$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e3dba33-c76e-49c9-9242-16e93267ef0a.roa File: 8e3dba33-c76e-49c9-9242-16e93267ef0a.roa (raw, json) Hash identifier: vMgMxdFeSZ0niKi9DkCXf4EQYNzOCR0VdVtYN10rdRA= Subject key identifier: D3:9C:34:58:81:A7:8B:97:C0:D9:14:43:D1:F6:80:05:10:B4:74:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64CE8DC79AD4D12BC981DD3386747D7151DAD101 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e3dba33-c76e-49c9-9242-16e93267ef0a.roa Signing time: Sat 25 Jul 2026 00:20:37 +0000 ROA not before: Sat 25 Jul 2026 00:20:37 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ce:8d:c7:9a:d4:d1:2b:c9:81:dd:33:86:74:7d:71:51:da:d1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:20:37 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=1a6da7a77326f59accb85876176b6d79a3cae32beddeef8f66ee45ea92968204, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:b4:ea:71:14:32:d4:94:f2:64:ce:87:ea: d6:30:2d:86:45:47:e2:92:f1:07:8d:88:52:12:ac: de:33:2c:59:95:be:95:f8:6c:da:03:59:00:8f:6f: e4:5e:f0:d0:cd:ff:11:90:4e:d1:e1:74:90:e4:15: a3:e6:72:01:85:ef:ce:96:69:0b:1f:a8:ec:d4:ed: 63:93:04:17:45:c7:b6:65:8b:14:70:a6:f9:20:7f: 78:33:6b:cd:f4:38:9e:b8:97:c7:87:e7:e5:c1:3e: 13:9f:02:0b:0d:2f:f2:86:05:60:51:95:9d:e1:f2: 8c:bc:00:ab:cc:12:f3:95:1a:cd:76:1e:6d:73:76: b9:01:97:78:1d:d2:a0:18:de:d8:35:f7:82:bb:77: 63:ec:87:e1:38:74:0f:ba:0d:ba:01:75:c6:c3:ef: 2c:68:e8:95:2b:7f:05:fb:e4:2a:99:03:b6:a3:f1: 6e:72:61:f8:00:ae:87:0d:59:e6:4a:9c:6e:8a:ec: 98:c3:f7:7e:9d:b6:1e:bf:9b:40:de:80:a6:b0:d4: 30:fd:58:b9:68:81:28:fd:68:2a:ab:d1:28:97:ee: 3e:91:43:b9:f3:f2:56:f5:e1:39:a6:82:9a:8c:76: e2:52:c9:68:92:7a:40:d6:d4:a6:92:39:f4:22:bc: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9C:34:58:81:A7:8B:97:C0:D9:14:43:D1:F6:80:05:10:B4:74:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e3dba33-c76e-49c9-9242-16e93267ef0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.12.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:97:f9:10:52:b8:f9:19:f7:a7:04:3d:af:b4:2a:6c:36:f9: 99:ed:29:3e:5b:35:5e:2a:e8:70:57:62:f0:a7:ac:42:36:7c: 5d:df:6f:91:57:41:22:04:f4:27:c8:29:4a:28:94:bc:03:7c: 87:b3:42:af:f2:99:04:d3:c1:51:d6:eb:ec:cb:74:f5:45:c4: f8:3c:61:a4:c4:e1:f0:8e:ef:0b:ff:96:3c:ee:4b:70:d9:95: 96:80:ec:24:75:d4:45:4d:f5:25:03:52:3f:6f:a0:5d:58:53: 59:55:bd:bc:f7:94:33:8e:58:e3:8a:5e:e8:8f:58:49:83:54: 73:97:e3:a0:c4:ca:7b:2b:d6:b1:3f:21:58:ce:bd:bc:b8:d0: 38:34:8a:83:f1:a8:b2:c9:3b:35:f6:d3:90:d9:44:d5:15:2c: 50:51:24:a8:32:a6:ab:f4:40:90:0d:5f:96:34:5a:2f:3d:23: 63:c2:7b:f2:c8:02:27:50:05:fe:3b:bf:33:63:c5:7f:65:ca: 71:3d:93:5b:49:48:9a:41:80:4b:5e:c1:0c:57:f8:eb:a1:6a: 35:88:6b:8d:a2:5a:95:84:b4:c6:67:78:e2:f0:27:e6:59:8e: 2d:e0:a0:c8:13:7a:8b:6e:3d:26:f3:03:6c:0d:04:59:95:93: 51:0d:4b:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZM6Nx5rU0SvJgd0zhnR9cVHa0QEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAyMDM3WhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTZkYTdhNzczMjZmNTlhY2NiODU4NzYxNzZiNmQ3OWEz Y2FlMzJiZWRkZWVmOGY2NmVlNDVlYTkyOTY4MjA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX2rTqcRQy1JTyZM6H6tYwLYZFR+KS8QeNiFISrN4zLFmV vpX4bNoDWQCPb+Re8NDN/xGQTtHhdJDkFaPmcgGF786WaQsfqOzU7WOTBBdFx7Zl ixRwpvkgf3gza830OJ64l8eH5+XBPhOfAgsNL/KGBWBRlZ3h8oy8AKvMEvOVGs12 Hm1zdrkBl3gd0qAY3tg194K7d2Psh+E4dA+6DboBdcbD7yxo6JUrfwX75CqZA7aj 8W5yYfgArocNWeZKnG6K7JjD936dth6/m0DegKaw1DD9WLlogSj9aCqr0SiX7j6R Q7nz8lb14TmmgpqMduJSyWiSekDW1KaSOfQivIxhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU05w0WIGni5fA2RRD0faABRC0dEowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlM2RiYTMzLWM3NmUtNDljOS05MjQyLTE2ZTkzMjY3ZWYwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlgwwDQYJKoZIhvcNAQELBQADggEBACqX+RBSuPkZ96cEPa+0Kmw2+Znt KT5bNV4q6HBXYvCnrEI2fF3fb5FXQSIE9CfIKUoolLwDfIezQq/ymQTTwVHW6+zL dPVFxPg8YaTE4fCO7wv/ljzuS3DZlZaA7CR11EVN9SUDUj9voF1YU1lVvbz3lDOO WOOKXuiPWEmDVHOX46DEynsr1rE/IVjOvby40Dg0ioPxqLLJOzX205DZRNUVLFBR JKgypqv0QJANX5Y0Wi89I2PCe/LIAidQBf47vzNjxX9lynE9k1tJSJpBgEtewQxX +OuhajWIa42iWpWEtMZneOLwJ+ZZji3goMgTeotuPSbzA2wNBFmVk1ENS3g= -----END CERTIFICATE-----Generated at Tue Jul 28 14:51:50 2026 by rpki-client