$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa File: 611a9329-2af8-483e-ade2-291c7456d663.roa (raw, json) Hash identifier: Nkw8OdRoFOCt04x+vYTy4vSo4ZMbVQXYtwkBaBDsFoE= Subject key identifier: DE:0B:27:D8:6D:B5:62:05:7C:34:36:9E:A1:D4:77:7C:E1:8D:CF:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: FC182BC565CE01B1EA7D4EDD856792FC74E937 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa Signing time: Mon 27 Jul 2026 00:32:02 +0000 ROA not before: Mon 27 Jul 2026 00:32:02 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.191.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fc:18:2b:c5:65:ce:01:b1:ea:7d:4e:dd:85:67:92:fc:74:e9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:32:02 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=4692a14d6934d359d902316b7ffca874e4ae18e7ff0c5694db826fc21886eee1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:0a:d1:7e:11:49:f3:f6:9a:8d:0b:1f:4c: 63:e7:f6:ec:77:ea:fe:f8:46:73:0e:93:39:89:0b: eb:f6:4f:49:a0:3d:6b:3b:b9:72:eb:90:ad:bd:1a: 28:19:20:d2:ca:a1:e5:93:5d:83:e7:d3:c0:2a:78: 21:be:f1:64:03:3e:91:48:95:a9:0f:ca:b1:9f:81: 8d:db:47:41:d3:2e:2a:c4:33:08:83:e0:4a:2d:92: bc:7a:96:ae:9f:ed:c3:ba:d1:9c:60:0b:56:fc:68: 81:2e:d6:04:f2:2a:ef:e4:ac:2e:9f:20:8b:81:9c: 76:c5:7b:d5:80:44:b5:a6:f6:52:a7:c1:9f:92:a9: 13:80:33:b7:88:c6:75:9e:bc:ef:1f:1c:87:80:18: d8:31:47:c0:87:5a:0f:77:03:72:1e:c9:ee:6f:3b: 4e:df:89:1d:a5:2e:2c:49:7e:17:4a:82:31:c7:25: 7d:5d:e9:b4:e4:09:01:f9:c7:3e:cf:eb:06:86:eb: 0d:7b:79:49:b1:ec:de:00:6d:bb:4f:c6:55:58:41: 60:6d:36:d2:63:42:a3:60:ab:95:56:d2:a4:7e:e3: 6a:e7:0f:0b:d8:ef:f3:53:4b:b5:90:06:8a:ab:d1: 13:66:9c:14:a8:43:26:e9:9d:4c:57:6e:37:cf:ce: 06:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0B:27:D8:6D:B5:62:05:7C:34:36:9E:A1:D4:77:7C:E1:8D:CF:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.191.152.0/22 Signature Algorithm: sha256WithRSAEncryption 11:a6:87:94:fe:4d:9b:ce:ca:b3:68:13:a4:d9:48:63:d8:55: 13:46:e4:52:e7:f6:13:b2:48:b2:62:6c:f1:74:27:b5:58:21: 90:36:7e:52:02:e7:4b:38:27:29:9b:e5:2e:fc:ef:d8:69:f8: db:74:46:84:38:0f:87:2a:f1:ea:db:7d:9c:7d:df:6d:79:d6: 21:32:15:a3:5d:3c:54:76:e2:11:d2:60:2e:35:c9:7d:51:45: 13:e1:08:51:0d:13:67:e8:03:f9:a3:ff:5c:f1:0d:8d:6e:ab: 06:c9:9c:dd:df:63:bf:2e:2e:a0:cc:80:48:31:61:5e:56:33: 97:5f:6a:f6:b1:8e:ef:90:c8:c3:68:aa:30:29:6b:78:31:5a: cd:0c:c9:e4:64:d7:ac:2a:50:7b:3f:a7:3a:61:d2:7f:19:95: 5e:77:87:0e:7f:d6:b9:c6:34:e8:94:b1:66:79:9d:c0:8b:28: bc:82:63:0a:13:3a:59:e4:1f:9c:bc:fa:47:91:1a:23:5d:eb: e7:36:dd:ee:46:f2:1c:cb:08:f8:9f:55:9e:0a:6e:ac:95:6f: c8:ff:80:d9:88:f2:3f:65:81:59:16:b6:e4:f5:93:55:60:03: f1:32:16:cd:c8:99:94:20:77:0c:16:01:f5:c0:c9:09:45:5e: ae:26:31:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAPwYK8VlzgGx6n1O3YVnkvx06TcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAzMjAyWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjkyYTE0ZDY5MzRkMzU5ZDkwMjMxNmI3ZmZjYTg3NGU0 YWUxOGU3ZmYwYzU2OTRkYjgyNmZjMjE4ODZlZWUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcDArRfhFJ8/aajQsfTGPn9ux36v74RnMOkzmJC+v2T0mg PWs7uXLrkK29GigZINLKoeWTXYPn08AqeCG+8WQDPpFIlakPyrGfgY3bR0HTLirE MwiD4Eotkrx6lq6f7cO60ZxgC1b8aIEu1gTyKu/krC6fIIuBnHbFe9WARLWm9lKn wZ+SqROAM7eIxnWevO8fHIeAGNgxR8CHWg93A3Ieye5vO07fiR2lLixJfhdKgjHH JX1d6bTkCQH5xz7P6waG6w17eUmx7N4AbbtPxlVYQWBtNtJjQqNgq5VW0qR+42rn DwvY7/NTS7WQBoqr0RNmnBSoQybpnUxXbjfPzgZNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3gsn2G21YgV8NDaeodR3fOGNz+swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxMWE5MzI5LTJhZjgtNDgzZS1hZGUyLTI5MWM3NDU2ZDY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRv5gwDQYJKoZIhvcNAQELBQADggEBABGmh5T+TZvOyrNoE6TZSGPYVRNG 5FLn9hOySLJibPF0J7VYIZA2flIC50s4Jymb5S7879hp+Nt0RoQ4D4cq8erbfZx9 32151iEyFaNdPFR24hHSYC41yX1RRRPhCFENE2foA/mj/1zxDY1uqwbJnN3fY78u LqDMgEgxYV5WM5dfavaxju+QyMNoqjApa3gxWs0MyeRk16wqUHs/pzph0n8ZlV53 hw5/1rnGNOiUsWZ5ncCLKLyCYwoTOlnkH5y8+keRGiNd6+c23e5G8hzLCPifVZ4K bqyVb8j/gNmI8j9lgVkWtuT1k1VgA/EyFs3ImZQgdwwWAfXAyQlFXq4mMeA= -----END CERTIFICATE-----Generated at Tue Jul 28 17:12:45 2026 by rpki-client