$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa File: d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa (raw, json) Hash identifier: 4zgjfyhuT4Q+CKs3bpdjd9c5xg0W1qr0NXMVa23Jo+M= Subject key identifier: 67:69:64:81:F4:A2:11:78:50:53:14:01:4B:35:1D:C5:E4:64:B6:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C827B518D58AD33AB8F8B8C727575F17A7A7778 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa Signing time: Sat 18 Jul 2026 00:41:32 +0000 ROA not before: Sat 18 Jul 2026 00:41:32 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:82:7b:51:8d:58:ad:33:ab:8f:8b:8c:72:75:75:f1:7a:7a:77:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:41:32 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=07fd006ab58e85a2f7c26c2566d0695a93d5990c1dab9407c36849fd16401b65, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:76:63:f1:bc:ae:01:8d:aa:27:8d:b3:ad:d7: e6:c9:11:3f:dc:99:77:1f:51:3a:05:ad:2a:47:c1: 30:d3:6b:e2:d4:e4:f1:8f:8f:8a:01:14:b4:51:a9: 9c:0a:54:45:6c:4c:ec:2e:62:e8:99:66:c7:5a:68: 49:71:ae:33:11:6c:3a:56:13:ed:98:ac:21:46:ca: 33:8e:4a:58:1d:a2:a6:b7:84:39:ec:a3:78:43:ce: 43:ad:b8:06:c8:8d:25:ad:4a:15:3a:96:37:35:e5: d6:3d:0d:c1:10:be:0f:4b:cd:d9:54:97:c7:71:6c: e4:aa:da:c2:34:b7:63:ea:a4:9d:01:b3:24:48:a2: ae:94:90:76:df:c7:47:8e:5f:4e:f1:77:c7:73:81: 1c:e1:4f:df:e0:7b:81:f2:f8:46:d4:23:ea:fc:98: 67:7b:96:5a:35:b6:f8:ca:1b:53:9c:bf:d7:87:09: 5b:3f:1a:0f:26:47:52:1a:8e:60:71:f1:db:ac:ff: 4c:46:da:37:9e:fc:ed:60:42:38:db:d6:bb:fd:94: 15:9c:8d:a7:93:e3:5e:75:ab:05:20:67:90:2a:07: 18:13:72:94:fd:35:80:5c:f9:9c:67:ef:cc:36:8b: 48:e7:a2:51:8d:3e:c4:88:bf:5e:9b:b8:1e:85:67: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:69:64:81:F4:A2:11:78:50:53:14:01:4B:35:1D:C5:E4:64:B6:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.120.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6e:2a:1a:a6:fc:ec:1f:ca:ad:b5:7e:ec:5a:dd:5c:63:a0: 7e:dd:1c:ce:78:02:a3:42:30:89:91:53:25:bd:c0:09:74:7a: c3:fd:df:d8:03:5a:6b:f6:2a:fa:e8:a5:51:16:b2:eb:c7:8b: ef:14:06:e5:f1:dd:c3:78:22:82:61:5e:82:fd:88:df:ae:07: 2e:95:19:84:2f:ad:d4:96:bc:c9:25:b9:7a:aa:ee:c9:c1:23: 0f:2c:87:7b:b9:f5:af:b9:c0:9e:9a:3e:f1:22:6a:e6:e6:02: b6:1a:bd:20:6a:38:13:0e:d5:cc:85:9a:1e:9a:57:32:dc:bf: cd:65:58:2b:a9:0f:f9:1d:97:d3:e1:77:db:82:49:00:f6:c4: e3:30:b3:01:8a:44:c4:b7:62:67:0f:62:a7:aa:21:33:4d:c1: 31:0b:dc:52:74:d3:f5:2a:40:c4:c1:87:8d:6a:d5:f6:16:37: db:61:27:36:a9:2d:9d:40:c3:31:2d:4f:90:89:5b:61:b4:a6: d4:8f:96:21:51:c3:86:25:42:2a:d4:9c:69:24:09:2c:72:6a: 4e:85:09:a4:5e:5c:da:7a:c1:30:11:e6:45:93:fc:c7:3e:f5: b2:92:bf:11:df:05:b4:60:0b:1e:9f:3e:71:98:12:b2:07:0c: 53:86:c0:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDIJ7UY1YrTOrj4uMcnV18Xp6d3gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDA0MTMyWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2ZkMDA2YWI1OGU4NWEyZjdjMjZjMjU2NmQwNjk1YTkz ZDU5OTBjMWRhYjk0MDdjMzY4NDlmZDE2NDAxYjY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDudmPxvK4BjaonjbOt1+bJET/cmXcfUToFrSpHwTDTa+LU 5PGPj4oBFLRRqZwKVEVsTOwuYuiZZsdaaElxrjMRbDpWE+2YrCFGyjOOSlgdoqa3 hDnso3hDzkOtuAbIjSWtShU6ljc15dY9DcEQvg9LzdlUl8dxbOSq2sI0t2PqpJ0B syRIoq6UkHbfx0eOX07xd8dzgRzhT9/ge4Hy+EbUI+r8mGd7llo1tvjKG1Ocv9eH CVs/Gg8mR1IajmBx8dus/0xG2jee/O1gQjjb1rv9lBWcjaeT4151qwUgZ5AqBxgT cpT9NYBc+Zxn78w2i0jnolGNPsSIv16buB6FZ1VlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ2lkgfSiEXhQUxQBSzUdxeRktpgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzYzdjMzdlLWZkYzctNDZjOS1iMDA0LTA1ZjdlZmVhODY3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HgwDQYJKoZIhvcNAQELBQADggEBADhuKhqm/Owfyq21fuxa3VxjoH7d HM54AqNCMImRUyW9wAl0esP939gDWmv2KvropVEWsuvHi+8UBuXx3cN4IoJhXoL9 iN+uBy6VGYQvrdSWvMkluXqq7snBIw8sh3u59a+5wJ6aPvEiaubmArYavSBqOBMO 1cyFmh6aVzLcv81lWCupD/kdl9Phd9uCSQD2xOMwswGKRMS3YmcPYqeqITNNwTEL 3FJ00/UqQMTBh41q1fYWN9thJzapLZ1AwzEtT5CJW2G0ptSPliFRw4YlQirUnGkk CSxyak6FCaReXNp6wTAR5kWT/Mc+9bKSvxHfBbRgCx6fPnGYErIHDFOGwBE= -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:14 2026 by rpki-client