$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd617e9-3fcb-4f4b-be35-0fed78c3750a.roa File: 5bd617e9-3fcb-4f4b-be35-0fed78c3750a.roa (raw, json) Hash identifier: UOdjUb7uhjtH8BvyR6JOMHlwQoNcxC0CPvX447roE88= Subject key identifier: 37:9D:3D:00:18:8B:79:BD:4E:BD:2E:67:21:1F:34:FF:E6:9F:03:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70D017A6B944F5E1790BB2F122A89F066C810AA8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd617e9-3fcb-4f4b-be35-0fed78c3750a.roa Signing time: Thu 16 Jul 2026 00:11:20 +0000 ROA not before: Thu 16 Jul 2026 00:11:20 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.25.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d0:17:a6:b9:44:f5:e1:79:0b:b2:f1:22:a8:9f:06:6c:81:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:11:20 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=835a11e85aaa1a3422987257e2972c8828c059dc7263cb740d6389555d265926, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:df:e7:2f:b9:ec:06:4f:c7:22:09:89:ec: ac:06:b7:37:13:06:7e:a9:10:b5:7e:e1:25:34:43: 25:14:b9:48:0e:1c:a8:d2:bb:ac:24:d3:15:ff:d3: 2f:39:5b:16:95:5f:3e:b9:68:32:4b:89:b8:84:b5: bb:98:76:7d:f7:87:53:66:2f:9b:ab:a2:f9:6b:ac: 39:a2:c5:45:82:bb:b7:e7:ae:4e:e5:d6:04:aa:57: 22:11:f9:87:96:21:b8:62:13:97:a3:7e:c9:a8:8e: 78:be:a4:f6:32:ee:29:ed:af:ad:f5:2a:36:3d:44: 85:55:b2:a2:d3:cc:86:2f:61:07:42:8d:54:29:b2: 98:43:0b:a2:ba:5e:35:7e:2c:ec:d3:45:30:ad:86: 2f:80:a5:d6:14:62:bc:ae:9d:54:b6:a8:11:6e:86: 81:3c:95:8d:4d:da:15:bd:13:1a:15:c0:be:28:d7: 31:0d:ad:6b:96:06:e9:b3:12:44:cb:98:8a:93:23: 68:fd:07:08:5f:be:d5:e5:7a:ed:7a:a6:7d:d2:49: 71:d2:45:4b:00:97:89:6d:6c:c5:e5:a7:42:69:d1: 9e:58:6c:dd:40:76:11:20:49:da:85:7b:1b:61:d8: 4b:24:a9:df:df:0b:8f:32:48:64:d7:81:58:91:2d: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9D:3D:00:18:8B:79:BD:4E:BD:2E:67:21:1F:34:FF:E6:9F:03:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd617e9-3fcb-4f4b-be35-0fed78c3750a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.25.128.0/17 Signature Algorithm: sha256WithRSAEncryption 63:f2:63:57:fe:05:f7:a9:7e:80:04:c0:31:18:74:1d:d6:6f: 88:fe:fc:b5:17:34:1f:81:6b:59:6c:18:25:2a:eb:34:a2:79: ba:95:1d:4f:35:ed:e6:5d:1e:1a:e0:d7:5c:c3:7e:55:3d:8a: 7c:93:40:3d:1e:34:a6:c0:c5:b0:c7:2e:c1:8a:e5:12:eb:79: 73:ac:1f:cc:d4:1c:6b:7a:0f:9b:ec:a5:ea:0c:f1:cf:10:43: 2d:5f:a1:e6:cc:63:38:09:16:da:74:ab:01:7e:19:be:69:89: 97:0c:13:c9:f1:40:37:b2:7a:e1:1a:f3:22:82:22:35:0c:81: 24:63:ae:d4:88:89:9c:9d:83:7e:c6:d5:9f:5e:7f:19:59:d8: 20:64:02:7a:9b:db:b4:a3:f3:7a:da:86:8d:f3:63:5a:d0:33: 8c:5a:e9:c5:50:c7:f3:22:c0:e2:9a:1f:37:d8:e9:1c:d5:e2: 98:bb:1f:fe:ca:c0:62:68:cf:31:f9:be:41:f8:bd:8b:17:ac: 06:e2:ca:4c:80:12:e8:29:b9:d1:ca:4a:d3:26:85:62:bb:21: b2:27:85:f0:fa:fd:4a:e3:75:54:09:fb:28:91:d8:6a:c2:4c: a1:97:ff:56:73:73:64:fe:2c:5e:7f:25:6a:fd:79:e8:80:c7: 98:af:39:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcNAXprlE9eF5C7LxIqifBmyBCqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE2MDAxMTIwWhcNMjYxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzVhMTFlODVhYWExYTM0MjI5ODcyNTdlMjk3MmM4ODI4 YzA1OWRjNzI2M2NiNzQwZDYzODk1NTVkMjY1OTI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd49/nL7nsBk/HIgmJ7KwGtzcTBn6pELV+4SU0QyUUuUgO HKjSu6wk0xX/0y85WxaVXz65aDJLibiEtbuYdn33h1NmL5urovlrrDmixUWCu7fn rk7l1gSqVyIR+YeWIbhiE5ejfsmojni+pPYy7intr631KjY9RIVVsqLTzIYvYQdC jVQpsphDC6K6XjV+LOzTRTCthi+ApdYUYryunVS2qBFuhoE8lY1N2hW9ExoVwL4o 1zENrWuWBumzEkTLmIqTI2j9BwhfvtXleu16pn3SSXHSRUsAl4ltbMXlp0Jp0Z5Y bN1AdhEgSdqFexth2Eskqd/fC48ySGTXgViRLZrZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN509ABiLeb1OvS5nIR80/+afAy0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViZDYxN2U5LTNmY2ItNGY0Yi1iZTM1LTBmZWQ3OGMzNzUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQGYAwDQYJKoZIhvcNAQELBQADggEBAGPyY1f+BfepfoAEwDEYdB3Wb4j+ /LUXNB+Ba1lsGCUq6zSiebqVHU817eZdHhrg11zDflU9inyTQD0eNKbAxbDHLsGK 5RLreXOsH8zUHGt6D5vspeoM8c8QQy1foebMYzgJFtp0qwF+Gb5piZcME8nxQDey euEa8yKCIjUMgSRjrtSIiZydg37G1Z9efxlZ2CBkAnqb27Sj83raho3zY1rQM4xa 6cVQx/MiwOKaHzfY6RzV4pi7H/7KwGJozzH5vkH4vYsXrAbiykyAEugpudHKStMm hWK7IbInhfD6/UrjdVQJ+yiR2GrCTKGX/1Zzc2T+LF5/JWr9eeiAx5ivOTA= -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:15 2026 by rpki-client