$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eee3b190-4e8e-4367-82e8-8998a84c6de8.roa File: eee3b190-4e8e-4367-82e8-8998a84c6de8.roa (raw, json) Hash identifier: YELN5o8Ig0oNP4+HKh8Vb0aoNE7I3spEkUkXPec/LB4= Subject key identifier: 27:C8:48:C4:EC:44:F6:F0:87:1A:DC:9E:31:DF:38:E0:CF:BA:79:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6765C80CA4EE0FCB705EF71BCE21219EEEF82D6A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eee3b190-4e8e-4367-82e8-8998a84c6de8.roa Signing time: Fri 24 Jul 2026 00:50:46 +0000 ROA not before: Fri 24 Jul 2026 00:50:46 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:65:c8:0c:a4:ee:0f:cb:70:5e:f7:1b:ce:21:21:9e:ee:f8:2d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:50:46 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=a7dce179e43aac9731b6930cbadb412eb2d54ea402ba79fda85ceb9f51187a4f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:d6:8c:ec:6d:78:03:34:79:7d:33:7d:4f: c1:f3:96:94:32:6d:7e:00:a5:6f:4b:5e:ed:71:9a: 3a:20:94:3b:dc:d6:89:06:97:d4:ad:a7:88:35:ad: 1f:66:00:2b:f4:e2:9b:62:16:3e:c7:0b:c9:69:2e: 38:98:d1:3e:ed:f0:27:79:35:da:21:af:ea:80:09: 44:e5:fd:bf:6e:5a:f4:33:af:65:2a:7a:99:40:0f: 88:46:5b:2e:a7:09:05:88:1e:52:66:f5:38:fe:c7: 67:05:23:9d:9c:5a:b6:b6:d8:51:4e:69:f0:db:80: 51:81:15:cf:a6:d4:c9:dd:cc:4e:f5:5f:22:3c:b2: 73:cb:50:ff:87:97:d1:aa:c8:00:59:31:fa:bf:66: 2d:c0:db:8d:dc:fd:c1:39:ae:52:73:7a:8c:f2:df: 37:8d:20:8e:99:02:09:e7:06:c4:1e:f1:a7:22:ea: 6e:e4:bd:ba:bc:06:73:3b:e5:f6:52:6a:c1:3d:df: 7a:12:a0:b6:b1:6d:64:91:44:57:73:90:c5:d0:d6: 05:94:24:0a:51:a1:23:b9:a7:90:18:61:61:c6:87: 48:f5:c6:62:43:45:41:a6:97:64:2c:7e:b5:71:d9: bc:af:6d:1c:0f:b8:18:0d:32:6d:d8:98:2d:47:8f: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C8:48:C4:EC:44:F6:F0:87:1A:DC:9E:31:DF:38:E0:CF:BA:79:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eee3b190-4e8e-4367-82e8-8998a84c6de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.64.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:d4:cb:5a:12:0c:8a:d3:20:63:e5:61:aa:19:0e:b7:06:1e: f0:b1:47:ca:22:20:40:67:57:32:9b:5e:a0:4d:36:ef:9e:05: ea:c3:29:ea:d0:40:46:08:9b:af:30:d2:c4:47:39:d3:23:4c: 1d:f0:d2:da:b4:44:7c:08:b3:72:eb:21:4c:74:93:d1:6b:93: 13:31:dc:fe:52:eb:c8:1c:0c:d8:6a:95:cf:68:5c:cc:b3:53: f5:d3:fb:71:bf:9e:60:07:94:57:8d:c4:02:01:bb:2f:b7:78: 64:5b:aa:2e:89:e1:c1:d2:18:d1:9a:db:7d:a0:cb:bf:f3:a2: 98:21:65:5d:8d:0a:6c:ef:6a:33:b3:e5:35:0c:7d:43:5c:cb: d8:0d:da:cc:52:23:50:46:b8:74:72:1e:f8:52:e8:57:42:47: ae:f8:e0:91:a2:a5:ce:ab:7d:33:4f:1e:6b:36:8e:2e:b8:08: e9:96:7e:f1:90:3d:f3:06:66:58:c4:8a:04:c0:76:1c:73:f4: b8:1c:c4:b6:d0:44:b5:2d:69:01:5a:b4:61:9b:ec:66:24:96: 8f:22:ac:59:8f:a5:c2:da:51:1f:6c:14:8e:b8:66:77:cb:5d: c9:7e:9a:00:90:3f:57:e9:37:f9:e2:e1:fc:43:ff:e4:1e:5b: 41:da:c5:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ2XIDKTuD8twXvcbziEhnu74LWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDA1MDQ2WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2RjZTE3OWU0M2FhYzk3MzFiNjkzMGNiYWRiNDEyZWIy ZDU0ZWE0MDJiYTc5ZmRhODVjZWI5ZjUxMTg3YTRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2PNaM7G14AzR5fTN9T8HzlpQybX4ApW9LXu1xmjoglDvc 1okGl9Stp4g1rR9mACv04ptiFj7HC8lpLjiY0T7t8Cd5Ndohr+qACUTl/b9uWvQz r2UqeplAD4hGWy6nCQWIHlJm9Tj+x2cFI52cWra22FFOafDbgFGBFc+m1MndzE71 XyI8snPLUP+Hl9GqyABZMfq/Zi3A243c/cE5rlJzeozy3zeNII6ZAgnnBsQe8aci 6m7kvbq8BnM75fZSasE933oSoLaxbWSRRFdzkMXQ1gWUJApRoSO5p5AYYWHGh0j1 xmJDRUGml2QsfrVx2byvbRwPuBgNMm3YmC1Hjya1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ8hIxOxE9vCHGtyeMd844M+6ebgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlZTNiMTkwLTRlOGUtNDM2Ny04MmU4LTg5OThhODRjNmRlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAS4SEAwDQYJKoZIhvcNAQELBQADggEBAAzUy1oSDIrTIGPlYaoZDrcGHvCx R8oiIEBnVzKbXqBNNu+eBerDKerQQEYIm68w0sRHOdMjTB3w0tq0RHwIs3LrIUx0 k9FrkxMx3P5S68gcDNhqlc9oXMyzU/XT+3G/nmAHlFeNxAIBuy+3eGRbqi6J4cHS GNGa232gy7/zopghZV2NCmzvajOz5TUMfUNcy9gN2sxSI1BGuHRyHvhS6FdCR674 4JGipc6rfTNPHms2ji64COmWfvGQPfMGZljEigTAdhxz9LgcxLbQRLUtaQFatGGb 7GYklo8irFmPpcLaUR9sFI64ZnfLXcl+mgCQP1fpN/ni4fxD/+QeW0HaxQo= -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:44 2026 by rpki-client