$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e182208-33f2-4cdc-804c-df7ed11518f5.roa File: 2e182208-33f2-4cdc-804c-df7ed11518f5.roa (raw, json) Hash identifier: mT/uEp9GlU71c3X5xzo/IjvvZ+xWHKpB9n/8KdINmkg= Subject key identifier: A3:0D:B0:54:7F:83:50:FD:4D:95:0E:AD:06:E4:7F:99:41:AE:39:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DC2380025B0872B4FB6847EBB583CECB6804DFE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e182208-33f2-4cdc-804c-df7ed11518f5.roa Signing time: Thu 23 Jul 2026 00:31:47 +0000 ROA not before: Thu 23 Jul 2026 00:31:47 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.83.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c2:38:00:25:b0:87:2b:4f:b6:84:7e:bb:58:3c:ec:b6:80:4d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:31:47 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=d63ec59d347ef06c50a78700a791a9160a65c1621c7c4f19fd111d319816432e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:b4:9f:3b:1a:24:6c:0e:e1:b9:d2:8a:9e: c9:72:12:18:1a:cc:c8:27:83:7f:f6:b0:78:9c:7c: be:ef:b3:e9:28:c7:5b:a8:5c:f9:b6:89:4b:b3:8a: 4c:8e:a1:4f:e9:dd:5d:7b:3c:2b:c7:c5:42:82:49: 7b:d7:39:49:ee:8d:47:b5:2a:48:ae:19:08:a9:ab: 3c:40:6e:e1:e8:8b:f3:a6:ea:e7:6c:19:28:33:d5: 8a:6f:4f:72:ea:b2:8f:52:61:df:ee:34:da:63:1b: 9b:7e:19:7c:af:6a:26:71:d5:96:3c:c0:5f:50:74: 79:17:cd:ef:f3:46:09:32:2b:5b:29:e4:f2:97:6a: 42:b8:13:44:78:27:8f:39:3c:4b:e8:c0:44:4e:11: b7:62:ee:0b:09:51:99:e5:a4:e7:54:5f:fa:aa:b8: 19:43:9d:c3:4f:e1:bb:14:43:9b:6d:c0:82:5d:e2: 61:2e:47:b9:4e:18:77:20:14:7d:10:5e:77:33:0b: ab:07:9f:38:4d:b4:cb:15:3d:21:83:84:e6:79:c1: 97:d9:40:51:4f:d9:ad:7d:fd:b5:df:9b:c2:a6:63: 12:fb:7c:c4:03:31:fd:87:dd:ff:14:dd:b8:48:f2: 21:3a:b3:b5:8d:51:11:77:89:b3:65:98:a4:6a:14: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0D:B0:54:7F:83:50:FD:4D:95:0E:AD:06:E4:7F:99:41:AE:39:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e182208-33f2-4cdc-804c-df7ed11518f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.224.0/20 Signature Algorithm: sha256WithRSAEncryption c0:5d:a9:59:ed:74:fa:07:c8:4a:e2:09:bb:00:ab:fd:42:aa: 7d:b6:4c:ef:b6:c4:b1:23:a2:a1:0b:ae:5b:a4:f7:a3:5a:01: f5:36:89:f1:69:7c:d4:b3:7f:7a:31:2e:1a:98:41:29:32:79: 35:5e:64:44:0c:1e:a3:27:d4:c2:13:a2:95:21:5c:8b:c2:f2: dc:e3:d8:39:3c:f0:90:a7:89:e9:d2:7a:f5:58:82:7c:ba:ae: 49:39:97:39:52:89:d4:8c:91:b8:e4:36:e6:05:b3:3a:80:df: 04:cf:5e:b7:38:8b:ea:c5:c4:b7:7f:b9:8b:86:88:d6:77:93: 70:84:b9:e0:f7:da:28:7b:bd:fa:b3:a3:01:36:b9:5b:dd:a0: b7:ff:5c:46:72:fd:4a:33:b4:32:f8:69:be:fb:17:19:41:4e: bf:f5:04:67:95:16:83:4e:cd:56:8a:8f:11:5c:11:f6:32:84: 14:49:22:52:7c:5c:2b:a1:a9:f2:76:0d:01:33:76:21:a0:bd: 10:83:b1:cd:42:cf:a3:6d:61:a9:8e:dc:59:64:88:6e:8e:6e: 17:f5:c9:91:7c:0e:8c:e1:11:2d:8a:90:a3:e7:74:ad:fe:1a: ff:ed:09:fc:d6:db:ff:6f:5e:f1:c3:6e:a7:11:ef:61:11:de: 30:15:bf:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDcI4ACWwhytPtoR+u1g87LaATf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAzMTQ3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjNlYzU5ZDM0N2VmMDZjNTBhNzg3MDBhNzkxYTkxNjBh NjVjMTYyMWM3YzRmMTlmZDExMWQzMTk4MTY0MzJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4BrSfOxokbA7hudKKnslyEhgazMgng3/2sHicfL7vs+ko x1uoXPm2iUuzikyOoU/p3V17PCvHxUKCSXvXOUnujUe1KkiuGQipqzxAbuHoi/Om 6udsGSgz1YpvT3Lqso9SYd/uNNpjG5t+GXyvaiZx1ZY8wF9QdHkXze/zRgkyK1sp 5PKXakK4E0R4J485PEvowEROEbdi7gsJUZnlpOdUX/qquBlDncNP4bsUQ5ttwIJd 4mEuR7lOGHcgFH0QXnczC6sHnzhNtMsVPSGDhOZ5wZfZQFFP2a19/bXfm8KmYxL7 fMQDMf2H3f8U3bhI8iE6s7WNURF3ibNlmKRqFCljAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUow2wVH+DUP1NlQ6tBuR/mUGuOY4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlMTgyMjA4LTMzZjItNGNkYy04MDRjLWRmN2VkMTE1MThmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARjU+AwDQYJKoZIhvcNAQELBQADggEBAMBdqVntdPoHyEriCbsAq/1Cqn22 TO+2xLEjoqELrluk96NaAfU2ifFpfNSzf3oxLhqYQSkyeTVeZEQMHqMn1MITopUh XIvC8tzj2Dk88JCnienSevVYgny6rkk5lzlSidSMkbjkNuYFszqA3wTPXrc4i+rF xLd/uYuGiNZ3k3CEueD32ih7vfqzowE2uVvdoLf/XEZy/UoztDL4ab77FxlBTr/1 BGeVFoNOzVaKjxFcEfYyhBRJIlJ8XCuhqfJ2DQEzdiGgvRCDsc1Cz6NtYamO3Flk iG6Obhf1yZF8DozhES2KkKPndK3+Gv/tCfzW2/9vXvHDbqcR72ER3jAVvz0= -----END CERTIFICATE-----Generated at Fri Jul 24 12:34:50 2026 by rpki-client