$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa File: ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa (raw, json) Hash identifier: bLJJxe+ixlhY8Z+eNmZ+BC7X2gERAwRKnmBUkNNj/7w= Subject key identifier: 79:62:50:BF:9B:D4:22:CB:29:6D:A0:7F:B2:AD:FA:99:3C:A5:83:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0890D7D41CA5E92E04A55D0C50718B33824D3A76 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa Signing time: Tue 28 Jul 2026 00:11:48 +0000 ROA not before: Tue 28 Jul 2026 00:11:48 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.52.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:90:d7:d4:1c:a5:e9:2e:04:a5:5d:0c:50:71:8b:33:82:4d:3a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:11:48 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=d3b03d97cd3b3109261beb557dbaa3230e4bf33a26da9acbcc28e6942fa4c0b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:ba:1c:83:1e:23:d1:fd:14:a6:43:a5:9f: e7:42:22:33:70:f6:33:cf:51:d4:e7:19:cb:5a:12: d7:82:1f:d1:b8:99:40:b5:b3:9c:1d:39:66:93:6d: 12:c2:58:af:05:85:34:71:a7:06:a1:b0:b4:18:88: 9c:bf:e7:9b:82:be:2b:b2:2d:60:0c:93:40:d5:12: dc:ef:bf:31:47:22:98:87:b5:fb:6a:da:6c:37:55: 4c:9e:ca:bf:33:ef:ed:79:19:d9:d7:24:79:9f:42: 92:62:ea:a1:97:b1:89:51:a5:bd:db:a0:9b:0b:f3: 1b:42:7e:d1:a5:06:ee:aa:d8:37:4b:53:dc:bb:a5: 1c:1b:94:44:5c:91:4e:43:8e:80:72:57:a0:4a:9b: c6:7d:73:1e:d2:3e:13:a3:fb:b6:36:05:7d:6f:c3: e6:a7:75:6c:7d:57:12:bc:07:f3:f3:6c:55:08:17: 32:44:10:01:f4:6b:75:ee:92:05:49:82:19:97:f5: 81:03:b7:f3:fd:2b:d7:6a:c9:1f:57:a1:c0:fc:44: 72:f4:93:b8:14:26:92:ec:61:a4:68:f3:78:62:c0: cf:fc:fd:75:f9:f4:7d:35:26:13:48:75:2b:88:ec: eb:53:5d:af:2f:fa:77:0f:3c:1c:2b:33:0d:27:04: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:50:BF:9B:D4:22:CB:29:6D:A0:7F:B2:AD:FA:99:3C:A5:83:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.52.168.0/21 Signature Algorithm: sha256WithRSAEncryption 38:4f:3a:35:46:73:ac:1d:7f:53:ba:67:b6:2d:a4:d3:e5:ea: f4:9e:35:59:30:6e:0d:9b:18:de:76:d9:8c:92:c1:4e:f3:75: 1a:87:f4:89:5e:f5:cc:7b:1f:59:1d:76:2e:8e:fa:ac:cb:9e: a1:e9:a7:db:01:90:da:9f:ac:14:e1:6e:1e:87:67:ea:39:d4: 1b:5d:da:dc:8b:eb:12:dd:e7:32:24:42:ca:48:8b:c2:16:a5: 9f:7f:59:41:29:8f:08:91:2a:22:53:d1:44:a0:3f:1f:e8:db: 5d:ba:58:bb:96:36:c1:b9:a2:8b:ce:89:11:b1:62:10:65:5b: 5f:ad:61:e2:9a:f8:a2:ff:16:cd:f1:d5:e3:01:35:1f:94:72: 9b:1f:9c:36:ef:b7:af:e0:e5:10:33:65:8c:97:09:e9:38:65: 01:5c:1a:cb:f9:9e:53:0b:da:70:04:99:81:d3:0a:cf:c9:75: 97:92:4c:81:be:aa:da:10:12:6d:61:20:32:50:9f:f1:13:f8: 29:08:1f:73:bb:41:24:7b:c6:0e:51:e8:4c:ab:c7:7d:1c:7c: 87:1f:3d:f2:ec:56:12:b2:1b:14:8a:80:7e:61:ae:6d:27:39: 2e:bf:ae:d6:d6:b8:ed:80:34:ec:a6:6a:db:11:cf:ca:b3:83: b7:3d:67:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCJDX1Byl6S4EpV0MUHGLM4JNOnYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAxMTQ4WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2IwM2Q5N2NkM2IzMTA5MjYxYmViNTU3ZGJhYTMyMzBl NGJmMzNhMjZkYTlhY2JjYzI4ZTY5NDJmYTRjMGI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDANbocgx4j0f0UpkOln+dCIjNw9jPPUdTnGctaEteCH9G4 mUC1s5wdOWaTbRLCWK8FhTRxpwahsLQYiJy/55uCviuyLWAMk0DVEtzvvzFHIpiH tftq2mw3VUyeyr8z7+15GdnXJHmfQpJi6qGXsYlRpb3boJsL8xtCftGlBu6q2DdL U9y7pRwblERckU5DjoByV6BKm8Z9cx7SPhOj+7Y2BX1vw+andWx9VxK8B/PzbFUI FzJEEAH0a3XukgVJghmX9YEDt/P9K9dqyR9XocD8RHL0k7gUJpLsYaRo83hiwM/8 /XX59H01JhNIdSuI7OtTXa8v+ncPPBwrMw0nBE8HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeWJQv5vUIsspbaB/sq36mTylgxIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjNWFjNzg2LTJlMjEtNGRhZS04ZWVkLWE5YjJmZjI5OWEzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANANKgwDQYJKoZIhvcNAQELBQADggEBADhPOjVGc6wdf1O6Z7YtpNPl6vSe NVkwbg2bGN522YySwU7zdRqH9Ile9cx7H1kddi6O+qzLnqHpp9sBkNqfrBThbh6H Z+o51Btd2tyL6xLd5zIkQspIi8IWpZ9/WUEpjwiRKiJT0USgPx/o2126WLuWNsG5 oovOiRGxYhBlW1+tYeKa+KL/Fs3x1eMBNR+UcpsfnDbvt6/g5RAzZYyXCek4ZQFc Gsv5nlML2nAEmYHTCs/JdZeSTIG+qtoQEm1hIDJQn/ET+CkIH3O7QSR7xg5R6Eyr x30cfIcfPfLsVhKyGxSKgH5hrm0nOS6/rtbWuO2ANOymatsRz8qzg7c9Z9U= -----END CERTIFICATE-----Generated at Tue Jul 28 14:51:15 2026 by rpki-client