$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa File: 408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa (raw, json) Hash identifier: S4MDMVHDynQXm00SBlrVXO1DFCfx7C8IVfYgJdXIdUw= Subject key identifier: 4D:C8:04:A8:49:1F:EB:0D:70:CB:1C:35:7C:94:EF:B6:C6:71:6C:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A5795E8FDF5E2535D37C284601BDD43DD91A405 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa Signing time: Thu 23 Jul 2026 00:30:16 +0000 ROA not before: Thu 23 Jul 2026 00:30:16 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.152.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:57:95:e8:fd:f5:e2:53:5d:37:c2:84:60:1b:dd:43:dd:91:a4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:30:16 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=78ae4972de35244d92b55b0ef9cc9d0fcc8f539bea28404ba85429112da22824, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d4:e5:63:37:fc:8c:0e:13:10:e8:3a:53:cf: 44:43:31:5e:e4:48:94:e6:52:87:43:fc:93:17:f1: e2:30:f5:6d:8b:1a:36:c1:ef:20:62:9b:0c:25:cc: 8c:42:d3:7b:18:ba:8b:df:47:11:e4:e5:cc:2a:fa: 96:7f:dc:2d:c3:78:58:13:cf:44:3e:f4:92:8e:93: f7:fa:50:7e:81:5c:06:70:f6:f9:39:50:42:0f:20: 50:59:bf:d9:6d:0c:9f:a9:c5:2c:5b:49:21:e8:d6: d3:63:07:98:16:99:4e:65:38:54:ec:27:89:03:06: 20:e8:8c:88:2f:bb:89:ec:7e:52:51:fa:9b:32:a6: 4f:ef:1a:70:ae:ad:73:be:96:ac:bf:fc:6f:6f:38: e8:3d:27:20:57:42:57:d3:29:79:86:40:f5:94:d3: db:ad:5d:0c:01:86:9c:39:fd:61:8a:6c:7a:5f:5a: 3f:0c:07:5a:50:2f:d1:95:e8:58:5a:54:b8:de:6f: 37:03:d7:fd:6f:18:4e:5b:81:bb:93:e1:38:57:8e: ea:cb:86:ee:84:4b:70:87:65:73:09:cc:e1:02:31: d5:09:1d:b5:11:5c:f1:0f:99:de:b3:17:b6:56:d6: cd:04:90:c6:69:49:4c:e7:5a:99:57:db:bd:7e:62: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C8:04:A8:49:1F:EB:0D:70:CB:1C:35:7C:94:EF:B6:C6:71:6C:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.152.0.0/20 Signature Algorithm: sha256WithRSAEncryption d0:66:2b:e8:5c:76:2e:9e:47:11:d7:d6:98:47:cf:09:40:55: 7e:dc:fb:4d:82:14:79:f0:53:92:1c:9c:d1:2e:bd:68:c0:93: ec:e3:44:e2:21:88:03:e1:ca:f1:db:ad:cf:62:0e:c5:fe:68: 14:03:90:cc:36:6c:8e:12:cc:2a:32:11:93:8f:2c:f4:c7:a6: 2f:a0:04:1d:2b:5e:e0:d7:8b:b9:20:72:16:84:b4:61:5f:ad: ed:82:2a:fa:84:91:ab:7a:85:ee:c8:f3:ed:ff:90:d3:cf:41: 35:f6:ea:03:67:fd:94:5a:c7:3f:52:36:3d:13:e5:1e:64:eb: 98:16:8b:1a:96:d1:20:a7:ef:37:1a:35:1f:70:75:e2:72:22: b2:3e:57:54:fa:f6:0d:93:af:6e:70:8b:38:c7:c3:0d:bd:b6: c4:ee:d5:fa:dc:f5:c7:70:7d:53:16:a5:9d:1d:6f:e5:bc:1d: c0:73:79:6e:74:59:09:e5:20:ae:d5:31:0d:31:18:3a:71:b0: 3a:73:e7:38:c9:12:c4:18:5f:52:a5:5c:63:2e:d7:9d:c9:b8: d2:03:8d:a8:9e:94:2b:4b:c8:9d:53:14:dd:53:bc:f2:04:53: bf:8b:14:8d:52:a0:c8:f6:4c:36:de:12:09:22:5d:b7:7e:8d: e2:05:6a:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGleV6P314lNdN8KEYBvdQ92RpAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAzMDE2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGFlNDk3MmRlMzUyNDRkOTJiNTViMGVmOWNjOWQwZmNj OGY1MzliZWEyODQwNGJhODU0MjkxMTJkYTIyODI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDz1OVjN/yMDhMQ6DpTz0RDMV7kSJTmUodD/JMX8eIw9W2L GjbB7yBimwwlzIxC03sYuovfRxHk5cwq+pZ/3C3DeFgTz0Q+9JKOk/f6UH6BXAZw 9vk5UEIPIFBZv9ltDJ+pxSxbSSHo1tNjB5gWmU5lOFTsJ4kDBiDojIgvu4nsflJR +psypk/vGnCurXO+lqy//G9vOOg9JyBXQlfTKXmGQPWU09utXQwBhpw5/WGKbHpf Wj8MB1pQL9GV6FhaVLjebzcD1/1vGE5bgbuT4ThXjurLhu6ES3CHZXMJzOECMdUJ HbURXPEPmd6zF7ZW1s0EkMZpSUznWplX271+Yi4zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTcgEqEkf6w1wyxw1fJTvtsZxbFUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwOGJmZGFhLWI5MWMtNGIwYi1iMmNjLWQxOTU4N2QxZmY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNmAAwDQYJKoZIhvcNAQELBQADggEBANBmK+hcdi6eRxHX1phHzwlAVX7c +02CFHnwU5IcnNEuvWjAk+zjROIhiAPhyvHbrc9iDsX+aBQDkMw2bI4SzCoyEZOP LPTHpi+gBB0rXuDXi7kgchaEtGFfre2CKvqEkat6he7I8+3/kNPPQTX26gNn/ZRa xz9SNj0T5R5k65gWixqW0SCn7zcaNR9wdeJyIrI+V1T69g2Tr25wizjHww29tsTu 1frc9cdwfVMWpZ0db+W8HcBzeW50WQnlIK7VMQ0xGDpxsDpz5zjJEsQYX1KlXGMu 153JuNIDjaielCtLyJ1TFN1TvPIEU7+LFI1SoMj2TDbeEgkiXbd+jeIFajM= -----END CERTIFICATE-----Generated at Thu Jul 23 21:24:46 2026 by rpki-client