$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec2a25c7-03d3-41ca-9778-621ae3af6930.roa File: ec2a25c7-03d3-41ca-9778-621ae3af6930.roa (raw, json) Hash identifier: Sj7KoaED2LIcw0hmVzx7+0bZdizK4p6DbCERCc70Gu4= Subject key identifier: B4:8D:55:D4:7C:FF:4B:29:47:73:92:86:0A:EF:0C:D3:12:75:C8:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B5BAF8DC80343ACF24F8E84CE3C17DA137BAC89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec2a25c7-03d3-41ca-9778-621ae3af6930.roa Signing time: Fri 17 Jul 2026 00:01:01 +0000 ROA not before: Fri 17 Jul 2026 00:01:01 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 6167 IP address blocks: 162.208.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5b:af:8d:c8:03:43:ac:f2:4f:8e:84:ce:3c:17:da:13:7b:ac:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:01:01 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=b741c2fb0f487febda94f10b7802eedd809c7c750ad60bff8e76c4609baf8cb6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:ef:02:d9:1d:1b:5c:11:fc:f1:56:11:0f: ed:a0:16:58:88:8d:17:06:c4:ed:2d:c0:dc:90:0a: 05:cc:cf:df:af:ca:af:ce:28:14:25:c3:25:88:58: 38:97:52:60:cc:37:39:db:2a:a9:85:14:91:b5:40: 41:e0:36:ac:25:77:24:f4:ec:2c:ee:50:bc:14:96: ad:60:7e:24:d4:15:07:13:33:3d:be:5a:70:c1:c4: 61:bf:50:27:1b:1f:19:56:2b:0d:ad:e5:47:1c:7b: 2b:1a:e5:1d:56:b1:71:a6:d3:ef:ff:11:f1:5e:63: 8a:c7:ff:04:30:fa:9e:5a:27:f8:76:12:58:7e:04: b3:8c:54:c0:5d:1d:97:af:47:eb:9b:56:7d:28:a9: 32:31:34:59:96:83:ce:ce:bc:56:43:7c:65:ec:ab: ac:85:2e:b9:ef:cc:fc:5c:c6:56:cd:8e:a3:d8:74: 4c:47:96:79:79:f7:2f:95:c8:bc:48:e7:52:fd:58: f3:1c:db:65:f7:6b:f4:50:13:9f:2c:85:fa:97:1f: 5b:68:27:ff:db:61:b4:ca:76:d5:53:f6:ad:86:32: 2c:69:73:ae:3d:e2:95:c5:2f:3b:78:a5:c2:fd:ff: dc:c2:e3:a8:89:48:a3:59:9a:66:b0:57:96:b1:e0: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:55:D4:7C:FF:4B:29:47:73:92:86:0A:EF:0C:D3:12:75:C8:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec2a25c7-03d3-41ca-9778-621ae3af6930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.208.123.0/24 Signature Algorithm: sha256WithRSAEncryption 74:6c:08:34:e9:0e:f1:c3:0f:4e:20:cb:e3:dc:24:67:41:12: 60:f7:d3:c3:d6:ef:76:a8:80:ea:15:23:4e:88:38:36:9a:78: be:bc:fd:81:31:b8:05:7c:b3:e8:d4:c0:a7:50:2c:fe:a5:bc: 73:92:34:88:a8:37:38:17:c3:a1:b4:da:90:ac:69:dc:12:37: f5:4a:bd:1e:a9:42:9f:1c:18:e6:f5:61:d7:9c:8b:d2:d4:1c: 55:e9:b6:bd:e8:27:00:e3:ee:1d:c9:c5:47:e2:5c:bb:6d:8f: 5d:0f:f0:3e:ea:df:1e:d7:d7:e2:a6:09:22:24:08:20:92:a5: ca:7f:9d:d7:c0:fc:a6:31:74:b6:8d:37:14:26:21:55:72:70: 60:4d:f6:a9:86:9d:4a:53:46:ea:55:93:c9:bb:7f:36:f4:ab: 11:09:f0:ea:c9:d7:f3:45:4d:ec:ba:d5:1d:9d:f6:7a:da:d2: 95:ab:b3:7c:15:04:49:a1:78:d2:67:07:32:7e:99:06:4d:5a: e0:a3:69:09:fd:bf:9c:ab:d6:ec:ac:d1:fe:83:6d:c7:ea:4f: 89:db:81:14:22:7c:9a:f8:1c:8b:75:3e:ee:ec:b4:b4:f7:1e: b8:5c:4d:2b:89:ce:58:e4:84:35:33:19:69:28:45:1c:a8:60: 23:6c:92:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe1uvjcgDQ6zyT46EzjwX2hN7rIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAwMTAxWhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzQxYzJmYjBmNDg3ZmViZGE5NGYxMGI3ODAyZWVkZDgw OWM3Yzc1MGFkNjBiZmY4ZTc2YzQ2MDliYWY4Y2I2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdfO8C2R0bXBH88VYRD+2gFliIjRcGxO0twNyQCgXMz9+v yq/OKBQlwyWIWDiXUmDMNznbKqmFFJG1QEHgNqwldyT07CzuULwUlq1gfiTUFQcT Mz2+WnDBxGG/UCcbHxlWKw2t5Ucceysa5R1WsXGm0+//EfFeY4rH/wQw+p5aJ/h2 Elh+BLOMVMBdHZevR+ubVn0oqTIxNFmWg87OvFZDfGXsq6yFLrnvzPxcxlbNjqPY dExHlnl59y+VyLxI51L9WPMc22X3a/RQE58shfqXH1toJ//bYbTKdtVT9q2GMixp c6494pXFLzt4pcL9/9zC46iJSKNZmmawV5ax4EKfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtI1V1Hz/SylHc5KGCu8M0xJ1yI8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjMmEyNWM3LTAzZDMtNDFjYS05Nzc4LTYyMWFlM2FmNjkzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi0HswDQYJKoZIhvcNAQELBQADggEBAHRsCDTpDvHDD04gy+PcJGdBEmD3 08PW73aogOoVI06IODaaeL68/YExuAV8s+jUwKdQLP6lvHOSNIioNzgXw6G02pCs adwSN/VKvR6pQp8cGOb1Ydeci9LUHFXptr3oJwDj7h3JxUfiXLttj10P8D7q3x7X 1+KmCSIkCCCSpcp/ndfA/KYxdLaNNxQmIVVycGBN9qmGnUpTRupVk8m7fzb0qxEJ 8OrJ1/NFTey61R2d9nra0pWrs3wVBEmheNJnBzJ+mQZNWuCjaQn9v5yr1uys0f6D bcfqT4nbgRQifJr4HIt1Pu7stLT3HrhcTSuJzljkhDUzGWkoRRyoYCNskmU= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:22 2026 by rpki-client