$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b1d0af-f175-481d-98b9-87f2f921af0c.roa File: f3b1d0af-f175-481d-98b9-87f2f921af0c.roa (raw, json) Hash identifier: lTibsYeJcxbX1b5896p3AkFnc/k8Y7WBrI9mD2ITF74= Subject key identifier: 11:95:CD:D2:C7:21:C1:64:7E:5C:70:4A:C3:F4:87:60:D2:51:1B:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A8DA8F7156E386B5EB6866A9F665386F789F17D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b1d0af-f175-481d-98b9-87f2f921af0c.roa Signing time: Tue 28 Jul 2026 00:10:41 +0000 ROA not before: Tue 28 Jul 2026 00:10:41 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 56.136.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8d:a8:f7:15:6e:38:6b:5e:b6:86:6a:9f:66:53:86:f7:89:f1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 00:10:41 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=bf828688ee018ff271eb51098d6eccada64a1a40b4846cb288bceb0bb3389f74, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:8f:25:28:03:f3:f4:af:27:02:5e:03:bd: aa:26:49:23:07:e7:5a:e0:11:bb:32:ff:8f:e4:00: ca:a4:0f:2b:b6:35:01:62:51:e9:3e:f7:5e:77:49: ee:80:a0:36:0d:53:57:bd:f2:2d:09:e0:f4:ac:e5: 84:78:bf:a7:37:de:31:db:71:a7:84:95:17:03:19: fc:52:9f:35:99:4a:fa:7e:3c:e0:2f:bf:91:a2:9d: 60:07:a5:c4:d8:84:fe:f5:5c:7a:e7:91:c5:88:e2: 77:5b:f5:0d:32:6e:bd:ec:da:91:77:ac:54:a1:0b: db:f1:1f:36:e5:a2:ae:91:05:d7:f9:a7:0d:66:8c: 71:a0:42:ae:6c:6d:5f:1a:4c:60:57:28:9b:4b:66: c8:5f:2b:68:a3:6c:b5:9b:2d:82:b2:48:66:96:c1: 97:a7:2e:3e:3e:73:48:68:fb:10:5d:68:5d:df:17: 55:86:76:88:68:ad:4f:34:ac:db:92:34:c3:43:25: 67:25:15:82:5a:5f:d7:f0:b6:05:a1:5b:46:8c:ea: 46:05:64:80:d9:27:cd:70:a1:20:b6:f9:ea:80:c3: 8f:74:b0:f0:2b:33:b9:70:a3:7e:e3:2c:02:ef:6a: ee:2f:fc:45:43:55:b0:56:5a:08:c4:c9:f5:e4:13: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:95:CD:D2:C7:21:C1:64:7E:5C:70:4A:C3:F4:87:60:D2:51:1B:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b1d0af-f175-481d-98b9-87f2f921af0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.136.224.0/23 Signature Algorithm: sha256WithRSAEncryption 52:0f:b0:49:a0:b4:d7:ee:8a:0f:fd:34:ff:10:6d:f7:ae:2b: 12:1b:9d:6b:64:0a:f7:34:9c:49:73:76:55:2e:5d:b4:67:9f: fc:ec:09:43:03:8c:a4:48:4d:ea:6f:e4:77:01:0e:53:cb:7d: fd:47:3f:d5:1d:d3:15:6f:25:eb:fc:37:2b:17:d0:72:dc:d2: 58:92:2e:49:49:3d:ec:67:1e:03:c6:02:6c:58:2c:71:d0:df: 78:84:9d:02:39:79:c9:4c:4e:6a:aa:4d:37:1a:c0:0f:74:14: 26:6d:9c:c8:15:8c:15:04:6c:f8:fe:41:c2:53:1e:a1:7a:ac: b3:a1:be:e0:83:ec:41:a1:12:6c:b8:53:cb:ac:a6:2a:c9:41: ed:66:a2:18:29:fb:d6:4b:ea:ad:d1:24:ae:7f:e8:36:d9:d2: 51:d8:83:d8:33:03:51:21:6a:ad:a0:39:e9:9a:de:0d:d0:e0: a1:61:57:99:d5:79:11:30:68:f8:cc:87:ba:e8:ee:ca:a4:f7: 5b:c2:36:b3:e5:04:ac:db:76:ea:f0:18:bd:ee:4e:b7:4e:eb: 50:85:9d:b2:05:13:e7:6d:c2:8b:c6:c7:f4:82:00:b4:2c:62: 4b:15:b9:03:33:ae:26:76:d1:f1:4c:cd:a6:2a:aa:d8:d8:4f: 46:06:5e:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUao2o9xVuOGtetoZqn2ZThveJ8X0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAxMDQxWhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjgyODY4OGVlMDE4ZmYyNzFlYjUxMDk4ZDZlY2NhZGE2 NGExYTQwYjQ4NDZjYjI4OGJjZWIwYmIzMzg5Zjc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnXo8lKAPz9K8nAl4DvaomSSMH51rgEbsy/4/kAMqkDyu2 NQFiUek+9153Se6AoDYNU1e98i0J4PSs5YR4v6c33jHbcaeElRcDGfxSnzWZSvp+ POAvv5GinWAHpcTYhP71XHrnkcWI4ndb9Q0ybr3s2pF3rFShC9vxHzbloq6RBdf5 pw1mjHGgQq5sbV8aTGBXKJtLZshfK2ijbLWbLYKySGaWwZenLj4+c0ho+xBdaF3f F1WGdohorU80rNuSNMNDJWclFYJaX9fwtgWhW0aM6kYFZIDZJ81woSC2+eqAw490 sPArM7lwo37jLALvau4v/EVDVbBWWgjEyfXkEwN9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEZXN0schwWR+XHBKw/SHYNJRG1EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzYjFkMGFmLWYxNzUtNDgxZC05OGI5LTg3ZjJmOTIxYWYwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE4iOAwDQYJKoZIhvcNAQELBQADggEBAFIPsEmgtNfuig/9NP8QbfeuKxIb nWtkCvc0nElzdlUuXbRnn/zsCUMDjKRITepv5HcBDlPLff1HP9Ud0xVvJev8NysX 0HLc0liSLklJPexnHgPGAmxYLHHQ33iEnQI5eclMTmqqTTcawA90FCZtnMgVjBUE bPj+QcJTHqF6rLOhvuCD7EGhEmy4U8uspirJQe1mohgp+9ZL6q3RJK5/6DbZ0lHY g9gzA1Ehaq2gOema3g3Q4KFhV5nVeREwaPjMh7ro7sqk91vCNrPlBKzbdurwGL3u TrdO61CFnbIFE+dtwovGx/SCALQsYksVuQMzriZ20fFMzaYqqtjYT0YGXqI= -----END CERTIFICATE-----Generated at Wed Jul 29 00:51:19 2026 by rpki-client