$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e234d89-e807-46b4-9533-ed057ead33aa.roa File: 6e234d89-e807-46b4-9533-ed057ead33aa.roa (raw, json) Hash identifier: vcRwbh21hkLJD1fFQUmLJEA+LX3jxx55DNI0l/yUOEo= Subject key identifier: E1:E1:A5:46:D8:F9:6F:DD:E6:F0:8F:5F:6F:BC:D4:4C:CC:29:23:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5ACECD09CCD87F8CA750B00EFF81BB814A0C1777 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e234d89-e807-46b4-9533-ed057ead33aa.roa Signing time: Tue 28 Jul 2026 00:20:39 +0000 ROA not before: Tue 28 Jul 2026 00:20:39 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ce:cd:09:cc:d8:7f:8c:a7:50:b0:0e:ff:81:bb:81:4a:0c:17:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:20:39 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=4aae922d7bec771e1bdde1cf7d7cad57bf1f41317fa1f7c8ccecd1fc9274e1d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:2a:5d:35:25:cc:d9:d4:f4:c0:93:4b:fc: 75:4f:56:9c:8f:aa:c3:70:fa:49:fa:89:96:60:b0: 3f:3b:5a:24:02:c5:ef:45:c4:38:86:9c:7b:8a:56: 17:19:b7:40:c6:e4:7a:c3:04:15:af:35:6d:b1:75: e4:9e:70:43:5e:37:80:c0:f2:3c:24:ac:6b:c1:22: 57:60:06:0c:75:d8:a6:f4:9f:b9:5b:c0:07:88:cf: ec:cd:9d:30:b2:2c:44:a5:81:5f:81:e9:37:cb:6c: bc:87:34:d8:f8:60:51:8e:fd:1f:cc:c3:3e:14:77: e5:db:a5:a2:21:0c:5c:6b:ae:7f:46:53:b4:59:ac: a4:e9:02:4b:f3:30:ce:3b:c5:6a:88:ce:7f:7b:c1: f7:91:6d:d7:f3:30:7b:7d:dc:71:69:e7:93:73:aa: 7f:e4:c9:24:12:55:fc:d6:35:51:78:a8:05:ef:7e: f5:80:c8:7c:0b:b9:a2:ac:a4:cc:bd:b4:da:e4:99: 16:06:49:a1:9a:61:53:96:5c:28:2d:80:08:c1:a5: c6:00:ae:0d:ef:f4:2d:e5:19:45:2b:3c:c9:bf:cd: e1:3e:5d:2b:f3:65:88:04:e0:16:70:40:d3:85:c3: be:1a:ed:01:7d:1f:7e:53:09:93:f9:40:9e:86:99: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E1:A5:46:D8:F9:6F:DD:E6:F0:8F:5F:6F:BC:D4:4C:CC:29:23:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e234d89-e807-46b4-9533-ed057ead33aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.200.0/22 Signature Algorithm: sha256WithRSAEncryption c1:f0:67:0c:4f:51:eb:ed:a3:4e:9c:5c:fe:99:12:29:09:93: 6d:bb:5f:aa:29:18:d7:04:aa:a1:7f:d1:4a:fe:03:33:47:be: 58:ee:b4:ec:86:38:4c:14:64:8e:4c:d8:a7:81:2d:35:a5:3b: d0:67:fe:9d:5a:ee:34:8c:30:3b:b5:73:83:c3:c3:c7:a4:a9: f5:1f:41:bc:fc:85:f1:93:d6:5a:d9:f0:09:6c:5a:78:fb:53: ea:59:12:9f:b6:e6:1b:e9:d7:ab:af:38:12:48:8e:e9:08:f9: 7d:f4:e7:7e:75:53:ad:99:11:76:d6:75:95:55:65:11:c6:4e: ec:68:b0:ca:92:13:9a:df:51:e5:c5:78:d6:ef:4a:1e:32:14: dc:af:52:21:24:2d:9e:2a:a1:a1:f3:92:0a:d9:2f:cc:41:e7: fd:a3:17:1f:7f:b2:5d:36:a3:53:45:21:60:2e:63:14:09:88: 5d:75:33:b6:c7:ed:78:f1:18:81:42:2e:26:71:f4:a3:b9:5a: 7d:1d:c6:2f:79:37:c4:13:48:49:fb:5f:72:50:f5:c9:d4:5e: ba:d1:ca:a1:ae:d5:e5:f4:6d:a4:86:8e:ff:0b:17:17:82:b0: df:bb:7b:76:0c:e0:48:0b:ac:30:0b:ee:46:86:bc:77:b3:63: 60:16:43:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWs7NCczYf4ynULAO/4G7gUoMF3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAyMDM5WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWFlOTIyZDdiZWM3NzFlMWJkZGUxY2Y3ZDdjYWQ1N2Jm MWY0MTMxN2ZhMWY3YzhjY2VjZDFmYzkyNzRlMWQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiSypdNSXM2dT0wJNL/HVPVpyPqsNw+kn6iZZgsD87WiQC xe9FxDiGnHuKVhcZt0DG5HrDBBWvNW2xdeSecENeN4DA8jwkrGvBIldgBgx12Kb0 n7lbwAeIz+zNnTCyLESlgV+B6TfLbLyHNNj4YFGO/R/Mwz4Ud+XbpaIhDFxrrn9G U7RZrKTpAkvzMM47xWqIzn97wfeRbdfzMHt93HFp55Nzqn/kySQSVfzWNVF4qAXv fvWAyHwLuaKspMy9tNrkmRYGSaGaYVOWXCgtgAjBpcYArg3v9C3lGUUrPMm/zeE+ XSvzZYgE4BZwQNOFw74a7QF9H35TCZP5QJ6GmVlfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4eGlRtj5b93m8I9fb7zUTMwpI6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZlMjM0ZDg5LWU4MDctNDZiNC05NTMzLWVkMDU3ZWFkMzNhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALPFcgwDQYJKoZIhvcNAQELBQADggEBAMHwZwxPUevto06cXP6ZEikJk227 X6opGNcEqqF/0Ur+AzNHvljutOyGOEwUZI5M2KeBLTWlO9Bn/p1a7jSMMDu1c4PD w8ekqfUfQbz8hfGT1lrZ8AlsWnj7U+pZEp+25hvp16uvOBJIjukI+X305351U62Z EXbWdZVVZRHGTuxosMqSE5rfUeXFeNbvSh4yFNyvUiEkLZ4qoaHzkgrZL8xB5/2j Fx9/sl02o1NFIWAuYxQJiF11M7bH7XjxGIFCLiZx9KO5Wn0dxi95N8QTSEn7X3JQ 9cnUXrrRyqGu1eX0baSGjv8LFxeCsN+7e3YM4EgLrDAL7kaGvHezY2AWQ+g= -----END CERTIFICATE-----Generated at Tue Jul 28 14:50:36 2026 by rpki-client