$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa File: cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa (raw, json) Hash identifier: hjKmQzWxaT6gFWBg9WdSot/QrmsSaOWELN0AjhNiz+M= Subject key identifier: C1:42:EA:CE:40:10:70:A6:A9:1F:1D:DB:34:B6:E1:AC:70:5C:BD:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 371926DDD1120F3EEED769D63FEE619F27BBFB93 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa Signing time: Sun 17 May 2026 00:20:57 +0000 ROA not before: Sun 17 May 2026 00:20:57 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.8.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:19:26:dd:d1:12:0f:3e:ee:d7:69:d6:3f:ee:61:9f:27:bb:fb:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:20:57 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=0afb0a295e8fb965962db952583e48e881415ccf953c546fb85ae77ed86858f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:da:24:af:1e:37:f8:ca:eb:9f:af:aa:cb: a2:88:ff:37:32:3a:12:1b:da:54:13:59:b1:7a:8d: 97:fc:f1:13:22:a0:16:98:fa:09:83:f0:44:39:d7: 5d:76:d5:16:7e:a2:cd:d3:dc:9c:4e:85:bc:d2:f3: 33:c8:1c:00:0a:f8:33:16:f9:a2:3c:f2:2b:21:a3: 93:37:c3:29:0b:a5:53:88:63:02:7e:ce:00:7f:88: 5d:f9:6b:6f:4f:8d:f1:86:9e:36:dd:53:5e:37:b8: 20:91:fe:a6:74:ae:64:65:21:68:bb:e1:31:9f:5a: 36:85:97:41:e5:98:d9:b9:79:bb:6a:28:00:bf:22: 77:b9:7f:4a:79:d4:02:19:66:6e:5b:e9:83:38:bf: 3d:72:81:35:ca:df:c4:b4:a7:af:42:65:cd:1a:9b: d2:d2:33:99:81:02:21:89:90:b6:dd:05:38:66:c9: bf:ce:c3:bd:c0:04:9f:99:0b:fe:12:45:ec:fb:7d: 19:fe:8d:2e:27:4e:43:c1:23:b7:77:e5:b3:ec:10: aa:39:97:65:23:d9:8d:b2:24:45:49:0f:1b:61:a8: d8:1b:64:45:d8:6c:05:cd:6d:42:80:5f:03:e9:c9: 1f:95:6a:f2:31:99:5b:27:91:72:66:c9:28:47:74: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:42:EA:CE:40:10:70:A6:A9:1F:1D:DB:34:B6:E1:AC:70:5C:BD:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:6f:02:24:fb:26:7e:2d:3b:73:45:c5:ef:c2:70:94:0a:42: b3:af:c8:1f:ef:8c:ba:86:57:42:9c:55:ba:d6:00:49:b2:73: 24:6b:76:ec:47:69:d0:dd:65:39:b0:d1:49:5f:9f:5c:71:d9: 94:c4:ee:06:84:14:68:78:cd:ae:58:87:56:d1:46:1a:64:e1: 71:ef:d4:0c:2a:57:9d:3f:29:03:34:b4:1d:6d:df:c6:9d:39: 8a:d5:55:fb:4a:a1:3d:42:8c:1d:67:17:81:a3:97:6d:25:2c: 1b:67:f5:eb:8d:47:5a:ef:8f:8d:fd:cc:49:44:4e:1a:25:5f: 07:8a:8c:34:67:95:8c:77:40:bf:c3:37:6b:21:59:90:49:2d: 6a:40:c0:6f:62:df:77:4d:f8:35:cd:e5:79:0b:14:f0:4e:d4: a0:3b:7b:69:fd:f8:28:4c:40:28:15:59:6e:8e:37:36:cc:c0: 36:4d:3d:f2:9a:91:96:4e:ac:d9:06:a4:52:65:91:70:c0:0a: b8:a2:fe:a4:00:b7:51:f6:d4:f1:71:d6:47:89:35:e0:93:86: 58:96:a3:77:77:07:94:06:d2:b5:9a:d8:7d:4e:51:56:36:0f: f8:cb:18:9b:67:aa:a3:9b:5b:bd:33:30:73:53:93:92:c9:1e: 64:23:b2:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNxkm3dESDz7u12nWP+5hnye7+5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAyMDU3WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWZiMGEyOTVlOGZiOTY1OTYyZGI5NTI1ODNlNDhlODgx NDE1Y2NmOTUzYzU0NmZiODVhZTc3ZWQ4Njg1OGY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgyNokrx43+Mrrn6+qy6KI/zcyOhIb2lQTWbF6jZf88RMi oBaY+gmD8EQ511121RZ+os3T3JxOhbzS8zPIHAAK+DMW+aI88isho5M3wykLpVOI YwJ+zgB/iF35a29PjfGGnjbdU143uCCR/qZ0rmRlIWi74TGfWjaFl0HlmNm5ebtq KAC/Ine5f0p51AIZZm5b6YM4vz1ygTXK38S0p69CZc0am9LSM5mBAiGJkLbdBThm yb/Ow73ABJ+ZC/4SRez7fRn+jS4nTkPBI7d35bPsEKo5l2Uj2Y2yJEVJDxthqNgb ZEXYbAXNbUKAXwPpyR+VavIxmVsnkXJmyShHdAY1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwULqzkAQcKapHx3bNLbhrHBcvaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmYmExMTExLTI3NWMtNGJiMi04ZTNmLTVhZDc0Y2M2NWM1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4CDANBgkqhkiG9w0BAQsFAAOCAQEASW8CJPsmfi07c0XF78JwlApCs6/I H++MuoZXQpxVutYASbJzJGt27Edp0N1lObDRSV+fXHHZlMTuBoQUaHjNrliHVtFG GmThce/UDCpXnT8pAzS0HW3fxp05itVV+0qhPUKMHWcXgaOXbSUsG2f1641HWu+P jf3MSUROGiVfB4qMNGeVjHdAv8M3ayFZkEktakDAb2Lfd034Nc3leQsU8E7UoDt7 af34KExAKBVZbo43NszANk098pqRlk6s2QakUmWRcMAKuKL+pAC3UfbU8XHWR4k1 4JOGWJajd3cHlAbStZrYfU5RVjYP+MsYm2eqo5tbvTMwc1OTkskeZCOyRQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:04:11 2026 by rpki-client