$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa File: 33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa (raw, json) Hash identifier: XpFR7kZi3SQ+FHSCDxJd7Er8wzjalww2NCAibgEnjYE= Subject key identifier: CE:F1:D7:B4:F3:0D:27:11:07:42:23:9D:56:2A:6C:C3:7B:5C:20:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B967CB50F0E6DE063FDB6E140B6864681781A05 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa Signing time: Fri 24 Jul 2026 00:30:14 +0000 ROA not before: Fri 24 Jul 2026 00:30:14 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 149.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:96:7c:b5:0f:0e:6d:e0:63:fd:b6:e1:40:b6:86:46:81:78:1a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:30:14 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=32e1efe36ec6ab157b9d37061d8dc56353ad8d3c5fcaebbd7a22ece70565b225, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:89:00:8e:7f:3b:13:9f:a3:20:2a:da:e0: b0:ae:9a:97:3a:6f:47:3c:03:d0:04:1b:f4:ab:a3: 48:70:5a:92:24:60:fd:d7:d0:3a:02:0c:5b:cf:7a: 5e:48:8c:93:7f:11:90:83:e6:b0:7e:cd:6e:58:5f: a5:18:87:4a:1c:0a:9c:39:7e:bf:0d:b0:29:16:f9: 69:bc:fc:58:c5:42:3a:51:25:0c:8a:23:30:0a:5d: 33:12:cf:3e:66:84:4c:f2:7f:20:fc:58:f8:10:d1: 6a:70:fe:43:d1:40:3a:4d:8f:ce:6d:66:c4:45:ad: ce:05:cd:4a:78:57:d2:e7:cf:28:a7:4e:83:48:00: 73:2a:3d:b8:15:93:8e:10:6e:f7:fc:3b:d9:c0:18: 3d:1e:87:58:9e:20:5a:fb:38:e6:75:f9:9f:cf:8d: 1f:df:a6:02:35:dc:78:94:6f:37:95:06:42:db:80: 2f:85:e0:2d:ac:cd:19:34:f1:57:1d:d6:78:13:a4: 0c:9c:12:ed:ce:c7:5a:a9:46:e0:6f:9e:13:90:90: cb:05:6a:50:f2:a5:11:d5:31:19:53:95:be:cd:8b: d9:b1:94:f5:34:c2:f6:9e:a1:70:d1:e1:1e:7e:26: ae:90:f8:ce:ec:2e:f1:65:78:04:5f:bb:e3:03:b4: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F1:D7:B4:F3:0D:27:11:07:42:23:9D:56:2A:6C:C3:7B:5C:20:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption a4:52:32:47:0a:ba:0c:95:3e:99:b2:5b:f2:13:bc:d7:d2:a5: 5d:a5:ef:bd:c5:37:92:8f:f4:94:67:f3:9a:c9:17:f3:33:2d: da:2f:1e:6e:03:0e:c1:af:9b:88:84:20:af:45:2b:bd:f2:2a: a7:b4:2a:69:2d:4e:ab:13:a8:aa:35:16:77:8f:d6:ce:f9:19: 9e:e3:2b:6a:f2:a1:a9:85:1b:f0:61:00:c3:79:99:7a:06:fc: 26:2c:35:f9:16:6b:0d:86:2b:e8:48:14:66:bf:5d:3d:15:f1: 10:f5:e6:af:0f:ca:fd:64:87:41:c7:10:3d:e3:92:7f:da:b4: fd:6d:63:45:35:26:8f:76:57:25:38:21:69:12:e9:e7:3b:3d: 4e:f7:71:31:bb:d6:a1:28:1d:00:e6:1f:e3:2b:7a:c5:8e:18: b9:ac:3a:64:d1:0b:75:39:c2:40:8f:6d:74:e2:e0:c2:7c:9e: 4f:7a:0c:27:e2:3e:7d:19:de:5f:5d:5e:ed:65:83:d7:de:68: d6:9c:70:98:e4:b0:1b:87:6d:ce:18:43:f2:a1:cd:db:5c:54: c0:d5:b9:f7:e7:cd:04:6a:2d:7c:7d:3e:45:e2:75:4d:63:07: 25:72:8e:c8:03:91:a6:b1:b5:6d:c0:8d:24:c9:d2:51:76:92: 5a:91:83:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW5Z8tQ8ObeBj/bbhQLaGRoF4GgUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAzMDE0WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmUxZWZlMzZlYzZhYjE1N2I5ZDM3MDYxZDhkYzU2MzUz YWQ4ZDNjNWZjYWViYmQ3YTIyZWNlNzA1NjViMjI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX+IkAjn87E5+jICra4LCumpc6b0c8A9AEG/Sro0hwWpIk YP3X0DoCDFvPel5IjJN/EZCD5rB+zW5YX6UYh0ocCpw5fr8NsCkW+Wm8/FjFQjpR JQyKIzAKXTMSzz5mhEzyfyD8WPgQ0Wpw/kPRQDpNj85tZsRFrc4FzUp4V9Lnzyin ToNIAHMqPbgVk44Qbvf8O9nAGD0eh1ieIFr7OOZ1+Z/PjR/fpgI13HiUbzeVBkLb gC+F4C2szRk08Vcd1ngTpAycEu3Ox1qpRuBvnhOQkMsFalDypRHVMRlTlb7Ni9mx lPU0wvaeoXDR4R5+Jq6Q+M7sLvFleARfu+MDtOitAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzvHXtPMNJxEHQiOdVipsw3tcIDswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNzUyZWRjLWJhNTYtNGE3Ni1iYjRiLTZjOWI1OWYzY2IyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVcjANBgkqhkiG9w0BAQsFAAOCAQEApFIyRwq6DJU+mbJb8hO819KlXaXv vcU3ko/0lGfzmskX8zMt2i8ebgMOwa+biIQgr0UrvfIqp7QqaS1OqxOoqjUWd4/W zvkZnuMravKhqYUb8GEAw3mZegb8Jiw1+RZrDYYr6EgUZr9dPRXxEPXmrw/K/WSH QccQPeOSf9q0/W1jRTUmj3ZXJTghaRLp5zs9TvdxMbvWoSgdAOYf4yt6xY4Yuaw6 ZNELdTnCQI9tdOLgwnyeT3oMJ+I+fRneX11e7WWD195o1pxwmOSwG4dtzhhD8qHN 21xUwNW59+fNBGotfH0+ReJ1TWMHJXKOyAORprG1bcCNJMnSUXaSWpGDfA== -----END CERTIFICATE-----Generated at Tue Jul 28 16:02:00 2026 by rpki-client