$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a42a738c-9b5f-415d-a4cc-d638a82f8193.roa File: a42a738c-9b5f-415d-a4cc-d638a82f8193.roa (raw, json) Hash identifier: PrUOI8CqxuzCgpJcESZ1JvRe1RFO1Oia4Y/Zl6q0uG0= Subject key identifier: E5:74:06:99:E1:2D:4C:7F:23:B4:32:D7:D6:B3:EF:61:17:89:94:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 090AA839B0E18B36D917981D6EAA41B8E032464F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a42a738c-9b5f-415d-a4cc-d638a82f8193.roa Signing time: Sat 25 Jul 2026 00:30:13 +0000 ROA not before: Sat 25 Jul 2026 00:30:13 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0a:a8:39:b0:e1:8b:36:d9:17:98:1d:6e:aa:41:b8:e0:32:46:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:30:13 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=f874f25cb70b7aed55f98cd526f3ccbb581cabe8a8deec5e86b52c2d78b0585c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b7:cc:5e:43:28:4f:e6:ae:0d:c6:38:b4:ca: 63:a0:5d:89:67:96:4f:8c:14:87:93:f2:c4:40:ce: 5e:96:9d:ef:b4:2a:f5:f1:42:34:9f:47:50:8c:9f: 95:46:7d:3f:09:f2:d9:a9:c6:43:57:68:c8:5c:40: ba:f3:d4:46:65:69:06:82:96:c5:70:a3:66:31:8e: a8:36:bf:5f:2e:6f:f1:31:22:a6:44:0a:f2:13:3b: d5:b7:4c:43:04:23:a6:eb:a0:79:7e:6c:fb:a1:00: 3c:78:73:77:45:6c:93:75:a6:a7:c7:1f:a0:62:e8: 5f:d9:b6:38:90:e2:07:19:45:53:ec:77:7b:fb:cc: 52:57:77:23:79:a9:72:35:18:0b:a0:08:09:78:50: f4:ab:50:02:ee:06:4d:b7:e7:e8:95:d2:c3:60:cc: 9c:2b:c4:d6:03:89:01:05:82:5f:0c:04:5e:33:6a: 5e:40:05:b5:47:0c:67:47:0c:b0:94:0c:0e:3e:04: 51:0f:42:1d:f8:27:d0:f4:3e:c6:71:f6:7b:fb:49: b2:29:b2:dc:57:9c:1b:a8:b0:0b:55:67:5d:8f:66: 40:32:85:5e:7b:d7:47:87:53:0a:df:14:3d:69:94: 23:34:5e:03:bc:61:e3:0e:57:5f:71:ff:63:9b:48: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:06:99:E1:2D:4C:7F:23:B4:32:D7:D6:B3:EF:61:17:89:94:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a42a738c-9b5f-415d-a4cc-d638a82f8193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.122.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:39:53:e2:9a:4e:e6:28:8f:5a:d4:5c:63:16:e6:21:0b:12: 41:dd:de:24:f2:61:4b:d1:b2:8f:90:58:fd:6d:d5:19:79:11: 76:09:99:b5:ba:2c:0e:b2:5f:a8:25:0c:8e:6f:55:ea:7c:5c: 14:8b:51:c7:b3:8b:93:e2:03:93:34:9e:7b:fa:8f:b6:0d:83: 34:a8:4e:3d:63:13:c7:29:0c:fb:4d:83:6b:a3:c2:77:30:70: 21:35:a1:b8:a4:51:6a:7f:74:83:7a:17:7f:8c:e9:0b:d8:eb: bc:36:aa:65:3c:a3:eb:e2:e0:d8:4b:9e:85:e5:b6:47:3b:f0: 97:46:4e:5d:17:09:8e:a7:e3:92:ad:a2:c3:42:98:53:76:9f: e3:6d:10:6c:55:eb:93:20:a5:63:c4:47:6c:69:25:48:68:98: 32:b4:26:d1:bd:98:06:2d:3b:2a:d1:bf:7e:55:e1:2c:21:db: 59:f1:31:95:df:76:fa:1a:1e:6c:21:ab:1d:81:0b:2a:fd:fe: d2:6e:b4:ee:d9:f6:2c:f8:2d:73:b7:e3:19:be:8c:bb:fb:18: 56:83:45:04:03:a5:c8:b9:98:50:22:02:2a:6b:c8:b3:cd:d6: 97:f1:a4:a0:be:53:1a:92:ea:79:03:d2:ab:3b:5d:78:63:c0: 6d:cb:93:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCQqoObDhizbZF5gdbqpBuOAyRk8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAzMDEzWhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODc0ZjI1Y2I3MGI3YWVkNTVmOThjZDUyNmYzY2NiYjU4 MWNhYmU4YThkZWVjNWU4NmI1MmMyZDc4YjA1ODVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5t8xeQyhP5q4Nxji0ymOgXYlnlk+MFIeT8sRAzl6Wne+0 KvXxQjSfR1CMn5VGfT8J8tmpxkNXaMhcQLrz1EZlaQaClsVwo2Yxjqg2v18ub/Ex IqZECvITO9W3TEMEI6broHl+bPuhADx4c3dFbJN1pqfHH6Bi6F/ZtjiQ4gcZRVPs d3v7zFJXdyN5qXI1GAugCAl4UPSrUALuBk235+iV0sNgzJwrxNYDiQEFgl8MBF4z al5ABbVHDGdHDLCUDA4+BFEPQh34J9D0PsZx9nv7SbIpstxXnBuosAtVZ12PZkAy hV5710eHUwrfFD1plCM0XgO8YeMOV19x/2ObSL4dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5XQGmeEtTH8jtDLX1rPvYReJlOwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0MmE3MzhjLTliNWYtNDE1ZC1hNGNjLWQ2MzhhODJmODE5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjlnowDQYJKoZIhvcNAQELBQADggEBACw5U+KaTuYoj1rUXGMW5iELEkHd 3iTyYUvRso+QWP1t1Rl5EXYJmbW6LA6yX6glDI5vVep8XBSLUcezi5PiA5M0nnv6 j7YNgzSoTj1jE8cpDPtNg2ujwncwcCE1obikUWp/dIN6F3+M6QvY67w2qmU8o+vi 4NhLnoXltkc78JdGTl0XCY6n45KtosNCmFN2n+NtEGxV65MgpWPER2xpJUhomDK0 JtG9mAYtOyrRv35V4Swh21nxMZXfdvoaHmwhqx2BCyr9/tJutO7Z9iz4LXO34xm+ jLv7GFaDRQQDpci5mFAiAipryLPN1pfxpKC+UxqS6nkD0qs7XXhjwG3LkwE= -----END CERTIFICATE-----Generated at Tue Jul 28 17:11:06 2026 by rpki-client