$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20e3f877-bd11-4e04-9cdc-669e44f2b650.roa File: 20e3f877-bd11-4e04-9cdc-669e44f2b650.roa (raw, json) Hash identifier: nmMCZakenKoyIhMEhdqZr/+awdZD/FQBTkTsfhxhsr0= Subject key identifier: 6F:F9:05:60:7F:31:89:94:97:AD:B4:3E:70:45:0B:0E:C7:4B:2C:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7430AC83BCC64C4AEDA2A6F7F5EE84F5D9EF7E44 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20e3f877-bd11-4e04-9cdc-669e44f2b650.roa Signing time: Sun 26 Jul 2026 00:00:42 +0000 ROA not before: Sun 26 Jul 2026 00:00:42 +0000 ROA not after: Sat 24 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 32.197.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:30:ac:83:bc:c6:4c:4a:ed:a2:a6:f7:f5:ee:84:f5:d9:ef:7e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 26 00:00:42 2026 GMT Not After : Oct 24 23:59:59 2026 GMT Subject: serialNumber=b3cac565cd29e02b526625f342ca6fc07bc16f3e73a9a34bba6c83cb4a822556, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:c3:d0:8e:e7:da:ed:f5:46:70:a4:99:8e: d8:c7:1f:8e:d3:38:cd:48:42:74:6b:3c:74:5c:9d: a3:f1:1f:eb:69:ff:a4:35:c2:12:49:04:7c:e6:0e: 7a:90:69:fd:03:7a:68:fb:ed:f5:d0:02:94:d6:3b: 3a:20:2c:bf:6c:89:9f:a3:dd:48:1d:74:d2:29:1c: 24:62:5e:41:f2:72:ad:c6:48:c6:39:c4:35:68:a7: d9:25:17:2d:75:5f:4d:41:37:86:5e:6d:8e:bb:0a: 56:9b:17:63:25:87:df:8c:03:81:e9:5b:f9:74:69: 76:ef:83:91:0d:d2:ab:d4:a2:50:cc:9c:a4:3e:a5: eb:96:b2:a1:08:d9:90:a7:ad:15:a2:e5:c7:9e:19: fc:eb:f5:b6:5b:7a:af:23:a5:96:f9:7e:99:d1:bf: 1f:e8:7f:bb:68:a7:01:53:c9:13:4c:0f:d2:02:75: 35:48:7c:37:19:be:68:05:55:98:f2:bc:60:9f:ed: b6:74:d4:56:82:be:c0:21:40:55:9f:d0:77:f6:9c: 86:e4:c0:9d:1c:06:5f:84:02:b7:6e:db:1f:b6:05: d3:4b:8b:72:3d:11:47:13:40:35:49:70:39:a1:52: 88:9c:8e:f0:64:39:b1:c8:8f:f2:97:47:8c:35:a0: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:05:60:7F:31:89:94:97:AD:B4:3E:70:45:0B:0E:C7:4B:2C:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20e3f877-bd11-4e04-9cdc-669e44f2b650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.197.114.0/23 Signature Algorithm: sha256WithRSAEncryption 35:bc:49:c4:19:34:12:a0:79:b5:c1:73:d7:ce:60:3e:58:c3: 8d:14:2b:63:8f:77:48:eb:20:89:65:c8:12:f0:67:eb:34:89: 08:a4:77:24:8a:83:a9:98:49:0b:69:23:59:ef:01:b3:13:8b: 9b:32:44:51:2f:96:ca:ab:4b:c7:d1:2a:96:e9:55:c6:95:b4: db:e4:e4:71:1a:86:ec:d5:7e:12:be:69:ad:0c:bb:20:a8:3e: 73:4a:35:4f:2c:77:ee:51:c2:c6:ff:6e:f2:55:60:53:e0:73: 37:83:29:63:8c:ea:eb:bd:c4:19:5c:be:e6:b5:73:f6:ab:8a: 73:33:ae:01:fe:38:da:84:15:38:87:63:41:60:59:82:7d:a8: 6f:ab:31:d1:53:c8:cd:17:4d:33:e0:e1:ca:af:87:75:68:f0: 3b:08:6e:31:39:d8:d8:ff:50:1c:91:1c:aa:de:25:2f:65:6b: 7b:48:04:40:0c:aa:8c:93:52:65:cf:e4:54:63:af:c1:63:76: 15:5f:1a:97:a0:38:4e:58:99:02:c1:6f:83:5c:df:10:8a:e1: 7d:12:58:08:55:27:c5:0e:a2:e6:51:8f:bc:64:f0:a0:02:c4: f4:f9:87:f9:83:4e:46:2e:fd:f1:aa:6e:f7:91:99:3a:4f:97: ea:b7:f7:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdDCsg7zGTErtoqb39e6E9dnvfkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI2MDAwMDQyWhcNMjYxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2NhYzU2NWNkMjllMDJiNTI2NjI1ZjM0MmNhNmZjMDdi YzE2ZjNlNzNhOWEzNGJiYTZjODNjYjRhODIyNTU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNRMPQjufa7fVGcKSZjtjHH47TOM1IQnRrPHRcnaPxH+tp /6Q1whJJBHzmDnqQaf0Demj77fXQApTWOzogLL9siZ+j3UgddNIpHCRiXkHycq3G SMY5xDVop9klFy11X01BN4ZebY67ClabF2Mlh9+MA4HpW/l0aXbvg5EN0qvUolDM nKQ+peuWsqEI2ZCnrRWi5ceeGfzr9bZbeq8jpZb5fpnRvx/of7topwFTyRNMD9IC dTVIfDcZvmgFVZjyvGCf7bZ01FaCvsAhQFWf0Hf2nIbkwJ0cBl+EArdu2x+2BdNL i3I9EUcTQDVJcDmhUoicjvBkObHIj/KXR4w1oNW7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb/kFYH8xiZSXrbQ+cEULDsdLLJwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwZTNmODc3LWJkMTEtNGUwNC05Y2RjLTY2OWU0NGYyYjY1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEgxXIwDQYJKoZIhvcNAQELBQADggEBADW8ScQZNBKgebXBc9fOYD5Yw40U K2OPd0jrIIllyBLwZ+s0iQikdySKg6mYSQtpI1nvAbMTi5syRFEvlsqrS8fRKpbp VcaVtNvk5HEahuzVfhK+aa0MuyCoPnNKNU8sd+5Rwsb/bvJVYFPgczeDKWOM6uu9 xBlcvua1c/arinMzrgH+ONqEFTiHY0FgWYJ9qG+rMdFTyM0XTTPg4cqvh3Vo8DsI bjE52Nj/UByRHKreJS9la3tIBEAMqoyTUmXP5FRjr8FjdhVfGpegOE5YmQLBb4Nc 3xCK4X0SWAhVJ8UOouZRj7xk8KACxPT5h/mDTkYu/fGqbveRmTpPl+q398I= -----END CERTIFICATE-----Generated at Tue Jul 28 14:50:12 2026 by rpki-client