 Jul 2026 00:31:03 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.211.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3c:c3:6d:24:89:10:82:ae:d0:f2:be:9a:df:d9:26:0e:80:a5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:31:03 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=158c09a76cfc5baeeeaac73d031db0345c15f26cfd45c5e9b670cfa5f1609028, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:6f:67:65:07:8f:82:91:e0:fa:67:cf:be: 09:33:98:4b:b6:dc:ac:4c:91:16:f5:0f:cc:f1:a9: 98:35:52:b9:08:82:36:31:df:d6:99:c8:b8:3a:e7: f7:97:a6:ef:b8:64:db:da:e3:de:2e:6c:d3:96:64: 1c:6d:eb:62:9b:88:bd:d2:6f:86:16:bf:68:9e:a3: cf:6d:48:99:9e:0a:e5:38:14:43:3b:06:ab:ce:46: 40:b2:d0:1a:ff:b6:94:ae:b4:74:b6:7a:80:42:0f: ca:3f:f9:59:51:b3:63:a2:6d:c5:a3:db:2c:1f:5f: bc:e3:68:ec:6d:aa:a6:76:a8:e9:9b:73:88:64:bf: c4:bd:6e:3d:51:02:40:e0:36:6a:60:c9:01:70:c9: 29:d4:97:10:b7:fe:32:82:07:1c:a1:14:39:ba:2f: 81:cf:b2:bb:8b:4e:83:cb:a9:82:22:ba:3d:85:3f: d3:11:6f:02:1e:87:77:14:75:d8:b2:49:bf:75:53: c8:c7:e8:49:ba:a7:c2:32:f5:6e:32:f6:c8:5d:b5: 5f:bf:7b:6f:20:d8:31:63:9e:f6:48:5c:1f:f7:ba: 2c:f9:8f:1f:05:4b:1d:78:8a:96:fb:3e:77:c7:d6: 4b:36:de:75:27:59:a2:f3:cc:19:df:62:49:9b:86: 43:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FD:F0:E6:91:FD:09:90:2C:BB:9A:84:AC:79:1D:6D:DA:43:69:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.211.64.0/19 Signature Algorithm: sha256WithRSAEncryption 56:5f:e0:22:6d:55:42:af:07:37:2b:72:ae:e2:70:0f:24:8e: 82:96:24:36:49:59:65:9c:84:42:d8:fd:d0:6b:2a:6a:78:8e: c7:50:07:89:bc:25:28:eb:9a:bf:90:a4:da:16:c2:82:88:73: 02:d4:8e:a7:7d:a2:73:b3:bd:19:a5:eb:5f:f7:49:5b:88:ce: e7:39:34:b6:ce:41:9a:34:2b:c9:23:fa:d8:06:1f:6b:53:b6: 65:da:82:1e:4c:77:56:12:4b:c5:fc:33:59:66:74:4e:54:8e: 4c:87:67:99:6e:22:81:cf:0c:7e:a2:fb:ac:fd:79:32:7b:38: 88:78:1d:58:17:dc:9f:67:a4:2a:5c:6c:02:3b:00:b8:16:7a: 38:78:33:1a:81:b5:e8:d6:bf:34:e2:41:29:a9:04:63:20:ab: ac:01:e0:c7:a0:f8:b1:0d:bf:fd:42:03:6b:f4:ac:38:81:32: 5b:ab:44:e1:56:47:df:ea:d3:97:cf:13:60:85:90:40:7d:d6: cd:91:7f:85:0e:08:9c:7f:7d:75:75:82:8f:ef:5e:32:78:eb: cd:ae:69:bb:26:55:46:8e:a2:99:0d:59:10:ea:25:da:bc:c7: 13:2e:36:a4:54:6b:3c:2e:4c:f7:d9:c4:ab:d0:ec:38:85:1f: c3:ac:1c:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHjzDbSSJEIKu0PK+mt/ZJg6ApfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAzMTAzWhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNThjMDlhNzZjZmM1YmFlZWVhYWM3M2QwMzFkYjAzNDVj MTVmMjZjZmQ0NWM1ZTliNjcwY2ZhNWYxNjA5MDI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY5G9nZQePgpHg+mfPvgkzmEu23KxMkRb1D8zxqZg1UrkI gjYx39aZyLg65/eXpu+4ZNva494ubNOWZBxt62KbiL3Sb4YWv2ieo89tSJmeCuU4 FEM7BqvORkCy0Br/tpSutHS2eoBCD8o/+VlRs2OibcWj2ywfX7zjaOxtqqZ2qOmb c4hkv8S9bj1RAkDgNmpgyQFwySnUlxC3/jKCBxyhFDm6L4HPsruLToPLqYIiuj2F P9MRbwIeh3cUddiySb91U8jH6Em6p8Iy9W4y9shdtV+/e28g2DFjnvZIXB/3uiz5 jx8FSx14ipb7PnfH1ks23nUnWaLzzBnfYkmbhkOXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXP3w5pH9CZAsu5qErHkdbdpDaUcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1N2MwZmU3LWFiZWMtNGMxYi04ZmZmLTk2NmEyMmRmZTFmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXG00AwDQYJKoZIhvcNAQELBQADggEBAFZf4CJtVUKvBzcrcq7icA8kjoKW JDZJWWWchELY/dBrKmp4jsdQB4m8JSjrmr+QpNoWwoKIcwLUjqd9onOzvRml61/3 SVuIzuc5NLbOQZo0K8kj+tgGH2tTtmXagh5Md1YSS8X8M1lmdE5UjkyHZ5luIoHP DH6i+6z9eTJ7OIh4HVgX3J9npCpcbAI7ALgWejh4MxqBtejWvzTiQSmpBGMgq6wB 4Meg+LENv/1CA2v0rDiBMlurROFWR9/q05fPE2CFkEB91s2Rf4UOCJx/fXV1go/v XjJ4682uabsmVUaOopkNWRDqJdq8xxMuNqRUazwuTPfZxKvQ7DiFH8OsHHM= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:17 2026 by rpki-client