$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9f415d0-f3d8-4c31-a753-ba82deddde2c.roa File: b9f415d0-f3d8-4c31-a753-ba82deddde2c.roa (raw, json) Hash identifier: WcwmST3m6vF06Jdj4pArNfJykuxnk/VXMIxysEKw/Rc= Subject key identifier: D6:E9:1D:0D:6E:11:79:5D:2B:CD:2A:21:D6:F0:4A:A8:2D:CC:41:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0291B15CFB8079A35AA174D96F57A05971BB428B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9f415d0-f3d8-4c31-a753-ba82deddde2c.roa Signing time: Wed 22 Jul 2026 00:00:59 +0000 ROA not before: Wed 22 Jul 2026 00:00:59 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:91:b1:5c:fb:80:79:a3:5a:a1:74:d9:6f:57:a0:59:71:bb:42:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:59 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=cc572460363c1d0cdffda892c2d38f8e9dbb58339d8bda6191fff5e3368e3f89, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:97:2e:bc:5c:79:85:d0:5f:c4:f6:26:13: 50:26:7f:49:b1:84:27:86:d2:6d:76:19:f4:9e:63: 90:92:af:fa:0c:43:2e:65:78:79:85:6a:d4:89:af: 22:5d:64:ab:38:c7:92:98:bc:dc:1d:bf:01:0f:12: e6:01:24:c8:48:26:c6:04:d3:9f:07:0a:71:7b:f7: f8:bb:8c:e6:34:ad:f0:61:87:24:b1:ce:67:c4:81: 21:7b:0c:fd:81:6c:e9:42:ee:96:9f:e6:f3:e1:42: 69:bd:1d:45:12:a9:78:10:07:3b:b9:84:c9:ee:d5: 5c:b9:7b:03:73:70:cf:be:a8:d0:09:e6:3b:f9:a1: fe:93:24:0d:dd:18:f7:f5:8e:ca:7d:a2:b9:1b:69: 01:65:64:05:78:b5:5e:53:00:f8:e8:f8:b0:33:d9: a3:50:c2:d1:08:22:ab:96:f8:09:a5:2c:fa:7f:a3: 28:78:3b:70:17:93:e2:9e:ea:c8:be:50:41:46:3d: 67:71:57:a4:07:d3:ad:ea:a5:ff:06:c0:e0:c9:67: fa:2e:e4:08:57:36:4c:44:03:fe:b2:84:2e:9e:a4: 26:21:48:4e:22:0f:9c:fa:cc:42:80:ca:99:31:b0: 73:fd:25:c5:20:3c:54:39:4b:b3:82:35:18:cc:6c: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:1D:0D:6E:11:79:5D:2B:CD:2A:21:D6:F0:4A:A8:2D:CC:41:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9f415d0-f3d8-4c31-a753-ba82deddde2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.144.0/24 Signature Algorithm: sha256WithRSAEncryption 76:5a:a3:db:d0:b7:3a:a6:9b:a2:7a:76:62:cb:6f:78:2a:53: 7e:12:1b:cf:f4:88:50:ba:aa:78:89:66:00:9a:c0:9f:9a:2f: 76:88:21:e6:19:2b:6d:74:6a:3b:62:10:1c:ca:96:4b:1b:ef: 90:6e:d5:49:dc:4d:9b:c9:ce:a5:9a:c6:25:0d:48:7a:b4:d9: 9e:92:90:e6:d1:a8:f3:22:d8:b5:94:28:ae:8d:48:91:0c:a4: 9d:08:ea:b2:3e:91:b4:b2:9f:b0:da:f4:12:d9:97:4f:3e:f4: 21:85:14:49:cd:b3:71:dc:26:38:e8:e5:21:cf:17:3a:47:6e: 84:c5:6d:aa:1e:e2:81:aa:e2:5a:d8:42:e6:46:4b:18:46:6f: de:f0:a2:df:08:eb:ff:3a:10:5d:37:5f:0f:4a:84:be:e7:6b: b8:3f:ed:b1:b4:96:b1:19:16:3a:db:8b:a6:90:4d:40:54:cc: 9b:e6:1f:ed:32:3c:a0:13:0c:10:8b:b5:c0:c1:98:82:66:5b: a6:1a:66:51:30:a2:7a:d1:43:bd:df:d0:f2:a6:0a:a4:70:09: b8:d4:4b:de:3d:c1:65:da:b1:13:d5:93:43:7b:f7:1f:f9:3d: cc:1d:9d:6d:59:1a:e4:ea:7c:4e:a1:0f:34:4a:be:fd:c3:cc: 93:80:eb:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUApGxXPuAeaNaoXTZb1egWXG7QoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMDU5WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzU3MjQ2MDM2M2MxZDBjZGZmZGE4OTJjMmQzOGY4ZTlk YmI1ODMzOWQ4YmRhNjE5MWZmZjVlMzM2OGUzZjg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnSZcuvFx5hdBfxPYmE1Amf0mxhCeG0m12GfSeY5CSr/oM Qy5leHmFatSJryJdZKs4x5KYvNwdvwEPEuYBJMhIJsYE058HCnF79/i7jOY0rfBh hySxzmfEgSF7DP2BbOlC7paf5vPhQmm9HUUSqXgQBzu5hMnu1Vy5ewNzcM++qNAJ 5jv5of6TJA3dGPf1jsp9orkbaQFlZAV4tV5TAPjo+LAz2aNQwtEIIquW+AmlLPp/ oyh4O3AXk+Ke6si+UEFGPWdxV6QH063qpf8GwODJZ/ou5AhXNkxEA/6yhC6epCYh SE4iD5z6zEKAypkxsHP9JcUgPFQ5S7OCNRjMbON9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1ukdDW4ReV0rzSoh1vBKqC3MQaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5ZjQxNWQwLWYzZDgtNGMzMS1hNzUzLWJhODJkZWRkZGUyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7pAwDQYJKoZIhvcNAQELBQADggEBAHZao9vQtzqmm6J6dmLLb3gqU34S G8/0iFC6qniJZgCawJ+aL3aIIeYZK210ajtiEBzKlksb75Bu1UncTZvJzqWaxiUN SHq02Z6SkObRqPMi2LWUKK6NSJEMpJ0I6rI+kbSyn7Da9BLZl08+9CGFFEnNs3Hc Jjjo5SHPFzpHboTFbaoe4oGq4lrYQuZGSxhGb97wot8I6/86EF03Xw9KhL7na7g/ 7bG0lrEZFjrbi6aQTUBUzJvmH+0yPKATDBCLtcDBmIJmW6YaZlEwonrRQ73f0PKm CqRwCbjUS949wWXasRPVk0N79x/5PcwdnW1ZGuTqfE6hDzRKvv3DzJOA6w8= -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:37 2026 by rpki-client