$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01832973-ac77-4a26-8bd7-fc43bcf525a3.roa File: 01832973-ac77-4a26-8bd7-fc43bcf525a3.roa (raw, json) Hash identifier: hcG1Am5zUbQ3JtP0V5O5D6s/81hyUeZTtnwFUX7xHlQ= Subject key identifier: 3A:4E:D3:77:29:30:24:FF:60:A9:66:47:11:C4:70:50:B7:53:2A:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77BB11958B3A20C537B4B411B43ABA7A3569B6AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01832973-ac77-4a26-8bd7-fc43bcf525a3.roa Signing time: Sun 26 Jul 2026 00:00:11 +0000 ROA not before: Sun 26 Jul 2026 00:00:11 +0000 ROA not after: Sat 24 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.95.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bb:11:95:8b:3a:20:c5:37:b4:b4:11:b4:3a:ba:7a:35:69:b6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 26 00:00:11 2026 GMT Not After : Oct 24 23:59:59 2026 GMT Subject: serialNumber=21817d0d64e018d5325564bc38603e08a08a900fa5311bb3c2523fa648bad0b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:91:90:77:18:73:3e:de:65:55:c2:e0:c5: 68:be:5d:cd:fa:70:96:b3:62:67:4c:a0:84:ba:6a: 7b:97:2c:ca:61:00:8b:fb:68:c9:17:b8:d9:ec:f7: cb:3c:72:06:5d:d4:54:d4:0d:1d:23:e0:78:30:3b: 3a:93:5d:5a:38:41:b1:da:22:bb:4b:21:c3:a4:bb: 69:e3:fb:d6:c4:c7:04:55:60:39:6b:1b:0e:0c:d5: 8c:7f:83:93:8d:27:92:ce:4e:a2:75:0f:2f:8f:2b: a0:31:40:5e:01:8e:76:05:9b:e4:24:cb:db:70:6e: e5:8d:b7:3f:ce:7d:9e:a5:bf:3a:02:3e:1d:af:57: 2e:81:c8:9b:fd:63:a0:16:a9:54:75:00:3b:0c:62: 47:95:59:31:2a:08:3b:03:2c:99:be:e9:44:3c:60: 80:31:b3:37:8f:a4:72:ce:b6:dd:bf:7b:0a:d9:6e: f0:67:e9:32:c0:36:b0:9f:77:d4:e7:3a:b1:62:25: d0:f4:25:09:46:55:f2:fc:cf:20:eb:7c:ce:b4:dd: fb:ab:d8:1c:87:42:83:7a:03:62:47:db:53:78:fc: 83:b2:f4:39:b0:a5:b9:42:07:53:f7:f9:30:78:7b: 7d:d0:00:72:b8:45:d7:4f:41:cd:4f:7b:04:14:83: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4E:D3:77:29:30:24:FF:60:A9:66:47:11:C4:70:50:B7:53:2A:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01832973-ac77-4a26-8bd7-fc43bcf525a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.95.124.0/22 Signature Algorithm: sha256WithRSAEncryption b2:96:07:79:7c:41:fc:4e:be:af:c7:6b:8b:fb:5e:e6:b2:ff: 47:3b:33:8b:a6:42:54:65:11:6d:da:c9:55:68:63:8b:46:10: 2c:f2:5d:50:ca:fa:97:10:ca:e6:d2:69:bb:ad:f5:9c:be:fb: 6f:97:23:75:b8:3b:23:66:7f:df:5b:a9:8d:be:06:c2:a4:21: 8c:d3:6e:7a:61:ab:c6:0a:9a:8a:8c:44:cf:64:b0:03:f8:f2: 21:50:77:c2:6b:98:7a:5a:17:27:b1:a3:da:c4:d7:86:b6:f8: f0:7b:53:1f:ec:76:77:4b:85:e7:d1:2a:41:95:65:db:01:c9: 51:b0:e1:85:6a:04:fe:4e:50:f6:36:dd:fb:48:b2:71:51:80: 39:4e:7d:ff:b2:11:6f:59:68:74:cd:a9:e8:e6:b7:d1:19:63: a3:cb:7c:6c:dd:6a:98:e8:27:24:be:b5:39:69:93:9d:72:e7: 79:73:18:df:27:9f:bb:f3:7f:32:72:fe:1d:14:11:cf:80:1c: 9a:85:18:be:3c:2a:89:3c:9c:5e:18:21:0a:59:51:4b:8e:a5: 13:9a:e9:0c:af:86:56:b4:bf:ed:e3:59:81:0f:c9:4f:c7:e9: 42:c9:d2:b3:f7:de:09:b0:d3:e1:50:10:b3:f9:23:25:c3:09: ba:39:bc:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd7sRlYs6IMU3tLQRtDq6ejVptq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI2MDAwMDExWhcNMjYxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTgxN2QwZDY0ZTAxOGQ1MzI1NTY0YmMzODYwM2UwOGEw OGE5MDBmYTUzMTFiYjNjMjUyM2ZhNjQ4YmFkMGI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0RJGQdxhzPt5lVcLgxWi+Xc36cJazYmdMoIS6anuXLMph AIv7aMkXuNns98s8cgZd1FTUDR0j4HgwOzqTXVo4QbHaIrtLIcOku2nj+9bExwRV YDlrGw4M1Yx/g5ONJ5LOTqJ1Dy+PK6AxQF4BjnYFm+Qky9twbuWNtz/OfZ6lvzoC Ph2vVy6ByJv9Y6AWqVR1ADsMYkeVWTEqCDsDLJm+6UQ8YIAxszePpHLOtt2/ewrZ bvBn6TLANrCfd9TnOrFiJdD0JQlGVfL8zyDrfM603fur2ByHQoN6A2JH21N4/IOy 9DmwpblCB1P3+TB4e33QAHK4RddPQc1PewQUgzNFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOk7TdykwJP9gqWZHEcRwULdTKowwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxODMyOTczLWFjNzctNGEyNi04YmQ3LWZjNDNiY2Y1MjVhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAX3wwDQYJKoZIhvcNAQELBQADggEBALKWB3l8QfxOvq/Ha4v7Xuay/0c7 M4umQlRlEW3ayVVoY4tGECzyXVDK+pcQyubSabut9Zy++2+XI3W4OyNmf99bqY2+ BsKkIYzTbnphq8YKmoqMRM9ksAP48iFQd8JrmHpaFyexo9rE14a2+PB7Ux/sdndL hefRKkGVZdsByVGw4YVqBP5OUPY23ftIsnFRgDlOff+yEW9ZaHTNqejmt9EZY6PL fGzdapjoJyS+tTlpk51y53lzGN8nn7vzfzJy/h0UEc+AHJqFGL48Kok8nF4YIQpZ UUuOpROa6Qyvhla0v+3jWYEPyU/H6ULJ0rP33gmw0+FQELP5IyXDCbo5vO0= -----END CERTIFICATE-----Generated at Tue Jul 28 20:53:06 2026 by rpki-client