$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0a48b3-df0d-40fd-8359-6734b3864352.roa File: cd0a48b3-df0d-40fd-8359-6734b3864352.roa (raw, json) Hash identifier: aT1cgiIEeQGPLNSL9b2+wnz8A1Gq46yTuGuUA3CvpPY= Subject key identifier: 6E:91:49:7D:CF:36:DA:48:A4:44:A0:1E:C3:AF:1B:D9:EF:4E:AC:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4295B4B15BA2BAC5AB9A10B54D7515434C2151 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0a48b3-df0d-40fd-8359-6734b3864352.roa Signing time: Wed 22 Jul 2026 00:00:58 +0000 ROA not before: Wed 22 Jul 2026 00:00:58 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:95:b4:b1:5b:a2:ba:c5:ab:9a:10:b5:4d:75:15:43:4c:21:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:58 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=7a60434e8462b5d96a7fbde6c668fa84e1dfa91014a97898201b5c5b96878575, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:4b:71:e8:0e:04:5d:37:ed:e5:b8:ba:02: d8:0f:84:2e:66:47:85:d1:99:4c:5f:9e:f1:14:0a: fc:9f:24:65:04:b6:6a:21:34:c2:b2:34:d0:ac:8b: 6b:42:2b:37:27:36:0c:49:a1:c2:78:9b:2b:a4:75: 8a:24:c8:98:5b:7d:be:c4:2e:ad:7e:58:36:9a:2c: e9:64:ab:84:53:0c:24:ae:e5:58:de:8e:59:64:f6: 07:6d:ba:e2:79:dc:2a:d3:12:28:70:7b:84:bc:ac: f8:ae:2a:10:8e:e1:41:2b:09:91:fc:17:7c:9a:f8: 68:93:3f:97:7f:66:f9:9a:df:74:0c:34:27:44:41: 13:fa:26:0d:37:9d:7a:8e:ca:71:e2:57:8b:ba:b8: 21:06:85:3c:b0:df:42:8b:9f:b6:31:fb:4b:e2:8c: 8f:c3:de:45:d8:f5:f5:8a:2c:98:7a:08:bf:9e:76: 03:b8:5d:76:8d:53:31:1c:c9:2f:0c:e6:27:dc:5d: 53:28:13:db:6a:8f:fd:22:d4:4e:c1:29:83:88:1b: 95:ff:71:36:b8:32:80:8e:5b:d8:a6:ab:e7:e2:90: 20:d1:ad:ca:b7:5a:95:be:f7:f9:72:6e:3a:fb:86: a1:b4:4a:3a:cb:8c:32:ce:c7:7d:f0:bb:3b:f5:5d: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:91:49:7D:CF:36:DA:48:A4:44:A0:1E:C3:AF:1B:D9:EF:4E:AC:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0a48b3-df0d-40fd-8359-6734b3864352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.164.0/24 Signature Algorithm: sha256WithRSAEncryption d3:5d:4f:77:e5:22:09:73:ea:8a:67:40:b1:33:37:c8:4b:cb: 53:a9:1b:79:95:36:e2:79:94:3b:e5:60:b3:5e:1e:a5:62:a4: f6:46:3c:d2:26:a5:5f:68:50:b7:d9:30:3e:31:47:ee:5e:88: 3a:03:bb:b7:66:a2:25:90:11:90:88:cb:24:bb:d7:91:c1:a0: 1c:45:e2:48:cf:39:ed:02:e0:d1:0a:cf:58:af:38:5c:95:e6: 80:2a:7a:73:35:0e:cc:8a:f6:8f:af:fd:ad:10:6a:98:12:c7: 04:aa:c0:98:be:e3:48:3a:36:6a:94:ad:f6:89:c4:9a:e8:be: 44:46:d9:2d:09:68:43:95:d5:42:cf:c4:b9:43:2c:05:d2:91: dc:8d:2e:a5:c2:9b:41:a5:c3:f3:20:f5:e7:bc:f1:c2:72:4b: c7:af:96:3c:90:89:a5:82:92:df:5b:f4:ff:e8:02:8e:a9:a2: ce:55:be:82:92:f4:02:ce:ac:df:9f:e1:97:fe:83:45:fd:f2: c6:ef:8c:44:94:0c:41:11:26:bb:79:c1:f5:45:94:c3:9b:b4: 0b:47:d2:42:da:ad:30:93:3d:62:e3:9c:e3:cd:e4:26:c6:fd: 27:74:a2:7a:cf:ee:eb:dc:a3:8b:88:92:90:8c:4d:9f:66:0a: 0a:20:4e:77 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITQpW0sVuiusWrmhC1TXUVQ0whUTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA3MjIwMDAwNThaFw0yNjEwMjAyMzU5NTla MHoxSTBHBgNVBAUTQDdhNjA0MzRlODQ2MmI1ZDk2YTdmYmRlNmM2NjhmYTg0ZTFk ZmE5MTAxNGE5Nzg5ODIwMWI1YzViOTY4Nzg1NzUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMy5S3HoDgRdN+3luLoC2A+ELmZHhdGZTF+e8RQK/J8kZQS2 aiE0wrI00KyLa0IrNyc2DEmhwnibK6R1iiTImFt9vsQurX5YNpos6WSrhFMMJK7l WN6OWWT2B2264nncKtMSKHB7hLys+K4qEI7hQSsJkfwXfJr4aJM/l39m+ZrfdAw0 J0RBE/omDTedeo7KceJXi7q4IQaFPLDfQouftjH7S+KMj8PeRdj19YosmHoIv552 A7hddo1TMRzJLwzmJ9xdUygT22qP/SLUTsEpg4gblf9xNrgygI5b2Kar5+KQINGt yrdalb73+XJuOvuGobRKOsuMMs7HffC7O/VdVQ8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRukUl9zzbaSKREoB7DrxvZ706sOzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvY2QwYTQ4YjMtZGYwZC00MGZkLTgzNTktNjczNGIzODY0MzUyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABfupDANBgkqhkiG9w0BAQsFAAOCAQEA011Pd+UiCXPqimdAsTM3yEvLU6kb eZU24nmUO+Vgs14epWKk9kY80ialX2hQt9kwPjFH7l6IOgO7t2aiJZARkIjLJLvX kcGgHEXiSM857QLg0QrPWK84XJXmgCp6czUOzIr2j6/9rRBqmBLHBKrAmL7jSDo2 apSt9onEmui+REbZLQloQ5XVQs/EuUMsBdKR3I0upcKbQaXD8yD157zxwnJLx6+W PJCJpYKS31v0/+gCjqmizlW+gpL0As6s35/hl/6DRf3yxu+MRJQMQREmu3nB9UWU w5u0C0fSQtqtMJM9YuOc483kJsb9J3Sies/u69yji4iSkIxNn2YKCiBOdw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:43:09 2026 by rpki-client