$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa File: cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa (raw, json) Hash identifier: UoKMAwnpWIXNU9HraypPJgU+t1Sd9bYRteDsS+AxlsA= Subject key identifier: 87:49:1B:85:2F:49:F6:6A:81:50:83:27:C2:1C:85:CD:7C:60:37:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58A2B3D9A87A9E782DDD4F6B485F241560F29EFB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa Signing time: Tue 28 Jul 2026 00:31:48 +0000 ROA not before: Tue 28 Jul 2026 00:31:48 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 121.94.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a2:b3:d9:a8:7a:9e:78:2d:dd:4f:6b:48:5f:24:15:60:f2:9e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:31:48 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=5a7a0661046b008648243d40e7f9c363a7636e5feaeed4eb04c8a35b54df9cb6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:6e:20:a7:b8:d4:60:35:06:1a:16:78:2f: 1d:48:64:79:08:1d:e2:cc:43:69:c8:0e:e7:04:71: 85:b1:b4:4c:2c:dd:72:3a:cb:f8:9e:ec:5c:5a:ab: 83:93:c6:36:9e:48:c2:d1:1c:e7:6b:cd:e8:43:fc: 0e:26:6b:9f:2a:14:d0:bc:d8:7b:61:2e:ce:b5:3b: 0d:85:70:55:53:9b:af:2a:85:e8:98:dc:0f:ae:96: d3:ac:ff:89:ae:9e:bd:7d:fa:b2:07:b9:b4:97:f5: 63:10:7a:49:ad:d1:f5:2f:8e:d0:40:3c:aa:93:b7: 40:29:28:1a:3b:16:bb:5c:cb:13:96:cc:4e:57:0e: 6b:12:f7:ba:89:c8:84:fb:99:e4:eb:49:43:71:d0: d7:eb:89:3a:0e:e6:c2:90:79:fa:02:30:31:3b:ea: df:e9:ce:c8:e0:9e:08:c4:8b:77:4c:61:c8:db:2b: 48:2c:3b:07:dd:e4:2b:97:14:91:2f:37:b9:9e:3f: 72:8f:61:f5:19:b7:0d:15:8a:03:ed:14:b1:08:2d: 4b:ab:9d:b5:61:a8:89:45:e4:71:31:8e:27:ae:61: 30:8f:b8:03:ac:24:e3:b0:3a:a9:d6:85:67:3d:b6: f1:1d:43:a1:de:46:b7:4d:42:87:db:e3:1d:02:b8: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:49:1B:85:2F:49:F6:6A:81:50:83:27:C2:1C:85:CD:7C:60:37:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.94.0.0/18 Signature Algorithm: sha256WithRSAEncryption d3:82:ce:df:53:01:7c:da:4e:1d:6f:62:fc:c6:26:87:84:58: 5c:18:5b:d9:5f:03:6a:33:32:84:65:e6:c9:f5:c8:f8:8e:f9: 4d:87:1b:5d:25:33:d8:fa:c6:2a:fb:ed:ce:66:ce:67:ba:cc: 55:e6:d9:91:07:de:e1:7d:7a:c9:e1:3b:a7:9f:ea:41:4a:f8: ba:80:ca:d9:22:32:30:b7:e5:55:ec:7a:77:cc:95:e8:59:39: 1c:0d:47:4a:a6:32:76:53:ed:f8:62:ed:d8:30:6d:29:93:f5: b2:aa:a4:5d:09:78:2c:3e:85:4a:8e:6a:9b:b0:f3:e7:b1:cd: 06:07:8c:58:aa:95:e9:0f:09:8a:f8:a3:19:87:96:c3:85:0e: be:af:a1:09:bf:0b:a2:bc:63:54:84:6e:23:a3:06:38:af:1e: 39:7b:23:46:4f:07:bb:f7:60:1a:8d:74:d3:06:09:1a:67:88: db:21:ab:1c:65:f2:dd:13:cd:68:73:51:3c:67:34:59:d7:6d: 3e:45:52:b7:44:b5:72:96:1c:ea:b0:d7:3b:14:47:a9:01:57: bb:08:89:c4:ad:12:ef:a8:f7:2e:3b:fe:f3:ee:8b:6d:c5:29: 77:d4:05:3d:43:39:92:bb:4e:b5:84:15:fa:31:cd:10:b5:c3: c4:d8:02:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWKKz2ah6nngt3U9rSF8kFWDynvswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAzMTQ4WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTdhMDY2MTA0NmIwMDg2NDgyNDNkNDBlN2Y5YzM2M2E3 NjM2ZTVmZWFlZWQ0ZWIwNGM4YTM1YjU0ZGY5Y2I2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjr24gp7jUYDUGGhZ4Lx1IZHkIHeLMQ2nIDucEcYWxtEws 3XI6y/ie7Fxaq4OTxjaeSMLRHOdrzehD/A4ma58qFNC82HthLs61Ow2FcFVTm68q heiY3A+ultOs/4munr19+rIHubSX9WMQekmt0fUvjtBAPKqTt0ApKBo7FrtcyxOW zE5XDmsS97qJyIT7meTrSUNx0NfriToO5sKQefoCMDE76t/pzsjgngjEi3dMYcjb K0gsOwfd5CuXFJEvN7meP3KPYfUZtw0VigPtFLEILUurnbVhqIlF5HExjieuYTCP uAOsJOOwOqnWhWc9tvEdQ6HeRrdNQofb4x0CuPe9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh0kbhS9J9mqBUIMnwhyFzXxgNwMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiYWExNDYxLWI3YmItNGI4OS1iMGVlLTE5ZjRkNDM1MzEwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ5XgAwDQYJKoZIhvcNAQELBQADggEBANOCzt9TAXzaTh1vYvzGJoeEWFwY W9lfA2ozMoRl5sn1yPiO+U2HG10lM9j6xir77c5mzme6zFXm2ZEH3uF9esnhO6ef 6kFK+LqAytkiMjC35VXsenfMlehZORwNR0qmMnZT7fhi7dgwbSmT9bKqpF0JeCw+ hUqOapuw8+exzQYHjFiqlekPCYr4oxmHlsOFDr6voQm/C6K8Y1SEbiOjBjivHjl7 I0ZPB7v3YBqNdNMGCRpniNshqxxl8t0TzWhzUTxnNFnXbT5FUrdEtXKWHOqw1zsU R6kBV7sIicStEu+o9y47/vPui23FKXfUBT1DOZK7TrWEFfoxzRC1w8TYAvo= -----END CERTIFICATE-----Generated at Tue Jul 28 14:51:48 2026 by rpki-client