$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957f0a75-2fea-4fd6-ac57-1c87799dc4e1.roa File: 957f0a75-2fea-4fd6-ac57-1c87799dc4e1.roa (raw, json) Hash identifier: 9le3w5z7iv4GL6CVvvB9wbBH6rEhZy2LXNSML6har2c= Subject key identifier: 91:00:A0:39:24:CA:42:E5:6F:E8:36:49:84:E4:35:EF:46:9C:E1:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DB3FF8591971D356DBC6A73D51FE25BBE49678C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957f0a75-2fea-4fd6-ac57-1c87799dc4e1.roa Signing time: Fri 24 Jul 2026 00:31:37 +0000 ROA not before: Fri 24 Jul 2026 00:31:37 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.97.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b3:ff:85:91:97:1d:35:6d:bc:6a:73:d5:1f:e2:5b:be:49:67:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:31:37 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=bcbfbb975ffef6ebff342d39a5d73288dc9da4f00a5458006dba94fe4ded9b58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:fa:a6:a8:64:80:c7:ce:7a:d8:c1:b6:aa: 4f:31:58:34:71:18:0d:f4:58:89:ec:a4:02:75:1e: 94:3b:ed:1f:df:22:ba:bb:62:d8:57:cc:6e:8b:30: 9a:55:7c:8c:b8:16:b6:f4:8b:ca:fd:4c:71:c0:47: fa:9c:31:44:5b:62:c5:41:e1:16:50:da:05:0e:87: 2f:b6:d9:f5:86:4a:7f:e8:aa:6a:ae:dd:57:39:d7: 46:47:b6:6c:3f:9c:43:97:d2:cc:6b:45:9f:03:91: 00:58:d0:86:75:23:fb:31:55:21:cb:4b:cb:2c:22: fd:58:2c:70:05:e3:9c:0e:2f:4b:dc:53:6f:48:01: 25:71:5b:86:da:5e:b6:cb:89:88:73:4d:e0:1f:e2: 5f:77:95:87:e8:23:0b:d3:d0:1c:82:3c:77:d6:a9: 33:ce:15:b9:8a:6b:9e:7b:b2:6e:ee:72:ed:53:64: 7f:7c:55:5c:b9:4d:9e:bb:11:32:be:5a:b3:7f:32: a3:14:82:6a:25:c5:00:40:e5:3e:16:2c:85:32:ee: 7c:4d:5d:d9:03:3a:13:ad:72:18:d3:fd:08:7d:ce: a7:26:3d:1e:aa:eb:0f:31:05:2c:ee:98:6a:67:78: 4b:a9:63:3e:2d:f6:37:a4:ae:7c:a3:2a:43:f0:44: 6d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:00:A0:39:24:CA:42:E5:6F:E8:36:49:84:E4:35:EF:46:9C:E1:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957f0a75-2fea-4fd6-ac57-1c87799dc4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption b0:3f:6c:b0:ee:b7:d5:78:25:00:2e:80:08:9b:ca:f8:2a:8a: 0b:78:a8:0f:82:c9:01:a3:fe:57:08:d5:39:87:5c:26:b1:24: 81:c0:2b:db:ef:ca:2d:ad:84:5a:de:98:05:7c:64:ea:39:8f: 76:e3:b0:85:49:a1:2d:54:86:67:b2:38:93:ef:58:52:77:dc: b2:1b:db:ae:ef:2f:12:fd:e6:f2:0e:a5:7d:34:b4:3b:f8:90: d1:48:ad:27:ef:97:e9:03:19:0e:b5:64:e5:5b:32:9c:de:ed: db:fa:21:53:4a:a0:1e:0c:25:28:cb:78:31:10:4c:96:1f:ee: df:45:6f:bd:b7:dc:43:68:07:28:04:00:2f:b9:6a:10:dc:0b: 58:2a:68:f0:b2:23:6d:7c:f6:4b:c1:d3:16:d0:f4:25:26:8f: 2b:35:cb:f0:8a:c4:16:c5:12:eb:a8:7d:d5:9a:32:e9:6d:82: 7e:7f:7c:68:d5:30:23:9b:54:0e:94:51:10:7f:87:eb:65:fc: 80:65:dc:7f:3d:03:79:e0:0d:ba:9f:61:f6:5c:90:eb:79:39: 2e:48:d8:bd:ba:0a:ba:d8:af:b7:11:87:03:6c:fa:2f:65:63: 19:e1:7b:78:3a:3d:34:75:9f:7f:51:78:ce:c5:e7:24:65:2a: 4a:8e:b8:f0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULbP/hZGXHTVtvGpz1R/iW75JZ4wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAzMTM3WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2JmYmI5NzVmZmVmNmViZmYzNDJkMzlhNWQ3MzI4OGRj OWRhNGYwMGE1NDU4MDA2ZGJhOTRmZTRkZWQ5YjU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA0vqmqGSAx8562MG2qk8xWDRxGA30WInspAJ1HpQ77R/f Irq7YthXzG6LMJpVfIy4Frb0i8r9THHAR/qcMURbYsVB4RZQ2gUOhy+22fWGSn/o qmqu3Vc510ZHtmw/nEOX0sxrRZ8DkQBY0IZ1I/sxVSHLS8ssIv1YLHAF45wOL0vc U29IASVxW4baXrbLiYhzTeAf4l93lYfoIwvT0ByCPHfWqTPOFbmKa557sm7ucu1T ZH98VVy5TZ67ETK+WrN/MqMUgmolxQBA5T4WLIUy7nxNXdkDOhOtchjT/Qh9zqcm PR6q6w8xBSzumGpneEupYz4t9jekrnyjKkPwRG3RAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkQCgOSTKQuVv6DZJhOQ170ac4eowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1N2YwYTc1LTJmZWEtNGZkNi1hYzU3LTFjODc3OTlkYzRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4YTANBgkqhkiG9w0BAQsFAAOCAQEAsD9ssO631XglAC6ACJvK+CqKC3io D4LJAaP+VwjVOYdcJrEkgcAr2+/KLa2EWt6YBXxk6jmPduOwhUmhLVSGZ7I4k+9Y Unfcshvbru8vEv3m8g6lfTS0O/iQ0UitJ++X6QMZDrVk5VsynN7t2/ohU0qgHgwl KMt4MRBMlh/u30VvvbfcQ2gHKAQAL7lqENwLWCpo8LIjbXz2S8HTFtD0JSaPKzXL 8IrEFsUS66h91Zoy6W2Cfn98aNUwI5tUDpRREH+H62X8gGXcfz0DeeANup9h9lyQ 63k5LkjYvboKutivtxGHA2z6L2VjGeF7eDo9NHWff1F4zsXnJGUqSo648A== -----END CERTIFICATE-----Generated at Tue Jul 28 21:34:41 2026 by rpki-client