$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa File: 05ae7013-1fbb-4d48-8f95-be150236ce6c.roa (raw, json) Hash identifier: coAwJr2p93reKZJ/Hfx+v2RG2brUdLgZJmSMEwH8+KU= Subject key identifier: 0F:8D:95:DE:8C:0D:68:5E:22:AC:C8:86:FB:8D:E4:DF:EA:6A:34:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 234D1217B534BE0356FC6084B24F2DC62D64CDAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa Signing time: Thu 16 Jul 2026 00:10:44 +0000 ROA not before: Thu 16 Jul 2026 00:10:44 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 151.148.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4d:12:17:b5:34:be:03:56:fc:60:84:b2:4f:2d:c6:2d:64:cd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:10:44 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=943af23a6cd86c3c0456e101f29ac55e7353fd5969e0d64256317321d7e37ff4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:ff:7e:ed:3f:8c:e6:f3:a0:f4:c3:8e:fc: e3:4e:b7:45:ab:a6:a4:39:10:46:90:f0:db:f7:f3: 3b:88:0e:10:8b:52:aa:2e:a4:03:36:52:56:79:94: b6:78:df:bd:ca:6b:75:76:23:77:82:c0:b2:e4:43: 67:15:5f:6a:f5:dc:63:7a:99:d1:d1:49:cc:8f:e1: fe:d6:08:a1:32:c6:1b:80:cd:7d:0f:c8:34:35:eb: d8:43:b5:91:21:ab:55:0a:43:2f:c1:ce:cd:27:30: fa:fe:df:6d:b8:30:d4:b2:26:5c:91:67:19:88:e2: 7e:94:4e:7f:7d:63:fd:66:73:b5:f7:32:50:8c:28: cc:b6:b3:bf:83:46:a7:72:ec:62:3b:68:8e:7f:b3: 7d:51:ac:ec:2a:fd:00:70:b4:09:ee:98:43:bb:be: bb:cc:5a:de:48:b4:1a:15:c2:5c:3c:b1:d5:08:4b: a2:18:d3:11:a7:e1:c7:42:0b:a7:65:97:cc:bd:09: e2:67:5f:ba:20:e4:0b:6b:88:52:57:24:68:a8:20: 99:4d:57:b1:3e:6d:49:f0:c2:08:76:c9:47:ec:45: f4:b9:47:28:d9:93:15:eb:45:a2:b4:48:bf:23:85: 16:80:9c:7b:da:15:ed:87:1f:21:82:54:d1:8a:4c: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8D:95:DE:8C:0D:68:5E:22:AC:C8:86:FB:8D:E4:DF:EA:6A:34:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.36.0/24 Signature Algorithm: sha256WithRSAEncryption 32:c2:e9:62:a8:ac:b6:1b:df:eb:1e:3d:81:8e:b3:f2:cd:fe: 32:a5:27:0e:ef:78:14:da:d4:0a:d9:43:32:27:2b:e8:67:c1: d2:e0:7d:38:22:8e:7c:2f:67:f5:bc:b2:a4:29:f6:9f:0e:8a: 8d:01:6a:36:c0:c2:d6:c3:72:aa:59:ec:35:8e:7d:4f:1a:c9: c8:ae:b6:5d:57:4d:4b:fd:4a:8f:bb:a4:6b:78:fa:d1:e1:0c: 36:89:6a:15:61:da:5f:d3:0e:f0:40:e7:fd:99:25:a6:a8:fb: c8:fd:f8:9b:6f:b9:c0:ed:f2:00:71:c2:49:cc:d2:d9:1f:d5: 4b:03:5c:58:0e:cf:25:8c:b0:e2:1c:db:21:89:4a:5b:29:31: 58:b8:55:3e:e4:0e:cc:21:ee:95:2a:9b:f0:7e:92:3a:6b:31: d7:d8:b3:96:bf:b5:e1:91:28:43:24:06:aa:e8:9c:78:4a:e7: 63:5f:d1:3a:62:6b:ed:8a:b7:d4:af:24:b5:2b:12:02:42:36: 26:2f:f9:91:df:b6:da:f5:19:8b:04:8e:b2:ae:cd:e4:51:48: db:1a:87:4a:4d:5f:69:b2:52:27:94:fe:d8:f0:1a:93:64:ae: dd:48:5d:7f:39:d1:28:1b:94:83:4e:f2:51:c2:40:25:c5:15: 7a:23:71:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI00SF7U0vgNW/GCEsk8txi1kzaswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE2MDAxMDQ0WhcNMjYxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDNhZjIzYTZjZDg2YzNjMDQ1NmUxMDFmMjlhYzU1ZTcz NTNmZDU5NjllMGQ2NDI1NjMxNzMyMWQ3ZTM3ZmY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC21/9+7T+M5vOg9MOO/ONOt0WrpqQ5EEaQ8Nv38zuIDhCL UqoupAM2UlZ5lLZ4373Ka3V2I3eCwLLkQ2cVX2r13GN6mdHRScyP4f7WCKEyxhuA zX0PyDQ169hDtZEhq1UKQy/Bzs0nMPr+3224MNSyJlyRZxmI4n6UTn99Y/1mc7X3 MlCMKMy2s7+DRqdy7GI7aI5/s31RrOwq/QBwtAnumEO7vrvMWt5ItBoVwlw8sdUI S6IY0xGn4cdCC6dll8y9CeJnX7og5AtriFJXJGioIJlNV7E+bUnwwgh2yUfsRfS5 RyjZkxXrRaK0SL8jhRaAnHvaFe2HHyGCVNGKTFXnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD42V3owNaF4irMiG+43k3+pqNK4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1YWU3MDEzLTFmYmItNGQ0OC04Zjk1LWJlMTUwMjM2Y2U2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACXlCQwDQYJKoZIhvcNAQELBQADggEBADLC6WKorLYb3+sePYGOs/LN/jKl Jw7veBTa1ArZQzInK+hnwdLgfTgijnwvZ/W8sqQp9p8Oio0BajbAwtbDcqpZ7DWO fU8ayciutl1XTUv9So+7pGt4+tHhDDaJahVh2l/TDvBA5/2ZJaao+8j9+JtvucDt 8gBxwknM0tkf1UsDXFgOzyWMsOIc2yGJSlspMVi4VT7kDswh7pUqm/B+kjprMdfY s5a/teGRKEMkBqronHhK52Nf0Tpia+2Kt9SvJLUrEgJCNiYv+ZHfttr1GYsEjrKu zeRRSNsah0pNX2myUieU/tjwGpNkrt1IXX850SgblINO8lHCQCXFFXojcbY= -----END CERTIFICATE-----Generated at Thu Jul 23 21:31:35 2026 by rpki-client