$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa File: 985b59c8-a923-4d73-afff-2650138ef0c2.roa (raw, json) Hash identifier: 8jEdDXnJUptfxDY3m1/v95Z/mi4G4FfRNjVK/Ge/EKo= Subject key identifier: 47:14:AE:E3:89:15:25:E3:10:78:76:DF:56:67:FE:16:21:2D:ED:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D497B590FAEEBA1CAC826D2D508FD7C81FA32BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa Signing time: Fri 24 Jul 2026 00:50:45 +0000 ROA not before: Fri 24 Jul 2026 00:50:45 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 104.216.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:49:7b:59:0f:ae:eb:a1:ca:c8:26:d2:d5:08:fd:7c:81:fa:32:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:50:45 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=f28d324bda221e229f9f6d2c8e97a5d1e9ca3b286ab7f7ac0612aaf3f583a4f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:6b:0c:f8:e2:e7:95:b4:45:9f:dd:51:7b: b4:aa:82:47:a3:5d:fd:9e:ec:38:33:3a:dd:30:26: a6:73:0c:b3:b9:a7:45:e4:3c:19:10:b0:92:7c:73: 8c:ca:54:8a:b3:18:04:33:d1:39:e7:ce:93:c8:43: 43:85:80:fc:e3:e2:c7:8b:5f:18:cb:98:f1:86:aa: ff:2c:50:c6:fc:cc:cb:1e:3e:92:64:4b:96:02:4a: af:cf:aa:de:d7:80:46:07:67:cf:52:99:c1:d4:84: df:46:be:7c:50:d0:53:21:96:0f:f1:c9:1c:5a:49: c6:97:b0:ba:e9:ac:92:1b:e3:21:da:21:28:09:b7: b5:8a:16:a5:f0:17:54:6c:e7:e0:07:3a:52:3f:9c: d3:0e:da:b9:3b:08:6f:d1:37:b5:4b:4a:b4:fa:87: 96:83:40:e9:64:bd:0b:65:9c:2e:be:40:3f:2f:cf: 54:11:55:6b:83:9e:fa:53:f0:78:be:a2:0b:42:3c: 5d:b4:09:f4:52:47:bd:43:41:a6:e2:51:5f:a5:1c: 52:b5:b1:73:99:01:48:b5:b3:3e:37:0c:17:18:9d: a5:28:5a:55:a4:16:83:87:57:70:62:f5:d1:e0:29: 69:a4:8c:76:1d:70:c3:40:0c:05:4e:f1:ba:da:5b: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:AE:E3:89:15:25:E3:10:78:76:DF:56:67:FE:16:21:2D:ED:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.216.0.0/15 Signature Algorithm: sha256WithRSAEncryption b2:c2:dc:46:23:05:fb:98:0e:54:55:55:60:39:1c:c2:7b:ba: 1f:ca:8c:c4:5f:e9:b3:5f:6f:cf:b8:36:01:3e:dc:8b:a4:ca: 04:f0:dc:90:36:1f:0e:cd:fc:73:b4:2d:00:73:ae:81:b6:0d: 4f:fa:db:8c:39:bd:f8:78:29:aa:11:06:04:1a:8e:af:c5:31: 68:93:67:36:07:08:0a:40:b3:32:9a:d9:28:a6:f0:00:da:de: 55:cc:cc:4d:20:fb:bc:4a:99:ec:8e:10:45:74:db:28:56:f0: 11:a1:ad:28:84:ec:26:84:dd:ea:08:83:4a:c0:fe:cf:96:8b: c6:9d:87:24:91:98:92:61:c7:fa:d8:dc:ae:dd:4a:00:07:a1: 92:dd:f8:dc:f2:73:d2:42:ad:de:19:99:01:e7:49:fd:39:cf: f9:b3:cf:98:c7:f8:be:a5:ed:45:85:09:54:5e:6f:52:12:d0: 5a:e6:78:7a:c9:ad:79:9c:3e:50:9a:d7:e1:6f:16:94:ab:8c: 01:31:1c:45:cc:77:dd:84:9e:d9:64:8b:4e:4c:40:41:e0:2e: 5d:42:60:1e:59:96:c1:a8:87:9c:69:f3:19:9c:6f:7a:aa:e2: 68:13:ff:91:42:7c:07:1c:6e:93:c0:21:39:6b:b4:2a:9d:94: 54:06:8c:80 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbUl7WQ+u66HKyCbS1Qj9fIH6MrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDA1MDQ1WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjhkMzI0YmRhMjIxZTIyOWY5ZjZkMmM4ZTk3YTVkMWU5 Y2EzYjI4NmFiN2Y3YWMwNjEyYWFmM2Y1ODNhNGYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR+GsM+OLnlbRFn91Re7SqgkejXf2e7DgzOt0wJqZzDLO5 p0XkPBkQsJJ8c4zKVIqzGAQz0TnnzpPIQ0OFgPzj4seLXxjLmPGGqv8sUMb8zMse PpJkS5YCSq/Pqt7XgEYHZ89SmcHUhN9GvnxQ0FMhlg/xyRxaScaXsLrprJIb4yHa ISgJt7WKFqXwF1Rs5+AHOlI/nNMO2rk7CG/RN7VLSrT6h5aDQOlkvQtlnC6+QD8v z1QRVWuDnvpT8Hi+ogtCPF20CfRSR71DQabiUV+lHFK1sXOZAUi1sz43DBcYnaUo WlWkFoOHV3Bi9dHgKWmkjHYdcMNADAVO8braWxenAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURxSu44kVJeMQeHbfVmf+FiEt7YAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4NWI1OWM4LWE5MjMtNGQ3My1hZmZmLTI2NTAxMzhlZjBjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFo2DANBgkqhkiG9w0BAQsFAAOCAQEAssLcRiMF+5gOVFVVYDkcwnu6H8qM xF/ps19vz7g2AT7ci6TKBPDckDYfDs38c7QtAHOugbYNT/rbjDm9+HgpqhEGBBqO r8UxaJNnNgcICkCzMprZKKbwANreVczMTSD7vEqZ7I4QRXTbKFbwEaGtKITsJoTd 6giDSsD+z5aLxp2HJJGYkmHH+tjcrt1KAAehkt343PJz0kKt3hmZAedJ/TnP+bPP mMf4vqXtRYUJVF5vUhLQWuZ4esmteZw+UJrX4W8WlKuMATEcRcx33YSe2WSLTkxA QeAuXUJgHlmWwaiHnGnzGZxveqriaBP/kUJ8Bxxuk8AhOWu0Kp2UVAaMgA== -----END CERTIFICATE-----Generated at Tue Jul 28 14:50:33 2026 by rpki-client