$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581aa7e-3662-4d82-8138-62b3ca3230ac.roa File: 4581aa7e-3662-4d82-8138-62b3ca3230ac.roa (raw, json) Hash identifier: XoUTBauxKIl8IDqFWcWC7GSZV4LMpzchK35gnKJIxUw= Subject key identifier: 94:FE:99:E5:F7:BE:23:97:CB:E1:4C:93:11:C8:DC:E2:36:2F:CD:08 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D927A105CAC39BEF6C494463684867316F1ECA9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581aa7e-3662-4d82-8138-62b3ca3230ac.roa Signing time: Thu 23 Jul 2026 00:20:46 +0000 ROA not before: Thu 23 Jul 2026 00:20:46 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:92:7a:10:5c:ac:39:be:f6:c4:94:46:36:84:86:73:16:f1:ec:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:20:46 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=a094b7c33c45cf1521088955d99e019281ae2bd8bc2b949689ee15f3d62f95a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:b5:34:5b:9b:03:ba:4b:53:17:4a:89:51: b9:61:6a:cd:d5:bd:2a:8e:ae:9e:70:c2:93:62:7c: 68:87:82:6a:5a:b4:66:ec:73:c1:ae:e5:20:2c:70: 01:fa:4f:6e:74:64:76:b9:9f:66:77:94:b3:0a:d0: ac:b3:ef:79:91:d4:11:73:ba:c6:59:83:1e:a4:cf: 64:ef:40:be:f2:a6:1c:06:f1:41:f7:aa:ad:b5:ab: 6e:27:07:a5:16:8a:ec:80:33:86:2d:7e:d2:77:96: 4d:42:9f:ed:ab:b4:97:27:52:c4:f2:94:1e:c2:6c: 04:2d:1b:15:9a:a2:49:af:fb:c4:74:48:b1:46:3e: f0:7e:be:70:07:d7:d5:df:79:5e:be:3e:64:ab:03: 45:f9:7a:a5:f7:e3:99:69:2a:b8:32:f7:a6:95:4b: 30:fe:2f:aa:55:00:5c:c3:d9:f0:2e:12:b1:02:c5: dc:de:1c:0b:f7:3a:58:23:5b:64:c1:23:42:1b:f7: 1e:a5:ac:af:d2:d7:89:2a:11:48:e4:7b:f6:ea:43: 3b:ff:19:d9:87:df:c5:7e:dd:ca:77:13:3b:6d:6e: 4e:15:8e:d3:29:11:8f:33:c1:88:71:12:e9:64:9e: 0a:22:a3:8d:9b:30:b1:b4:d8:3f:1b:ae:60:da:14: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:99:E5:F7:BE:23:97:CB:E1:4C:93:11:C8:DC:E2:36:2F:CD:08 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581aa7e-3662-4d82-8138-62b3ca3230ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.252.0/24 Signature Algorithm: sha256WithRSAEncryption 88:50:7b:25:7e:49:9d:d2:93:6b:fb:34:47:af:19:72:69:b2: 55:7c:5a:ff:79:ca:58:8c:f0:99:f9:0b:83:b1:5e:41:c4:d7: 05:a8:78:40:af:d5:65:9c:38:a5:35:16:dd:1f:7a:cf:57:3c: 61:d9:5d:0a:85:63:cd:c8:38:2a:a0:d0:3a:13:d7:91:a5:ba: 82:df:54:c3:e4:c6:f5:a6:57:db:6f:db:eb:44:a7:9c:cb:9c: c9:b7:0e:58:88:fc:b3:b6:09:52:d3:8a:c7:01:b8:f7:fb:72: 68:3e:59:e2:d0:d2:1e:70:32:83:ea:41:4c:6e:ea:5c:16:32: c3:52:87:1e:f2:f3:e7:b7:a4:db:b9:ef:2b:a5:d8:18:e7:26: f3:8b:3a:bd:bf:fa:6c:aa:ef:10:d2:4e:b5:36:f7:ea:1e:7c: 69:6e:ef:d1:fc:52:a2:76:0d:09:cb:9f:00:76:1a:85:75:17: 51:68:5b:6d:3d:de:b0:9d:30:82:6e:80:c8:f4:5f:a0:07:81: 34:bd:c4:1b:52:56:6f:b7:76:e8:56:02:9a:33:62:d6:47:4f: 3f:bb:9f:b4:c2:34:a7:34:b8:98:ac:8f:f3:55:86:f7:33:0c: 03:14:7b:d9:3c:7c:46:15:cf:26:0f:6d:70:34:b1:e1:e3:96: 8c:bc:8c:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDZJ6EFysOb72xJRGNoSGcxbx7KkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAyMDQ2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDk0YjdjMzNjNDVjZjE1MjEwODg5NTVkOTllMDE5Mjgx YWUyYmQ4YmMyYjk0OTY4OWVlMTVmM2Q2MmY5NWE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9LrU0W5sDuktTF0qJUblhas3VvSqOrp5wwpNifGiHgmpa tGbsc8Gu5SAscAH6T250ZHa5n2Z3lLMK0Kyz73mR1BFzusZZgx6kz2TvQL7yphwG 8UH3qq21q24nB6UWiuyAM4YtftJ3lk1Cn+2rtJcnUsTylB7CbAQtGxWaokmv+8R0 SLFGPvB+vnAH19XfeV6+PmSrA0X5eqX345lpKrgy96aVSzD+L6pVAFzD2fAuErEC xdzeHAv3OlgjW2TBI0Ib9x6lrK/S14kqEUjke/bqQzv/GdmH38V+3cp3Ezttbk4V jtMpEY8zwYhxEulkngoio42bMLG02D8brmDaFD0hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlP6Z5fe+I5fL4UyTEcjc4jYvzQgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1ODFhYTdlLTM2NjItNGQ4Mi04MTM4LTYyYjNjYTMyMzBhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3PwwDQYJKoZIhvcNAQELBQADggEBAIhQeyV+SZ3Sk2v7NEevGXJpslV8 Wv95yliM8Jn5C4OxXkHE1wWoeECv1WWcOKU1Ft0fes9XPGHZXQqFY83IOCqg0DoT 15GluoLfVMPkxvWmV9tv2+tEp5zLnMm3DliI/LO2CVLTiscBuPf7cmg+WeLQ0h5w MoPqQUxu6lwWMsNShx7y8+e3pNu57yul2BjnJvOLOr2/+myq7xDSTrU29+oefGlu 79H8UqJ2DQnLnwB2GoV1F1FoW2093rCdMIJugMj0X6AHgTS9xBtSVm+3duhWApoz YtZHTz+7n7TCNKc0uJisj/NVhvczDAMUe9k8fEYVzyYPbXA0seHjloy8jPo= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:28 2026 by rpki-client