$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa File: 8118a06a-b99e-4bfa-810e-228874f352d3.roa (raw, json) Hash identifier: QwwPhdfemEC3bZWNSUUM5w8zaV4VmIWYVyeAMBRHtqg= Subject key identifier: 13:2E:84:43:90:4F:D6:1D:BA:66:D4:FA:79:61:18:C1:CE:4B:AE:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 239CD94A965ECABA5623E6CC5677D4587430D667 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa Signing time: Sat 25 Jul 2026 00:40:33 +0000 ROA not before: Sat 25 Jul 2026 00:40:33 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9c:d9:4a:96:5e:ca:ba:56:23:e6:cc:56:77:d4:58:74:30:d6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:40:33 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=a50e6b93327dd65f5ca24822e2da8076af29f51b2ced315ad94de7e178f9f744, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:3c:d4:9b:a3:51:b8:2e:8f:f7:42:86:d7: 0b:98:01:39:de:4f:87:52:7d:d1:d5:bb:a7:1f:92: dc:de:7e:a7:51:6d:ae:b8:49:30:eb:52:98:68:f0: 50:9a:51:8f:1a:ff:32:2d:b2:ba:a9:c8:40:93:34: d5:86:39:08:7a:60:46:39:3d:02:a2:e8:b2:4c:fc: 8d:05:74:1b:3d:8e:3b:d2:bb:a4:33:7f:05:60:c8: a9:4b:96:20:91:12:0d:93:e4:56:6e:d4:30:8e:52: bb:12:db:70:9a:a5:7e:07:19:5b:28:60:1f:af:d1: ec:88:2f:1e:89:87:05:66:1b:ef:35:32:f6:e5:58: 43:2a:08:26:a7:cd:0a:c2:6c:c4:4d:41:83:85:4b: fc:21:b6:e5:b6:a1:ee:d4:6e:8f:86:20:d8:1b:7f: ee:e0:97:d5:84:aa:78:30:6e:36:82:32:71:a8:80: b0:cc:6f:bb:c5:8e:e9:fa:1a:44:31:21:37:c7:ca: 43:3c:c9:d1:70:3d:83:a8:38:9f:a7:d6:f0:e8:29: f3:40:bb:98:db:82:72:10:9e:f7:2f:db:8b:a9:a9: 65:21:9f:a3:08:3e:b8:5b:c9:e9:19:05:38:94:e6: f6:a8:0c:16:87:51:db:9b:74:09:53:78:de:da:53: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:84:43:90:4F:D6:1D:BA:66:D4:FA:79:61:18:C1:CE:4B:AE:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.88.0/21 Signature Algorithm: sha256WithRSAEncryption 35:87:c3:d3:fa:4c:7d:37:30:32:80:55:49:9c:a4:f1:60:72: d3:f5:a2:cb:37:06:ea:1b:b2:4b:c0:52:43:fe:08:06:e2:d3: cf:64:12:5b:38:b2:8c:46:14:21:03:be:50:fe:e3:a2:40:03: fb:3b:ff:f4:4e:51:87:69:05:ad:b3:17:e7:8b:70:17:6b:37: 45:db:be:b8:f1:a5:a1:65:e1:f4:15:41:c4:b3:dd:56:7b:d0: 8e:68:d4:60:6c:12:ec:fc:3a:2e:3c:a8:14:d5:7e:c6:cd:8f: 21:47:00:59:2b:be:80:e1:ee:ee:17:c6:91:06:72:a8:1b:20: ce:d5:97:e4:cf:8b:68:c8:90:6e:00:f3:9d:7d:c1:36:72:09: 2e:83:42:4f:a3:29:20:91:d2:5f:c9:89:0f:b4:97:d7:3d:52: 15:d5:b1:d9:93:b1:62:f5:82:ed:7e:80:eb:b4:ba:b1:f8:f1: 29:d5:64:ff:2a:01:0a:cf:fa:26:33:fe:c2:ff:13:3d:54:b2: 65:31:05:a2:37:5c:d8:a8:5f:51:c3:df:71:6a:8a:bc:09:91: 7e:7c:b6:84:0d:4f:de:31:2f:4f:40:a2:a9:84:a0:ed:ed:be: b4:3c:a8:fc:32:cd:b2:34:a3:9f:6a:9b:c2:1f:87:c6:b0:2f: cc:c8:72:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI5zZSpZeyrpWI+bMVnfUWHQw1mcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDA0MDMzWhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTBlNmI5MzMyN2RkNjVmNWNhMjQ4MjJlMmRhODA3NmFm MjlmNTFiMmNlZDMxNWFkOTRkZTdlMTc4ZjlmNzQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClljzUm6NRuC6P90KG1wuYATneT4dSfdHVu6cfktzefqdR ba64STDrUpho8FCaUY8a/zItsrqpyECTNNWGOQh6YEY5PQKi6LJM/I0FdBs9jjvS u6QzfwVgyKlLliCREg2T5FZu1DCOUrsS23CapX4HGVsoYB+v0eyILx6JhwVmG+81 MvblWEMqCCanzQrCbMRNQYOFS/whtuW2oe7Ubo+GINgbf+7gl9WEqngwbjaCMnGo gLDMb7vFjun6GkQxITfHykM8ydFwPYOoOJ+n1vDoKfNAu5jbgnIQnvcv24upqWUh n6MIPrhbyekZBTiU5vaoDBaHUdubdAlTeN7aUy6hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEy6EQ5BP1h26ZtT6eWEYwc5LroIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxMThhMDZhLWI5OWUtNGJmYS04MTBlLTIyODg3NGYzNTJkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjllgwDQYJKoZIhvcNAQELBQADggEBADWHw9P6TH03MDKAVUmcpPFgctP1 oss3BuobskvAUkP+CAbi089kEls4soxGFCEDvlD+46JAA/s7//ROUYdpBa2zF+eL cBdrN0XbvrjxpaFl4fQVQcSz3VZ70I5o1GBsEuz8Oi48qBTVfsbNjyFHAFkrvoDh 7u4XxpEGcqgbIM7Vl+TPi2jIkG4A8519wTZyCS6DQk+jKSCR0l/JiQ+0l9c9UhXV sdmTsWL1gu1+gOu0urH48SnVZP8qAQrP+iYz/sL/Ez1UsmUxBaI3XNioX1HD33Fq irwJkX58toQNT94xL09AoqmEoO3tvrQ8qPwyzbI0o59qm8Ifh8awL8zIcq0= -----END CERTIFICATE-----Generated at Tue Jul 28 14:51:44 2026 by rpki-client