$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d8bb395-f625-43f1-9791-c1ec39d964a9.roa File: 0d8bb395-f625-43f1-9791-c1ec39d964a9.roa (raw, json) Hash identifier: aRxV94cY01tCaSTIL/5az08eeDZN2G1arA4KKowrVBc= Subject key identifier: 7E:75:69:12:58:20:C8:60:76:98:E6:64:EC:A7:FB:E0:B0:86:A4:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 099A62B3DB721B7893E6855A360BFF4D58ACAD8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d8bb395-f625-43f1-9791-c1ec39d964a9.roa Signing time: Tue 28 Jul 2026 00:11:16 +0000 ROA not before: Tue 28 Jul 2026 00:11:16 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 125.0.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9a:62:b3:db:72:1b:78:93:e6:85:5a:36:0b:ff:4d:58:ac:ad:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:11:16 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=b40c5cb410b145d9736a087e56f3f0f4e81af2575129b9498cb7c92a636ca84f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:fb:c6:7f:2e:70:1b:52:d5:5e:d6:6e:0b: c3:10:7f:7b:38:b5:7c:37:23:dc:ad:1e:3a:00:d8: 25:c4:a7:9b:18:bd:b3:1b:d9:ef:5a:af:25:f6:db: 13:25:15:8f:cb:5a:02:34:8b:0e:45:74:79:6c:d0: 24:b9:62:07:2f:a7:35:6b:5f:08:b2:09:cc:8f:1a: fd:3b:a3:c4:bb:e3:79:2b:c0:1f:fb:7a:8e:79:11: 9a:26:c3:c1:1d:ed:8a:b8:0f:db:d8:7f:ba:25:37: f9:e8:08:72:25:86:38:67:48:c9:8b:2b:12:b9:3d: 81:c3:fb:87:96:75:1d:6c:e9:c0:d9:58:4d:d9:6d: 57:c5:ce:ef:04:2f:6b:b1:a2:49:f3:32:ac:6c:ac: 81:89:05:6e:53:6a:1d:2d:52:9b:b2:73:9d:ac:96: 43:0f:3f:73:66:e4:db:1c:c7:b7:0d:85:ea:f3:32: 17:84:d2:fd:4e:a9:cf:59:57:3b:38:35:a1:bc:70: a7:b6:cf:d4:f4:0c:47:5d:fa:53:a8:1f:9c:c1:6b: 29:16:ff:84:3b:53:92:92:98:51:2e:31:93:c7:67: 72:31:47:52:34:02:ee:37:ed:23:40:c2:c4:1e:c2: 99:d6:f6:18:6b:cd:5d:39:fc:34:eb:f7:f2:48:9a: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:75:69:12:58:20:C8:60:76:98:E6:64:EC:A7:FB:E0:B0:86:A4:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d8bb395-f625-43f1-9791-c1ec39d964a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.0.0.0/18 Signature Algorithm: sha256WithRSAEncryption 95:f6:83:43:19:5b:be:c2:5d:27:ee:6f:19:37:f3:fe:13:e9: 39:fb:d7:f2:3d:38:1a:ab:9d:a9:1d:fd:04:99:2a:24:cf:c3: b3:e8:de:0f:b5:b7:5d:ba:0d:96:d3:a6:9a:42:6b:c7:ab:13: 94:b6:79:bc:8f:3b:d3:02:1b:2e:dc:fb:2c:34:a3:8c:c1:6f: cf:78:63:a9:b6:56:db:6c:f2:72:cd:60:28:27:0e:c0:89:08: a7:9d:e0:d2:28:d4:3c:27:c7:20:cb:76:a0:93:b4:df:16:c8: fe:b1:58:1a:2b:3d:2a:4e:30:06:4e:c5:c4:5a:ac:ae:fc:9b: 05:cd:9e:d4:f4:6a:ad:b4:fe:a1:3b:e0:95:f0:79:19:b1:9a: d6:45:d6:fc:1c:75:e4:8b:0c:0d:8f:60:0f:4e:6d:8a:27:0b: cd:4d:d7:52:90:aa:48:34:a1:f6:ce:8c:1a:e1:aa:36:65:01: 1d:ac:1b:3c:fc:b5:fa:57:62:bb:3e:24:12:33:56:3f:ac:19: b0:a8:96:2d:5e:8d:95:c6:d3:6c:e6:f0:4a:37:ad:5f:84:1b: bf:f8:70:aa:06:e8:be:76:39:2d:3d:2e:89:a0:d6:11:06:cd: 90:f9:9b:9f:62:68:be:72:e1:63:87:4c:41:95:bd:10:fd:93: 46:0c:f3:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCZpis9tyG3iT5oVaNgv/TVisrYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAxMTE2WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDBjNWNiNDEwYjE0NWQ5NzM2YTA4N2U1NmYzZjBmNGU4 MWFmMjU3NTEyOWI5NDk4Y2I3YzkyYTYzNmNhODRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1UvvGfy5wG1LVXtZuC8MQf3s4tXw3I9ytHjoA2CXEp5sY vbMb2e9aryX22xMlFY/LWgI0iw5FdHls0CS5YgcvpzVrXwiyCcyPGv07o8S743kr wB/7eo55EZomw8Ed7Yq4D9vYf7olN/noCHIlhjhnSMmLKxK5PYHD+4eWdR1s6cDZ WE3ZbVfFzu8EL2uxoknzMqxsrIGJBW5Tah0tUpuyc52slkMPP3Nm5Nscx7cNherz MheE0v1Oqc9ZVzs4NaG8cKe2z9T0DEdd+lOoH5zBaykW/4Q7U5KSmFEuMZPHZ3Ix R1I0Au437SNAwsQewpnW9hhrzV05/DTr9/JImq2zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfnVpElggyGB2mOZk7Kf74LCGpDYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkOGJiMzk1LWY2MjUtNDNmMS05NzkxLWMxZWMzOWQ5NjRhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ9AAAwDQYJKoZIhvcNAQELBQADggEBAJX2g0MZW77CXSfubxk38/4T6Tn7 1/I9OBqrnakd/QSZKiTPw7Po3g+1t126DZbTpppCa8erE5S2ebyPO9MCGy7c+yw0 o4zBb894Y6m2Vtts8nLNYCgnDsCJCKed4NIo1DwnxyDLdqCTtN8WyP6xWBorPSpO MAZOxcRarK78mwXNntT0aq20/qE74JXweRmxmtZF1vwcdeSLDA2PYA9ObYonC81N 11KQqkg0ofbOjBrhqjZlAR2sGzz8tfpXYrs+JBIzVj+sGbColi1ejZXG02zm8Eo3 rV+EG7/4cKoG6L52OS09Lomg1hEGzZD5m59iaL5y4WOHTEGVvRD9k0YM8zs= -----END CERTIFICATE-----Generated at Tue Jul 28 14:54:14 2026 by rpki-client