$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa File: c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa (raw, json) Hash identifier: vzXey1vKbx3wM3nUYqcwGLwESemgQqvWRUdKCtW7Rm8= Subject key identifier: 91:C4:F4:CB:21:09:C9:E5:C2:AE:AF:54:F8:7D:A6:79:09:F9:51:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EECB53E35410F9E1C14F00EED7A4761BA90D5DC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa Signing time: Tue 28 Jul 2026 00:11:18 +0000 ROA not before: Tue 28 Jul 2026 00:11:18 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.155.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ec:b5:3e:35:41:0f:9e:1c:14:f0:0e:ed:7a:47:61:ba:90:d5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:11:18 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=f30867946daad24d855aa4c7758edcad01562c247ac122593903fc0a0fb78475, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:88:6a:fb:72:98:1c:94:0a:cf:41:62:5c: 4c:42:b6:a3:a9:0e:3a:ce:19:83:18:d6:c0:89:c0: 4a:c6:0d:1c:c3:6c:cc:c9:5a:c8:5c:15:85:27:ca: 89:8e:c5:78:ea:1e:cc:d8:93:4a:eb:27:08:79:b7: d2:e8:c7:0b:67:d9:e3:c3:4e:78:21:6f:c1:eb:b3: c5:d5:1b:7d:f9:97:6e:4c:87:9c:cd:66:f6:1e:32: 79:9d:76:1d:c7:eb:8c:26:ea:7c:53:65:be:d0:9b: cf:05:1f:ce:74:4c:70:6d:14:af:b3:aa:14:df:aa: 96:64:19:11:0b:57:55:14:a2:83:76:78:28:2b:4a: 81:28:a9:8f:14:60:af:52:64:c4:fa:e8:7f:68:b0: 39:1f:99:00:31:91:2d:2b:ff:0a:5e:e8:d1:31:b6: 21:56:9a:e7:3f:d8:55:ac:4b:74:71:1a:44:8d:31: d7:d1:8d:3f:ca:ba:8b:3d:52:46:63:83:b6:22:31: 8a:6e:f8:70:0b:4c:74:2c:79:f7:c6:9a:67:c7:cd: ec:78:31:bd:13:7d:7d:8c:ae:09:b8:30:30:f8:b1: df:92:5c:91:e6:2d:6f:46:03:76:06:02:7e:ae:06: 86:86:6b:3a:0d:3c:e4:37:03:a3:31:af:d9:c8:02: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C4:F4:CB:21:09:C9:E5:C2:AE:AF:54:F8:7D:A6:79:09:F9:51:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.155.112.0/20 Signature Algorithm: sha256WithRSAEncryption 5b:da:f8:5e:e1:2c:66:ce:6c:27:23:73:2d:54:e4:75:63:fa: 18:80:13:0b:08:ff:a0:7a:d5:92:5b:1f:d5:2c:a3:10:1a:d0: ef:cd:28:08:2a:b3:26:57:96:f2:cc:d4:21:a6:42:a1:ef:dc: 01:a4:f0:de:05:c6:5a:3f:90:df:f8:d5:f5:f6:76:d3:38:fc: 91:28:2c:6d:98:c1:a1:03:71:05:85:c5:6d:ab:f1:f1:43:0e: aa:ef:4a:6a:e1:fd:6d:a2:f2:5e:cc:de:8f:15:e3:af:90:93: bc:be:10:b5:9f:3d:d6:6d:71:51:f9:8c:b0:77:29:57:6d:ef: bb:16:08:ff:ba:c4:79:51:6d:63:4f:cf:c0:65:c2:75:8f:8a: 00:05:93:01:a5:7b:b7:69:c8:a2:e1:cd:ee:64:dd:de:6d:81: 5c:b1:bd:ed:ce:e4:4e:31:64:1c:4e:96:8b:24:44:6d:52:22: 27:bf:7a:62:9a:cb:bb:70:1a:8c:3f:48:aa:f6:05:de:c8:4d: ee:9c:bf:82:1f:b4:08:c3:7b:5a:67:ed:33:e1:16:93:d7:e4: 74:56:d8:77:0c:9a:ee:ac:a1:62:c0:33:12:86:b6:df:06:86: 75:21:d2:3b:71:33:99:d0:3e:08:04:cd:f4:be:80:85:93:fb: 7d:92:2a:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULuy1PjVBD54cFPAO7XpHYbqQ1dwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAxMTE4WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzA4Njc5NDZkYWFkMjRkODU1YWE0Yzc3NThlZGNhZDAx NTYyYzI0N2FjMTIyNTkzOTAzZmMwYTBmYjc4NDc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCksohq+3KYHJQKz0FiXExCtqOpDjrOGYMY1sCJwErGDRzD bMzJWshcFYUnyomOxXjqHszYk0rrJwh5t9Loxwtn2ePDTnghb8Hrs8XVG335l25M h5zNZvYeMnmddh3H64wm6nxTZb7Qm88FH850THBtFK+zqhTfqpZkGRELV1UUooN2 eCgrSoEoqY8UYK9SZMT66H9osDkfmQAxkS0r/wpe6NExtiFWmuc/2FWsS3RxGkSN MdfRjT/Kuos9UkZjg7YiMYpu+HALTHQseffGmmfHzex4Mb0TfX2Mrgm4MDD4sd+S XJHmLW9GA3YGAn6uBoaGazoNPOQ3A6Mxr9nIAvsNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkcT0yyEJyeXCrq9U+H2meQn5USgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzM2MxZmEwLWM2ODQtNGZjMC04ZmI0LTQ3NzI4MWVkMTcyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARCm3AwDQYJKoZIhvcNAQELBQADggEBAFva+F7hLGbObCcjcy1U5HVj+hiA EwsI/6B61ZJbH9UsoxAa0O/NKAgqsyZXlvLM1CGmQqHv3AGk8N4Fxlo/kN/41fX2 dtM4/JEoLG2YwaEDcQWFxW2r8fFDDqrvSmrh/W2i8l7M3o8V46+Qk7y+ELWfPdZt cVH5jLB3KVdt77sWCP+6xHlRbWNPz8BlwnWPigAFkwGle7dpyKLhze5k3d5tgVyx ve3O5E4xZBxOloskRG1SIie/emKay7twGow/SKr2Bd7ITe6cv4IftAjDe1pn7TPh FpPX5HRW2HcMmu6soWLAMxKGtt8GhnUh0jtxM5nQPggEzfS+gIWT+32SKr4= -----END CERTIFICATE-----Generated at Tue Jul 28 20:38:35 2026 by rpki-client