$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa File: 595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa (raw, json) Hash identifier: s3DmOQbiYmUuMFTQLcq+b99yGBclJ+pqxntADJdG8iE= Subject key identifier: 99:DA:C4:1D:0D:05:8A:8B:65:A1:99:85:1D:0C:17:6B:6A:9F:3A:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F47294267B5A24EE882F22BEA14458828AC5AB7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa Signing time: Tue 28 Jul 2026 00:10:07 +0000 ROA not before: Tue 28 Jul 2026 00:10:07 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 32.192.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:47:29:42:67:b5:a2:4e:e8:82:f2:2b:ea:14:45:88:28:ac:5a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:10:07 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=14a6117c4295672cbfa738dd25e9d3e9c972a6af47b152846b69ce349f38578e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:27:c3:ce:e2:90:5b:3a:68:1e:ca:a0:dc: 54:f5:4a:31:4e:18:11:6b:64:0b:20:24:61:5e:b7: 24:7e:70:5e:ef:b0:c0:6c:08:96:c1:38:19:dc:d1: 6b:d3:6b:39:ad:00:39:ae:e5:cd:4b:41:87:e8:87: e2:4e:d3:8f:de:69:a3:04:c6:b2:74:f6:37:2a:a0: 07:70:38:2d:0f:63:ba:1f:ac:34:b3:19:b0:37:00: a1:fd:a3:95:59:0f:10:86:85:b3:08:5c:9d:2d:85: 51:7c:9b:1d:e5:2f:07:c8:55:a2:06:d5:99:3e:10: 08:9c:84:56:4b:e9:45:11:44:b6:08:d6:38:f7:9b: c7:1a:36:d4:05:39:09:77:d9:36:56:e6:3b:3d:16: d0:03:84:29:2f:aa:65:b1:6b:e7:73:4b:70:c9:25: be:b1:f7:b3:a4:d0:a4:93:01:ea:06:92:3e:2d:c6: 4a:2c:66:57:c0:87:ff:56:96:11:95:dd:64:cf:11: 77:fd:3c:ff:9b:c0:dd:8c:4e:4c:fb:e5:05:31:b6: 1e:69:62:10:15:de:78:e3:37:e7:ea:fc:78:a5:fb: f8:6c:c5:92:a5:f6:58:15:aa:40:fc:d5:17:49:86: e8:b5:fc:50:2d:a1:c0:c5:15:5b:06:ba:ab:0f:87: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DA:C4:1D:0D:05:8A:8B:65:A1:99:85:1D:0C:17:6B:6A:9F:3A:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595a2ecf-7d4e-434b-8fef-f2feed51b4a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.192.0.0/13 Signature Algorithm: sha256WithRSAEncryption 26:3a:92:62:cd:4d:4c:61:ab:ed:cf:28:4a:29:4a:03:4e:88: 36:89:2a:c5:02:be:53:d3:79:74:d1:92:c1:8e:db:a4:2d:24: ae:93:3a:7b:63:da:bf:f9:c0:d0:94:e7:6b:7e:e1:7c:da:3c: 10:ab:c4:7a:e7:e5:43:a4:bf:c0:f5:91:5b:82:81:d2:e7:24: 0d:b1:6f:6b:7a:9f:fe:e0:00:42:23:b0:2c:3f:bd:f2:21:33: 21:94:74:d0:85:b6:ae:8b:bb:75:7d:a1:02:d3:af:08:8e:0a: 1f:cd:86:ca:5f:20:9d:f2:c2:39:8c:cd:4b:35:ff:59:0d:56: 8b:e8:cf:37:cf:aa:fb:bd:f6:b2:38:1f:47:5a:e2:ad:6f:9f: 97:34:35:e0:ac:bd:f9:32:21:ef:c4:aa:9f:af:5e:9d:75:ff: 74:a7:a3:54:4e:24:f8:63:54:84:7b:14:62:2f:4b:15:1c:ba: 3e:38:a5:88:30:05:29:44:4b:dc:b4:b8:bb:be:88:e2:57:ff: 22:cb:90:0f:4b:3e:d3:5a:8f:1d:e1:d5:0d:09:65:a2:93:f4: cf:e1:23:89:7c:8e:3c:03:e1:9d:11:10:24:ac:16:c9:ba:69: bf:16:46:bf:92:1b:d8:82:9c:5b:d4:28:85:df:ae:bb:e2:4c: b8:18:c4:82 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUD0cpQme1ok7ogvIr6hRFiCisWrcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAxMDA3WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNGE2MTE3YzQyOTU2NzJjYmZhNzM4ZGQyNWU5ZDNlOWM5 NzJhNmFmNDdiMTUyODQ2YjY5Y2UzNDlmMzg1NzhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBVyfDzuKQWzpoHsqg3FT1SjFOGBFrZAsgJGFetyR+cF7v sMBsCJbBOBnc0WvTazmtADmu5c1LQYfoh+JO04/eaaMExrJ09jcqoAdwOC0PY7of rDSzGbA3AKH9o5VZDxCGhbMIXJ0thVF8mx3lLwfIVaIG1Zk+EAichFZL6UURRLYI 1jj3m8caNtQFOQl32TZW5js9FtADhCkvqmWxa+dzS3DJJb6x97Ok0KSTAeoGkj4t xkosZlfAh/9WlhGV3WTPEXf9PP+bwN2MTkz75QUxth5pYhAV3njjN+fq/Hil+/hs xZKl9lgVqkD81RdJhui1/FAtocDFFVsGuqsPhwZJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmdrEHQ0FiotloZmFHQwXa2qfOuowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5NWEyZWNmLTdkNGUtNDM0Yi04ZmVmLWYyZmVlZDUxYjRhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMgwDANBgkqhkiG9w0BAQsFAAOCAQEAJjqSYs1NTGGr7c8oSilKA06INokq xQK+U9N5dNGSwY7bpC0krpM6e2Pav/nA0JTna37hfNo8EKvEeuflQ6S/wPWRW4KB 0uckDbFva3qf/uAAQiOwLD+98iEzIZR00IW2rou7dX2hAtOvCI4KH82Gyl8gnfLC OYzNSzX/WQ1Wi+jPN8+q+732sjgfR1rirW+flzQ14Ky9+TIh78Sqn69enXX/dKej VE4k+GNUhHsUYi9LFRy6PjiliDAFKURL3LS4u76I4lf/IsuQD0s+01qPHeHVDQll opP0z+EjiXyOPAPhnREQJKwWybppvxZGv5Ib2IKcW9Qohd+uu+JMuBjEgg== -----END CERTIFICATE-----Generated at Tue Jul 28 14:50:17 2026 by rpki-client