$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6771be46-aee6-4f83-b27c-28ce3cdd4d8c.roa File: 6771be46-aee6-4f83-b27c-28ce3cdd4d8c.roa (raw, json) Hash identifier: qctsvBmYfzfLiL230izjVRUSNv10AJZ2R98sKvmYug4= Subject key identifier: 8C:E0:BC:00:E9:FB:59:0D:2C:78:33:21:47:72:13:C2:41:0D:D2:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EDBA1B7A73325697F99E23961CBD3F2008CA7B9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6771be46-aee6-4f83-b27c-28ce3cdd4d8c.roa Signing time: Mon 27 Jul 2026 02:01:43 +0000 ROA not before: Mon 27 Jul 2026 02:01:43 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 18.89.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:db:a1:b7:a7:33:25:69:7f:99:e2:39:61:cb:d3:f2:00:8c:a7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:01:43 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=a1941fbeb298c4356e5e1222e5f4e522702d9fcc1fa561f87306be7b9b588776, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:de:0d:87:c4:44:d0:68:c9:dc:a4:13:bf: cc:78:bf:5b:a6:01:4b:c7:5d:d4:ef:fb:8a:8b:01: f5:04:23:3b:b5:f9:2d:20:f2:df:5a:b2:fa:95:d0: 47:59:99:f3:59:5a:de:ed:2b:7d:2d:e3:f2:de:0f: c9:6d:ed:bc:26:d6:d1:00:35:67:58:77:f4:1d:7a: 14:10:37:ec:21:03:53:71:8d:2f:f8:61:bd:06:7c: 38:96:24:0b:2d:21:4d:7b:f7:59:d7:91:a8:64:b7: 1c:5b:a9:9e:23:a4:9d:7c:1c:a0:c7:4c:1c:6a:62: 59:65:50:a5:00:45:eb:7f:70:43:d1:03:f7:dc:b3: 35:72:aa:48:71:a8:24:a3:2d:82:b6:3d:db:35:36: f8:60:c0:f5:66:6e:87:bc:ad:74:cd:d5:e9:a6:7d: 20:39:5d:35:17:96:26:99:13:12:b3:e0:d2:92:d9: 72:60:dc:bf:23:fb:2f:51:81:da:42:1c:d3:f1:7d: e7:8b:13:cd:e7:2f:f5:71:a4:63:84:0c:c8:6e:c7: 1a:63:47:27:66:a2:af:bd:12:ef:af:d1:4c:e6:f3: d1:df:72:78:cf:ab:58:d1:b6:af:90:2e:03:3e:7b: c7:92:21:61:2e:f9:a0:cf:dd:ee:97:59:a6:2a:e4: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:BC:00:E9:FB:59:0D:2C:78:33:21:47:72:13:C2:41:0D:D2:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6771be46-aee6-4f83-b27c-28ce3cdd4d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.89.128.0/18 Signature Algorithm: sha256WithRSAEncryption 95:b2:f9:2d:ad:41:b5:78:f2:72:3f:ce:79:b7:c1:24:0e:e3: d0:de:58:f7:46:66:d3:5c:00:f3:79:0d:bd:dd:5c:86:14:0a: 74:96:9f:d0:b7:3a:a5:8b:0e:6b:5c:77:8c:5d:f4:b9:59:4a: 72:44:a8:c6:09:d1:ef:10:fb:69:de:eb:9b:78:b1:7e:97:8c: 03:c8:c3:11:92:40:72:37:2e:c3:9a:3b:8f:b9:1d:f3:d5:84: e8:33:02:9c:01:07:e9:2a:44:d1:d2:6f:66:1d:ed:9c:70:25: 37:5e:81:dd:a0:02:1b:02:d6:ca:96:4a:18:dd:f3:f6:81:c2: 47:ec:43:44:2d:13:ed:52:95:54:a6:02:a5:2e:70:64:0b:e4: d0:05:44:04:c3:35:0a:c1:59:16:89:f7:99:c3:26:25:aa:17: 9d:e8:37:e4:5b:ab:42:2e:7d:b4:a8:a4:25:f7:18:ce:18:96: 21:6f:55:14:42:b0:3a:3e:3f:be:8d:29:e0:a0:e2:c6:10:ce: 4a:96:c0:18:1f:d2:90:33:3f:e4:59:74:d1:af:02:6e:65:57: 84:f3:2b:38:d1:89:a3:5f:05:19:f4:5d:07:1b:39:6c:11:51: f9:d7:9c:e9:d5:41:90:fb:3e:0c:dd:fc:1f:56:ce:7a:e3:1e: b0:a1:58:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbtuht6czJWl/meI5YcvT8gCMp7kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIwMTQzWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTk0MWZiZWIyOThjNDM1NmU1ZTEyMjJlNWY0ZTUyMjcw MmQ5ZmNjMWZhNTYxZjg3MzA2YmU3YjliNTg4Nzc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuGN4Nh8RE0GjJ3KQTv8x4v1umAUvHXdTv+4qLAfUEIzu1 +S0g8t9asvqV0EdZmfNZWt7tK30t4/LeD8lt7bwm1tEANWdYd/QdehQQN+whA1Nx jS/4Yb0GfDiWJAstIU1791nXkahktxxbqZ4jpJ18HKDHTBxqYlllUKUARet/cEPR A/fcszVyqkhxqCSjLYK2Pds1NvhgwPVmboe8rXTN1emmfSA5XTUXliaZExKz4NKS 2XJg3L8j+y9RgdpCHNPxfeeLE83nL/VxpGOEDMhuxxpjRydmoq+9Eu+v0Uzm89Hf cnjPq1jRtq+QLgM+e8eSIWEu+aDP3e6XWaYq5BhPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjOC8AOn7WQ0seDMhR3ITwkEN0sMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3NzFiZTQ2LWFlZTYtNGY4My1iMjdjLTI4Y2UzY2RkNGQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSWYAwDQYJKoZIhvcNAQELBQADggEBAJWy+S2tQbV48nI/znm3wSQO49De WPdGZtNcAPN5Db3dXIYUCnSWn9C3OqWLDmtcd4xd9LlZSnJEqMYJ0e8Q+2ne65t4 sX6XjAPIwxGSQHI3LsOaO4+5HfPVhOgzApwBB+kqRNHSb2Yd7ZxwJTdegd2gAhsC 1sqWShjd8/aBwkfsQ0QtE+1SlVSmAqUucGQL5NAFRATDNQrBWRaJ95nDJiWqF53o N+Rbq0IufbSopCX3GM4YliFvVRRCsDo+P76NKeCg4sYQzkqWwBgf0pAzP+RZdNGv Am5lV4TzKzjRiaNfBRn0XQcbOWwRUfnXnOnVQZD7Pgzd/B9WznrjHrChWNs= -----END CERTIFICATE-----Generated at Tue Jul 28 21:27:59 2026 by rpki-client