$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb1cde6a-4a57-48c8-b523-22b927b3c254.roa File: cb1cde6a-4a57-48c8-b523-22b927b3c254.roa (raw, json) Hash identifier: 113bt1IGdkFIuUYT33d5uo0SUYumSFEycoZ3DgYsOts= Subject key identifier: 20:21:97:F4:1D:73:42:27:83:3B:E6:62:23:DD:C8:56:44:48:E8:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47C694C74B3788BE24DF7DD0A85D4983D384D134 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb1cde6a-4a57-48c8-b523-22b927b3c254.roa Signing time: Wed 22 Jul 2026 00:10:44 +0000 ROA not before: Wed 22 Jul 2026 00:10:44 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c6:94:c7:4b:37:88:be:24:df:7d:d0:a8:5d:49:83:d3:84:d1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:10:44 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=f6ed1ffb32f6f1830dcbede98dc0c5e43055a1b7c7e839874c1a71cb283e4316, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:0d:08:01:da:c4:5a:58:ec:54:01:92:e0: ae:bb:55:8e:84:3c:f6:fc:8e:87:a8:01:09:71:7f: 6b:73:8c:10:b6:44:56:95:dd:56:1a:38:62:99:8a: db:31:52:d2:1b:35:6e:3f:d5:92:b0:6e:a1:a1:6b: 0a:88:17:46:f1:ff:18:81:28:fd:8a:ae:b8:1f:8c: 1a:2f:bd:4b:00:4a:04:8d:25:be:cd:50:bc:1f:07: 3a:01:2f:0b:99:b3:0a:9a:81:55:e6:ad:0d:9e:50: fe:b1:84:23:7b:df:bc:73:e4:a9:16:bd:f6:31:cf: e6:23:44:02:33:a6:af:76:6d:ff:b1:19:f2:5a:cc: 58:98:c2:bf:43:d1:c3:a7:c3:30:fa:41:ea:fd:cd: 83:7d:4e:d2:2a:ee:b3:da:c2:76:50:e8:6f:49:05: b2:e6:0e:40:0a:7b:7d:76:9c:f8:31:96:89:c4:26: 3d:a8:a8:9e:00:d1:8b:05:bf:7d:44:4d:59:c0:88: 2c:e1:a3:f7:ad:a8:98:22:a5:6e:dc:ac:cd:51:37: eb:01:7d:1d:05:78:7a:25:4e:1e:b6:0f:2b:a9:98: cd:88:b9:ba:08:1a:2b:5c:22:97:28:21:8d:5b:27: d8:57:d8:83:1b:ad:46:bb:e5:f3:23:92:e0:8c:8e: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:21:97:F4:1D:73:42:27:83:3B:E6:62:23:DD:C8:56:44:48:E8:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb1cde6a-4a57-48c8-b523-22b927b3c254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.163.0/24 Signature Algorithm: sha256WithRSAEncryption 32:eb:91:33:c1:7c:34:0e:3e:36:8f:02:df:06:9d:3e:13:af: af:dd:c1:b8:ef:89:a2:cf:c2:5c:de:cf:d4:e6:96:06:d0:19: f0:f5:81:69:89:f7:31:18:81:25:04:b1:2e:78:14:0d:7d:10: 0b:23:08:49:15:e6:96:ac:98:fd:0a:a9:16:8a:5a:74:d3:7e: e3:2d:2a:03:8f:41:c8:d9:91:50:65:cf:58:5c:72:7c:57:51: 0a:6d:fe:d8:72:33:cc:6f:de:82:a6:bd:fa:38:22:3e:4e:fb: 5a:6d:b9:8c:28:f4:b0:b7:43:17:91:1f:ac:61:c5:1c:ca:b9: 55:f2:73:c0:10:e5:20:9c:9f:b1:bf:75:83:b5:09:e1:7c:a3: 36:c5:c1:1d:f5:a3:44:59:57:5e:fe:dd:f0:f3:6e:7b:54:cf: 00:ca:69:24:97:d8:85:fe:0f:76:7f:28:96:35:4f:5c:1f:69: 6a:39:31:6e:72:87:a3:55:6a:66:fc:30:75:56:6f:04:e5:e2: 55:da:bd:b2:f0:4c:4a:1c:14:a0:bf:eb:5f:fc:6e:7e:2e:74: e7:eb:22:4b:47:fb:3a:cc:d7:e8:df:38:ee:33:17:0b:4f:94: 21:a7:c2:c1:4d:1e:fe:a1:9c:22:7a:f9:74:c7:bf:4b:08:d0: fe:ab:c9:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR8aUx0s3iL4k333QqF1Jg9OE0TQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAxMDQ0WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmVkMWZmYjMyZjZmMTgzMGRjYmVkZTk4ZGMwYzVlNDMw NTVhMWI3YzdlODM5ODc0YzFhNzFjYjI4M2U0MzE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq/A0IAdrEWljsVAGS4K67VY6EPPb8joeoAQlxf2tzjBC2 RFaV3VYaOGKZitsxUtIbNW4/1ZKwbqGhawqIF0bx/xiBKP2KrrgfjBovvUsASgSN Jb7NULwfBzoBLwuZswqagVXmrQ2eUP6xhCN737xz5KkWvfYxz+YjRAIzpq92bf+x GfJazFiYwr9D0cOnwzD6Qer9zYN9TtIq7rPawnZQ6G9JBbLmDkAKe312nPgxlonE Jj2oqJ4A0YsFv31ETVnAiCzho/etqJgipW7crM1RN+sBfR0FeHolTh62DyupmM2I uboIGitcIpcoIY1bJ9hX2IMbrUa75fMjkuCMjuntAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUICGX9B1zQieDO+ZiI93IVkRI6DkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiMWNkZTZhLTRhNTctNDhjOC1iNTIzLTIyYjkyN2IzYzI1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7qMwDQYJKoZIhvcNAQELBQADggEBADLrkTPBfDQOPjaPAt8GnT4Tr6/d wbjviaLPwlzez9TmlgbQGfD1gWmJ9zEYgSUEsS54FA19EAsjCEkV5pasmP0KqRaK WnTTfuMtKgOPQcjZkVBlz1hccnxXUQpt/thyM8xv3oKmvfo4Ij5O+1ptuYwo9LC3 QxeRH6xhxRzKuVXyc8AQ5SCcn7G/dYO1CeF8ozbFwR31o0RZV17+3fDzbntUzwDK aSSX2IX+D3Z/KJY1T1wfaWo5MW5yh6NVamb8MHVWbwTl4lXavbLwTEocFKC/61/8 bn4udOfrIktH+zrM1+jfOO4zFwtPlCGnwsFNHv6hnCJ6+XTHv0sI0P6ryZY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:27:12 2026 by rpki-client