$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e25a521-cf1e-492e-b637-84836e14144a.roa File: 0e25a521-cf1e-492e-b637-84836e14144a.roa (raw, json) Hash identifier: DgjlunWWhBwKeXXwB7StG3k6qP1ywSwB5A7mvrrvhQM= Subject key identifier: 6A:3C:BA:E2:90:E1:8B:51:0E:59:C6:CB:E7:B9:35:30:FC:99:84:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: BD973E5CAF9D2E53E0B67ACD6FC917F173C61E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e25a521-cf1e-492e-b637-84836e14144a.roa Signing time: Mon 27 Jul 2026 00:32:04 +0000 ROA not before: Mon 27 Jul 2026 00:32:04 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 74.201.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bd:97:3e:5c:af:9d:2e:53:e0:b6:7a:cd:6f:c9:17:f1:73:c6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:32:04 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=9d3f071c8c3d63975e49a9271882cd6d8c138bb3b0752a43f1f06c1fd664f6ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:92:88:d1:f1:61:eb:6f:43:ba:2e:1f:aa:ab: 2f:90:a0:4f:56:10:0b:47:ff:55:87:f7:a3:ab:f7: e9:77:f5:3c:0b:46:69:ba:c6:48:47:8e:ca:68:81: 47:6f:ec:4e:bb:d2:d9:87:f3:dd:08:49:51:e0:48: e6:5b:3a:17:a1:86:b5:80:5d:02:e4:a1:70:7d:26: 1e:2c:f6:53:cb:34:45:68:09:d2:d9:30:b5:24:2b: ff:32:7d:e4:89:b3:9f:9b:f3:ff:47:3c:65:ee:4e: 8b:c2:ed:ba:27:6c:2f:f3:a7:3e:4b:f3:1d:61:87: 38:74:00:99:f7:9b:47:a1:fb:61:7a:c9:99:0b:f1: ca:88:bc:e9:81:b4:7e:bf:cd:af:37:bf:4c:85:2b: 76:f2:6d:aa:5d:78:0f:e6:b2:1c:40:a7:cc:0a:b4: af:07:85:28:dc:e6:0f:d1:a5:8e:60:97:5e:f1:4e: 47:04:cb:84:b9:0b:a3:25:b0:e9:9b:5b:a1:f5:6b: c8:35:c3:c6:28:58:5d:fc:95:3c:3b:35:76:60:bd: 6f:89:d0:c1:f1:6b:5c:db:91:40:9a:5a:34:a3:f5: 45:c4:fe:b4:fc:b0:a4:ef:89:6a:d5:12:55:6c:20: 3c:07:eb:86:b2:df:3b:af:90:d2:37:cf:84:12:2b: 70:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3C:BA:E2:90:E1:8B:51:0E:59:C6:CB:E7:B9:35:30:FC:99:84:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e25a521-cf1e-492e-b637-84836e14144a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.201.0.0/22 Signature Algorithm: sha256WithRSAEncryption a4:52:c3:2c:24:ce:38:e2:3f:7d:d4:4b:bc:8a:c9:1a:93:05: ee:24:97:54:ca:8f:6e:c2:82:45:76:59:66:f4:0e:07:ee:e7: f4:17:f0:96:1e:5f:60:77:b9:9a:95:54:63:3f:5c:b5:d2:05: e3:e1:e5:cf:b3:6f:9d:f9:d8:a0:f7:84:45:80:77:1d:3d:01: 5e:1c:e3:40:20:e8:21:25:4f:94:c7:44:a1:4c:e4:fc:d7:ea: fd:ed:0a:ef:33:03:5c:3e:3a:5c:bb:d7:bc:4d:46:ec:20:35: 1b:b8:92:58:6d:d0:98:bc:36:99:ee:99:ee:56:85:09:42:0a: 18:78:cc:4c:da:0e:d2:9d:d5:d3:c8:8e:b5:a0:4e:f2:24:da: 26:48:d9:94:07:60:fe:f4:aa:86:b6:95:8b:11:6a:36:07:b1: 20:76:10:e2:8f:0c:9e:7e:72:51:99:05:3b:9f:fa:b6:23:74: 2d:8e:39:58:01:cd:1a:07:1c:f0:71:af:da:58:ac:5f:80:a4: 7d:1b:cb:9b:38:61:b8:67:29:c0:9c:d7:3c:41:ce:c5:c3:a1: 5a:21:c4:b6:92:ae:16:50:01:c8:e9:fa:35:12:c2:91:89:1b: ce:50:cb:39:4f:b8:ea:ba:af:bc:08:1c:8e:d2:10:ca:06:5d: 72:d4:06:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAL2XPlyvnS5T4LZ6zW/JF/Fzxh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAzMjA0WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDNmMDcxYzhjM2Q2Mzk3NWU0OWE5MjcxODgyY2Q2ZDhj MTM4YmIzYjA3NTJhNDNmMWYwNmMxZmQ2NjRmNmVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbkojR8WHrb0O6Lh+qqy+QoE9WEAtH/1WH96Or9+l39TwL Rmm6xkhHjspogUdv7E670tmH890ISVHgSOZbOhehhrWAXQLkoXB9Jh4s9lPLNEVo CdLZMLUkK/8yfeSJs5+b8/9HPGXuTovC7bonbC/zpz5L8x1hhzh0AJn3m0eh+2F6 yZkL8cqIvOmBtH6/za83v0yFK3bybapdeA/mshxAp8wKtK8HhSjc5g/RpY5gl17x TkcEy4S5C6MlsOmbW6H1a8g1w8YoWF38lTw7NXZgvW+J0MHxa1zbkUCaWjSj9UXE /rT8sKTviWrVElVsIDwH64ay3zuvkNI3z4QSK3BVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUajy64pDhi1EOWcbL57k1MPyZhAAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlMjVhNTIxLWNmMWUtNDkyZS1iNjM3LTg0ODM2ZTE0MTQ0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJKyQAwDQYJKoZIhvcNAQELBQADggEBAKRSwywkzjjiP33US7yKyRqTBe4k l1TKj27CgkV2WWb0Dgfu5/QX8JYeX2B3uZqVVGM/XLXSBePh5c+zb5352KD3hEWA dx09AV4c40Ag6CElT5THRKFM5PzX6v3tCu8zA1w+Oly717xNRuwgNRu4klht0Ji8 Npnume5WhQlCChh4zEzaDtKd1dPIjrWgTvIk2iZI2ZQHYP70qoa2lYsRajYHsSB2 EOKPDJ5+clGZBTuf+rYjdC2OOVgBzRoHHPBxr9pYrF+ApH0by5s4YbhnKcCc1zxB zsXDoVohxLaSrhZQAcjp+jUSwpGJG85QyzlPuOq6r7wIHI7SEMoGXXLUBoo= -----END CERTIFICATE-----Generated at Tue Jul 28 18:26:44 2026 by rpki-client