$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa File: 732fe3d7-6476-4eae-a584-0a17e5012897.roa (raw, json) Hash identifier: poKTAFoGVOICYynP1phR/sI0iG6PIeWMc6ojsG2R02c= Subject key identifier: 1E:58:C3:EF:CB:D6:82:5E:92:E2:DB:05:58:89:16:C3:EA:C7:BE:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B736F7872AA2A39FCEE221D5D02ED61340EFD41 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa Signing time: Mon 20 Jul 2026 00:11:00 +0000 ROA not before: Mon 20 Jul 2026 00:11:00 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:73:6f:78:72:aa:2a:39:fc:ee:22:1d:5d:02:ed:61:34:0e:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:11:00 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=6974eeb0ad577a7a64ee69d38b739577e68d63b84621f6b62f1321d3a2ee3798, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e2:6f:09:0e:ea:94:9d:ad:0a:bf:bc:39:c0: 57:01:9e:7d:05:ec:5c:46:ab:04:15:31:90:6c:4a: b6:44:57:66:2a:01:2b:bc:75:78:05:6c:31:39:2a: 8b:f9:0d:68:8c:91:a8:be:64:63:26:3f:85:f7:65: 03:85:9a:e0:ee:ac:f8:dc:f7:4a:05:c4:29:d2:2b: 56:56:e3:be:30:4d:c9:20:8f:ff:a2:30:18:68:24: fa:f9:3e:78:e1:19:6f:6a:23:b4:0e:b7:b5:24:4a: 67:d7:c1:fa:0a:ba:4c:bd:27:77:15:ee:5f:e1:83: db:1f:7c:af:d0:29:bd:96:23:31:46:a6:8e:e8:78: f3:27:8c:d1:c0:28:bd:54:9e:0d:6d:4d:cd:13:be: e6:be:30:ec:7c:f4:41:e8:c7:83:cf:9c:44:d5:c6: 44:f3:53:66:57:e0:f2:e2:e4:be:bf:42:48:aa:4d: be:9f:d8:09:18:93:77:40:09:fb:8b:90:f5:e6:34: 3d:a7:e0:a7:e3:b4:90:1f:12:45:8a:59:8b:cc:f3: a5:22:92:b5:f6:67:d3:7a:a8:fa:20:af:d0:df:4f: 3d:d2:84:b7:07:af:e2:ff:53:40:a8:c8:49:89:67: 24:71:41:23:01:5b:2d:3f:de:74:1e:e5:12:3b:02: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:58:C3:EF:CB:D6:82:5E:92:E2:DB:05:58:89:16:C3:EA:C7:BE:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.96.0/22 Signature Algorithm: sha256WithRSAEncryption 15:80:6d:f2:1c:05:54:55:2e:e8:8c:5f:c3:1e:2c:3e:04:8e: 4e:ac:76:36:38:52:a1:91:5c:2f:13:23:55:37:04:8d:67:47: 89:a7:c6:9f:ee:50:78:c6:dc:4a:b7:18:48:43:be:08:84:91: a2:dd:ee:79:3f:4b:42:a2:7c:dc:27:a0:30:1f:e6:61:07:e8: 44:93:5a:d8:25:ce:b7:d0:42:12:f3:eb:b9:97:32:fa:14:4d: 6d:bf:1d:6e:d4:8e:f4:b9:f0:3d:ce:a3:75:5a:07:5b:0a:75: cd:1e:b9:1f:0a:99:7b:a9:9b:6e:b9:1f:04:64:e5:31:55:ea: 9f:77:fa:7b:ef:e5:a4:1a:a2:39:e1:92:4c:08:86:af:a3:0c: f6:eb:37:cd:ff:dc:4a:7c:48:27:4e:57:bd:9f:30:8e:71:34: 7b:ec:fc:ae:5c:fc:e1:3c:d2:30:2e:b0:0a:43:50:15:0e:87: b6:31:4b:cf:73:a4:71:1a:79:e9:5b:5b:5a:f9:be:25:c6:eb: d7:c4:30:a7:b1:41:55:44:f9:db:13:49:61:1b:26:e2:26:c2: 6e:69:e4:c6:f5:2e:29:f4:f3:d2:10:76:b7:ae:94:0f:b4:d3: 9f:46:66:9b:8a:48:fd:1a:8f:e2:e3:28:18:18:5d:0d:1e:35: c8:43:10:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW3NveHKqKjn87iIdXQLtYTQO/UEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAxMTAwWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTc0ZWViMGFkNTc3YTdhNjRlZTY5ZDM4YjczOTU3N2U2 OGQ2M2I4NDYyMWY2YjYyZjEzMjFkM2EyZWUzNzk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd4m8JDuqUna0Kv7w5wFcBnn0F7FxGqwQVMZBsSrZEV2Yq ASu8dXgFbDE5Kov5DWiMkai+ZGMmP4X3ZQOFmuDurPjc90oFxCnSK1ZW474wTckg j/+iMBhoJPr5PnjhGW9qI7QOt7UkSmfXwfoKuky9J3cV7l/hg9sffK/QKb2WIzFG po7oePMnjNHAKL1Ung1tTc0Tvua+MOx89EHox4PPnETVxkTzU2ZX4PLi5L6/Qkiq Tb6f2AkYk3dACfuLkPXmND2n4KfjtJAfEkWKWYvM86UikrX2Z9N6qPogr9DfTz3S hLcHr+L/U0CoyEmJZyRxQSMBWy0/3nQe5RI7AqCxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHljD78vWgl6S4tsFWIkWw+rHvl0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczMmZlM2Q3LTY0NzYtNGVhZS1hNTg0LTBhMTdlNTAxMjg5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAGAwDQYJKoZIhvcNAQELBQADggEBABWAbfIcBVRVLuiMX8MeLD4Ejk6s djY4UqGRXC8TI1U3BI1nR4mnxp/uUHjG3Eq3GEhDvgiEkaLd7nk/S0KifNwnoDAf 5mEH6ESTWtglzrfQQhLz67mXMvoUTW2/HW7UjvS58D3Oo3VaB1sKdc0euR8KmXup m265HwRk5TFV6p93+nvv5aQaojnhkkwIhq+jDPbrN83/3Ep8SCdOV72fMI5xNHvs /K5c/OE80jAusApDUBUOh7YxS89zpHEaeelbW1r5viXG69fEMKexQVVE+dsTSWEb JuImwm5p5Mb1Lin089IQdreulA+0059GZpuKSP0aj+LjKBgYXQ0eNchDEJo= -----END CERTIFICATE-----Generated at Thu Jul 23 21:28:46 2026 by rpki-client