$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d33436-53d2-4ebd-bddc-4f8b317802ba.roa File: 28d33436-53d2-4ebd-bddc-4f8b317802ba.roa (raw, json) Hash identifier: xl+f9eRnq71esbLwMysdr6bkE692yQff+s6Xf3Ip8ns= Subject key identifier: AD:AC:93:97:0A:D5:D3:9D:F4:9C:35:D1:CD:1B:34:C8:D5:FB:73:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A5140A3676BC8BDE3CE9A69D2AB35BE6A86255D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d33436-53d2-4ebd-bddc-4f8b317802ba.roa Signing time: Mon 27 Jul 2026 00:40:10 +0000 ROA not before: Mon 27 Jul 2026 00:40:10 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.22.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:51:40:a3:67:6b:c8:bd:e3:ce:9a:69:d2:ab:35:be:6a:86:25:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:40:10 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=5fa009288f071d4d24c0c9a53ad315ca21b29958d0e3dea85d9759aa0965c713, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:46:0e:5c:92:03:57:58:10:84:8c:81:d2: 65:ef:6f:99:ce:1e:df:ef:c8:07:97:e0:81:b1:11: 35:d9:a3:96:20:67:4a:25:cf:16:0b:d6:d5:be:f3: a6:b6:01:c5:76:f6:7e:25:d4:6d:85:8e:35:e2:4f: 3d:3b:6c:ad:ce:4a:b8:bc:20:c8:de:eb:b1:e6:68: 4c:64:33:cb:3c:51:bc:91:93:e4:27:b2:41:b4:c1: 90:2e:42:21:e0:5d:05:c1:a5:52:31:fd:4d:28:25: 75:26:b4:62:5a:5f:d9:d5:4b:a4:33:8f:6c:ba:c1: 92:2d:4d:e9:aa:26:61:ba:2b:d9:86:80:6e:bb:b0: 7b:4a:0f:0d:3b:ed:80:43:ee:ea:a1:07:17:90:14: 96:f1:f0:f1:71:cf:cf:42:fd:0a:a8:08:9e:2b:3b: 54:bf:a6:d2:d2:0e:3a:c5:90:67:e7:90:69:3a:dd: 89:57:11:76:7a:41:f8:47:5a:11:85:42:4d:1b:cc: 82:6f:90:ea:36:5e:1a:68:d1:02:38:f8:b6:1b:e0: 1f:05:74:01:fc:ee:68:6f:3d:59:ef:b5:97:2f:ff: ef:fc:8b:d5:dc:a9:e3:d0:d9:3f:c3:56:be:ed:b1: 13:5d:1d:4a:b8:e7:e9:55:71:47:c3:6c:e2:8f:2f: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AC:93:97:0A:D5:D3:9D:F4:9C:35:D1:CD:1B:34:C8:D5:FB:73:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d33436-53d2-4ebd-bddc-4f8b317802ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.22.0.0/17 Signature Algorithm: sha256WithRSAEncryption c4:b9:ce:af:77:67:83:f8:d8:b8:60:2b:03:9a:31:83:a1:27: 4f:f7:88:f5:0a:56:0e:69:e5:da:ca:0a:b2:52:33:06:51:c9: 51:59:b7:b0:25:72:fa:96:05:99:e4:03:31:5a:d5:5f:73:ae: 36:46:92:e9:35:c5:d7:d7:44:4b:51:64:0a:24:31:25:2a:86: a7:70:2f:51:9a:46:95:ee:61:43:45:e8:9d:8b:39:6e:c9:5c: 69:ae:f2:00:c0:75:5b:bf:20:ef:9b:b2:87:d6:b8:76:b6:1a: df:f7:b9:e9:7b:5d:33:85:08:5a:18:f9:37:b3:13:4e:f8:59: 90:81:f3:55:a4:46:a5:f6:a3:35:cd:15:21:9b:45:b7:cc:a2: 5d:de:24:08:f8:3f:53:38:86:52:99:9f:c8:2c:b6:e4:23:d6: 92:b1:a1:a8:2a:82:de:ef:cc:67:30:3b:81:b3:cd:f2:e9:de: 1c:c5:2d:fc:22:b8:98:fe:74:1a:45:26:d5:03:60:3a:af:26: b3:18:08:cb:1f:44:43:f7:35:29:2a:fd:24:3d:33:d5:f0:04: 9d:cb:bc:4e:43:3d:c3:a3:d0:49:a8:f3:25:52:f9:6a:c6:51: f4:12:6b:84:df:82:be:e9:cf:63:2f:7e:b2:31:98:0e:8d:cb: b7:83:26:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUalFAo2dryL3jzppp0qs1vmqGJV0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDA0MDEwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmEwMDkyODhmMDcxZDRkMjRjMGM5YTUzYWQzMTVjYTIx YjI5OTU4ZDBlM2RlYTg1ZDk3NTlhYTA5NjVjNzEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKmUYOXJIDV1gQhIyB0mXvb5nOHt/vyAeX4IGxETXZo5Yg Z0olzxYL1tW+86a2AcV29n4l1G2FjjXiTz07bK3OSri8IMje67HmaExkM8s8UbyR k+QnskG0wZAuQiHgXQXBpVIx/U0oJXUmtGJaX9nVS6Qzj2y6wZItTemqJmG6K9mG gG67sHtKDw077YBD7uqhBxeQFJbx8PFxz89C/QqoCJ4rO1S/ptLSDjrFkGfnkGk6 3YlXEXZ6QfhHWhGFQk0bzIJvkOo2Xhpo0QI4+LYb4B8FdAH87mhvPVnvtZcv/+/8 i9XcqePQ2T/DVr7tsRNdHUq45+lVcUfDbOKPL+qxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrayTlwrV0530nDXRzRs0yNX7c4MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4ZDMzNDM2LTUzZDItNGViZC1iZGRjLTRmOGIzMTc4MDJiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdFFgAwDQYJKoZIhvcNAQELBQADggEBAMS5zq93Z4P42LhgKwOaMYOhJ0/3 iPUKVg5p5drKCrJSMwZRyVFZt7AlcvqWBZnkAzFa1V9zrjZGkuk1xdfXREtRZAok MSUqhqdwL1GaRpXuYUNF6J2LOW7JXGmu8gDAdVu/IO+bsofWuHa2Gt/3uel7XTOF CFoY+TezE074WZCB81WkRqX2ozXNFSGbRbfMol3eJAj4P1M4hlKZn8gstuQj1pKx oagqgt7vzGcwO4GzzfLp3hzFLfwiuJj+dBpFJtUDYDqvJrMYCMsfREP3NSkq/SQ9 M9XwBJ3LvE5DPcOj0Emo8yVS+WrGUfQSa4Tfgr7pz2MvfrIxmA6Ny7eDJqA= -----END CERTIFICATE-----Generated at Tue Jul 28 17:08:42 2026 by rpki-client