$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b418e2b-a02b-44b7-8565-1cbe6f7f1201.roa File: 0b418e2b-a02b-44b7-8565-1cbe6f7f1201.roa (raw, json) Hash identifier: HzOstIuExKh1yBGWyGnrV0pC8KdZ25hhFJTouXERcok= Subject key identifier: B5:75:6E:C1:31:A4:E8:2D:1D:FE:15:A2:98:FE:42:25:1C:AB:5C:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F104EE0E2456DFAFD21B823311CF2DBE11B600E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b418e2b-a02b-44b7-8565-1cbe6f7f1201.roa Signing time: Sat 25 Jul 2026 00:31:29 +0000 ROA not before: Sat 25 Jul 2026 00:31:29 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:10:4e:e0:e2:45:6d:fa:fd:21:b8:23:31:1c:f2:db:e1:1b:60:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:31:29 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=e2c2ca5ce00aab512071e150ace8c5d48d6e98f8969a98e1e45578ba7c85bc2f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:30:3a:51:57:5c:36:6c:24:02:6f:69:34: 47:eb:45:a0:7c:f2:e2:90:c6:42:e0:85:51:88:42: 96:6c:86:52:c7:1b:9b:e9:eb:5e:12:cd:8f:bb:ea: 1d:45:78:b6:ee:18:a0:91:24:3a:78:3a:8d:c1:97: 6b:6a:2c:26:d5:32:d8:33:26:45:e7:fc:a5:2d:8c: 7a:32:8e:32:b5:22:9e:12:38:ae:62:af:ae:78:1f: 52:65:7b:8a:37:bf:08:1b:1b:91:5d:7d:54:df:aa: 41:ac:95:aa:d0:70:d2:1a:83:55:83:87:fd:31:bc: ff:62:91:13:d1:7c:46:9e:bc:a3:56:d8:fb:47:66: 4a:24:54:66:92:2e:fb:43:a4:c1:b8:22:b9:5e:f6: 6e:a3:a6:88:f0:8a:b8:01:75:9b:90:e8:0b:4f:8e: a5:54:9e:75:85:5e:0b:3e:5f:40:51:80:a5:68:29: 8c:a2:2a:39:ef:d5:db:32:e2:cd:1a:16:69:ef:f7: 0a:58:28:a8:80:7d:a7:30:4a:aa:34:21:4d:b5:d8: e5:47:84:aa:c9:b8:79:22:8a:95:9c:cb:48:c9:d2: 93:19:4e:33:6f:f3:d5:85:e5:ee:64:0c:35:f0:78: 30:7b:c3:92:50:a8:d6:8c:40:cf:d4:a7:42:2e:69: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:75:6E:C1:31:A4:E8:2D:1D:FE:15:A2:98:FE:42:25:1C:AB:5C:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b418e2b-a02b-44b7-8565-1cbe6f7f1201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.124.0/23 Signature Algorithm: sha256WithRSAEncryption b3:59:e7:f6:bf:93:af:19:85:aa:0d:36:4e:96:8d:db:27:05: c3:d7:e8:1d:31:47:9a:1a:5c:8d:dd:a4:c4:32:41:1f:6f:be: 58:8a:76:83:b7:f6:3c:15:87:34:b1:f2:af:bf:df:15:78:26: a6:6e:08:02:b5:60:57:52:a3:70:0d:1b:f4:7b:ed:74:d7:b2: b6:7e:12:6a:52:7a:bc:c4:1b:ce:0b:93:6b:00:02:ce:06:60: 8b:3f:ff:45:47:75:58:e5:bf:60:77:2e:dd:98:20:47:9f:31: 0e:0e:54:a5:65:93:1d:46:3d:88:3d:2d:5f:42:f6:2f:c5:6b: 06:6c:ae:a9:50:cc:93:0b:64:9b:28:35:5e:66:c7:4d:6e:9d: 1b:3c:fc:e8:d1:db:d6:8b:20:7e:7c:95:28:e2:21:66:1c:85: 91:ae:00:2a:a4:7c:54:45:15:ae:52:68:da:d2:c2:97:33:77: b2:77:31:98:cf:58:a4:8e:ad:c8:9f:92:d9:79:c2:66:00:20: 26:c2:eb:44:bd:3b:f9:7d:10:96:10:a2:0a:cb:84:34:ef:91: fb:87:f6:13:31:1d:3d:c1:b5:e6:07:ed:43:18:09:a3:ff:5a: 8e:d1:2a:74:a7:49:ed:22:c5:c0:cb:b0:bc:6a:ce:da:9e:6e: 55:23:87:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPxBO4OJFbfr9IbgjMRzy2+EbYA4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAzMTI5WhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmMyY2E1Y2UwMGFhYjUxMjA3MWUxNTBhY2U4YzVkNDhk NmU5OGY4OTY5YTk4ZTFlNDU1NzhiYTdjODViYzJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVQjA6UVdcNmwkAm9pNEfrRaB88uKQxkLghVGIQpZshlLH G5vp614SzY+76h1FeLbuGKCRJDp4Oo3Bl2tqLCbVMtgzJkXn/KUtjHoyjjK1Ip4S OK5ir654H1Jle4o3vwgbG5FdfVTfqkGslarQcNIag1WDh/0xvP9ikRPRfEaevKNW 2PtHZkokVGaSLvtDpMG4Irle9m6jpojwirgBdZuQ6AtPjqVUnnWFXgs+X0BRgKVo KYyiKjnv1dsy4s0aFmnv9wpYKKiAfacwSqo0IU212OVHhKrJuHkiipWcy0jJ0pMZ TjNv89WF5e5kDDXweDB7w5JQqNaMQM/Up0IuaYodAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtXVuwTGk6C0d/hWimP5CJRyrXMQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiNDE4ZTJiLWEwMmItNDRiNy04NTY1LTFjYmU2ZjdmMTIwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlnwwDQYJKoZIhvcNAQELBQADggEBALNZ5/a/k68ZhaoNNk6WjdsnBcPX 6B0xR5oaXI3dpMQyQR9vvliKdoO39jwVhzSx8q+/3xV4JqZuCAK1YFdSo3ANG/R7 7XTXsrZ+EmpSerzEG84Lk2sAAs4GYIs//0VHdVjlv2B3Lt2YIEefMQ4OVKVlkx1G PYg9LV9C9i/FawZsrqlQzJMLZJsoNV5mx01unRs8/OjR29aLIH58lSjiIWYchZGu ACqkfFRFFa5SaNrSwpczd7J3MZjPWKSOrcifktl5wmYAICbC60S9O/l9EJYQogrL hDTvkfuH9hMxHT3BteYH7UMYCaP/Wo7RKnSnSe0ixcDLsLxqztqeblUjh5U= -----END CERTIFICATE-----Generated at Tue Jul 28 16:01:45 2026 by rpki-client