$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d853a07-4fae-45bc-b076-258cf8e48280.roa File: 5d853a07-4fae-45bc-b076-258cf8e48280.roa (raw, json) Hash identifier: fcevdvc05Wp/Hq3dQqos+cvHlFprhSjAFOMWg8UJXnc= Subject key identifier: 2F:73:6B:81:7C:95:88:BD:9E:AE:B0:5C:27:79:C3:CA:3D:F7:D0:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 689ED41DDC6E9426DF67CAA7D6B07E2FA1C08340 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d853a07-4fae-45bc-b076-258cf8e48280.roa Signing time: Mon 27 Jul 2026 00:20:10 +0000 ROA not before: Mon 27 Jul 2026 00:20:10 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.25.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9e:d4:1d:dc:6e:94:26:df:67:ca:a7:d6:b0:7e:2f:a1:c0:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:20:10 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=2d1dfe4376f7ad19aa04db24718474e24c58f26a983e54f4bf68b8925a89f1f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:43:e4:81:a3:c5:59:e1:1f:6e:26:8a:a8:6a: 5a:0e:c1:c7:c5:6d:b5:49:a2:0a:b8:36:10:70:07: 3c:16:22:95:86:a7:5e:c9:91:99:c0:cc:5b:21:1a: 4c:db:ac:18:4d:e9:ec:d5:5b:ef:91:0b:db:6b:b0: ce:13:27:28:d3:87:a5:cd:36:10:f8:ec:57:3c:d9: c7:75:a0:3d:d3:a7:74:ec:4b:6c:54:48:bd:a8:a0: 7d:ec:5d:94:2c:b5:4f:e1:86:c7:d9:bc:c2:39:d6: 00:44:3a:74:a8:5b:93:ea:7a:d2:4d:09:5d:e0:1f: 4a:c4:3e:2a:f1:79:86:93:43:34:73:b5:bc:db:b6: a4:5a:c5:c9:0a:66:8b:70:9e:5c:28:64:7b:1a:89: 5d:a6:1e:d6:32:93:3b:c3:53:a5:e3:f7:f1:06:33: 56:3e:eb:a8:c4:1e:4e:94:d6:44:d3:73:aa:96:8c: 17:c8:8a:86:ea:7b:a3:ee:81:b4:8f:c0:03:80:06: 91:74:0e:d1:c4:27:ac:2f:00:3c:2f:63:38:9b:df: 76:8f:6a:a2:9f:36:df:2a:60:e1:92:d6:9d:36:e6: 0e:ff:e2:47:a7:72:f1:ef:ff:b8:4f:bc:89:03:2a: 8a:88:d7:9b:81:f7:91:24:b5:1b:73:cb:75:7a:b2: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:73:6B:81:7C:95:88:BD:9E:AE:B0:5C:27:79:C3:CA:3D:F7:D0:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d853a07-4fae-45bc-b076-258cf8e48280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.25.112.0/21 Signature Algorithm: sha256WithRSAEncryption 33:32:62:81:80:8c:9b:26:1e:8d:61:4e:cc:99:c3:d2:33:ce: 02:a3:62:4e:9d:b7:3e:db:ac:72:d6:e8:7a:1f:ed:51:b1:72: 1e:e4:44:c6:5e:2c:f3:40:e3:ea:a0:d3:f9:cb:03:a5:27:86: 74:51:6b:ca:93:62:13:1a:8a:2d:24:10:67:d1:0e:9c:d6:85: a7:c8:a0:49:f6:f7:28:20:ea:28:c3:62:e0:eb:76:d8:93:f5: 0b:ef:8a:03:eb:d3:69:73:b7:74:c0:8c:47:3c:4d:59:63:91: 7b:25:bf:58:f7:46:78:52:74:1c:87:23:5a:26:c5:d5:e1:9b: 6f:7b:f6:4a:3b:0e:c6:8f:bd:fc:18:ae:f0:b8:5e:cd:01:fa: f8:f9:4e:d2:24:26:82:01:e6:f3:4b:9e:51:13:0f:98:7f:a7: d2:0d:cb:1c:42:31:ca:02:14:f1:b4:80:24:17:26:fd:7a:58: f1:6c:28:ab:cc:2e:3a:84:97:06:cc:b9:51:63:a4:c1:e6:1c: 8d:de:c1:41:71:cb:17:c3:9d:36:aa:de:a4:88:69:2e:53:24: c7:a8:06:67:94:54:41:e4:0a:5b:0a:70:e6:43:31:6a:da:dd: 78:45:62:b8:f8:53:f2:d5:0d:26:16:83:9c:67:4d:b8:68:e3: 25:8f:0e:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaJ7UHdxulCbfZ8qn1rB+L6HAg0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAyMDEwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDFkZmU0Mzc2ZjdhZDE5YWEwNGRiMjQ3MTg0NzRlMjRj NThmMjZhOTgzZTU0ZjRiZjY4Yjg5MjVhODlmMWY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyQ+SBo8VZ4R9uJoqoaloOwcfFbbVJogq4NhBwBzwWIpWG p17JkZnAzFshGkzbrBhN6ezVW++RC9trsM4TJyjTh6XNNhD47Fc82cd1oD3Tp3Ts S2xUSL2ooH3sXZQstU/hhsfZvMI51gBEOnSoW5PqetJNCV3gH0rEPirxeYaTQzRz tbzbtqRaxckKZotwnlwoZHsaiV2mHtYykzvDU6Xj9/EGM1Y+66jEHk6U1kTTc6qW jBfIiobqe6PugbSPwAOABpF0DtHEJ6wvADwvYzib33aPaqKfNt8qYOGS1p025g7/ 4kencvHv/7hPvIkDKoqI15uB95EktRtzy3V6sqT/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL3NrgXyViL2errBcJ3nDyj330BkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkODUzYTA3LTRmYWUtNDViYy1iMDc2LTI1OGNmOGU0ODI4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFGXAwDQYJKoZIhvcNAQELBQADggEBADMyYoGAjJsmHo1hTsyZw9IzzgKj Yk6dtz7brHLW6Hof7VGxch7kRMZeLPNA4+qg0/nLA6UnhnRRa8qTYhMaii0kEGfR DpzWhafIoEn29ygg6ijDYuDrdtiT9QvvigPr02lzt3TAjEc8TVljkXslv1j3RnhS dByHI1omxdXhm2979ko7DsaPvfwYrvC4Xs0B+vj5TtIkJoIB5vNLnlETD5h/p9IN yxxCMcoCFPG0gCQXJv16WPFsKKvMLjqElwbMuVFjpMHmHI3ewUFxyxfDnTaq3qSI aS5TJMeoBmeUVEHkClsKcOZDMWra3XhFYrj4U/LVDSYWg5xnTbho4yWPDiI= -----END CERTIFICATE-----Generated at Tue Jul 28 17:10:07 2026 by rpki-client