$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793fcee8-7478-4b11-9fee-e87da0f9edc2.roa File: 793fcee8-7478-4b11-9fee-e87da0f9edc2.roa (raw, json) Hash identifier: Upb9aCMmq765ZwV/gGgDj+2KkvM2c6Ga6jgTVbuYmcw= Subject key identifier: 86:77:5C:6E:40:88:E5:D0:3B:35:92:48:74:82:19:A1:2B:A0:E2:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 251C09B97E0D1233543CEFE9A336A3B7242EF574 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793fcee8-7478-4b11-9fee-e87da0f9edc2.roa Signing time: Fri 24 Jul 2026 00:10:08 +0000 ROA not before: Fri 24 Jul 2026 00:10:08 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 31.220.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1c:09:b9:7e:0d:12:33:54:3c:ef:e9:a3:36:a3:b7:24:2e:f5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:10:08 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=96485986b8f7812bd350f22fb39de07d3cff3fca30519e21db1a3004b273906a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:39:d9:d5:91:f3:53:fa:7d:8d:bf:05:50: 17:97:86:03:b4:5c:73:cb:29:d1:0d:58:d0:4c:18: 8e:45:cf:19:b0:c2:6a:52:06:08:d6:d1:ba:94:c1: 7e:a3:0f:5f:0e:a9:94:32:a6:b4:81:67:dc:fe:d7: 2e:b1:6c:3a:58:ba:64:55:82:2d:04:db:1f:3b:28: 7b:5a:fe:02:0b:26:da:0a:b4:4b:e2:2a:6b:91:10: 0b:13:85:34:ad:80:8d:fc:72:7d:73:3f:77:ca:5d: b6:83:a3:41:1a:a8:ce:d9:a0:48:98:39:2f:3f:67: 91:ac:aa:9b:c7:eb:b7:d0:10:52:40:a1:29:dc:7d: e7:f7:ce:16:54:b2:b9:ca:7c:f8:79:45:6c:d7:b8: 9d:1a:ab:ab:9e:72:82:57:04:32:90:20:17:64:c7: de:cc:54:9b:41:1b:38:7e:d1:9c:20:29:22:aa:13: 4d:ba:5b:bf:a0:e4:b4:f6:5b:d1:03:5f:92:6c:08: be:9b:73:da:2c:1e:69:5d:8b:6b:35:23:1f:c2:55: cb:f5:49:07:33:ab:47:ac:3c:67:a2:6c:98:ae:e4: 1e:85:80:3c:69:e6:c4:8d:bf:e7:e4:1a:04:19:8d: e0:61:1e:67:7b:7d:ef:b1:57:71:f8:70:e3:7c:65: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:77:5C:6E:40:88:E5:D0:3B:35:92:48:74:82:19:A1:2B:A0:E2:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793fcee8-7478-4b11-9fee-e87da0f9edc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.220.0/22 Signature Algorithm: sha256WithRSAEncryption c0:84:c6:18:15:d5:d1:ad:22:78:13:79:79:4a:1a:c3:42:a8: 1a:ee:4f:3e:e8:e3:eb:5a:a0:4d:ba:0f:27:64:9c:1e:03:b6: 22:5f:2c:db:fa:cf:78:a3:06:1a:b6:c8:31:3e:0d:f9:32:66: 18:f9:c3:6a:94:9e:fa:cd:9a:76:ff:b4:0a:13:b2:6c:84:ec: 37:8a:53:bd:5e:f6:dc:bd:37:48:5f:b3:3b:d9:22:d6:82:a9: 78:88:35:fd:4b:11:f9:3a:f3:0f:74:12:82:4d:89:e7:99:3e: 22:43:21:48:ea:5e:39:7c:2e:c7:4d:b1:18:49:6c:a2:5a:aa: 2d:0a:c7:93:dc:f5:b9:e8:d1:23:28:95:b8:93:12:27:37:3e: 19:4e:09:a2:f8:dd:d2:e3:65:dc:04:84:a0:61:79:bf:17:83: 5d:b5:a9:f1:03:2f:0e:78:9e:0b:80:a7:41:17:8f:87:63:1e: c2:1f:b1:8d:fc:6c:b2:4f:c1:91:fb:a0:89:7b:c8:71:8e:4d: 96:2e:f1:c4:4a:80:25:c0:81:3d:99:a7:d4:67:b8:a7:02:99: 02:d0:ad:8e:6d:8f:03:4d:51:29:0b:70:79:3d:d3:79:62:53: 49:a1:0b:ac:43:65:cd:ad:ad:f9:4c:c3:18:ce:01:44:0f:23: c4:b6:de:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJRwJuX4NEjNUPO/pozajtyQu9XQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAxMDA4WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjQ4NTk4NmI4Zjc4MTJiZDM1MGYyMmZiMzlkZTA3ZDNj ZmYzZmNhMzA1MTllMjFkYjFhMzAwNGIyNzM5MDZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHkTnZ1ZHzU/p9jb8FUBeXhgO0XHPLKdENWNBMGI5Fzxmw wmpSBgjW0bqUwX6jD18OqZQyprSBZ9z+1y6xbDpYumRVgi0E2x87KHta/gILJtoK tEviKmuREAsThTStgI38cn1zP3fKXbaDo0EaqM7ZoEiYOS8/Z5GsqpvH67fQEFJA oSncfef3zhZUsrnKfPh5RWzXuJ0aq6uecoJXBDKQIBdkx97MVJtBGzh+0ZwgKSKq E026W7+g5LT2W9EDX5JsCL6bc9osHmldi2s1Ix/CVcv1SQczq0esPGeibJiu5B6F gDxp5sSNv+fkGgQZjeBhHmd7fe+xV3H4cON8ZYzXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhndcbkCI5dA7NZJIdIIZoSug4vQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5M2ZjZWU4LTc0NzgtNGIxMS05ZmVlLWU4N2RhMGY5ZWRjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIf3NwwDQYJKoZIhvcNAQELBQADggEBAMCExhgV1dGtIngTeXlKGsNCqBru Tz7o4+taoE26DydknB4DtiJfLNv6z3ijBhq2yDE+DfkyZhj5w2qUnvrNmnb/tAoT smyE7DeKU71e9ty9N0hfszvZItaCqXiINf1LEfk68w90EoJNieeZPiJDIUjqXjl8 LsdNsRhJbKJaqi0Kx5Pc9bno0SMolbiTEic3PhlOCaL43dLjZdwEhKBheb8Xg121 qfEDLw54nguAp0EXj4djHsIfsY38bLJPwZH7oIl7yHGOTZYu8cRKgCXAgT2Zp9Rn uKcCmQLQrY5tjwNNUSkLcHk903liU0mhC6xDZc2trflMwxjOAUQPI8S23gs= -----END CERTIFICATE-----Generated at Tue Jul 28 14:49:42 2026 by rpki-client