$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eded0a97-1872-4795-ae43-4b9539c9f1fe.roa File: eded0a97-1872-4795-ae43-4b9539c9f1fe.roa (raw, json) Hash identifier: 9HNVgzXK9Z2fhWNviaT+nWogblt5iSBLuJ6OptsTH5I= Subject key identifier: B2:21:5E:FD:B8:55:C0:86:5E:33:12:EB:76:FC:98:EC:7D:C8:3B:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0380590585097046C9E562FDBA2ADFF4EE78E402 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eded0a97-1872-4795-ae43-4b9539c9f1fe.roa Signing time: Wed 22 Jul 2026 00:01:22 +0000 ROA not before: Wed 22 Jul 2026 00:01:22 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:80:59:05:85:09:70:46:c9:e5:62:fd:ba:2a:df:f4:ee:78:e4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:01:22 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=13930019e3793c2ed1d9089317bb50846a310434f6ec41fc7636f5492e141959, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:57:ab:ef:04:bb:62:57:43:9a:d2:38:f0: 27:05:52:65:dd:f7:01:d4:99:89:ac:7f:cd:fc:2b: 14:b9:b4:62:0f:02:fb:32:ce:01:8c:0a:1d:f6:f6: 14:13:98:a1:bc:33:92:e9:40:70:e9:1f:c6:25:2e: 7a:08:cb:1d:7a:4f:73:50:9f:23:b8:bb:2f:ea:bb: 13:42:fa:fe:f4:80:a1:cb:78:61:dc:4e:42:72:9a: 01:66:e8:78:80:2d:ba:ac:68:8b:cf:af:a1:b0:6a: ad:c1:d2:09:ff:c1:36:31:ab:1d:6d:5b:64:f3:f3: 3c:78:76:bd:93:11:d1:d5:78:1f:59:64:9e:36:99: e7:85:d1:70:7b:71:de:57:47:fe:af:2e:8c:d7:d4: 7e:78:24:3a:18:bf:d4:c2:0d:4f:99:1c:cb:5b:c5: af:a0:72:49:f4:4a:ae:da:f0:ef:4d:36:69:61:5f: 45:dc:e9:ca:58:87:da:50:06:99:70:26:b6:ee:75: 4b:b1:fb:46:f6:03:55:9d:71:58:ca:4b:36:d1:27: 3c:86:c9:89:62:cd:07:ad:e9:bc:57:de:df:67:d6: 21:51:2c:83:68:11:b7:6e:1f:29:1c:36:d1:b4:82: 2b:a9:50:f1:55:62:fc:77:81:dc:55:64:37:ee:eb: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:21:5E:FD:B8:55:C0:86:5E:33:12:EB:76:FC:98:EC:7D:C8:3B:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eded0a97-1872-4795-ae43-4b9539c9f1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.186.0/24 Signature Algorithm: sha256WithRSAEncryption 73:23:85:dc:ba:35:6e:b6:d8:96:df:dd:4b:11:ee:2a:ca:95: 6e:76:b0:79:0d:c4:8e:89:47:a7:54:04:11:3c:09:9b:e8:76: f6:37:f8:7a:3f:86:b1:80:f9:f2:19:ad:73:73:7d:b2:61:a4: 42:38:c4:6b:b1:54:95:d1:de:83:4d:83:a9:a6:75:dc:e7:92: 86:ee:2c:52:12:24:80:53:1a:e7:1d:1b:a3:8b:f3:08:8b:56: 0c:60:95:a2:8f:56:3c:49:05:e9:8e:ce:86:85:a9:9b:88:3e: a0:24:9c:ec:7c:3a:85:c8:a1:fc:3f:6e:df:1f:da:0f:75:04: 77:3e:92:ce:ad:00:24:31:07:b1:aa:9a:0b:c4:ef:33:f6:3c: 44:67:ab:06:e5:c0:b2:a7:d3:5d:f0:b5:c5:33:06:fa:ed:ce: 74:24:97:bb:a9:00:a6:90:4e:65:4e:ea:e4:c2:9d:4e:92:35: 81:c3:6f:79:27:d5:05:77:65:21:ae:85:1d:ed:31:02:2a:fa: 9e:fd:83:a7:02:13:90:da:6c:66:93:5a:09:80:29:83:09:0e: 28:3b:d4:f5:da:9f:a1:6a:d9:44:f5:9b:ae:59:f5:8e:30:19: 6e:14:de:94:c5:27:e2:57:53:68:e1:f2:04:3a:19:3e:83:6c: a5:01:07:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA4BZBYUJcEbJ5WL9uirf9O545AIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMTIyWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzkzMDAxOWUzNzkzYzJlZDFkOTA4OTMxN2JiNTA4NDZh MzEwNDM0ZjZlYzQxZmM3NjM2ZjU0OTJlMTQxOTU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxkler7wS7YldDmtI48CcFUmXd9wHUmYmsf838KxS5tGIP AvsyzgGMCh329hQTmKG8M5LpQHDpH8YlLnoIyx16T3NQnyO4uy/quxNC+v70gKHL eGHcTkJymgFm6HiALbqsaIvPr6Gwaq3B0gn/wTYxqx1tW2Tz8zx4dr2TEdHVeB9Z ZJ42meeF0XB7cd5XR/6vLozX1H54JDoYv9TCDU+ZHMtbxa+gckn0Sq7a8O9NNmlh X0Xc6cpYh9pQBplwJrbudUux+0b2A1WdcVjKSzbRJzyGyYlizQet6bxX3t9n1iFR LINoEbduHykcNtG0giupUPFVYvx3gdxVZDfu6ylbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsiFe/bhVwIZeMxLrdvyY7H3IO34wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkZWQwYTk3LTE4NzItNDc5NS1hZTQzLTRiOTUzOWM5ZjFmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7rowDQYJKoZIhvcNAQELBQADggEBAHMjhdy6NW622Jbf3UsR7irKlW52 sHkNxI6JR6dUBBE8CZvodvY3+Ho/hrGA+fIZrXNzfbJhpEI4xGuxVJXR3oNNg6mm ddznkobuLFISJIBTGucdG6OL8wiLVgxglaKPVjxJBemOzoaFqZuIPqAknOx8OoXI ofw/bt8f2g91BHc+ks6tACQxB7GqmgvE7zP2PERnqwblwLKn013wtcUzBvrtznQk l7upAKaQTmVO6uTCnU6SNYHDb3kn1QV3ZSGuhR3tMQIq+p79g6cCE5DabGaTWgmA KYMJDig71PXan6Fq2UT1m65Z9Y4wGW4U3pTFJ+JXU2jh8gQ6GT6DbKUBB0c= -----END CERTIFICATE-----Generated at Thu Jul 23 22:31:20 2026 by rpki-client