$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1aee116-020f-479a-8386-23330a294f65.roa File: d1aee116-020f-479a-8386-23330a294f65.roa (raw, json) Hash identifier: EiHBj5Dnp8t8QlSZbvIH+MQxFcVQAg6Twsz7ajPPs4k= Subject key identifier: 90:AC:A3:0C:BF:33:C7:84:F8:11:48:09:98:6B:95:DB:4A:B6:C8:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68EA6399F3E613EE0651391EFB209051DBA15324 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1aee116-020f-479a-8386-23330a294f65.roa Signing time: Fri 17 Jul 2026 00:31:16 +0000 ROA not before: Fri 17 Jul 2026 00:31:16 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.138.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ea:63:99:f3:e6:13:ee:06:51:39:1e:fb:20:90:51:db:a1:53:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:31:16 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=617e762a97ba26213585a242c94457141739dc799876ef9da5887060f568e27f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:bb:05:be:52:a2:f6:ae:77:45:b9:fa:a3: 38:0f:2b:82:ca:fb:0f:1e:ee:d0:92:82:5c:7c:ba: b4:26:8a:40:76:f3:a7:c6:e7:4f:72:f0:f8:1b:4d: 8a:1a:8a:11:73:67:db:13:0a:82:c2:cf:87:e4:f6: 82:5f:dc:57:ee:ae:c4:63:94:98:40:c1:48:f2:97: 49:1b:0f:d2:3f:26:20:07:69:2b:42:9e:aa:33:99: b3:16:2f:bd:9b:3e:8d:84:c1:b1:25:5e:d5:11:32: 92:a0:a2:2d:f9:89:80:a5:8d:c9:4d:ca:40:60:1f: a7:8f:d4:59:9e:ba:fd:90:4a:1b:d3:2d:0f:7d:21: da:80:12:86:08:2d:6b:fa:c2:7c:af:d3:1c:20:f7: 8c:ae:19:ad:61:d2:a0:8b:a4:f5:bb:de:5f:e0:a5: 82:6d:1b:cd:b2:e4:b1:9d:c9:77:21:9b:f3:ab:67: 45:14:8e:bc:5f:af:1e:9d:ad:d5:ff:e3:c4:f7:94: 5d:64:d9:b9:da:f2:a2:da:e5:15:59:82:f4:03:44: a8:f2:a2:e3:3b:cc:ed:88:41:56:c1:8c:a3:62:33: 4c:78:df:7d:37:79:d0:ff:a5:63:38:6a:e8:98:11: 35:3c:a4:70:d0:8c:47:15:2e:09:9c:7e:45:48:23: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:A3:0C:BF:33:C7:84:F8:11:48:09:98:6B:95:DB:4A:B6:C8:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1aee116-020f-479a-8386-23330a294f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.138.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:9a:16:e9:c4:95:34:f1:6e:ee:0d:12:06:c1:3f:c9:e6:8b: fa:be:b3:65:33:61:b8:86:cb:95:57:a9:a2:93:16:5e:84:03: 01:ff:ed:9c:7e:c2:24:e6:71:42:1a:dc:a2:a3:8f:10:55:53: cc:a8:aa:da:68:d0:48:a2:5c:d7:87:85:f9:8f:cd:3f:5c:d4: 92:3b:7f:59:d1:b4:d4:12:7c:c6:0f:e4:e5:85:8e:16:57:82: bb:e2:2d:14:19:1a:04:c0:b7:2d:a3:7e:4b:ea:24:d0:55:7c: 33:cb:60:92:7c:ac:6a:89:7d:c3:bd:28:9a:1a:f6:6d:5a:17: b0:e7:ba:50:d4:ff:26:c1:9f:4e:0b:39:19:a6:fd:00:4e:f5: 4e:d8:70:85:dc:3c:0f:ca:6a:0d:ca:0f:c0:b9:12:67:d4:b5: 7d:d1:5f:d7:a7:45:78:d6:8b:67:48:c2:e5:7b:2d:dc:61:fc: c6:31:36:83:38:2a:ca:76:ae:63:01:f5:e6:5d:40:3f:bf:7f: 1c:64:a5:45:1f:64:34:bf:7c:36:ba:68:d4:75:24:23:56:38: e3:99:fd:18:33:2c:92:fc:e3:a7:04:4c:51:10:38:7f:b7:d2: e6:fc:88:ef:ac:ac:08:20:be:b2:2f:0f:80:5a:df:31:95:ee: a4:88:ff:71 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaOpjmfPmE+4GUTke+yCQUduhUyQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAzMTE2WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTdlNzYyYTk3YmEyNjIxMzU4NWEyNDJjOTQ0NTcxNDE3 MzlkYzc5OTg3NmVmOWRhNTg4NzA2MGY1NjhlMjdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv0rsFvlKi9q53Rbn6ozgPK4LK+w8e7tCSglx8urQmikB2 86fG509y8PgbTYoaihFzZ9sTCoLCz4fk9oJf3FfursRjlJhAwUjyl0kbD9I/JiAH aStCnqozmbMWL72bPo2EwbElXtURMpKgoi35iYCljclNykBgH6eP1Fmeuv2QShvT LQ99IdqAEoYILWv6wnyv0xwg94yuGa1h0qCLpPW73l/gpYJtG82y5LGdyXchm/Or Z0UUjrxfrx6drdX/48T3lF1k2bna8qLa5RVZgvQDRKjyouM7zO2IQVbBjKNiM0x4 3303edD/pWM4auiYETU8pHDQjEcVLgmcfkVII4ALAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkKyjDL8zx4T4EUgJmGuV20q2yCowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxYWVlMTE2LTAyMGYtNDc5YS04Mzg2LTIzMzMwYTI5NGY2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQijANBgkqhkiG9w0BAQsFAAOCAQEAI5oW6cSVNPFu7g0SBsE/yeaL+r6z ZTNhuIbLlVepopMWXoQDAf/tnH7CJOZxQhrcoqOPEFVTzKiq2mjQSKJc14eF+Y/N P1zUkjt/WdG01BJ8xg/k5YWOFleCu+ItFBkaBMC3LaN+S+ok0FV8M8tgknysaol9 w70omhr2bVoXsOe6UNT/JsGfTgs5Gab9AE71Tthwhdw8D8pqDcoPwLkSZ9S1fdFf 16dFeNaLZ0jC5Xst3GH8xjE2gzgqynauYwH15l1AP79/HGSlRR9kNL98Nrpo1HUk I1Y445n9GDMskvzjpwRMURA4f7fS5vyI76ysCCC+si8PgFrfMZXupIj/cQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:34:21 2026 by rpki-client