$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1306a79b-e188-4a96-a739-7192341a7678.roa File: 1306a79b-e188-4a96-a739-7192341a7678.roa (raw, json) Hash identifier: NJCr/uAnD/NeQo4evcYtPKYf+XWdx2+klMJMZVP8QWM= Subject key identifier: 75:95:92:1B:DF:47:09:BC:49:8E:20:AE:42:7F:9B:C8:6C:54:BB:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21A779D3E793236712D1D744FA4F28B444A3C633 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1306a79b-e188-4a96-a739-7192341a7678.roa Signing time: Wed 22 Jul 2026 17:17:21 +0000 ROA not before: Wed 22 Jul 2026 17:17:21 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a7:79:d3:e7:93:23:67:12:d1:d7:44:fa:4f:28:b4:44:a3:c6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 17:17:21 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=ad096888caadd461b446eec6e9995d78ffcd6b95226941b658b18ecafd11230a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:a6:e4:e6:fb:89:17:73:9d:ee:1e:22:be: f7:3c:0b:31:80:bf:b7:54:a1:66:d8:cf:0a:24:99: 10:1a:8b:85:b9:68:ea:a1:3c:33:73:55:35:66:c2: f6:9b:99:17:1c:db:65:6a:c3:b1:70:b2:18:28:76: 16:d5:6f:45:85:c8:04:36:d4:47:d7:47:d1:0b:8a: 93:8c:43:29:3b:37:a1:01:96:c5:e5:8d:9e:c5:e9: 8a:09:6c:d5:f2:e0:aa:0a:98:b0:27:89:47:d5:63: 85:cf:72:76:55:15:49:76:53:1d:53:8e:d7:a6:20: 77:0f:1d:da:5b:10:da:0b:73:85:9b:6d:f6:fe:46: be:b6:ed:fc:f8:da:12:3c:d3:83:db:2c:87:40:03: 77:96:12:5b:da:81:8a:7b:cc:f5:4c:0c:0e:04:fd: ce:9c:2b:b2:2c:eb:95:08:c4:f0:f7:b2:dc:eb:4e: ce:2d:66:a5:10:a4:b2:90:99:f2:fc:af:1f:c6:93: df:34:21:ed:54:b4:9e:cf:67:78:d6:d2:42:18:2a: 59:d2:99:83:d9:d2:59:6f:cb:78:3f:6c:82:83:5f: da:06:50:8b:14:3f:c5:be:4b:5e:8c:28:c0:ee:2c: 80:62:7f:4f:78:27:03:53:09:af:c5:e5:21:6e:2c: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:95:92:1B:DF:47:09:BC:49:8E:20:AE:42:7F:9B:C8:6C:54:BB:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1306a79b-e188-4a96-a739-7192341a7678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.168.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:39:58:1f:b8:95:b3:03:19:11:3b:ae:8f:c8:95:83:a2:4a: bd:ab:7c:2b:cf:7e:b0:40:5d:8a:4d:d6:20:02:83:1c:bd:7e: d6:c6:a3:bd:f3:83:bf:1f:fb:ea:a3:30:2c:21:4e:2c:6f:aa: 2c:2a:04:61:bf:9f:06:2c:7f:cc:b5:73:82:fd:97:f5:67:f1: 93:90:f5:6d:37:60:fe:5e:00:bf:e6:a8:68:ab:2a:aa:a6:0e: 9b:71:94:08:fb:79:98:ee:a0:24:43:e5:88:ea:f5:6a:b0:bc: e5:75:c6:e7:79:a9:09:8d:73:2b:0e:17:4b:6f:f4:40:15:c6: 82:3b:07:d5:bf:3d:3b:03:a3:50:a7:a3:d7:14:38:6d:23:bb: 5e:dc:55:64:e1:cb:c9:bb:b3:4b:9a:5a:00:22:0e:1f:1b:4c: 4e:35:24:4d:3a:48:d2:03:4d:96:c3:8a:a7:d5:0e:44:95:a5: 15:c4:1c:f3:ab:3a:52:33:e5:6a:cc:cd:0a:e1:70:c1:0a:e1: 6d:6c:6e:7f:51:55:a8:c8:bb:0e:c3:07:d8:45:13:63:7a:76: 13:f7:6f:9e:a4:95:f5:d0:9d:66:ed:9f:f7:8a:40:d9:73:d2: 05:21:6b:f5:34:64:a2:b4:c3:58:c8:58:a3:67:6f:51:e5:95: 7c:4e:88:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIad50+eTI2cS0ddE+k8otESjxjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMTcxNzIxWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDA5Njg4OGNhYWRkNDYxYjQ0NmVlYzZlOTk5NWQ3OGZm Y2Q2Yjk1MjI2OTQxYjY1OGIxOGVjYWZkMTEyMzBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClPqbk5vuJF3Od7h4ivvc8CzGAv7dUoWbYzwokmRAai4W5 aOqhPDNzVTVmwvabmRcc22Vqw7FwshgodhbVb0WFyAQ21EfXR9ELipOMQyk7N6EB lsXljZ7F6YoJbNXy4KoKmLAniUfVY4XPcnZVFUl2Ux1TjtemIHcPHdpbENoLc4Wb bfb+Rr627fz42hI804PbLIdAA3eWElvagYp7zPVMDA4E/c6cK7Is65UIxPD3stzr Ts4tZqUQpLKQmfL8rx/Gk980Ie1UtJ7PZ3jW0kIYKlnSmYPZ0llvy3g/bIKDX9oG UIsUP8W+S16MKMDuLIBif094JwNTCa/F5SFuLJG1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdZWSG99HCbxJjiCuQn+byGxUu2AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzMDZhNzliLWUxODgtNGE5Ni1hNzM5LTcxOTIzNDFhNzY3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBsqgwDQYJKoZIhvcNAQELBQADggEBACs5WB+4lbMDGRE7ro/IlYOiSr2r fCvPfrBAXYpN1iACgxy9ftbGo73zg78f++qjMCwhTixvqiwqBGG/nwYsf8y1c4L9 l/Vn8ZOQ9W03YP5eAL/mqGirKqqmDptxlAj7eZjuoCRD5Yjq9WqwvOV1xud5qQmN cysOF0tv9EAVxoI7B9W/PTsDo1Cno9cUOG0ju17cVWThy8m7s0uaWgAiDh8bTE41 JE06SNIDTZbDiqfVDkSVpRXEHPOrOlIz5WrMzQrhcMEK4W1sbn9RVajIuw7DB9hF E2N6dhP3b56klfXQnWbtn/eKQNlz0gUha/U0ZKK0w1jIWKNnb1HllXxOiGM= -----END CERTIFICATE-----Generated at Thu Jul 23 21:18:00 2026 by rpki-client