$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa File: 550ca0bb-4e09-403b-882c-301eea6f0a9e.roa (raw, json) Hash identifier: 8sVYfRJfdPzLK1okzJHoujsDdmnjR0qkmlyNlXwaYFs= Subject key identifier: 09:D6:B0:71:84:61:BF:5C:6B:79:3E:5D:AC:D0:8B:63:49:5D:FB:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E9322ACED4B40D99C4A06E73D84682B5E24F1C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa Signing time: Sat 25 Jul 2026 00:00:14 +0000 ROA not before: Sat 25 Jul 2026 00:00:14 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:93:22:ac:ed:4b:40:d9:9c:4a:06:e7:3d:84:68:2b:5e:24:f1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:00:14 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=427860962daf36fa134e0d7678eeb36e50514a57ddfeb565fd04b7552e02ab26, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:f0:32:6d:31:31:97:1c:c9:e7:17:0c:7b: 38:1e:0d:06:a5:41:d2:10:06:ce:b0:b2:39:10:01: 2a:8f:53:9b:57:b4:52:27:fa:d8:53:f7:27:d5:cb: c6:3b:44:13:31:7e:ca:fe:98:eb:56:7b:42:97:02: 54:28:24:86:0d:a2:c6:d4:f2:4d:49:58:58:bc:9a: bf:92:81:34:ea:55:c0:df:65:f8:2b:31:f8:cd:8a: fe:ef:d6:1b:27:09:5b:3a:26:d6:8c:79:07:11:b1: cf:86:76:b6:74:ce:c5:c5:d5:d4:ae:fa:1d:57:98: ce:93:45:b2:95:f8:d1:c9:63:24:9e:f4:fd:59:95: 9b:5e:25:7a:0e:ba:7e:dc:ca:ad:9c:c3:ec:f2:a7: 66:0d:31:25:e8:a7:06:2c:fd:45:13:f8:de:db:f6: ca:6d:6b:fd:e8:2d:8f:0c:9b:1a:a2:85:7f:4d:12: 25:21:01:17:d4:fc:72:5e:07:e2:4b:b4:14:73:f6: d3:8c:aa:5b:29:af:4f:c0:72:12:f0:eb:e6:06:21: 22:22:ad:24:2e:94:f8:7a:fa:21:f6:3b:fa:c4:37: c5:72:e2:af:62:d2:77:23:85:e4:b9:a9:f1:7b:05: 85:b0:03:b7:bb:11:18:9b:50:0a:e1:2e:9f:8c:7b: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D6:B0:71:84:61:BF:5C:6B:79:3E:5D:AC:D0:8B:63:49:5D:FB:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.152.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:c1:cf:e3:43:92:1a:11:2e:06:36:b5:a0:2a:4b:d4:e4:3e: cb:d6:e5:4f:33:b5:15:2d:34:34:7d:b5:87:0d:60:9d:10:61: 4c:b6:73:5e:6e:aa:74:d6:00:2c:be:b8:2d:df:a0:71:ed:6a: 33:46:2b:f9:8f:7b:d3:97:47:d0:46:f7:a3:fd:be:1c:59:87: d8:c1:73:18:a9:78:94:4b:df:da:f2:90:6d:41:55:3f:5f:58: 09:81:8c:b5:a2:91:63:c9:04:d5:82:ba:d6:4a:7c:6b:e1:fd: 0e:6b:13:c8:dc:1e:a3:30:08:6a:c1:8d:90:d1:34:21:03:0b: 16:cd:e2:3e:13:29:42:09:5a:ea:4a:b7:2b:f7:97:24:9b:0c: 58:8d:7d:ec:8e:47:ff:42:5d:4e:26:b8:6a:83:2b:1f:42:f4: 2c:5b:c2:8c:86:08:95:09:62:5b:50:5e:63:1d:5f:ab:35:e6: 5e:63:87:c9:c0:ae:9b:20:f1:49:28:33:0f:50:d5:5d:41:ee: 67:b7:c0:90:9d:69:46:7e:39:76:f2:1b:a4:86:8a:fb:9a:24: 1b:d6:d9:47:e3:e5:09:b3:f1:95:c4:e1:11:24:2a:dc:d7:8a: 37:49:9e:b9:84:c4:1e:18:40:df:2d:a3:95:b8:6f:d0:8b:10: df:0b:d0:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfpMirO1LQNmcSgbnPYRoK14k8cIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAwMDE0WhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Mjc4NjA5NjJkYWYzNmZhMTM0ZTBkNzY3OGVlYjM2ZTUw NTE0YTU3ZGRmZWI1NjVmZDA0Yjc1NTJlMDJhYjI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUrPAybTExlxzJ5xcMezgeDQalQdIQBs6wsjkQASqPU5tX tFIn+thT9yfVy8Y7RBMxfsr+mOtWe0KXAlQoJIYNosbU8k1JWFi8mr+SgTTqVcDf ZfgrMfjNiv7v1hsnCVs6JtaMeQcRsc+GdrZ0zsXF1dSu+h1XmM6TRbKV+NHJYySe 9P1ZlZteJXoOun7cyq2cw+zyp2YNMSXopwYs/UUT+N7b9spta/3oLY8MmxqihX9N EiUhARfU/HJeB+JLtBRz9tOMqlspr0/AchLw6+YGISIirSQulPh6+iH2O/rEN8Vy 4q9i0ncjheS5qfF7BYWwA7e7ERibUArhLp+Me89lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCdawcYRhv1xreT5drNCLY0ld+2EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1MGNhMGJiLTRlMDktNDAzYi04ODJjLTMwMWVlYTZmMGE5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl5gwDQYJKoZIhvcNAQELBQADggEBADzBz+NDkhoRLgY2taAqS9TkPsvW 5U8ztRUtNDR9tYcNYJ0QYUy2c15uqnTWACy+uC3foHHtajNGK/mPe9OXR9BG96P9 vhxZh9jBcxipeJRL39rykG1BVT9fWAmBjLWikWPJBNWCutZKfGvh/Q5rE8jcHqMw CGrBjZDRNCEDCxbN4j4TKUIJWupKtyv3lySbDFiNfeyOR/9CXU4muGqDKx9C9Cxb woyGCJUJYltQXmMdX6s15l5jh8nArpsg8UkoMw9Q1V1B7me3wJCdaUZ+OXbyG6SG ivuaJBvW2Ufj5Qmz8ZXE4REkKtzXijdJnrmExB4YQN8to5W4b9CLEN8L0JA= -----END CERTIFICATE-----Generated at Tue Jul 28 14:49:34 2026 by rpki-client