$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c257f7ad-cc54-4a00-86fc-b61f747d712e.roa File: c257f7ad-cc54-4a00-86fc-b61f747d712e.roa (raw, json) Hash identifier: fCF0U9DMOg5J5MxSd6xZnSD8LuD1SahLIqH/Rt8hoFk= Subject key identifier: A7:45:8E:77:30:14:97:4E:05:7A:D0:88:32:9B:3C:B3:39:FB:96:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 064A6D3A35FC797360ED8D681C6F2D6974B718C5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c257f7ad-cc54-4a00-86fc-b61f747d712e.roa Signing time: Fri 24 Jul 2026 00:21:08 +0000 ROA not before: Fri 24 Jul 2026 00:21:08 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4a:6d:3a:35:fc:79:73:60:ed:8d:68:1c:6f:2d:69:74:b7:18:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:21:08 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=d3649abd0ef9c2f063deebe161ce231fc2f8d33131bdd94ea9b0a0d2e763cf4e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:15:58:12:ec:ee:f3:0a:54:7c:e2:ea:51: e9:47:21:35:43:64:b4:6b:08:be:c9:13:1f:35:eb: de:6c:d2:c3:90:83:71:74:5c:74:d9:ac:23:f2:86: 77:cb:71:be:b9:13:dd:32:64:ae:fd:bd:ef:be:70: 80:0a:c3:33:f8:64:07:a4:aa:34:83:88:25:ca:b4: ac:f8:c8:64:fb:ac:96:a9:0f:5f:79:37:59:cd:09: 80:37:da:98:12:86:a2:af:07:96:2b:b7:68:00:7b: ad:f5:3b:c6:5a:5b:c9:b6:a8:99:e5:85:27:a1:a2: 43:64:18:dd:98:f3:b9:36:16:08:a8:ee:0f:e0:3d: b4:49:cb:ba:c7:86:ce:50:eb:b3:57:a4:a6:7c:4d: 1d:7b:ec:11:70:aa:0b:44:96:14:8e:2e:98:50:89: 9e:63:67:c5:09:ba:22:d9:0f:01:0f:ff:39:fe:e8: eb:eb:8c:c1:6c:02:4e:44:ab:3c:0e:85:1a:50:54: 36:91:18:3a:ac:43:c0:ab:f9:3b:36:2b:c2:d0:2a: 29:09:f0:ec:4d:33:e4:91:58:65:c2:86:d5:4b:9f: 91:11:c8:27:40:f1:01:a3:ce:4b:a5:b5:ba:a9:60: fa:6e:11:b2:69:f1:ea:e9:b4:b6:f8:ca:df:58:0f: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:45:8E:77:30:14:97:4E:05:7A:D0:88:32:9B:3C:B3:39:FB:96:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c257f7ad-cc54-4a00-86fc-b61f747d712e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.4.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:dd:d3:3a:fc:e0:a6:4f:82:be:53:63:4e:d5:a0:3d:65:58: d8:d4:22:6e:90:15:a9:f5:ef:a8:06:cd:d2:f4:27:dc:e2:f5: 2e:12:5e:c3:85:85:1d:30:49:1f:55:00:ac:23:4f:aa:db:e6: 1a:0a:e5:8b:c0:c8:b0:b6:e4:2a:30:fa:1b:5c:e0:6f:2b:f5: 09:b3:17:5f:95:29:9c:9f:be:c7:4f:d1:c2:40:56:54:44:93: ab:9f:b6:0a:f3:77:53:7c:16:e1:ea:06:53:45:9b:d9:d7:cc: 92:83:10:f7:d8:b9:38:5e:f1:6b:67:f7:a1:e0:38:5c:92:45: 81:12:e3:0e:29:b8:da:92:77:21:5c:74:17:63:5a:19:e4:4c: 38:52:e3:84:cd:80:35:1d:91:42:d1:d8:45:8d:39:9c:0a:f2: 85:e5:83:1d:28:84:72:3f:13:4c:c1:3d:a6:f0:5d:98:33:cd: fd:df:32:65:1e:e6:00:28:a6:15:7d:9f:99:25:3d:3e:ec:69: 41:04:7f:5f:f2:bd:95:b2:c7:2a:32:24:b0:59:cd:86:4c:88: 49:18:26:35:d1:0b:f2:c7:73:a0:38:ac:51:e7:4c:18:1f:ca: 00:5c:96:dc:9d:c1:8a:aa:ec:8d:c5:78:9d:e3:21:4a:dc:99: 7c:3a:68:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBkptOjX8eXNg7Y1oHG8taXS3GMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAyMTA4WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzY0OWFiZDBlZjljMmYwNjNkZWViZTE2MWNlMjMxZmMy ZjhkMzMxMzFiZGQ5NGVhOWIwYTBkMmU3NjNjZjRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+4hVYEuzu8wpUfOLqUelHITVDZLRrCL7JEx81695s0sOQ g3F0XHTZrCPyhnfLcb65E90yZK79ve++cIAKwzP4ZAekqjSDiCXKtKz4yGT7rJap D195N1nNCYA32pgShqKvB5Yrt2gAe631O8ZaW8m2qJnlhSehokNkGN2Y87k2Fgio 7g/gPbRJy7rHhs5Q67NXpKZ8TR177BFwqgtElhSOLphQiZ5jZ8UJuiLZDwEP/zn+ 6OvrjMFsAk5EqzwOhRpQVDaRGDqsQ8Cr+Ts2K8LQKikJ8OxNM+SRWGXChtVLn5ER yCdA8QGjzkultbqpYPpuEbJp8erptLb4yt9YD45BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUp0WOdzAUl04FetCIMps8szn7lgQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyNTdmN2FkLWNjNTQtNGEwMC04NmZjLWI2MWY3NDdkNzEyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHRXAQwDQYJKoZIhvcNAQELBQADggEBAA3d0zr84KZPgr5TY07VoD1lWNjU Im6QFan176gGzdL0J9zi9S4SXsOFhR0wSR9VAKwjT6rb5hoK5YvAyLC25Cow+htc 4G8r9QmzF1+VKZyfvsdP0cJAVlREk6uftgrzd1N8FuHqBlNFm9nXzJKDEPfYuThe 8Wtn96HgOFySRYES4w4puNqSdyFcdBdjWhnkTDhS44TNgDUdkULR2EWNOZwK8oXl gx0ohHI/E0zBPabwXZgzzf3fMmUe5gAophV9n5klPT7saUEEf1/yvZWyxyoyJLBZ zYZMiEkYJjXRC/LHc6A4rFHnTBgfygBcltydwYqq7I3FeJ3jIUrcmXw6aHA= -----END CERTIFICATE-----Generated at Tue Jul 28 14:52:47 2026 by rpki-client