$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39a6d737-450d-4e3c-874d-7e00fdc00f7b.roa File: 39a6d737-450d-4e3c-874d-7e00fdc00f7b.roa (raw, json) Hash identifier: d7q1dVZUQRmWjfYs1DdhY1/4R6+szAg3oaXJq4kop+I= Subject key identifier: B2:C7:EF:09:09:D7:79:7C:11:D6:33:AC:6C:73:F1:E3:62:CC:70:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DACD18DC8C8F94D518DFDC1F68713A2BE299645 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39a6d737-450d-4e3c-874d-7e00fdc00f7b.roa Signing time: Tue 28 Jul 2026 00:20:34 +0000 ROA not before: Tue 28 Jul 2026 00:20:34 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ac:d1:8d:c8:c8:f9:4d:51:8d:fd:c1:f6:87:13:a2:be:29:96:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:20:34 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=82ea776e1e8ebae8d069a8632c39c53033b70be3d8d4bafd3e0b663480124b39, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:05:42:97:e2:4e:b5:bc:85:b7:3b:52:33: 74:b3:b8:cd:3f:f6:7a:b5:de:c0:8a:91:8a:62:09: 65:a4:d8:7a:a5:08:5e:13:e5:6f:7e:f5:79:3e:1d: ae:cc:55:d4:62:1d:5f:7d:d6:00:11:84:1e:70:da: af:b0:2c:98:af:0b:96:aa:35:99:1a:65:cf:66:b9: 41:bb:3b:34:d5:e5:54:7d:4a:b1:57:08:67:c0:fb: a2:50:ee:9d:f9:19:a0:85:68:c8:6f:1c:21:c8:d7: 6a:c0:d1:12:54:66:37:6d:77:70:29:db:83:39:4b: fd:3b:95:95:74:d2:8e:ad:57:9c:4b:3b:77:4f:bd: dd:bb:33:42:10:d1:c9:69:d5:39:21:56:e9:f6:68: fb:1f:3a:dd:10:e4:af:21:43:50:db:db:de:9c:92: c1:04:32:dd:44:13:87:a9:66:7f:59:1c:13:aa:2a: 57:91:47:47:aa:c8:3a:63:54:be:2b:0e:c8:41:85: 3a:cc:aa:4f:bb:30:f4:27:b5:12:10:95:ae:bd:e0: e7:87:6b:90:e4:83:57:a9:a8:bf:98:f2:e2:23:19: 81:d4:a8:80:56:2d:6f:c0:83:86:28:48:bd:bf:15: 74:67:dd:e3:16:69:3e:8e:39:2c:1c:a3:d1:56:9b: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C7:EF:09:09:D7:79:7C:11:D6:33:AC:6C:73:F1:E3:62:CC:70:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39a6d737-450d-4e3c-874d-7e00fdc00f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.222.0/23 Signature Algorithm: sha256WithRSAEncryption d3:55:5c:21:42:f2:11:c6:c2:9e:cb:4b:2f:c6:8d:e0:f3:fb: ba:ba:cc:2a:af:ef:5b:0d:08:95:43:d1:c1:ae:3e:e2:c2:ca: a2:be:93:11:44:ca:3c:29:ef:8a:cb:69:7a:e4:f3:8e:bb:87: 99:8b:95:40:c6:00:e1:02:11:cf:e9:47:ea:59:3a:91:2a:f1: 22:60:22:a3:b2:83:1e:db:38:af:88:b8:d0:90:df:f0:90:d6: e3:38:2c:d4:0c:94:7f:84:3e:43:8d:a5:65:53:da:3e:9b:73: 19:60:b2:32:28:60:45:01:d9:c4:44:1e:8c:fe:9d:77:fb:17: 24:40:e8:dc:72:82:93:e8:3e:45:a0:36:d9:fa:c6:00:19:10: b1:4d:11:1c:17:14:4d:fe:82:ed:94:c6:01:80:af:5b:70:2b: 1b:16:f8:6d:92:98:bb:0f:5e:09:16:fd:47:f6:d4:e8:9b:72: a7:e4:cb:68:24:68:da:10:8e:e6:1d:f2:c8:28:61:74:7a:27: de:ff:95:f9:c9:d5:8f:5c:89:b3:9a:ea:db:02:b1:8d:c0:36: fc:a2:78:01:db:1d:17:cd:b0:85:aa:a5:ad:ce:97:d4:23:26: a0:4a:b3:45:45:70:0a:70:08:0d:e7:cf:2d:ed:cf:1f:d1:c9: ac:16:c3:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbazRjcjI+U1Rjf3B9ocTor4plkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAyMDM0WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmVhNzc2ZTFlOGViYWU4ZDA2OWE4NjMyYzM5YzUzMDMz YjcwYmUzZDhkNGJhZmQzZTBiNjYzNDgwMTI0YjM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs7AVCl+JOtbyFtztSM3SzuM0/9nq13sCKkYpiCWWk2Hql CF4T5W9+9Xk+Ha7MVdRiHV991gARhB5w2q+wLJivC5aqNZkaZc9muUG7OzTV5VR9 SrFXCGfA+6JQ7p35GaCFaMhvHCHI12rA0RJUZjdtd3Ap24M5S/07lZV00o6tV5xL O3dPvd27M0IQ0clp1TkhVun2aPsfOt0Q5K8hQ1Db296cksEEMt1EE4epZn9ZHBOq KleRR0eqyDpjVL4rDshBhTrMqk+7MPQntRIQla694OeHa5Dkg1epqL+Y8uIjGYHU qIBWLW/Ag4YoSL2/FXRn3eMWaT6OOSwco9FWm3X3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUssfvCQnXeXwR1jOsbHPx42LMcHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5YTZkNzM3LTQ1MGQtNGUzYy04NzRkLTdlMDBmZGMwMGY3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHPFd4wDQYJKoZIhvcNAQELBQADggEBANNVXCFC8hHGwp7LSy/GjeDz+7q6 zCqv71sNCJVD0cGuPuLCyqK+kxFEyjwp74rLaXrk8467h5mLlUDGAOECEc/pR+pZ OpEq8SJgIqOygx7bOK+IuNCQ3/CQ1uM4LNQMlH+EPkONpWVT2j6bcxlgsjIoYEUB 2cREHoz+nXf7FyRA6NxygpPoPkWgNtn6xgAZELFNERwXFE3+gu2UxgGAr1twKxsW +G2SmLsPXgkW/Uf21Oibcqfky2gkaNoQjuYd8sgoYXR6J97/lfnJ1Y9cibOa6tsC sY3ANvyieAHbHRfNsIWqpa3Ol9QjJqBKs0VFcApwCA3nzy3tzx/RyawWw9c= -----END CERTIFICATE-----Generated at Tue Jul 28 14:50:16 2026 by rpki-client