$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23ef0758-1090-4510-af75-cb75140d882f.roa File: 23ef0758-1090-4510-af75-cb75140d882f.roa (raw, json) Hash identifier: fRlVc0iCO5ji+zeGI48oVQiMm7ZA69SdnNmUwjg6Nd0= Subject key identifier: 81:AA:64:73:D5:C4:7B:51:14:AE:B7:DA:03:73:E3:AF:B7:05:C3:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63A6ABF42F1C3173823DA1DCDD4D2FA57796B3ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23ef0758-1090-4510-af75-cb75140d882f.roa Signing time: Sat 18 Jul 2026 00:20:06 +0000 ROA not before: Sat 18 Jul 2026 00:20:06 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.176.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a6:ab:f4:2f:1c:31:73:82:3d:a1:dc:dd:4d:2f:a5:77:96:b3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:20:06 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=6aa81e442bafc095483f4cb032509586fbf4f6177d603cda840d059d846e6962, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:22:81:81:0c:c3:b9:d7:e4:5b:00:d9:26: ed:2a:f5:ac:41:12:81:0c:85:20:a9:be:72:f9:b9: f3:fd:9f:cd:90:ba:92:96:4b:52:35:a9:6d:4a:1b: 9d:35:cf:24:ab:fd:56:25:e0:c5:20:82:bf:81:a3: d7:76:0e:37:6e:44:59:75:f0:3e:2b:97:f1:d5:e9: bf:45:f6:0e:c0:1e:e5:39:6f:27:85:d8:92:c2:2f: 65:f1:0f:9f:15:c2:23:c5:80:93:8d:e1:db:80:16: fb:de:44:1e:26:bd:55:47:cf:5b:10:0c:c7:b8:b1: 8b:19:cd:be:73:86:84:b1:20:25:94:3a:20:b6:92: f6:22:f1:c9:4b:80:b2:67:82:3f:9a:87:4a:f4:d2: c2:b5:57:4f:82:a6:33:9e:64:fc:da:b3:dc:70:7c: 8d:29:3f:1d:a8:82:f6:a3:66:da:4e:7d:c4:1b:70: ef:2a:c6:c2:0a:9e:5b:4c:fe:55:2e:3f:36:82:77: 49:33:53:3e:00:e3:f0:6b:c0:f3:b6:6e:f2:45:bb: 8a:c5:ff:9c:e5:03:00:b9:74:4e:22:bf:9a:11:d8: 65:31:5a:2a:87:4c:0a:e7:35:1f:63:5e:3b:b4:0c: bf:57:b3:1a:42:b6:cd:e6:7c:63:5e:94:e6:3c:08: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AA:64:73:D5:C4:7B:51:14:AE:B7:DA:03:73:E3:AF:B7:05:C3:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23ef0758-1090-4510-af75-cb75140d882f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:99:2e:bc:31:4d:d5:eb:9e:af:31:f6:8b:8f:a4:6f:2c:47: c5:e9:0d:a8:2b:6c:75:b9:a9:a8:16:3b:63:0e:3e:a7:b4:62: b2:bf:cb:73:b2:47:21:60:c4:47:43:ad:31:85:81:61:57:6b: d2:4d:31:a4:d8:d6:50:91:d2:ed:47:b7:d9:d3:db:a3:73:12: 9f:a3:6e:46:d1:55:73:f9:a3:88:8d:64:a9:4a:68:39:1c:43: 66:7a:6a:e6:bf:77:3e:e6:67:5e:ea:fc:c3:76:7d:e3:65:66: 1f:b8:bd:5b:5a:c5:fb:41:6a:a3:1f:88:ce:26:ec:a6:5d:29: d2:bf:6b:67:7f:ce:77:d4:e7:7f:d7:83:cb:af:4e:d3:b9:51: 1d:6c:01:74:a2:5d:b1:63:cc:c6:4b:64:6b:54:ef:e0:3f:ef: 54:6c:d0:b8:e0:09:f2:8c:7d:f1:03:2a:88:3d:89:62:91:6a: a5:fd:ec:f2:16:13:a2:9a:65:ac:05:54:ba:97:2f:f7:52:e7: 75:2d:e2:de:93:b4:73:5a:df:55:d9:1f:2e:70:f2:1d:96:d2: f8:b8:f5:a4:ac:35:84:a8:4a:e7:6d:1a:33:88:b4:71:75:3b: be:9d:f1:b8:a9:f7:aa:82:2f:aa:e9:71:22:27:05:3b:f9:83: 4b:d2:1b:c7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUY6ar9C8cMXOCPaHc3U0vpXeWs+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAyMDA2WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWE4MWU0NDJiYWZjMDk1NDgzZjRjYjAzMjUwOTU4NmZi ZjRmNjE3N2Q2MDNjZGE4NDBkMDU5ZDg0NmU2OTYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK1iKBgQzDudfkWwDZJu0q9axBEoEMhSCpvnL5ufP9n82Q upKWS1I1qW1KG501zySr/VYl4MUggr+Bo9d2DjduRFl18D4rl/HV6b9F9g7AHuU5 byeF2JLCL2XxD58VwiPFgJON4duAFvveRB4mvVVHz1sQDMe4sYsZzb5zhoSxICWU OiC2kvYi8clLgLJngj+ah0r00sK1V0+CpjOeZPzas9xwfI0pPx2ogvajZtpOfcQb cO8qxsIKnltM/lUuPzaCd0kzUz4A4/BrwPO2bvJFu4rF/5zlAwC5dE4iv5oR2GUx WiqHTArnNR9jXju0DL9XsxpCts3mfGNelOY8CI3vAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgapkc9XEe1EUrrfaA3Pjr7cFw7MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzZWYwNzU4LTEwOTAtNDUxMC1hZjc1LWNiNzUxNDBkODgyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4sDANBgkqhkiG9w0BAQsFAAOCAQEAcJkuvDFN1euerzH2i4+kbyxHxekN qCtsdbmpqBY7Yw4+p7Risr/Lc7JHIWDER0OtMYWBYVdr0k0xpNjWUJHS7Ue32dPb o3MSn6NuRtFVc/mjiI1kqUpoORxDZnpq5r93PuZnXur8w3Z942VmH7i9W1rF+0Fq ox+Izibspl0p0r9rZ3/Od9Tnf9eDy69O07lRHWwBdKJdsWPMxktka1Tv4D/vVGzQ uOAJ8ox98QMqiD2JYpFqpf3s8hYTopplrAVUupcv91LndS3i3pO0c1rfVdkfLnDy HZbS+Lj1pKw1hKhK520aM4i0cXU7vp3xuKn3qoIvqulxIicFO/mDS9Ibxw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:56:14 2026 by rpki-client