$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02dfb5ed-7499-4b12-a5c4-52a06de78b31.roa File: 02dfb5ed-7499-4b12-a5c4-52a06de78b31.roa (raw, json) Hash identifier: 7gg9JIiccI7VB56vZUYm1DRbe9VKWg075Y9ljx9gOFA= Subject key identifier: 88:DE:3C:8F:26:48:C0:3A:06:68:75:FF:70:52:A0:BC:FA:0A:E6:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1759892893806C6F0D380ED1DC30CCE5F98C8F9B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02dfb5ed-7499-4b12-a5c4-52a06de78b31.roa Signing time: Wed 22 Jul 2026 00:10:03 +0000 ROA not before: Wed 22 Jul 2026 00:10:03 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:59:89:28:93:80:6c:6f:0d:38:0e:d1:dc:30:cc:e5:f9:8c:8f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:10:03 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=816810c610540fc0ac912289d178e690c5db0a3cfb43e6fabcc3719abd03bc2d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:e5:d0:39:8f:30:da:87:00:c4:b7:d8:73: 44:87:17:cf:e7:8a:b7:68:ea:81:a8:09:8f:e2:cd: b9:36:c2:27:10:e3:c4:85:12:65:89:7f:ce:48:1a: dd:e0:dd:90:48:2e:2d:bf:66:1e:93:be:00:31:ac: e4:b8:9c:8f:07:bd:cc:00:46:79:cb:07:ed:f7:6c: 11:65:fa:9f:6d:d6:e7:76:fa:be:53:ba:da:34:37: c7:8a:14:7a:4e:b5:71:6a:29:7d:b1:01:69:88:23: 9e:4b:af:d0:90:ec:3b:2d:94:c5:05:9e:0a:15:97: 0f:81:16:c1:4a:0d:37:ba:c4:b8:95:5b:9d:ef:1d: 0c:65:62:1e:4e:08:31:6f:c8:c8:94:99:db:bf:f3: 96:f4:59:77:54:be:eb:88:29:fe:c3:9c:66:7d:1c: 25:c9:d9:8c:bf:9d:92:b2:53:fd:b1:ba:b2:d2:05: 11:26:f9:c3:ff:8a:63:02:75:df:86:3d:64:53:c8: 31:37:3b:9d:f9:ee:aa:45:c6:a2:d9:a0:8d:f0:8f: 5e:05:95:7f:eb:27:68:5e:0b:5d:60:4f:71:9a:0f: 56:45:a4:83:95:7b:32:d1:22:bd:dd:72:97:b5:43: a5:63:ae:40:3b:26:63:8f:48:d9:6b:f0:24:27:fd: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DE:3C:8F:26:48:C0:3A:06:68:75:FF:70:52:A0:BC:FA:0A:E6:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02dfb5ed-7499-4b12-a5c4-52a06de78b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.160.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b0:96:ee:6f:b7:43:14:6f:3c:bd:7e:2a:ef:46:29:03:18: 71:b0:c8:89:4c:12:51:60:10:e9:45:cb:e6:58:02:c4:13:0c: 7a:83:8a:54:6f:d7:c5:3c:a3:b7:0a:2c:49:35:2e:70:b0:a6: 68:49:30:55:f4:b1:37:95:98:ab:e5:aa:57:1c:dc:ed:bd:bb: 52:96:da:17:2a:67:7a:bb:a0:2c:8f:f6:30:02:3d:5f:bd:98: 64:4b:1f:4d:21:62:0d:f4:c3:27:31:12:62:bb:60:24:71:19: d2:db:96:81:15:92:b9:bd:24:24:80:9f:a9:3c:53:0e:d0:6b: cc:ae:20:e1:6d:f3:c7:fd:8c:15:0c:f6:6b:55:4d:bd:17:01: 8e:cf:ad:d8:e6:af:b5:79:43:86:5c:5b:9f:c9:2e:65:2c:57: ac:2f:05:8c:c3:72:16:2d:19:86:ed:a0:bd:98:2a:61:48:a8: 6e:99:47:e1:4b:4d:78:51:1f:5c:29:b2:14:f4:08:15:bc:62: 2d:71:cb:6b:43:32:8c:f4:73:cb:07:cb:fd:6c:01:50:40:10: 29:1b:dc:4a:6e:f9:62:1b:77:c8:13:7f:69:a1:d3:d9:c2:34: 18:c1:30:35:91:5e:91:1c:65:0d:b1:05:a2:ec:4e:59:c2:5c: 54:13:7a:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF1mJKJOAbG8NOA7R3DDM5fmMj5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAxMDAzWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTY4MTBjNjEwNTQwZmMwYWM5MTIyODlkMTc4ZTY5MGM1 ZGIwYTNjZmI0M2U2ZmFiY2MzNzE5YWJkMDNiYzJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBJeXQOY8w2ocAxLfYc0SHF8/nirdo6oGoCY/izbk2wicQ 48SFEmWJf85IGt3g3ZBILi2/Zh6TvgAxrOS4nI8HvcwARnnLB+33bBFl+p9t1ud2 +r5Tuto0N8eKFHpOtXFqKX2xAWmII55Lr9CQ7DstlMUFngoVlw+BFsFKDTe6xLiV W53vHQxlYh5OCDFvyMiUmdu/85b0WXdUvuuIKf7DnGZ9HCXJ2Yy/nZKyU/2xurLS BREm+cP/imMCdd+GPWRTyDE3O5357qpFxqLZoI3wj14FlX/rJ2heC11gT3GaD1ZF pIOVezLRIr3dcpe1Q6VjrkA7JmOPSNlr8CQn/bW3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiN48jyZIwDoGaHX/cFKgvPoK5qwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyZGZiNWVkLTc0OTktNGIxMi1hNWM0LTUyYTA2ZGU3OGIzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7qAwDQYJKoZIhvcNAQELBQADggEBAJKwlu5vt0MUbzy9firvRikDGHGw yIlMElFgEOlFy+ZYAsQTDHqDilRv18U8o7cKLEk1LnCwpmhJMFX0sTeVmKvlqlcc 3O29u1KW2hcqZ3q7oCyP9jACPV+9mGRLH00hYg30wycxEmK7YCRxGdLbloEVkrm9 JCSAn6k8Uw7Qa8yuIOFt88f9jBUM9mtVTb0XAY7Prdjmr7V5Q4ZcW5/JLmUsV6wv BYzDchYtGYbtoL2YKmFIqG6ZR+FLTXhRH1wpshT0CBW8Yi1xy2tDMoz0c8sHy/1s AVBAECkb3Epu+WIbd8gTf2mh09nCNBjBMDWRXpEcZQ2xBaLsTlnCXFQTels= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:49 2026 by rpki-client