$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25a98f5-7804-4094-8cb7-934444d2052d.roa File: a25a98f5-7804-4094-8cb7-934444d2052d.roa (raw, json) Hash identifier: 8HjNHhf5WkJU57Y2kh/7/2+bPiK+mtA8zLAHQZlDoX4= Subject key identifier: FE:F8:7D:12:ED:DA:3B:39:56:91:B9:00:F6:77:1C:22:CD:ED:55:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08B7947B5E75AB47829C34AFC88E329B3A617C13 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25a98f5-7804-4094-8cb7-934444d2052d.roa Signing time: Sun 17 May 2026 00:50:06 +0000 ROA not before: Sun 17 May 2026 00:50:06 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 192.31.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b7:94:7b:5e:75:ab:47:82:9c:34:af:c8:8e:32:9b:3a:61:7c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:50:06 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=240602bc5eca2bf2de689cf9a2078abf1326cbb1dbeeaca971646e4b345fb889, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:1f:fe:16:5c:74:28:6f:95:40:1d:d4:1f: b4:b8:f7:91:c4:82:a7:ad:33:2e:5f:f6:5b:6f:87: 81:9b:8e:59:20:29:e5:ff:9f:dd:4f:f8:b0:61:37: fa:fa:58:c2:19:23:6c:d3:11:cb:cc:6d:1d:82:3f: 4f:cc:e5:22:74:41:de:43:3c:e5:31:37:8f:54:91: 3b:b9:00:cd:c8:5a:82:5d:a5:ef:6d:86:a6:98:06: 93:72:b5:fa:ad:eb:62:dd:4b:25:f3:7e:15:18:e4: 8c:10:11:d2:9c:da:a0:23:4d:ba:b3:a5:f1:be:38: 96:29:83:94:91:0a:af:a9:7b:c3:21:6c:17:77:f0: 22:75:cf:98:cd:9b:80:05:91:fb:06:9d:0d:63:4c: 29:bc:8f:77:d3:78:6e:f3:d7:dd:50:1b:44:e4:7c: 5b:8f:67:9a:52:5f:85:6b:1d:8e:99:ee:00:b1:43: d3:ce:08:20:78:b8:4c:b4:7c:c7:b4:df:84:f9:ed: 46:7c:ec:02:cc:b4:26:91:f8:cb:a3:50:84:b9:89: 3a:2d:86:c9:75:26:b5:05:57:de:10:9a:0f:7d:7b: e7:6e:af:a0:8a:3a:85:c6:8a:1f:f2:e5:bb:07:09: 27:00:91:91:e4:ce:8e:6c:b8:93:55:b9:c9:c1:c5: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F8:7D:12:ED:DA:3B:39:56:91:B9:00:F6:77:1C:22:CD:ED:55:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25a98f5-7804-4094-8cb7-934444d2052d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.31.213.0/24 Signature Algorithm: sha256WithRSAEncryption bb:59:e8:9f:34:e3:00:d4:bc:cd:d2:41:68:53:7b:54:73:7f: 99:3b:04:a6:ca:e0:37:90:cb:75:9a:54:1c:db:54:d1:11:3e: 0d:02:0d:c4:21:a5:0d:e5:f6:f1:3c:23:3d:eb:64:ee:d5:8c: e0:dd:32:c8:3e:6c:4a:f9:2c:f1:ea:11:d7:49:c3:ca:72:16: b7:c4:d0:a9:67:47:b9:11:5c:80:d0:05:bf:00:0d:05:df:6c: 18:a5:fb:eb:9d:1d:18:dd:68:8a:68:e1:78:04:d6:78:d0:ad: 8b:5c:2a:fe:cd:e9:76:43:36:29:04:32:98:07:75:4b:41:3e: 61:25:da:9a:50:77:07:0a:26:ec:58:44:31:73:fd:51:8c:64: 87:1b:21:95:37:71:62:4b:b7:0c:ac:f8:f8:d4:66:4e:6b:1b: 79:23:01:b6:b5:f7:34:32:ae:58:7d:09:94:0e:55:45:00:48: 10:24:65:02:11:f4:8c:b3:44:ca:37:3d:c9:a9:65:3b:ea:51: d3:d5:81:2e:96:01:71:8f:74:14:10:fd:b9:07:95:6d:d1:a7: 68:31:b9:48:c4:6d:72:90:fb:c8:fe:6d:5b:f7:c3:a6:a5:df: d8:1e:d4:36:fc:14:18:6f:30:98:30:6a:15:54:ce:93:40:8d: 2d:b8:ca:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCLeUe151q0eCnDSvyI4ymzphfBMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDA1MDA2WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDA2MDJiYzVlY2EyYmYyZGU2ODljZjlhMjA3OGFiZjEz MjZjYmIxZGJlZWFjYTk3MTY0NmU0YjM0NWZiODg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqPR/+Flx0KG+VQB3UH7S495HEgqetMy5f9ltvh4Gbjlkg KeX/n91P+LBhN/r6WMIZI2zTEcvMbR2CP0/M5SJ0Qd5DPOUxN49UkTu5AM3IWoJd pe9thqaYBpNytfqt62LdSyXzfhUY5IwQEdKc2qAjTbqzpfG+OJYpg5SRCq+pe8Mh bBd38CJ1z5jNm4AFkfsGnQ1jTCm8j3fTeG7z191QG0TkfFuPZ5pSX4VrHY6Z7gCx Q9POCCB4uEy0fMe034T57UZ87ALMtCaR+MujUIS5iTothsl1JrUFV94Qmg99e+du r6CKOoXGih/y5bsHCScAkZHkzo5suJNVucnBxdARAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/vh9Eu3aOzlWkbkA9nccIs3tVXQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyNWE5OGY1LTc4MDQtNDA5NC04Y2I3LTkzNDQ0NGQyMDUyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAH9UwDQYJKoZIhvcNAQELBQADggEBALtZ6J804wDUvM3SQWhTe1Rzf5k7 BKbK4DeQy3WaVBzbVNERPg0CDcQhpQ3l9vE8Iz3rZO7VjODdMsg+bEr5LPHqEddJ w8pyFrfE0KlnR7kRXIDQBb8ADQXfbBil++udHRjdaIpo4XgE1njQrYtcKv7N6XZD NikEMpgHdUtBPmEl2ppQdwcKJuxYRDFz/VGMZIcbIZU3cWJLtwys+PjUZk5rG3kj Aba19zQyrlh9CZQOVUUASBAkZQIR9IyzRMo3PcmpZTvqUdPVgS6WAXGPdBQQ/bkH lW3Rp2gxuUjEbXKQ+8j+bVv3w6al39ge1Db8FBhvMJgwahVUzpNAjS24yjI= -----END CERTIFICATE-----Generated at Sat Jun 13 07:12:31 2026 by rpki-client