$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc90e01-ac33-4623-a697-374d7929f75d.roa File: 0fc90e01-ac33-4623-a697-374d7929f75d.roa (raw, json) Hash identifier: Cjr9KERAkJ460UwPLlG++ZK5SaibvCfqPLx+xGjQvco= Subject key identifier: BB:51:EC:90:96:E0:8C:CC:A4:20:25:02:F0:39:5A:90:68:59:1A:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E1B6ACDB51C3DE57096452B40578AD0B9F507C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc90e01-ac33-4623-a697-374d7929f75d.roa Signing time: Thu 23 Jul 2026 00:40:58 +0000 ROA not before: Thu 23 Jul 2026 00:40:58 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1b:6a:cd:b5:1c:3d:e5:70:96:45:2b:40:57:8a:d0:b9:f5:07:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:40:58 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=da9faa76c5c12ea37f322e7a20dc1e62229d9c8ab7068a9e428131422df0af6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:7b:8e:91:e1:5e:77:72:46:b7:9a:b6:f4: 43:73:36:b5:fc:1c:e1:ce:bb:7d:04:9f:9a:60:cc: 99:5f:ee:93:78:63:0c:d1:9e:25:ac:ca:20:f3:cc: 34:19:d8:c9:b9:cf:f8:7f:69:d7:43:7a:29:f9:1e: 7f:55:2a:2e:90:39:7f:84:58:d9:55:37:a4:2d:7f: e2:46:d5:b1:0c:b6:54:8c:8b:ce:0e:85:d4:12:7c: 12:2a:89:74:23:4a:61:e2:92:12:3e:71:e4:ff:14: 84:02:e6:14:ce:c6:da:36:f1:e3:16:b1:d8:0c:17: f5:dc:b4:7f:09:3b:e8:bd:2b:a3:7d:13:66:0e:0e: e6:5e:dd:7b:01:6c:19:da:c5:ff:99:b7:7d:21:9a: 4c:4f:91:56:c9:9c:2f:62:bd:bd:22:dd:fa:14:8a: f2:53:54:42:32:c1:84:4e:04:ff:aa:58:ff:f6:c5: 53:08:28:0f:89:d9:9f:01:16:d7:99:4a:26:77:fa: 1b:03:4b:03:5f:2d:65:50:62:b4:1c:ac:cf:a6:da: af:f0:1d:4c:13:9c:28:fd:8e:8f:fc:48:c9:59:a7: 49:db:e7:0b:db:ab:35:55:b4:2e:6d:1d:57:ed:53: 97:cf:01:cf:de:77:f4:c2:25:90:72:12:45:cc:81: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:51:EC:90:96:E0:8C:CC:A4:20:25:02:F0:39:5A:90:68:59:1A:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc90e01-ac33-4623-a697-374d7929f75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.224.0/22 Signature Algorithm: sha256WithRSAEncryption 77:18:55:37:53:a0:5c:7c:34:0c:da:e9:f8:ec:ab:a9:84:43: fc:4d:a4:bf:15:e8:c9:73:90:3b:8e:9a:ac:b7:35:2e:23:d2: 63:43:9d:09:c2:76:22:b0:fb:67:ee:58:62:d8:0d:cd:96:3d: 9a:ae:7c:3f:03:0d:c5:f2:24:af:24:00:86:c5:ca:f8:4d:1c: 87:da:cc:17:99:b7:f3:dd:3b:b5:97:44:0a:97:f7:c6:d9:c8: 98:c3:7f:1c:be:7d:d5:b9:29:ef:cb:45:81:f5:c4:c1:57:de: e3:ca:3e:f0:bd:30:1e:30:82:c6:17:b4:dd:95:6b:7f:fa:5e: 13:31:e4:28:dd:83:3e:d9:55:8b:18:05:12:c1:bb:0a:b0:f6: bf:99:00:40:d9:be:d9:88:19:46:68:9e:7d:e0:d9:fc:18:0d: 2d:4f:06:cf:7b:75:5a:e4:c4:75:dd:04:9b:e4:73:6c:c3:96: 5d:b1:91:41:ca:80:27:90:ae:33:13:6f:1c:ca:dc:f8:8f:2e: 75:14:29:53:79:1f:8d:b3:52:cc:5c:1d:43:c8:8f:3d:0f:e1: 17:ed:34:a5:b5:16:56:06:e2:91:8f:59:99:17:db:b3:0c:dd: 64:94:58:04:eb:83:5a:0c:5f:2f:c2:04:a1:78:4d:88:8f:07: 20:ac:f0:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUThtqzbUcPeVwlkUrQFeK0Ln1B8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDA0MDU4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTlmYWE3NmM1YzEyZWEzN2YzMjJlN2EyMGRjMWU2MjIy OWQ5YzhhYjcwNjhhOWU0MjgxMzE0MjJkZjBhZjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtH3uOkeFed3JGt5q29ENzNrX8HOHOu30En5pgzJlf7pN4 YwzRniWsyiDzzDQZ2Mm5z/h/addDein5Hn9VKi6QOX+EWNlVN6Qtf+JG1bEMtlSM i84OhdQSfBIqiXQjSmHikhI+ceT/FIQC5hTOxto28eMWsdgMF/XctH8JO+i9K6N9 E2YODuZe3XsBbBnaxf+Zt30hmkxPkVbJnC9ivb0i3foUivJTVEIywYROBP+qWP/2 xVMIKA+J2Z8BFteZSiZ3+hsDSwNfLWVQYrQcrM+m2q/wHUwTnCj9jo/8SMlZp0nb 5wvbqzVVtC5tHVftU5fPAc/ed/TCJZByEkXMgef7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu1HskJbgjMykICUC8DlakGhZGhUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmYzkwZTAxLWFjMzMtNDYyMy1hNjk3LTM3NGQ3OTI5Zjc1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIf3OAwDQYJKoZIhvcNAQELBQADggEBAHcYVTdToFx8NAza6fjsq6mEQ/xN pL8V6MlzkDuOmqy3NS4j0mNDnQnCdiKw+2fuWGLYDc2WPZqufD8DDcXyJK8kAIbF yvhNHIfazBeZt/PdO7WXRAqX98bZyJjDfxy+fdW5Ke/LRYH1xMFX3uPKPvC9MB4w gsYXtN2Va3/6XhMx5Cjdgz7ZVYsYBRLBuwqw9r+ZAEDZvtmIGUZonn3g2fwYDS1P Bs97dVrkxHXdBJvkc2zDll2xkUHKgCeQrjMTbxzK3PiPLnUUKVN5H42zUsxcHUPI jz0P4RftNKW1FlYG4pGPWZkX27MM3WSUWATrg1oMXy/CBKF4TYiPByCs8HM= -----END CERTIFICATE-----Generated at Thu Jul 23 21:33:20 2026 by rpki-client