$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e824ec8-2dc8-4951-900d-88c5a7b79115.roa File: 6e824ec8-2dc8-4951-900d-88c5a7b79115.roa (raw, json) Hash identifier: 2lB1neqPjuX9qWCzeeaHPm4AHT2JCuoSaWDidYK71kU= Subject key identifier: A3:AB:96:13:82:B5:30:24:6B:E8:36:9A:44:90:64:C9:AF:AA:0B:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B0DFB389BFCAEE8D0AEF9A0CCCCD1B86A882ECA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e824ec8-2dc8-4951-900d-88c5a7b79115.roa Signing time: Mon 27 Jul 2026 00:21:17 +0000 ROA not before: Mon 27 Jul 2026 00:21:17 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 206.253.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0d:fb:38:9b:fc:ae:e8:d0:ae:f9:a0:cc:cc:d1:b8:6a:88:2e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:21:17 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=e58f3456f7bc370d8a9e49f1bdab5edba1a74e2fc4103ffd96497a5c802ae99d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:52:60:02:fd:98:df:cc:74:43:15:9a:85: ec:1f:c3:8f:f3:9a:6c:c1:ce:d3:c2:e8:4d:1d:fd: 22:50:57:09:29:19:38:7c:f1:18:b9:9f:a7:b4:18: 0d:13:10:0d:16:a2:7b:07:f0:07:6b:5b:53:f9:1b: c5:ec:9c:14:e3:28:0a:c3:a6:32:49:db:a0:f5:51: 41:b1:ae:82:09:e9:a9:04:44:1b:c8:f4:9b:81:1f: c9:db:ae:91:1c:4d:21:ab:85:23:28:7a:db:79:8a: 15:95:3f:0b:f3:d3:74:a4:59:e8:32:e7:6d:84:fe: b0:eb:ed:1f:dd:b6:9d:7e:54:07:98:3a:55:02:03: c0:1a:a5:bb:c5:7d:80:69:23:83:92:3b:57:b4:d2: 58:e8:b8:a9:07:20:e8:74:20:27:e2:c4:ac:64:58: 77:59:dc:e5:14:a2:c9:0a:7a:7e:72:a8:a7:08:45: a1:55:51:c4:61:52:b3:00:6f:5b:36:d4:cd:b8:c9: 39:59:20:37:bc:12:a9:8a:a5:49:63:42:47:44:50: 8f:8c:d3:32:74:28:83:1a:bc:a9:b0:0c:1d:66:fd: 96:5e:59:4b:80:09:78:6b:30:47:ab:ba:a2:dd:61: 5e:2e:66:1f:59:65:6e:1f:b3:6d:4d:da:d1:83:eb: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:96:13:82:B5:30:24:6B:E8:36:9A:44:90:64:C9:AF:AA:0B:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e824ec8-2dc8-4951-900d-88c5a7b79115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.253.200.0/21 Signature Algorithm: sha256WithRSAEncryption 29:69:17:bb:7c:3b:8b:6a:1a:23:38:33:2e:af:82:bc:13:f1: eb:96:29:65:b7:73:e3:a4:d8:2f:bb:83:84:90:09:37:5f:54: f9:2b:24:c9:37:f2:5b:93:51:c0:52:11:4a:60:14:c8:18:89: 15:14:7f:c1:70:81:44:16:ed:18:f2:5e:b8:89:d1:23:ed:4c: eb:10:5d:13:f0:dc:0d:80:df:55:d1:a6:57:a9:f6:b3:a9:49: 0f:b2:8d:de:5b:a1:47:69:4c:43:05:35:fc:3a:5b:35:6a:cc: 95:33:9b:71:53:46:86:a9:76:c3:8a:75:b9:1f:af:95:0b:95: 59:d0:86:7f:f7:f3:f9:be:93:7e:1c:e1:b1:e5:0f:06:ce:32: eb:cc:21:68:75:03:34:e5:07:a2:23:52:cd:29:5d:aa:22:d1: 6a:f2:15:cf:22:70:d3:ad:7c:5c:3d:cd:d2:28:4d:dc:9f:47: c9:36:10:05:09:76:cb:d0:72:57:46:39:d0:34:03:ef:f7:7b: 16:92:94:21:5d:5f:fd:e7:4f:27:79:1c:9b:75:2b:d2:72:b8: f8:8e:a6:4e:10:d1:9e:23:52:c9:a9:2a:ea:6b:bf:8d:27:0f: 12:e8:53:94:82:10:75:12:92:96:32:66:c2:8d:38:56:00:48: cc:a8:74:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKw37OJv8rujQrvmgzMzRuGqILsowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAyMTE3WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNThmMzQ1NmY3YmMzNzBkOGE5ZTQ5ZjFiZGFiNWVkYmEx YTc0ZTJmYzQxMDNmZmQ5NjQ5N2E1YzgwMmFlOTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCd1JgAv2Y38x0QxWahewfw4/zmmzBztPC6E0d/SJQVwkp GTh88Ri5n6e0GA0TEA0WonsH8AdrW1P5G8XsnBTjKArDpjJJ26D1UUGxroIJ6akE RBvI9JuBH8nbrpEcTSGrhSMoett5ihWVPwvz03SkWegy522E/rDr7R/dtp1+VAeY OlUCA8AapbvFfYBpI4OSO1e00ljouKkHIOh0ICfixKxkWHdZ3OUUoskKen5yqKcI RaFVUcRhUrMAb1s21M24yTlZIDe8EqmKpUljQkdEUI+M0zJ0KIMavKmwDB1m/ZZe WUuACXhrMEeruqLdYV4uZh9ZZW4fs21N2tGD628VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo6uWE4K1MCRr6DaaRJBkya+qC+UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZlODI0ZWM4LTJkYzgtNDk1MS05MDBkLTg4YzVhN2I3OTExNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPO/cgwDQYJKoZIhvcNAQELBQADggEBAClpF7t8O4tqGiM4My6vgrwT8euW KWW3c+Ok2C+7g4SQCTdfVPkrJMk38luTUcBSEUpgFMgYiRUUf8FwgUQW7RjyXriJ 0SPtTOsQXRPw3A2A31XRplep9rOpSQ+yjd5boUdpTEMFNfw6WzVqzJUzm3FTRoap dsOKdbkfr5ULlVnQhn/38/m+k34c4bHlDwbOMuvMIWh1AzTlB6IjUs0pXaoi0Wry Fc8icNOtfFw9zdIoTdyfR8k2EAUJdsvQcldGOdA0A+/3exaSlCFdX/3nTyd5HJt1 K9JyuPiOpk4Q0Z4jUsmpKuprv40nDxLoU5SCEHUSkpYyZsKNOFYASMyodAM= -----END CERTIFICATE-----Generated at Wed Jul 29 00:46:49 2026 by rpki-client