$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa File: 284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa (raw, json) Hash identifier: xFdOpHzVKLSmLN1gTTuQU5wXyupaWidVAxud0Z/z/ag= Subject key identifier: DE:51:73:69:6C:86:C3:80:FA:DF:A6:87:D1:97:38:18:25:FA:D9:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C897E50D358AC22EA4E77B6546764DEBD563677 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa Signing time: Mon 20 Jul 2026 01:00:30 +0000 ROA not before: Mon 20 Jul 2026 01:00:30 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 67.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:89:7e:50:d3:58:ac:22:ea:4e:77:b6:54:67:64:de:bd:56:36:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 01:00:30 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=56b80d6f6e128608d803ea6534c2c0244aaeaafd56baaca019216817bfd0137a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:da:71:84:39:51:aa:e0:06:44:65:e6:c7:e3: 3a:30:0e:d7:87:87:22:f7:06:5c:ee:01:55:98:4c: 07:b9:0f:3e:46:20:92:f9:10:1a:8e:ba:dc:26:3b: 0c:93:fc:8e:c5:d2:6c:86:7d:a2:69:6b:2e:9c:be: ad:7d:76:87:3f:16:49:95:72:aa:df:4b:0a:54:bf: 3e:7a:ce:80:8b:ef:b2:95:de:b2:e9:97:3f:eb:67: ca:65:f9:02:97:35:84:3c:da:8a:12:24:e2:f8:6a: 8f:e4:60:d8:62:55:17:b4:47:d1:89:b7:41:c8:5f: fb:a5:4f:4b:ca:18:a6:ed:04:9c:6c:ed:c6:e3:a3: b6:d0:17:53:6b:7e:dc:01:32:77:97:75:58:7b:c7: 0a:d4:86:51:0f:9c:3e:79:c7:13:c5:6c:cd:90:df: e4:29:85:dc:0c:61:3e:ef:63:fc:82:41:ce:9f:c6: 04:9a:2c:0f:d0:52:20:5f:d9:1d:5c:cf:ea:cd:bb: 2d:1c:94:c0:e3:e7:92:f9:24:f3:c2:c2:90:d5:a8: b8:78:20:28:fc:bb:50:5a:98:6d:53:6c:f4:d4:9d: 6d:65:0c:d4:2c:8b:ec:e5:0c:28:14:15:f4:a0:81: fd:9a:5b:d1:3c:00:6d:4d:f8:70:b4:66:18:89:fa: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:51:73:69:6C:86:C3:80:FA:DF:A6:87:D1:97:38:18:25:FA:D9:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.220.224.0/19 Signature Algorithm: sha256WithRSAEncryption 62:de:36:c8:11:db:38:8a:cd:36:bb:58:9d:ca:8d:7c:b0:19: 3b:59:2a:68:7f:55:8b:26:1d:81:27:92:42:a6:43:39:36:af: 08:54:7d:5b:31:99:b3:51:eb:11:bc:0b:17:9a:6a:db:b5:54: 09:1e:24:58:26:85:09:6e:ec:00:53:f0:56:e0:04:dc:dc:6e: 99:8d:78:cf:e2:d2:2e:1e:77:55:bc:43:fd:2b:30:f7:11:d7: 58:87:4b:8f:0a:52:65:59:37:ca:79:7f:25:99:b2:a6:75:92: 8e:a1:2b:7b:f9:0f:db:7f:ab:a3:02:d1:9a:45:7d:ae:2f:50: 9c:70:ee:b2:d0:1b:42:8a:4e:3f:5c:22:be:21:7c:79:8c:0f: aa:6f:35:8b:dd:5e:f1:aa:22:a8:89:89:e3:9c:4a:4f:d5:dd: 74:a9:f9:de:2c:5c:ee:d0:0c:98:3d:36:5f:b9:84:7a:ea:47: 17:18:7f:9b:63:33:8c:15:44:b2:a6:7f:76:96:d4:54:f4:8f: f9:e2:b4:c0:ec:95:1f:87:0c:e7:8e:ab:ab:72:38:0b:ae:ab: 7f:a7:bc:af:19:51:18:07:af:64:5b:7c:0e:b4:7e:ea:fa:6d: b0:b1:42:e7:55:3a:03:32:84:cb:f4:2b:0d:8d:97:56:e5:1f: 82:c7:01:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHIl+UNNYrCLqTne2VGdk3r1WNncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDEwMDMwWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmI4MGQ2ZjZlMTI4NjA4ZDgwM2VhNjUzNGMyYzAyNDRh YWVhYWZkNTZiYWFjYTAxOTIxNjgxN2JmZDAxMzdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm2nGEOVGq4AZEZebH4zowDteHhyL3BlzuAVWYTAe5Dz5G IJL5EBqOutwmOwyT/I7F0myGfaJpay6cvq19doc/FkmVcqrfSwpUvz56zoCL77KV 3rLplz/rZ8pl+QKXNYQ82ooSJOL4ao/kYNhiVRe0R9GJt0HIX/ulT0vKGKbtBJxs 7cbjo7bQF1NrftwBMneXdVh7xwrUhlEPnD55xxPFbM2Q3+QphdwMYT7vY/yCQc6f xgSaLA/QUiBf2R1cz+rNuy0clMDj55L5JPPCwpDVqLh4ICj8u1BamG1TbPTUnW1l DNQsi+zlDCgUFfSggf2aW9E8AG1N+HC0ZhiJ+uklAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3lFzaWyGw4D636aH0Zc4GCX62dIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4NGM5YTFiLTdlNGItNDMzZi1iMWYxLWY0Y2ViZmI2N2RjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVD3OAwDQYJKoZIhvcNAQELBQADggEBAGLeNsgR2ziKzTa7WJ3KjXywGTtZ Kmh/VYsmHYEnkkKmQzk2rwhUfVsxmbNR6xG8Cxeaatu1VAkeJFgmhQlu7ABT8Fbg BNzcbpmNeM/i0i4ed1W8Q/0rMPcR11iHS48KUmVZN8p5fyWZsqZ1ko6hK3v5D9t/ q6MC0ZpFfa4vUJxw7rLQG0KKTj9cIr4hfHmMD6pvNYvdXvGqIqiJieOcSk/V3XSp +d4sXO7QDJg9Nl+5hHrqRxcYf5tjM4wVRLKmf3aW1FT0j/nitMDslR+HDOeOq6ty OAuuq3+nvK8ZURgHr2RbfA60fur6bbCxQudVOgMyhMv0Kw2Nl1blH4LHAcU= -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:30 2026 by rpki-client