$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa File: ba95c612-340c-484f-bd1b-02425457802a.roa (raw, json) Hash identifier: WEzTOS5fDm7+jod1KYVrqgAMi0W/JdULPjasLMl+MEw= Subject key identifier: 7B:96:94:81:0D:3A:5D:23:D3:6A:0D:DE:B8:D2:46:61:02:72:9B:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 347DF99F55450DB029F8CF16789BB3085EDE7A8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa Signing time: Thu 16 Jul 2026 00:11:24 +0000 ROA not before: Thu 16 Jul 2026 00:11:24 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7d:f9:9f:55:45:0d:b0:29:f8:cf:16:78:9b:b3:08:5e:de:7a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:11:24 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=bc881b4194eefe63144a0c4412098c3f5e0b81df7b985526544a6a6ab7ca9b31, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f1:e8:9a:b7:ba:d4:d0:6e:f6:71:cf:f4:10: f5:e5:10:ba:be:68:49:e6:fe:87:aa:bd:c4:bf:31: 97:b1:eb:aa:03:56:e1:16:26:8e:4b:be:ed:d6:73: 61:e9:15:51:84:e6:f6:11:d8:b7:ea:f4:ec:d3:14: a3:03:96:92:d0:17:7a:51:20:e3:f9:7e:a8:57:cc: de:ea:c1:91:fd:55:ef:a6:7e:1c:8f:94:86:ac:bb: 04:ea:20:00:65:31:c8:e2:52:85:07:2a:8d:c6:32: b3:01:72:66:75:bc:37:58:d4:46:48:87:83:b3:b7: a3:2d:e0:0d:2f:df:8b:99:bd:c8:21:43:11:b1:4a: eb:81:c8:19:0d:a1:db:b9:bc:9b:58:cf:7f:31:5b: 1a:17:8b:50:8f:2b:2c:dd:bd:6d:b6:44:6e:af:db: 12:8e:3d:3c:59:c4:63:79:fb:8c:80:8b:28:53:25: be:99:71:55:09:1d:e7:29:cf:a9:7c:b8:8f:de:39: f9:1b:1a:13:5d:a9:a6:51:6a:74:58:87:ab:9c:a7: 23:1d:95:88:1d:f0:21:4e:20:60:9b:0a:10:09:8a: 29:46:17:1a:20:e9:38:3f:d7:34:a8:f1:51:07:ec: 1d:d0:1c:73:12:9a:4b:ea:71:91:4c:98:8e:b2:4b: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:96:94:81:0D:3A:5D:23:D3:6A:0D:DE:B8:D2:46:61:02:72:9B:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 56:6f:9a:8c:de:04:9b:1d:76:a2:1b:09:9f:89:6e:bd:82:e2: d7:63:f7:af:5b:e1:53:7d:7e:1e:22:06:d9:a1:55:68:c4:c4: a8:60:6b:d3:46:78:0b:68:70:ec:ec:24:cd:3e:8b:a4:9c:53: 9b:19:df:2f:6c:8b:bd:77:89:77:e6:b3:04:1d:3e:ad:60:42: 64:e5:1f:20:f5:db:62:cd:c3:7f:50:07:3b:ca:ba:e3:47:6e: 70:ea:d4:eb:ca:91:cc:c2:ff:a0:ef:f9:5e:e1:a2:76:81:c2: 80:f9:ed:16:6f:7b:7b:80:d8:b6:68:ff:5b:45:ec:02:45:31: 87:09:d1:00:5a:20:dd:ac:31:f0:cb:44:cd:57:e3:0c:e7:1f: 83:91:35:74:62:2f:4d:45:95:76:f4:32:70:e8:1d:54:b3:dd: f4:9f:54:bf:82:b8:12:2b:13:b8:72:7f:b7:1c:85:0e:7e:3a: 75:fc:31:24:b4:f3:3a:dd:ba:10:34:28:cc:d0:17:0d:68:76: 63:91:14:7f:6d:09:b2:f1:d3:21:0d:0f:e4:89:15:c0:24:6f: 1a:0b:53:f1:41:1a:dc:da:9c:f5:a2:39:b6:83:4e:9d:29:f1: b7:d3:ab:9c:68:f9:a2:a8:1c:62:e6:cd:00:8f:6c:b4:47:76: 90:be:16:0c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNH35n1VFDbAp+M8WeJuzCF7eeoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE2MDAxMTI0WhcNMjYxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzg4MWI0MTk0ZWVmZTYzMTQ0YTBjNDQxMjA5OGMzZjVl MGI4MWRmN2I5ODU1MjY1NDRhNmE2YWI3Y2E5YjMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDr8eiat7rU0G72cc/0EPXlELq+aEnm/oeqvcS/MZex66oD VuEWJo5Lvu3Wc2HpFVGE5vYR2Lfq9OzTFKMDlpLQF3pRIOP5fqhXzN7qwZH9Ve+m fhyPlIasuwTqIABlMcjiUoUHKo3GMrMBcmZ1vDdY1EZIh4Ozt6Mt4A0v34uZvcgh QxGxSuuByBkNodu5vJtYz38xWxoXi1CPKyzdvW22RG6v2xKOPTxZxGN5+4yAiyhT Jb6ZcVUJHecpz6l8uI/eOfkbGhNdqaZRanRYh6ucpyMdlYgd8CFOIGCbChAJiilG Fxog6Tg/1zSo8VEH7B3QHHMSmkvqcZFMmI6ySxWLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUe5aUgQ06XSPTag3euNJGYQJym+QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhOTVjNjEyLTM0MGMtNDg0Zi1iZDFiLTAyNDI1NDU3ODAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNjyDANBgkqhkiG9w0BAQsFAAOCAQEAVm+ajN4Emx12ohsJn4luvYLi12P3 r1vhU31+HiIG2aFVaMTEqGBr00Z4C2hw7OwkzT6LpJxTmxnfL2yLvXeJd+azBB0+ rWBCZOUfIPXbYs3Df1AHO8q640ducOrU68qRzML/oO/5XuGidoHCgPntFm97e4DY tmj/W0XsAkUxhwnRAFog3awx8MtEzVfjDOcfg5E1dGIvTUWVdvQycOgdVLPd9J9U v4K4EisTuHJ/txyFDn46dfwxJLTzOt26EDQozNAXDWh2Y5EUf20JsvHTIQ0P5IkV wCRvGgtT8UEa3Nqc9aI5toNOnSnxt9OrnGj5oqgcYubNAI9stEd2kL4WDA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:54:17 2026 by rpki-client